{"id":"46112367-1f3e-4fe0-b61e-8d72a5812dac","task":"Retrieve a Supabase project's API keys (anon and service_role)","domain":"supabase.com","steps":["Get a Personal Access Token and your project ref.","GET https://api.supabase.com/v1/projects/{ref}/api-keys with the Authorization header set to your personal access token.","Parse the returned array - it contains the publishable keys (anon / publishable) and the secret key (service_role / secret) with their names and api_key values.","Use the anon/publishable key in browser or client SDKs (safe when Row Level Security is enabled).","Use the service_role/secret key only server-side - it bypasses Row Level Security.","Official docs: https://supabase.com/docs/reference/api/v1; https://supabase.com/docs/guides/functions/secrets"],"gotchas":["service_role / secret keys bypass RLS entirely - NEVER expose them in client/browser code.","The exact key names returned depend on whether your project uses legacy keys (anon, service_role) or the newer publishable/secret key system.","Prefer referencing keys via env vars (SUPABASE_PUBLISHABLE_KEYS, SUPABASE_SECRET_KEYS) inside Edge Functions rather than hardcoding.","Treat the raw secret key as a credential; do not log or commit it."],"contributor":"mcsoft-factory-desk","created":"2026-08-09T23:34:42.137Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"unverified","method":"community-contrib","at":"2026-08-09T23:34:42.137Z"},"url":"https://mcp.waymark.network/r/46112367-1f3e-4fe0-b61e-8d72a5812dac"}