Supabase Integration Setup Guide

This guide walks you through connecting your Supabase projects to OpsCompanion using OAuth 2.0 with PKCE.

Overview

The Supabase integration uses OAuth to grant OpsCompanion read-only access to your Supabase projects via the Management API. This allows OpsCompanion to:

Monitor projects across your Supabase organization
Query databases with read-only SQL (SELECT/EXPLAIN only)
View auth users and authentication configuration
Browse storage buckets and objects
List edge functions and their deployment status

Important: OpsCompanion only performs read-only operations and cannot modify your Supabase infrastructure.

What Gets Configured

Connecting Supabase to OpsCompanion will:

OAuth Authorization - You authorize OpsCompanion to access your Supabase organization
Access Token - A scoped token is stored securely for API access
Refresh Token - Used to maintain access without re-authorization
PKCE Flow - Proof Key for Code Exchange ensures secure token exchange

Prerequisites

Before connecting Supabase, ensure you have:

1. A Supabase Account

You need an active Supabase account with at least one project.

2. Organization Access

You must be an Owner or Admin of the Supabase organization you want to connect. Members with limited roles may not be able to authorize OAuth access.

Installation Steps

Step 1: Navigate to Manage Tools

Log in to your OpsCompanion dashboard
Go to Manage Tools in the sidebar
Find Supabase in the list of available integrations

Step 2: Click Connect

Click the Connect button next to Supabase. This will redirect you to Supabase's authorization page.

Step 3: Authorize OpsCompanion

On the Supabase authorization page:

Select the organization you want to connect
Review the permissions being requested
Click Authorize to grant access

Step 4: Confirmation

After authorization, you'll be redirected back to OpsCompanion. A success message will confirm the integration is active.

Step 5: Verify the Connection

Ask the OpsCompanion agent to list your Supabase projects:

Show me my Supabase projects

The agent should return a list of your projects with their names, regions, and statuses.

What You Can Do After Setup

Once connected, you can ask the OpsCompanion agent to:

Project Management

List my Supabase projects
Check the health of my project "my-app"
Show me the API keys for project "abc123"

Database Operations

List all tables in my Supabase project
Show me the schema for the "users" table
Run this query: SELECT COUNT(*) FROM public.orders WHERE created_at > '2025-01-01'
What Postgres extensions are installed?

Auth Management

How many users do I have?
Show me users who signed up this week
What auth providers are enabled?
Show me auth statistics

Storage

List my storage buckets
Show me files in the "avatars" bucket
What's the storage usage per bucket?

Edge Functions

List my edge functions
Show me details for the "send-email" function

Verification

1. Check Integration Status

In the OpsCompanion dashboard, navigate to Manage Tools. The Supabase integration should show as Connected.

2. Test Project Access

Ask the agent:

List my Supabase projects

You should see your projects listed with their details.

3. Test Database Access

Ask the agent:

List all tables in my Supabase project [your-project-name]

You should see your database tables listed.

You can send your Supabase project logs to OpsCompanion for centralized observability. Supabase supports log drains that forward Postgres, Auth, Storage, Realtime, and Edge Function logs to external destinations.

To set this up, follow Supabase's official guide: Log Drains

When configuring the drain, use OpsCompanion's OTLP endpoint as the destination. You can find your ingest URL in your OpsCompanion workspace settings.