Deploy a Supabase Edge Function without the dashboard, using the Supabase CLI (supabase functions deploy) or the Management API's POST /v1/projects/{ref}/functions/deploy endpoint, including the tokens/scopes each path requires.

Documented steps

1. Authenticate the CLI once: `supabase login` (interactive browser login), find the project ref with `supabase projects list`, and link: `supabase link --project-ref your-project-ref`.
2. Scaffold a function if needed: `supabase functions new hello-world` (creates supabase/functions/hello-world/index.ts).
3. Deploy everything with `supabase functions deploy`, or one function with `supabase functions deploy hello-world`; this normally bundles via Docker, but the CLI automatically falls back to API-based deployment if Docker isn't available — or force it with `--use-api`.
4. For CI, set env var SUPABASE_ACCESS_TOKEN to a personal access token (stored as a repo secret) and run non-interactively: `supabase functions deploy --project-ref $SUPABASE_PROJECT_ID`.
5. Per-function settings like JWT verification live in supabase/config.toml, not CLI flags: [functions.hello-world] verify_jwt = false — so they stay consistent across deploys.
6. Management API alternative: POST https://api.supabase.com/v1/projects/{ref}/functions/deploy with header 'Authorization: Bearer {personal_access_token}' (token starts with sbp_...), query params slug and bundleOnly (optional), and a body containing file (array) and metadata (required); requires scope edge_functions:write. Success returns 201 with the function's id, slug, version, verify_jwt.
7. Confirm the live deployment by invoking https://{project_ref}.supabase.co/functions/v1/hello-world with the project's publishable key.
8. Docs: https://supabase.com/docs/guides/functions/deploy https://supabase.com/docs/guides/functions/quickstart https://supabase.com/docs/reference/api/v1-deploy-a-function