Supabase Key Finder Prompt

assetactive

Objective

Locate the API keys, Project ID, database connection strings, and configuration details for a specific Supabase project.

Target Information to Collect

  • Project ID: (Usually a 20-character string, e.g., hfbexbargmskuwybaucz)
  • API Keys:
    • anon / public key (Client-side safe)
    • service_role / secret key (Server-side only)
  • Database URL: postgres://postgres:[PASSWORD]@db.[PROJECT-REF].supabase.co:5432/postgres
  • Project Tier: Free (Starter) vs. Pro (Pay-as-you-go)
  • Integrations & Hooks: Auth providers enabled, storage buckets, edge functions, or webhooks.

Search Locations

Local Development Environment

  • Environment Files: Recursively search project directories for:
    • .env
    • .env.local
    • .env.development
    • supabase/config.toml
  • Code Search: Grep/Search codebase for strings like:
    • createClient
    • supabaseUrl
    • supabaseKey

System Credentials & Secrets

  • Credential Managers: Check Windows Credential Manager, macOS Keychain, or Linux Keyring for "supabase".
  • CLI Config: Check global configuration files:
    • ~/.supabase/
    • %USERPROFILE%\.supabase\

Browser Data

  • Password Managers: Search Chrome/Edge/Firefox saved passwords for supabase.com or app.supabase.io.
  • History: Search browsing history for app.supabase.com/project/. The string immediately following this URL is usually the Project ID.
  • Local Storage: Inspect Local Storage in the browser developer tools (F12) for previously developed localhost apps.

Third-Party Services

  • Git Repositories: Check private GitHub/GitLab/Bitbucket repositories (specifically commit history for accidentally committed .env files).
  • Hosting Dashboards: Check environment variables in Vercel, Netlify, Railway, or Heroku.
  • Email: Search inbox for "Welcome to Supabase", "Database Password", or "Project Created".

Identification Patterns

  • API Key Format (JWT) — Starts with: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...
  • Common Variable Names:
    • NEXT_PUBLIC_SUPABASE_ANON_KEY
    • VITE_SUPABASE_ANON_KEY
    • SUPABASE_SERVICE_ROLE_KEY
    • REACT_APP_SUPABASE_KEY
  • Project URL Format — https://[PROJECT_ID].supabase.co

Manual Retrieval (If Local Search Fails)

  1. Log in to the Supabase Dashboard: https://app.supabase.com/
  2. Select the target project.
  3. For Keys: Go to Settings (Cog Icon) → API. Look for "Project API keys".
  4. For DB Connection: Go to Settings → Database → Connection String.
  5. For Tier Info: Go to Settings → Billing.

Provenance

Ingested from Notepad++ backup new 8@2026-03-07_211114 under C:\Users\mesha\Downloads\npp-backups\.