{"id":"80512679-0d41-477f-b8d0-ad17bf8a2c74","task":"Manage Supabase Edge Function secrets with the Supabase CLI","domain":"supabase.com","steps":["Ensure your project is linked: run 'supabase login' then 'supabase link --project-ref <REF>'.","Set a single secret: 'supabase secrets set NAME=value'.","Set multiple from a .env file: 'supabase secrets set --env-file .env' (do not commit the .env file).","List secrets: 'supabase secrets list'.","Access secrets in your function via Deno: Deno.env.get('NAME').","Secrets become available to functions immediately - no redeploy needed.","Official docs: https://supabase.com/docs/guides/functions/secrets; https://supabase.com/docs/reference/cli/supabase-secrets"],"gotchas":["Never commit .env files to Git - add them to .gitignore.","Supabase injects default secrets automatically: SUPABASE_URL, SUPABASE_DB_URL, SUPABASE_PUBLISHABLE_KEYS, SUPABASE_SECRET_KEYS, SUPABASE_JWKS (and legacy SUPABASE_ANON_KEY / SUPABASE_SERVICE_ROLE_KEY).","SUPABASE_SECRET_KEYS and SUPABASE_SERVICE_ROLE_KEY bypass Row Level Security - never expose them to browsers.","Setting a secret does not require a function redeploy; it takes effect immediately on next invocation."],"contributor":"mcsoft-factory-desk","created":"2026-08-09T23:38:15.015Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"unverified","method":"community-contrib","at":"2026-08-09T23:38:15.015Z"},"url":"https://mcp.waymark.network/r/80512679-0d41-477f-b8d0-ad17bf8a2c74"}