Supabase

  • Supabase — Open-Source Postgres Backend-as-a-Service: Managed PostgreSQL + PostgREST Auto API + GoTrue Auth + Realtime + S3-Compatible Storage + Deno Edge Functions + pgvector, Self-Hostable, Official MCP Server (YC S20, Series F $10.5B 2026)

    Supabase, Inc. (Delaware) + Supabase Pte. Ltd. (Singapore); founded Jan 2020 by Paul Copplestone & Ant Wilson; YC S20; funded through Series F Jun 2026 (10.5B val, GIC lead, $1B+ total raised). Independent, active, VC-backed, not acquired.

    Website

    Field Value
    Official Website https://supabase.com · docs: https://supabase.com/docs · GitHub: https://github.com/supabase/supabase (~80k stars Sep 2026) · MCP: https://mcp.supabase.com/mcp · repo: github.com/supabase/mcp
    Company Supabase, Inc., San Francisco (remote-first, ~350 staff Jun 2026); founded Jan 2020​ by Paul Copplestone (CEO) + Ant Wilson (CTO); YC S20; Series F Jun 2026 10.5B led by GIC, Coatue/Accel/Stripe/Salesforce Ventures participate, 70M ARR 2025
    Status Active, VC-backed independent, not acquired-kept​ (never sold, contrast Clipdrop/Slack), not shut down
    Category ai-productivity-data
    Pipeline Stage none

    Title

    Field Value
    Product Supabase
    Descriptive Title Supabase — Open-Source Postgres Backend-as-a-Service: Managed PostgreSQL + PostgREST Auto API + GoTrue Auth + Realtime + S3-Compatible Storage + Deno Edge Functions + pgvector, Self-Hostable, Official MCP Server (YC S20, Series F $10.5B 2026)
    One-line Positioning Spin a dedicated Postgres project → PostgREST auto-exposes REST (and pg_graphql GraphQL) from schema → GoTrue handles JWT auth/RLS → Realtime pushes row changes over WS → Storage buckets mounted on Postgres perms → Edge Functions run Deno serverless → pgvector holds embeddings for RAG; official MCP server (hosted OAuth or localhost:54321/mcp) lets Claude/Cursor/Windsurf introspect schema, run SQL, deploy functions, all read-only/project-scoped configurable.

    Features

    Field Value
    Database Dedicated managed PostgreSQL per project (no server mgmt); extensions: pgvector, postgis, pg_cron, pg_stat_statements; Row-Level Security enforced at DB layer; branching (preview DBs, paid); PITR; read replicas; Multigres horizontal-scale layer (alpha Jun 2026)
    Auto API PostgREST auto-generates REST from schema (no code); pg_graphql for GraphQL; postgres-meta admin API; typed client codegen (supabase-js, Dart/Swift/Python/etc.)
    Auth GoTrue: email/password, magic link, anonymous sign-in, social OAuth (Google/GitHub/Apple/etc.), SAML SSO (paid), MFA (TOTP/phone), leaked-password protection, RLS-bound JWT, custom access token hooks, 50k–100k MAU included per tier
    Realtime WebSocket channels: Postgres Changes (insert/update/delete), Broadcast, Presence; 200 (Free) / 500 (Pro+) peak concurrent connections
    Storage S3-compatible buckets, Postgres-owned ACL, image transformations, 50 MB (Free) / 500 GB (paid) max upload, Smart CDN, custom domains
    Edge Functions Deno-based serverless, 60s exec / 2s CPU limit, 500k (Free) / 2M (Pro) invocations included, deploy via CLI or MCP
    Vector / AI pgvector + pgvectorscale, embeddings storage, similarity search, RAG-ready; LangChain/LlamaIndex/OpenAI/Anthropic integrations; Supabase for Platforms (white-label backend for AI app builders, 370% growth)
    MCP Surface Official server (Apache-2.0, 2.8k stars): tools for list_tables/execute_sql/apply_migration, Edge Functions deploy, get_logs, generate_typescript_types, branching (experimental), Storage (opt-in); hosted https://mcp.supabase.com/mcp w/ OAuth 2.1 dynamic reg, or localhost:54321/mcp via CLI; read_only=true + project_ref= scoping
    Integrations Vercel/Netlify/Cloudflare, Next.js/SvelteKit/Remix, Prisma/Drizzle/Kysely, Stripe/Paddle, Zapier/n8n, LangChain/LlamaIndex, Cursor/Claude Code/Bolt/Lovable (agentic infra default)

    Pricing (2026-09 USD, org-based billing, compute metered separately)

    Field Value
    Free $0​ — 2 projects (pause after 7 days idle), 500 MB DB, 1 GB storage, 5 GB egress, 50k MAU, 500k Edge invocations, 200 realtime conns, community support, no backups/PITR/SOC2
    Pro **0.00325/MAU), 250 GB egress (then 0.021/GB), 2M Edge invocations (then 10/mo compute credit (covers 1 Micro), email support, remove SB branding, leaked-pw protection
    Team **0.015), advanced MFA, 28-day log retention, HIPAA BAA add-on, priority email, org roles
    Enterprise Custom​ — Multigres, BYO cloud, AWS PrivateLink, uptime SLAs, 24×7 support, designated CSM, custom MAU/egress, HIPAA/BAA, SSO/SCIM, audit logs
    Compute Billed per project instance separately from plan: shared Micro (~0.01344/branch/hr; Pipelines 3/GB ongoing / $0.60/GB initial sync
    Type plan-plus-usage-metered; starting_paid=$25; free_tier_yes_2_projects_pause_7d; compute_not_in_plan_fee

    Reviews

    Field Value
    G2 4.7/5​ (~31–130+ verified, 2026) — primary B2B dev star; praise Postgres-native + bundled auth/storage/realtime, fast onboarding, RLS trust, docs, vector support; gripes free-tier pause, compute overage surprises, dashboard lags on big tables, RLS perf tuning needed
    Capterra 4.7/5​ (~85) — aligned with G2, auxiliary-weighted
    Trustpilot 2.9–3.2/5​ (~45–85) — consumer/indie billing complaints (ghost compute, pause shocks, 300 bill), barbell; exclude from B2B avg, report separately
    TrustRadius 4.0/5 (~8) — tertiary
    Product Hunt 5.0/5 (~660 launch-era) — not reweighted
    Seek4 blend 4.8/5 (746) — all-surface weighted convenience, label blend not primary
    Praise Real Postgres not NoSQL lock-in, auth+storage+realtime+REST in one project, self-host escape hatch, pgvector for AI apps, MCP server ahead of most BaaS, generous free tier for MVP, vibe-coding default (Cursor/Bolt/Lovable)
    Gripes Free projects pause 7d idle (kills always-on demos), compute billed apart from plan = bill shock, egress 25→$599 cliff no mid-tier, RLS wrong-config = data leak, dashboard table editor slows >100k rows, Trustpilot billing rage, MCP defaults broad unless read_only+project_ref set

    Review Sources Breakdown

    Field Value
    G2.com 4.7/5 ~31–130+ — primary B2B dev star, weight highest
    Capterra.com 4.7/5 ~85 — aligned G2 band, auxiliary
    Trustpilot.com 2.9–3.2/5 ~45–85 — billing/pause rage, excluded from B2B avg, reported separately
    TrustRadius 4.0/5 ~8 — tertiary
    Product Hunt 5.0/5 ~660 — launch-era, not reweighted
    Seek4 4.8/746 blend Convenience number, labeled blend not independent
    Editorial (DevTune/TryOrBye) G2-echo + billing warnings — positioning only
    Vendor (supabase.com) Pricing/company/facts only

    Access

    Field Value
    Dashboard https://supabase.com/dashboard — project create, SQL editor, table editor, auth users, storage browser, Edge Functions logs
    Client SDKs JS/TS (@supabase/supabase-js), Flutter, Swift, Python, C#, Go, Java, Kotlin, Ruby, Rust, Godot
    APIs PostgREST (REST, Bearer JWT), pg_graphql (GraphQL), postgres-meta (admin), Storage REST, Realtime WS, Management API (project/branch/org CRUD)
    MCP Official: hosted https://mcp.supabase.com/mcp?project_ref=X&read_only=true (OAuth 2.1), or CLI localhost:54321/mcp; Apache-2.0, 2.8k stars, tools for SQL/migrations/types/edge-functions/logs/branching/storage(opt-in); Claude/Cursor/Windsurf/Vercel AI SDK compatible
    CLI supabase CLI (init/login/migration/deploy/local dev), self-host via docker-compose
    Self-host Full stack self-hostable (Apache-2.0, Docker Compose) — no license paywall, escapes cloud lock-in
    Login Email/Google/GitHub; org + project scoped roles (Owner/Admin/Developer); SSO on Team+

    Best For

    Field Value
    Audience 1 Indie hackers / vibe-coders (Cursor/Bolt/Lovable) shipping MVP in a weekend with auth+DB+storage out of the box
    Audience 2 AI app builders needing pgvector + RLS + REST for RAG/chatbots/agent memory
    Audience 3 Startups wanting Postgres-native backend without running own Postgres+Auth0+S3+WebSocket stack
    Audience 4 Teams requiring self-host escape hatch (Docker Compose) but starting on managed cloud
    Audience 5 Agencies spinning per-client projects with white-label email/auth (Supabase for Platforms)

    Not For

    Field Value
    Exclude 1 Teams refusing SQL/RLS (→ Firebase/Firestore if NoSQL-only, though RLS learning curve is real)
    Exclude 2 Always-on production on 25)
    Exclude 3 Budget-sensitive apps with >250 GB/mo egress (egress $0.09/GB stacks vs Cloudflare R2/S3)
    Exclude 4 Enterprises needing on-prem managed SLA without buying Enterprise contract (Team $599 lacks SLA/PrivateLink)
    Exclude 5 Sharded petabyte workloads today (Multigres alpha Jun 2026, not GA)

    Competitors

    Field Value
    Firebase Google-owned NoSQL BaaS, biggest rival; Supabase wins on Postgres/SQL/self-host, loses on fully-managed auth ML/analytics bundle
    Neon Serverless Postgres, branching-first, no bundled auth/storage/edge → complementary often used with Clerk/Auth.js
    PlanetScale MySQL serverless (sunsetted B2C 2024), Vitess sharding, no auth/storage
    Hasura GraphQL-first Postgres API engine, thinner auth/storage/realtime bundle
    Appwrite / PocketBase Open-source BaaS, smaller ecosystem, weaker Postgres SQL surface
    Supabase for Platforms vs Render/Fly/Railway PaaS not BaaS; different lane

     

Do Not Sell or Share My Personal Information Cookie Settings