Supabase API - Database, Storage, Auth & Project Management

Access Supabase programmatically through this comprehensive API actor. Query and manage PostgreSQL databases, handle file storage, manage authentication users, and control projects - all through a single interface.

Features

Database Operations

• query_table - Query any table with PostgREST filters, sorting, and pagination
• insert_rows - Insert one or multiple rows into a table
• update_rows - Update rows matching filter criteria
• delete_rows - Delete rows matching filter criteria
• list_tables - List all tables in your database
• run_sql - Execute raw SQL queries (service_role key required)

Storage Operations

• list_buckets - List all storage buckets
• list_files - List files in a bucket
• download_file - Get download URL for a file
• upload_file - Upload a file to storage from URL
• delete_file - Delete a file from storage

Auth Operations

• list_users - List all authenticated users
• get_user - Get user details by ID
• create_user - Create a new user account
• delete_user - Delete a user account

Project Management

• list_projects - List all your Supabase projects
• get_project - Get project details
• get_project_settings - Get project configuration and settings

Use Cases

• Database Automation - Scheduled data exports, imports, and transformations
• Data Migration - Move data between Supabase projects or from other sources
• Backup Workflows - Automated data and file backups
• User Management - Bulk user operations and sync with external systems
• Content Management - Programmatic file uploads for CMS workflows
• Analytics Pipelines - Extract data for reporting and analysis
• Multi-tenant Apps - Manage multiple projects programmatically

Authentication

For Database/Storage/Auth Operations

Use your Supabase project credentials:

• supabaseUrl: https://<project_ref>.supabase.co
• supabaseKey: Your anon key (public) or service_role key (admin)

Find these in: Project Settings > API

For Project Management Operations

Use a Management API token:

• managementToken: Personal Access Token from supabase.com/dashboard/account/tokens

Query Filters (PostgREST)

The query parameter uses PostgREST syntax:

Operator	Example	Description
eq	status=eq.active	Equals
neq	status=neq.deleted	Not equals
gt	age=gt.21	Greater than
gte	created_at=gte.2024-01-01	Greater than or equal
lt	price=lt.100	Less than
lte	score=lte.50	Less than or equal
like	name=like.*john*	Pattern match (case-sensitive)
ilike	email=ilike.*@gmail.com	Pattern match (case-insensitive)
in	status=in.(active,pending)	In list
is	deleted_at=is.null	Is null/true/false

Combine multiple filters with &: status=eq.active&created_at=gte.2024-01-01

Output Format

{
  "task": "query_table",
  "success": true,
  "results": [
    {
      "id": 1,
      "name": "John Doe",
      "email": "john@example.com",
      "created_at": "2024-01-15T10:00:00Z"
    }
  ],
  "count": 1,
  "pagination": {
    "limit": 100,
    "offset": 0
  },
  "timestamp": "2024-01-20T14:30:00Z"
}

Pricing

$0.01 per query (all tasks)

Rate Limits

Supabase applies rate limits based on your plan:

• Free: 500 requests/day for Management API
• Pro: Higher limits based on compute size

Database API limits depend on your connection pool settings.

Security Notes

• Use anon key for public/RLS-protected operations
• Use service_role key only when you need to bypass RLS
• Never expose service_role key in client-side code
• Management tokens carry full account access - keep them secure