Skip to main content
Let your agents query and modify your Supabase database and storage — read rows, insert, update, delete, call RPC functions, and list storage buckets and objects.

Connection

  • Authentication: API key (Secret key (or legacy service_role key)).
  • Required settings:
    • Project Reference ID — Project Settings → General → Reference ID (20 lowercase alphanumeric characters)
Supabase → Dashboard → Project Settings → API Keys → Copy the secret key (starts with sb_secret_…) or the legacy service_role key (JWT, from “Legacy API Keys”). Both bypass Row-Level Security. Limit its rights via Atako’s grant permissions and the database grants you set in Supabase.See Supabase’s documentation.

Read actions (4)

Write actions (4)

Permissions

Every action above must be explicitly granted to an agent before it can be used. See Permissions for the grant model and Security for how credentials are protected.