BlocksDeveloper

Credentials in Vault

Keep third-party tokens and API keys in Supabase Vault, behind functions only the service role may call.

credentials keeps third-party tokens and API keys in Supabase Vault, named bs:cred:<provider>:<name>. The security definer functions credential_get, credential_set and credential_delete are the only way in, and only the service role may call them. vaultCredentials() from better-supabase/credentials resolves credential references through them.

better-supabase add credentials

The Credentials guide has the setup and the full reference.

Last updated on

Incidents

Incidents with a severity, a status timeline, affected components and postmortems, and a public status page that anyone can read through one function that returns only public fields.

Growth

Onboarding, waitlists and the blocks that bring people in.