Supabase

What a member can do

• List tables, extensions and migrations, run SQL and apply migrations.
• Read project logs and get security and performance advice.
• List and deploy Edge Functions, and generate TypeScript types.
• List, create, pause and restore projects, and search the Supabase documentation.
• It has no tools for managing Auth users, and its storage tools are off by default.

Each task names the Supabase tools it may call. supabase on a task means every tool the Supabase server offers; a name such as supabase.<tool> means that tool alone. A tool the task does not name is refused, whatever the connection allows.

Who connects it

A Supabase connection acts as the Supabase account that signed in when it was connected. It can do what that account can do, and no more.

Anyone who may change tools in your enterprise can connect Supabase for a member or a team. Connecting it for the whole enterprise is for the owner, and the people the owner allows.

A connection can sit on the enterprise, a team, a member, a role or a task, and the one further down replaces the one above: task, then role, then member, then team, then enterprise. A connection on anything but a task also reaches the chat of every member it covers.

What waits for you

In a run, nothing on Supabase waits for you unless the task declares a gate on it. To approve each change before it happens, gate the tools that change something on the task. See Gates and tool scopes.

In a chat, a Supabase tool that its server does not mark as read-only asks you before it runs, unless you chose Always allow for that member and tool.

Setup

Before you connect

Supabase advises connecting a production project only when the task needs it, scoped to one project and in read-only mode. Database branching needs a paid plan.

Connect it

Supabase is an Express tool, so there is no server address, key or app to set up. Work in one browser window throughout: the sign-in returns to the portal in the window you started from.

1. In the portal, open the member's page → Tools. To connect it for a team or the whole enterprise, open Tools in the sidebar.
2. Under Express, find Supabase and choose Connect. On the Tools page you are asked who uses it: one member, a team or the whole enterprise.
3. Supabase's sign-in opens. Sign in with the account the member should work as, and approve what it asks for.
4. You are back on Tools, and Supabase shows as connected.
5. Name the tools on the task, supabase for all of them or each by name.
6. Check it. Run a task that reads something from Supabase. The run page shows the call and what came back.

You can take the access back at any time: delete the connection on Tools, or remove Zero Human OS from the connected apps in your Supabase account.

A first task to try

With Supabase connected, give a member a task that uses it. For example:

Each morning, read yesterday's project logs for errors and report the most common ones with example messages.

Start this task in the portal. It opens a conversation with your COO with the request written out. Read it, change what you like and send it. The COO asks what it still needs to know, then proposes the task for you to approve: its name, who owns it, its guardrails, the Supabase tools it may use and its instructions. Nothing is created until you approve it.