Supabase API: what it can do and how to use it with AI agents
Supabase is a backend platform built on Postgres that automatically generates a REST API for your tables, and also offers authentication, file storage and functions. Product teams and developers who build applications use it. Access is through project keys, with row-level security (RLS) rules.
What the Supabase API offers
Database API
Query and write to Postgres tables over REST, respecting the security policies.
Authentication
Sign-up, login and management of the application's users.
Storage
Store and serve files in buckets.
Edge Functions
Functions that run on demand, called over HTTP.
Realtime
Subscribe to table changes as they happen.
Management API
Administer the organization's projects.
How to access the Supabase API
- With your company’s credentialsIt uses the project keys. The public key respects row-level security policies, while the service key ignores those policies and must stay restricted to the server.
- The service key ignores security policies: do not use it for the agent unless necessary.
- Expose views with only the columns needed, without unnecessary personal data.
- Plans have usage and request limits.
Official documentation: supabase.com/docs
What an iTeam agent does with the Supabase API
Product questions in natural language
The manager asks how many users activated a feature this week, and the agent queries the approved tables and answers with the number.
Support with customer data
The support agent checks the customer's record and account status in the database to answer without asking the technical team.
Fixes with approval
One-off adjustments, such as reactivating an account, are prepared by the agent and run after approval.
Anomaly alert
The agent watches order or error tables and warns when volume moves outside the normal range.
From the credential to the agent at work, with approval
Create a role and policies for the agent
In Supabase, define a role or a view with the tables and columns the agent may read, with row-level security policies.
Store the key in the vault
The key stays in the iTeam vault. Avoid the service key and allow writing only where it is needed.
Test in a development project
Validate queries in a test project and keep approval for any change in production.
Ready-made AI teams for this work
Management reporting team
Revenue, margin, pipeline and cash in one report, built from your systems, with a short note on what changed and why.
Data analysis team
Ask which customers stopped buying or which region lost margin. The team writes the SQL, runs it and explains the result.
IT service desk team
Password resets, access requests and how-to questions handled in chat, with Jira updated and approvals in place.
Questions about the Supabase API
Is the Supabase API free?
Supabase has a free plan with limits and paid plans based on usage and features. The API follows the plan of the project.
Do I need to code to use the Supabase API with iTeam?
Not necessarily. iTeam reads the documentation and the approved schema, and the deployment team sets up the queries with your technical team.
Can the agent run free-form SQL?
It can, but we recommend limiting it to defined views and queries, with writes under approval.
