Skip to main content
docsignal
Data
Docs
Track a custom list
Supabase product updates
supabase.com
Latest activity
Date
Area / Type
Change
Source
First observed
2026-09-18
ai-agents
capability expanded
Self-hosted Supabase documents secure MCP server access
llms full
First observed
2026-09-18
analytics-reporting
new integration
Datadog integration for Supabase Metrics API
llms full
First observed
2026-09-18
analytics-reporting
new integration
Elastic managed Supabase integration
llms full
First observed
2026-09-18
analytics-reporting
capability expanded
Multigres logs get a documented query schema
llms full
First observed
2026-09-18
api-platform
capability expanded
Realtime Postgres Changes adds column selection and expanded filter operators
llms full
First observed
2026-09-18
api-platform
other
schema_version no longer required on SQL execution request
openapi
First observed
2026-09-18
data-import-export
feature removed
Supabase drops Pipelines replication into Analytics Buckets
llms full
First observed
2026-09-18
deployment-topology
feature added
Envoy replaces Kong as the default self-hosted Supabase API gateway
llms full
First observed
2026-09-18
developer-experience
new integration
Sentry integration for supabase-js error and performance monitoring
llms full
First observed
2026-09-18
developer-experience
capability expanded
Supabase Library adds four starter templates
docs
First observed
2026-09-18
developer-experience
feature added
supabase-js adds a rollback() dry-run query modifier
llms full
First observed
2026-09-18
developer-experience
capability expanded
Vector buckets add local development via the Supabase CLI
llms full
First observed
2026-09-18
performance-scale
capability added
Realtime adds Broadcast Replay for private channels
llms full
First observed
2026-09-18
performance-scale
limit change
Supabase raises max concurrent users limit from 50,000 to 300,000
openapi
First observed
2026-09-18
permissions-governance
capability expanded
Storage access policies gain operation-aware RLS helpers
llms full
First observed
2026-09-18
permissions-governance
capability expanded
Supabase adds scoped personal access tokens
llms full
First observed
2026-09-18
permissions-governance
capability added
Supabase adds temporary access for short-lived database connections
llms full
First observed
2026-09-18
security-compliance
feature added
OAuth 2.1 Server added to the pricing plan comparison
pricing
First observed
2026-09-18
security-compliance
feature added
Organization invitations can explicitly require SSO or non-SSO authentication
llms full
First observed
2026-09-18
security-compliance
capability expanded
Self-hosted Supabase adds new API keys with ES256 asymmetric authentication
llms full
First observed
2026-09-18
security-compliance
feature added
SSO auto-join now applies on every sign-in, not only first signup
llms full
First observed
2026-09-18
security-compliance
capability expanded
Supabase adds configurable Postgres connection logging
llms full
First observed
2026-09-18
security-compliance
feature added
Supabase Auth adds experimental MFA recovery codes
llms full
First observed
2026-09-18
security-compliance
feature added
Supabase Auth adds experimental passkey support
llms full
First observed
2026-09-18
security-compliance
capability expanded
Supabase PrivateLink supports read replica connections
llms full
Last 10 weeks
By area
developer-experience
████████
20
ai-agents
████
10
security-compliance
████
10
performance-scale
████
9
api-platform
███
7
analytics-reporting
██
4
permissions-governance
██
4
data-import-export
█
2
deployment-topology
█
2
integrations-ecosystem
█
2
search-retrieval
█
2
content-media
█
1
Integrations
+
datadog
Datadog integration for Supabase Metrics API
2026-09-18
+
elastic
Elastic managed Supabase integration
2026-09-18
+
sentry
Sentry integration for supabase-js error and performance monitoring
2026-09-18
+
mcp · 2
Supabase docs add omp as a supported AI coding agent
2026-09-11
+
fx
fx added as a supported MCP client
2026-08-26
Capabilities added
Envoy replaces Kong as the default self-hosted Supabase API gateway
Self-hosted Supabase now ships an Envoy-based API gateway by default (service renamed from kong to api-gw, with kong kept as a network alias). Envoy enforces API key authentication, translates opaque sb_publishable_/sb_secret_ keys to internal JWTs, applies RBAC route rules, and blocks MCP and Realtime management routes by default. A Kong override remains available, and the self-hosted update tool migrates deployments to Envoy from v0.8.0.
supabase-js adds a rollback() dry-run query modifier
The JS reference documents a rollback() PostgREST modifier that sets the Prefer: tx=rollback header, executing a single request inside a server-side transaction that is rolled back — RETURNING clauses, RLS, triggers and constraints all evaluate, but no row is persisted. Corroborating source: JS reference in llms-full.
Realtime adds Broadcast Replay for private channels
Supabase Realtime documentation adds Broadcast Replay, letting private channels retrieve messages published earlier via Broadcast from the Database. Clients configure replay with a required `since` epoch-milliseconds timestamp and an optional `limit` (max 25) in the channel broadcast config; messages are stored in daily partitions retained for at least 72 hours (at most 4 days). Supported in supabase-js 2.74.0+, Dart 2.10.0+, Swift 2.34.0+, and Python 2.22.0+; unsupported in Kotlin.
Supabase adds temporary access for short-lived database connections
Supabase adds temporary access (JIT access): project users can connect to Postgres and Supavisor using their Personal Access Token or dashboard session token as the database role password, assuming authorized Postgres roles. Access can be restricted by expiry and IP CIDR ranges, managed via the dashboard or Management API (GET/PUT /v1/projects/{ref}/jit-access and /database/jit). Requires SSL enforcement and Postgres 17.6.1.081+. Not supported on the IPv6 transaction pooler.
OAuth 2.1 Server added to the pricing plan comparison
Supabase's pricing page now lists the OAuth 2.1 Authorization Server as a plan feature, included across Free, Pro, Team and Enterprise. The capability itself was already shipped and tracked (auth-oauth-server); this is its addition to the commercial feature grid.
Organization invitations can explicitly require SSO or non-SSO authentication
When inviting members to a Supabase organization, senders can now explicitly choose whether an invitation requires SSO or non-SSO (password/social) authentication to accept. Previously the invitation type was inherited from the inviter's account type, which blocked mixed SSO/non-SSO organizations.
SSO auto-join now applies on every sign-in, not only first signup
Supabase organization SSO auto-join now applies on every sign-in rather than only on first signup, resolving the case where owners enabled auto-join after testing and expected existing members to join on their next SSO sign-in. Auto-join is idempotent and supports a configurable default role.
Supabase Auth adds experimental MFA recovery codes
The JS reference documents a supabase.auth.mfa.recoveryCodes namespace behind auth.experimental.recoveryCodes: generate (plaintext codes returned once, requires another verified factor), verify (upgrades session to aal2, emits MFA_CHALLENGE_VERIFIED), regenerate, getStatus, and unenroll, with lockout after failed attempts. Corroborating source: JS reference in llms-full.
Supabase Auth adds experimental passkey support
The JavaScript reference documents a supabase.auth.passkey namespace plus registerPasskey() and signInWithPasskey() client methods, handling the full WebAuthn ceremony (registration challenge, navigator.credentials, verification) behind an auth.experimental.passkey client flag. Server-side passkey admin methods (listPasskeys, deletePasskey) are also documented. Corroborating source: JS reference in llms-full.
Supabase adds authenticated MCP server hosting on Edge Functions
The BYO-MCP guide now covers the full path it previously deferred: developers can deploy their own MCP servers on Edge Functions with Supabase Auth acting as the OAuth 2.1 authorization server. New @supabase/server middleware (withOAuthProtectedResource for RFC 9728 discovery and WWW-Authenticate challenges, withSupabase({auth:'user'}) for token verification) scopes every tool call to the signed-in user under RLS. Supports dynamic client registration, a hosted consent screen, and runs on any fetch-style runtime (Next.js, SvelteKit, Cloudflare Workers, Node, Bun, Deno). Previously the guide only supported unauthenticated MCP servers and said auth support was 'coming soon'. Corroborated by the MCP authentication page and @supabase/server reference updates in the same snapshot.
Supabase Library adds a Headless App block for TanStack Start
The Supabase UI Library adds a 'Headless App' block (@supabase/headless-app-tanstack): a TanStack Start starter where an AI agent is the primary interface, with MCP tools over an Edge Function, RLS-scoped task data, browser-based sign-in and OAuth approval, and deploy guidance (CLI 2.117.0+, ES256/RS256 JWT keys, email confirmation templates). Listed in the library's llms.txt index alongside the existing MCP Server block.
Supabase adds Multigres high-availability Postgres in public alpha
New Multigres integration lets a project run Postgres across multiple nodes instead of one: automatic failover promotes another node within seconds, the same connection string keeps working, and writes are acknowledged only after cluster consensus on durability. Public alpha, free for paid-plan organizations on up to two projects; not covered by the uptime SLA. Alpha limitations: no Realtime (logical replication unsupported), no PITR beyond daily backups, single region, mutually exclusive with OrioleDB, no resize after creation, no sharding yet. Enabled at project creation as 'High availability' in the Dashboard; also added to the feature-status table as public alpha. No managed path back to standard Postgres once enabled.
Hire an agent guide ships prepared observability agent prompts
New 'Hire an agent' guide defines four observability agent roles — Health (API/Auth error rates, connection pressure, instance state), Security (Security Advisor findings, RLS gaps, Auth 4xx patterns), Performance (slow queries, lock waits, long-running sessions), and Capacity (request, error, storage, connection growth) — each with a prepared prompt and setup instructions for Claude Routines, Codex scheduled tasks, or Cursor Automations. Findings route through existing integrations like Linear and Slack; prompts run in any MCP-capable environment.
Supabase Storage adds bucket lifecycle policy management
New Storage JS methods getBucketLifecycle, updateBucketLifecycle and deleteBucketLifecycle manage per-bucket lifecycle policies. Rules currently support only noncurrentVersionExpiration with an empty filter, standard buckets only, and return FeatureNotEnabled when lifecycle is off for the project; versioning must be on for the policy to act on noncurrent versions.
supabase-csharp 8.1.0 adds Edge Function response streaming
supabase-csharp 8.1.0 (2026-09-07) adds streaming of Edge Function responses, a Realtime `enabled` flag to opt into the initial presence sync, and fixes for unary operators in Where filter expressions and integer-array JSON serialization.
Supabase Library adds an MCP Server block
The Supabase UI Library adds an MCP Server block: a shadcn-installable scaffold that runs a user-scoped MCP server as a Supabase Edge Function, verifying forwarded product session tokens or OAuth 2.1 access tokens so embedded product agents and external MCP clients (Codex, Claude Code, ChatGPT) get RLS-scoped tool access. Newly listed in the library's index alongside the existing auth, storage, and realtime blocks.
supabase-csharp v8.0.0 major release
Major lockstep release of all Supabase .NET packages (2026-09-03). Breaking: migration from Newtonsoft.Json to System.Text.Json across every package, retarget to netstandard2.1 (dropping .NET Framework and older Mono/Xamarin/Unity), Postgrest Delete() now returns deleted rows, Single() throws on multiple matches, late postgres_changes listeners throw, OAuth state parameter removed from /authorize. Features: new Supabase.Extensions.DependencyInjection package for DI registration, retry/backoff with injectable HttpClient across all services, publishable and secret API key support, async session persistence and soft-delete on admin DeleteUser in Gotrue, storage service error codes exposed.
Provision a Supabase project from the Stripe CLI with Stripe Projects
Supabase documented Stripe Projects, a Stripe CLI workflow that provisions a Supabase project — Postgres plus Auth, Storage, Edge Functions and Realtime — from a single command and writes credentials to a local .env file. Designed for humans and AI agents alike; currently a developer preview. Provisioning links to a Supabase organization by matching the email on the Stripe account, and confirming creates a new organization if none is linked.
Changes
Date
Area / Type
Change
Source
First observed
2026-09-15
ai-agents
capability expanded
MCP Server block docs add pipeline composition and env-based configuration
docs
First observed
2026-09-15
ai-agents
capability added
Supabase adds authenticated MCP server hosting on Edge Functions
llms full
First observed
2026-09-15
ai-agents
capability added
Supabase Library adds a Headless App block for TanStack Start
docs
First observed
2026-09-15
developer-experience
capability expanded
New Postgres log configuration docs cover CLI, API and SQL control of log settings
llms full
First observed
2026-09-15
performance-scale
capability expanded
OrioleDB gains automatic tuning by compute size and configurable settings
llms full
First observed
2026-09-15
performance-scale
capability added
Supabase adds Multigres high-availability Postgres in public alpha
llms full
Shipped
2026-09-13
ai-agents
feature added
Hire an agent guide ships prepared observability agent prompts
changelog
Shipped
2026-09-13
ai-agents
capability expanded
Supabase agent skills rebuilt on a restructured docs corpus
changelog
Shipped
2026-09-13
ai-agents
capability expanded
Supabase MCP Server adds query_logs tool for cross-service log access
changelog
First observed
2026-09-12
ai-agents
capability expanded
Supabase MCP Server documents Cursor CLI management
llms full
First observed
2026-09-12
api-platform
endpoint added
Management API adds endpoint to run project advisors
llms full
First observed
2026-09-12
api-platform
endpoint added
Management API adds v2 create-database-branch endpoint
llms full
First observed
2026-09-12
data-import-export
capability expanded
Storage buckets expose object versioning flag in Management API
openapi
First observed
2026-09-12
developer-experience
capability expanded
Branching documents default-privileges behavior on new branches
llms full
First observed
2026-09-12
developer-experience
feature added
New quickstarts for Reflex and Spring Boot
llms full
First observed
2026-09-12
developer-experience
capability expanded
Terraform provider adds API key, edge function and third-party auth resources
llms full
First observed
2026-09-12
performance-scale
limit change
Anonymous sign-in rate limit becomes customizable
llms full
First observed
2026-09-12
performance-scale
capability expanded
Auth rate limit table reworked with new buckets and customizable limits
llms full
First observed
2026-09-12
performance-scale
limit change
MFA challenge rate limit raised from 15 per hour to 15 per minute
llms full
First observed
2026-09-12
performance-scale
limit change
New documented rate limit for Web3 sign-ups and sign-ins
llms full
First observed
2026-09-12
permissions-governance
capability expanded
Scoped access tokens gain new permission groups
llms full
First observed
2026-09-12
search-retrieval
limit change
Hosted vector bucket queryVectors topK raised to 10,000 with pagination
llms full
First observed
2026-09-12
search-retrieval
capability expanded
Vector buckets document hosted vs local query limits and pagination
llms full
First observed
2026-09-11
ai-agents
new integration
Supabase docs add omp as a supported AI coding agent
llms full
First observed
2026-09-11
content-media
capability added
Supabase Storage adds bucket lifecycle policy management
llms full
23 more
First observed
2026-09-11
security-compliance
capability expanded
Self-hosted Supabase adds API key rotation script and publishable/secret key naming
llms full
First observed
2026-09-11
security-compliance
capability expanded
Supabase Auth adds experimental MFA recovery codes
llms full
Shipped
2026-09-07
api-platform
feature added
supabase-csharp 8.1.0 adds Edge Function response streaming
llms full
First observed
2026-09-04
ai-agents
capability added
Supabase Library adds an MCP Server block
docs
Shipped
2026-09-04
developer-experience
other
Supabase v2.115.1-canary.0 released
releases github
Shipped
2026-09-04
developer-experience
other
Supabase v2.116.0-canary.0 released
releases github
Shipped
2026-09-04
developer-experience
other
Supabase v2.116.0-canary.1 released
releases github
Shipped
2026-09-03
api-platform
feature added
supabase-csharp v8.0.0 major release
llms full
Shipped
2026-09-03
developer-experience
other
Supabase v2.115.0 released
releases github
Shipped
2026-09-03
developer-experience
other
Supabase v2.115.0-canary.0 released
releases github
Shipped
2026-09-02
developer-experience
other
Supabase v2.113.0 released
releases github
Shipped
2026-09-02
developer-experience
other
Supabase v2.114.0 released
releases github
Shipped
2026-09-02
developer-experience
other
Supabase v2.114.0-canary.0 released
releases github
Shipped
2026-09-01
developer-experience
other
Supabase v2.113.0-canary.0 released
releases github
First observed
2026-08-31
analytics-reporting
feature added
Supabase splits its one log error-rate alert into four per-service alerts
openapi
First observed
2026-08-31
api-platform
capability expanded
Supabase OAuth protected-resource helpers stop deriving URLs from X-Forwarded headers and throw off platform
llms full
First observed
2026-08-31
performance-scale
feature removed
Supabase drops databasePoolMode from its project API schema
openapi
First observed
2026-08-28
deployment-topology
feature removed
Supabase drops BYO Cloud from its pricing page
pricing
First observed
2026-08-28
developer-experience
capability expanded
Supabase branches clone the base project and can include production data
llms full
First observed
2026-08-28
developer-experience
capability expanded
Supabase moves its upgrade targets to Postgres 15.19 and 17.11 with two reindexing advisories
llms full
First observed
2026-08-27
developer-experience
capability expanded
Supabase database linter adds a HEALTH category and new inspectable object types
openapi
First observed
2026-08-26
integrations-ecosystem
new integration
fx added as a supported MCP client
llms full
First observed
2026-08-26
integrations-ecosystem
capability added
Provision a Supabase project from the Stripe CLI with Stripe Projects
llms full
Named in changes
17
amazon-s3-vectors
Vector buckets add local development via the Supabase CLI
2026-09-18 · 2 changes
envoy-proxy
Envoy replaces Kong as the default self-hosted Supabase API gateway
2026-09-18
kong
Envoy replaces Kong as the default self-hosted Supabase API gateway
2026-09-18
openai
Supabase Library adds four starter templates
2026-09-18
pgvector
Vector buckets add local development via the Supabase CLI
2026-09-18 · 3 changes
stripe
Supabase Library adds four starter templates
2026-09-18 · 2 changes
deno
MCP Server block docs add pipeline composition and env-based configuration
2026-09-15
mcp
Supabase Library adds a Headless App block for TanStack Start
2026-09-15 · 5 changes
multigres
Supabase adds Multigres high-availability Postgres in public alpha
2026-09-15
orioledb
OrioleDB gains automatic tuning by compute size and configurable settings
2026-09-15
postgres
Supabase adds Multigres high-availability Postgres in public alpha
2026-09-15 · 2 changes
tanstack-start
Supabase Library adds a Headless App block for TanStack Start
2026-09-15
5 more
claude
Hire an agent guide ships prepared observability agent prompts
2026-09-13
cursor
Supabase MCP Server documents Cursor CLI management
2026-09-12
reflex
New quickstarts for Reflex and Spring Boot
2026-09-12
spring-boot
New quickstarts for Reflex and Spring Boot
2026-09-12
terraform
Terraform provider adds API key, edge function and third-party auth resources
2026-09-12
Select a row