Pricing

Pay per event

Try for free

Go to Apify Store

Supabase Secret Scanner

Try for free

Scan a GitHub user or organization for committed Supabase service_role keys before someone else finds them. Decodes JWT payloads (ignores the public anon key), checks .env files, NEXT_PUBLIC_ leaks, MCP configs, and hardcoded keys in source. Built for pre-launch self-audits.

Pricing

Pay per event

Rating

0.0

(0)

Developer

Cenk KURTOĞLU

Actor stats

Bookmarked

Total users

Monthly active users

3 days ago

Last modified

Supabase Secret Scanner - leaked service_role keys API through CLI

The Apify CLI is the official tool that allows you to use Supabase Secret Scanner locally, providing convenience functions and automatic retries on errors.

Install Apify CLI

Using installation script (macOS/Linux):

$curl -fsSL https://apify.com/install-cli.sh | bash

Using installation script (Windows):

$irm https://apify.com/install-cli.ps1 | iex

Using Homebrew:

$brew install apify-cli

Using npm:

$npm install -g apify-cli

Other API clients include:

Supabase Secret Scanner API in Python

Supabase Secret Scanner API in JavaScript

Supabase Secret Scanner OpenAPI definition

Supabase Secret Scanner API

Gitleaks Cloud - GitHub API Key Hunter & Secret Scanner

anshumanatrey/gitleaks-github-secret-scanner

Hunt leaked API keys across GitHub. Pick a known platform (36 services: Razorpay, Stripe, AWS, OpenAI, Anthropic, Cashfree, PayU, Surepass, Decentro, Karza, Attestr, Tartan +24 more), a keyword (auto-expanded), or a regex. Scan a repo, org, or all of GitHub. PAT unlocks fast Code Search.

Anshuman Atrey

PhoneInfoga — Phone Number OSINT Scanner

datacach/phoneinfoga-phone-number-osint-scanner

Reverse phone lookup powered by PhoneInfoga. Detects carrier, country, line type and OSINT footprints for any international number. Integrates Numverify, Google Search and OVH. Free to start.

DataCach

3.1K

Supabase MCP SelfHosted

coupaul/Supabase-MCP-SelfHosted

🔒 Self-Hosted Supabase MCP Server - Enhanced Security Production-ready MCP server for self-hosted Supabase with enterprise security. Features SQL injection prevention, rate limiting, Docker optimization & direct DB access. Tools: database ops, auth, storage, types. Perfect for production!

Paul Roelens

Supabase RLS Security Scanner - Find Anonymous Data Leaks

renzomacar/supabase-rls-scanner

Supabase RLS security scanner. Probes a public Supabase project for Row-Level-Security misconfigurations and detects tables readable by the anon key - the #1 cause of Supabase data leaks. Returns row counts + a curl reproducer per finding. Counts only, no row data exfiltrated. By Renzo Madueno.

Renzo Madueno

Supabase API Database, Storage, Auth & Project Management

alizarin_refrigerator-owner/supabase-api-database-storage-auth-project-management

Access Supabase programmatically through this comprehensive API actor. Query and manage PostgreSQL databases, handle file storage, manage authentication users, and control projects - all through a single interface.

The Howlers

Log Scanner

lukaskrivka/log-scanner

Log scanner helps you to find particular text in your log files. It can scan [Apify](https://apify.com/) runs, tasks, or actors but also arbitrary text files. If you ever had a problem finding that one error in a thousand runs, this is a tool to use.

Lukáš Křivka

Supabase Automation Toolkit

waxlike_polecat/supabase-automation-toolkit

Save hours with Supabase automation. Export, cleanup, backup with simple JSON tasks. Schedule daily reports, remove inactive users, free up storage automatically.

Mohamed Ali DHIBA

Bug Bounty Recon Scanner

altuserap/Bug-Bounty-Recon-Scanner

Find exposed admin panels, missing/weak security headers, sensitive file leaks, and HTTPS misconfigurations across target domains. Export prioritised risk scores and JSON reports. Run via API, schedule scans, or integrate with bug bounty tools.

Altuserap

AI/RAG Readiness & llms.txt Change Monitor

nacred_corner/llms-txt-generator

Audit public website AI/RAG readiness, generate llms.txt + llms-full.txt, and detect added or changed pages across repeat runs. API-ready, schedulable, pay per delivered page.

Cenk KURTOĞLU

Accessibility Scanner

gabrielaxy/accessibility-scanner

Scan any website for WCAG accessibility compliance using axe-core. Get detailed reports with fix code suggestions, severity scores, and remediation priorities. Supports CI/CD integration with threshold-based pass/fail and competitor benchmarking to compare your accessibility against others.