Supabase Complete Documentation

Complete Supabase platform documentation. Use when working with Supabase - covers authentication (email, OAuth, magic links, phone, SSO), database (PostgreSQL, RLS, migrations), storage (file uploads, CDN), edge functions, realtime subscriptions, AI/embeddings, cron jobs, queues, and platform management. Includes framework integrations (Next.js, React, SvelteKit, etc.).

Security Scan

This is an instruction-only documentation skill that contains a full copy of Supabase docs; its files and runtime instructions are consistent with that purpose and it does not request credentials or install code, but you should still review the packaged files because a pre-scan flagged a potential embedded base64 block and the bundle contains many command examples referencing tokens.

Purpose & Capability

Name/description match the packaged contents: a large collection of Supabase docs covering auth, DB, storage, functions, realtime, AI, etc. The skill asks for no binaries, env vars, or installs — appropriate for a read-only documentation skill. The single small code file (navigation.references.ts) is plausibly navigation metadata for the docs.

Instruction Scope

SKILL.md limits the agent to reading files under references/ and explicitly warns agents NOT to auto-execute example commands; that keeps runtime scope narrow. However, the included documentation contains many example commands and snippets that reference API tokens, curl calls, and obtaining secrets (e.g., SUPABASE_ACCESS_TOKEN, sb_secret_...). Those are expected in documentation but are sensitive if executed or exfiltrated, so follow the explicit warning and do not auto-run snippets.

Install Mechanism

No install spec — instruction-only skill. Nothing is downloaded or written to disk by an installer, which is the lowest-risk installation model.

Credentials

The skill declares no required environment variables, credentials, or config paths. The presence of many examples that mention obtaining tokens or using service_role keys is normal for documentation, but these are examples only and the skill itself does not request them.

Persistence & Privilege

always:false and no special privileges requested. The skill is user-invocable and may be invoked autonomously by the agent (platform default), but it does not request permanent system presence or modify other skills or system configs.

Scan Findings in Context

[base64-block] unexpected: Pre-scan flagged a 'base64-block' pattern in the SKILL.md content. The visible SKILL.md shown here does not contain an obvious base64 payload; this may be in one of the many truncated files. A base64 block in documentation is unexpected and worth inspecting — it can be benign (embedded images or encoded snippets) but can also hide obfuscated content. Review files that contain long opaque blocks or large embedded assets before trusting the package.

Assessment

This skill is a packaged copy of Supabase documentation and appears coherent for that purpose — it does not request secrets or install software. Still, before installing or enabling it for autonomous use: 1) Verify the source (the package lists 'unknown'); prefer official or GitHub-sourced documentation when possible. 2) Inspect any files that contain long opaque strings (search for 'base64', 'data:image', or very long single-line blocks) and open the navigation TypeScript file to confirm it isn't executing logic. 3) Remember the SKILL.md warning: do NOT auto-run command examples (they often show how to use tokens or curl with bearer secrets). 4) If you enable autonomous invocation for agents, be cautious — documentation contains examples that reference credentials; ensure the agent is not allowed to execute shell commands or to send extracted secrets to external endpoints. If you want to be extra cautious, use the official Supabase docs online or install a skill only from a verified source.

⚠️ Security Notice

This skill contains Supabase documentation with command examples. Commands are for reference only and should NEVER be auto-executed by agents without explicit user approval.

Supabase Documentation

Complete Supabase platform documentation embedded in markdown. Read from references/ to answer questions about authentication, database, storage, edge functions, and platform features.

Documentation Structure

All documentation is in references/guides/ organized by product:

Getting Started (references/guides/getting-started/)

• Quickstart guides
• Architecture overview
• Framework integrations
• Database fundamentals

Authentication (references/guides/auth/)

Complete auth system documentation:

• Email & password auth
• OAuth providers (Google, GitHub, etc.)
• Magic links
• Phone auth (SMS, WhatsApp)
• SSO & SAML
• Multi-factor authentication (MFA)
• Row Level Security (RLS)
• User management
• Server-side auth
• Redirect URLs
• Session management

Database (references/guides/database/)

PostgreSQL database features:

• Tables and columns
• Relationships and foreign keys
• Functions and triggers
• Extensions
• Full-text search
• Postgres roles
• Replication
• Connection pooling
• Webhooks
• Migrations

Storage (references/guides/storage/)

File storage and CDN:

• Upload files
• Download files
• Delete files
• List files
• Transform images
• CDN and caching
• Access control with RLS
• Resumable uploads

Edge Functions (references/guides/functions/)

Serverless functions:

• Getting started
• Deploy functions
• Environment variables
• Secrets management
• Database access
• Auth integration
• Logging and monitoring
• Cold starts optimization

Realtime (references/guides/realtime/)

Realtime subscriptions:

• Postgres changes (inserts, updates, deletes)
• Broadcast messages
• Presence tracking
• Authorization

AI & Embeddings (references/guides/ai/)

AI and vector features:

• Embeddings and vector search
• pgvector extension
• Similarity search
• RAG patterns
• AI integrations (OpenAI, etc.)

Platform (references/guides/platform/)

Platform management:

• Organizations
• Projects
• Billing
• Logs and monitoring
• Performance tuning
• Backups
• Custom domains
• SSL certificates

Self-Hosting (references/guides/self-hosting/)

Self-hosted Supabase:

• Docker setup
• Configuration
• Monitoring
• Backups and restore

Cron Jobs (references/guides/cron/)

Scheduled tasks with pg_cron

Queues (references/guides/queues/)

Background job queues with pgmq

Integrations (references/guides/integrations/)

Third-party integrations and tools

Local Development (references/guides/local-development/)

• CLI setup
• Local studio
• Database migrations
• Testing
• CI/CD

Troubleshooting (references/troubleshooting/)

Common issues and solutions

Error Codes (references/errorCodes/)

API and database error reference

Quick Reference

Common Tasks

Task	Directory to Check
Setup Supabase	guides/getting-started/
Email auth	guides/auth/
OAuth providers	guides/auth/
Database schema	guides/database/
RLS policies	guides/auth/ + guides/database/
File uploads	guides/storage/
Edge functions	guides/functions/
Realtime subscriptions	guides/realtime/
Vector search	guides/ai/
Migrations	guides/database/ + guides/local-development/
Framework integration	guides/getting-started/
Self-hosting	guides/self-hosting/

Framework Integrations

Supabase works with:

• Next.js (App Router, Pages Router, Server Components)
• React (Create React App, Vite)
• SvelteKit
• Nuxt
• Vue
• Angular
• Flutter
• React Native
• And more...

When to Use This Skill

• Setting up Supabase authentication
• Database schema design with PostgreSQL
• Row Level Security (RLS) policies
• File storage and CDN
• Edge functions deployment
• Realtime subscriptions
• Vector search and AI features
• Migration from other platforms
• Self-hosting Supabase
• Performance optimization
• Troubleshooting errors

How to Navigate

1. Start with guides/getting-started/ for setup
2. For auth: Browse guides/auth/
3. For database: Check guides/database/
4. For storage: See guides/storage/
5. For functions: Use guides/functions/
6. For realtime: Check guides/realtime/
7. For AI: See guides/ai/
8. For errors: Check troubleshooting/ and errorCodes/

All files are .mdx (Markdown + JSX) but readable as plain markdown.