What it watches
Supabase feeds Backend: database and auth health, config drift, security advisors, whether auth email can be delivered.
What Keelnest reads
- Credential: Management API token.
- Reads: health, advisors (experimental), logs, auth URL and mailer configuration (never the SMTP password), plus the sending domain's public DNS records, and with a personal access token, the secret-key list when a key leaks (never a secret key's value; the legacy keys Supabase sends with it are discarded).
Security advisor is experimental; treated as advisory. No destructive writes.
Read-only, like every connection: Keelnest never refunds, charges, changes a price, edits a setting or an environment variable, merges on its own or runs a migration. The credential is checked with one read call before it is stored, encrypted at rest, and can be revoked at the provider at any time. Security says the whole of it.
How to connect
- Create the personal access token. Supabase > Account > Access Tokens > Generate new token. Read access to projects is enough. Open Supabase.
- Paste it into Keelnest. In your workspace, open Integrations, find Supabase and press Connect. Keelnest makes one read call to confirm the credential works, stores it encrypted, and starts reading on the next five-minute tick.
- Link the apps. Under Manage, pick which applications this account watches. An app linked to a host is checked the moment that host reports a deploy; an app linked to a payment or AI account starts building its baseline from that hour.
Or sign in instead of pasting a key
You can also connect by signing in to Supabase. Your client signs in to Supabase and picks the organization. Keelnest asks for four read scopes and no write scope of any kind: the project list and health, whether the database has stopped accepting writes, the auth URL configuration together with which mailer sends the auth email (never the SMTP password), and failed sign-ins counted per hour. A personal access token carries whatever its owner can do; this cannot change anything.
Connect Supabase in a few minutes.
Create a workspace, free for your first app, and connect it from Integrations — or run the free health check on any public address first.