Supabase Template

Query rows via PostgREST. Filter with query params: 'column=eq.value', 'column=gt.5', 'column=in.(a,b,c)'. Select specific columns with 'select=id,name'. Order with 'order=created_at.desc'. RLS policies apply unless using service_key. Paginate with 'offset' and 'limit' (max 1000).

https://{project_ref}.supabase.co/rest/v1/{table}?select=*&limit=20

Admin endpoint: list all auth users with id, email, phone, provider (email/google/github), email_confirmed_at, last_sign_in_at, created_at, and user_metadata object. Requires service_role key. Paginate with 'page' and 'per_page' (default 50, max 1000).

https://{project_ref}.supabase.co/auth/v1/admin/users

List all storage buckets with id, name, public flag (true = no auth for downloads), file_size_limit (bytes), allowed_mime_types array, and created_at. Public buckets serve files at /storage/v1/object/public/{bucket}/{path}.

https://{project_ref}.supabase.co/storage/v1/bucket

List objects in a bucket. Returns name, id, size (bytes), content_type, created_at, and last_accessed_at. Pass 'prefix' in body to filter by folder path. Nested folders appear as objects with metadata.mimetype = null. Max 100 per request, paginate with 'offset'.

https://{project_ref}.supabase.co/storage/v1/object/list/{bucket}

Get a single row by column value. The Accept header returns a single object (not array). Returns 406 if no match or multiple matches. Use 'id=eq.123' or 'email=eq.user@example.com'. Combine with 'select=id,name,email' to limit returned columns.

https://{project_ref}.supabase.co/rest/v1/{table}?select=*&{column}=eq.{value}&limit=1

Insert a row into any table. Body is JSON with column:value pairs matching your schema. 'Prefer: return=representation' returns the created row with auto-generated columns (id, created_at). For bulk insert, pass an array of objects. Unique constraint violations return 409.

https://{project_ref}.supabase.co/rest/v1/{table}

Call a Postgres function (RPC). Body is JSON with function parameters as key:value pairs. Function must be defined with 'security definer' or accessible via RLS. Returns the function result directly. Use for complex queries, aggregations, or custom logic that can't be expressed via PostgREST filters.

https://{project_ref}.supabase.co/rest/v1/rpc/{function_name}

Update rows matching a filter. Body contains columns to update. Filter required (no filter = update ALL rows). Returns updated rows with 'Prefer: return=representation'. Use multiple filters: 'status=eq.pending&created_at=lt.2024-01-01'. Returns empty array if no rows match filter.

https://{project_ref}.supabase.co/rest/v1/{table}?{column}=eq.{value}