Supabase adds scoped Personal Access Tokens for least-privilege CI and coding agents
dshukertjr · x · 2026-10-27
- Supabase Personal Access Tokens now support scoping by organization, project and permission (read-only, write, etc.) plus expiry; new Dashboard tokens are scoped by default.
- The key use case is least-privilege for CI pipelines and AI coding agents: hand an agent a token limited to one project and read-only SQL instead of your whole account; deploy scripts get separate write-scoped tokens. The post walks through resource selection, permission presets and expiry setup.
- GA since Sep 28, announced at Supabase Select on Oct 2; nearly 9 in 10 Dashboard-created tokens since launch have been scoped.
More from coding & agent
- Cloudflare's Clairic: a System One extraction model returning typed values with confidence scores — omarsar0 · 2026-10-27
- Fanout: open-source tool tames parallel Claude Code and Codex sessions before merging — crumb_ona_breadstick · 2026-10-27
- Rust LVGL-style embedded UI library twine ships, built largely with Claude — Necessary-Pilot-3971 · 2026-10-27
- Share prompts, not code: a reusable prompt suite for evaluating small models (4B-36B) — yaroslavvb · 2026-10-27
- Maze Launches Maze Code: AI Agents That Investigate Dependency and Code Vulnerabilities — AndrewM_Webb · 2026-10-27
- rumi: a shared-doc workspace for orchestrating multiple coding agents at once — MuzafferMahi · 2026-10-27