Supabase
Connect a Supabase account so your AI agents can list your projects, review table schemas, functions, branches and backups, and — only when you allow it — run SQL and deploy functions, under permissions you set per agent.
What your agents can do with Supabase
Read actions
Available when an agent has Read only or higher.
- List your organizations and see their details and members.
- List your projects.
- Check the health of a project's services.
- See whether a project is in read-only mode.
- Read the structure of your tables — columns, types, and constraints.
- Generate TypeScript types from a project.
- List edge functions and open the details of one.
- List database branches.
- List backups.
- List storage buckets.
Write actions
Available only with Read and write.
- Run a SQL query against a project.
- Deploy an edge function to a project.
- Create a database branch.
Running SQL counts as a write action even for a query that only reads, because a query can also change or delete data. Keep an agent on Read only unless you want it to have that power.
Some Supabase capabilities are deliberately not available to agents at all: reading or creating API keys and secrets, deleting projects or functions, restoring backups, and changing network or security settings. Do those from the Supabase dashboard.
Connecting Supabase step by step
1Open Connect → Applications
From the sidebar, click the plug icon to open the Connect area, then click the Applications tab. You will see the Supabase card among the other apps.
2Open the Supabase card and click Connect
Click the Supabase card to open the detail dialog. Read the description, then click the green Connect button.
3Sign in to Supabase
You land on Supabase's own sign-in screen. Sign in with the account that owns, or is a member of, the organizations you want your agents to see.
4Review and approve the access
Supabase shows the access Kronos AI is requesting. Approve it to continue.
5You land on the Already connected tab
Kronos AI sends you to Connect → Already connected with the new Supabase entry pre-selected. From there you can add a personal note to the connection, assign agents, or disconnect.
Giving an agent access
The full walk-through of assigning agents and editing per-action permissions lives at Integrations — the same workflow applies to every app. On the Supabase management page click + Add AI Agent, pick the agent, then choose a preset:
- Off — the agent cannot touch this Supabase account.
- Read only — the agent can list projects and read structures, functions, branches, backups and buckets, but cannot run SQL or change anything.
- Read and write — the agent can do all of the above plus run SQL, deploy functions, and create branches.
Inside the permissions modal (the gear icon) you can flip individual actions to override the preset. For example, Read and write EXCEPT "Run SQL query" lets an agent deploy functions and open branches without ever touching your data.
Multiple Supabase accounts on the same agent
You can connect more than one Supabase account (for example Production and Staging). When an agent has access to two or more, it picks the right one from context — or asks if the request is ambiguous. Cut ambiguity by turning off the agent's access to one of them, or by giving each connection an obviously distinct note.
When something goes wrong
- "Needs reconnect" badge — Supabase revoked or expired the connection. Open Connect → Supabase and walk through Connect again. Permissions are preserved.
- Agent says "I can't run that query" — the agent's preset is Off or Read only without the SQL override. Open the permissions modal and adjust.
- Agent can't find a project — the project belongs to an organization your connected account cannot see. Reconnect with an account that is a member of it.
Privacy
Kronos AI does not store the content of your Supabase projects. Each time an agent uses a Supabase action it fetches just-in-time, uses what it needs, and discards the result. The audit log records that the action happened (which agent, which action, when) but not the data itself.
When you disconnect Supabase or cancel your Kronos AI subscription, the connection and all per-agent permissions are deleted immediately. See the Privacy and Data deletion pages for the legal and processor details.