Skip to main content

Supabase Personal Access Token

Description​

General​

  • Documentation: https://supabase.com/docs/guides/platform/personal-access-tokens
  • Summary: Supabase is a managed Postgres backend platform. A personal access token authenticates a Supabase account to the Management API, the Supabase CLI and the Supabase MCP server. A classic token grants full access to every organization and project of the account (create or delete projects, read project API keys, run SQL, deploy Edge Functions). A scoped token (sbp_fc) carries only the organizations, projects and permissions chosen at creation.

Revoke the secret​

Personal access tokens are revoked from the Supabase Dashboard under Account > Access Tokens, by deleting the leaked token.

Details for Supabase Personal Access Token​

  • Family: token

  • Category: data_storage

  • Company: Supabase

  • High recall: True

  • Validity check available: True

  • Analyzer available: False

  • Revoker available: False

  • On-premise instances exist: False

  • Only valid secrets raise an alert: False

  • Occurrences found for one million commits: 14.4

  • Prefixed: True