Connect Supabase
Averil finds exposed databases and the project settings that decide whether your data is public.
What Averil uses it for
- Listing projects, regions and status in the organizations you authorize.
- Finding databases reachable from any address.
- Checking that database connections must use SSL.
- Reading auth settings: sign-up, email confirmation, password rules and MFA.
Read access
Averil uses a Supabase OAuth app with read scopes. The broker holds and refreshes the token. The rate limit is 60 calls a minute.
| Operation | Scope | Why |
|---|---|---|
| List projects | projects:read | Projects, regions and status |
| Network restrictions | database:read | Find databases reachable from any address |
| SSL enforcement | database:read | Check connections must use SSL |
| Auth config | auth:read | Auth settings, with every secret field stripped by the broker |
Write access
| Action | Scope | Verified by | Reversible |
|---|---|---|---|
| Replace allow-all database access with approved address ranges | database:write | Reading network restrictions back | Yes |
| Reject database connections that do not use SSL | database:write | Reading SSL enforcement back | Yes |
Both run only after a person approves the exact plan, including the address ranges.
How to connect
- 1An organization owner opens the authorization link we send during onboarding.
- 2Choose the organization and approve the scopes Supabase shows.
- 3Averil lists your projects and checks the active ones.
How to revoke
Remove Averil from your Supabase organization's authorized apps. The token stops working and Averil marks the integration as access revoked.
Stuck? Email averil@averil.ai or ask me in Slack.