Let Agents In

Agent readiness · Managed databases

supabase.com

13 of 16 measurable points under formula 9.2, measured on 2026-08-12. 15 checks exist; each is one HTTP request with a published rule, so every sentence below can be rerun and argued with.

A · Discovery

  • PASS
    Answers an agent user-agentAnswered 200 to LetAgentsIn/1.0 (+https://letagentsin.com/methodology)
  • PASS
    llms.txt publishedllms.txt and llms-full.txt present at https://supabase.com/llms.txt and https://supabase.com/llms-full.txt, and the 12 links we sampled across both files all answer
  • PASS
    Docs readable without JavaScript43,737 characters of text without JS, on https://supabase.com/docs/reference/cli/supabase-projects-api-keys rather than on https://supabase.com/docs
  • PASS
    On-demand agents not blockedNo on-demand agent is blocked
  • N/A
    Paths robots.txt points at answerrobots.txt names no concrete path, only patterns or nothing, so there is no claim to check
  • PASS
    No punishing crawl delayNo Crawl-delay applies to the agents we check

B · Agent entry

  • FAIL
    Agent entry pointNone of the 9 known agent entry paths returns a file rather than your page shell
  • PASS
    OAuth dynamic client registrationregistration_endpoint published, but none of the 3 advertised grants (authorization_code, refresh_token, urn:ietf:params:oauth:grant-type:jwt-bearer) finishes without a person at a browser
  • PASS
    MCP surfaceLive MCP endpoint at https://mcp.supabase.com/mcp, answered 401 with an auth challenge

C · Registration

  • PASS
    No CAPTCHA in the signup HTMLNo CAPTCHA vendor in the server HTML. A widget mounted later by JavaScript would not show here.
  • PASS
    Signup reachable without a browserForm renders in server HTML at https://supabase.com/dashboard/sign-up

D · Provisioning

  • PART
    Programmatic key provisioning1 of 7 provisioning phrases across the 6 documents we read: "management api"
  • PASS
    Free tier or no-card trial stated in textFree tier or no-card signals at https://supabase.com/pricing: "Free Plan", "Community support Free", "free Pricing plan"

E · Integration

  • PASS
    Typed SDK on the registry@supabase/supabase-js@2.112.3 ships types, matched from the registry by who publishes it rather than by a link on your site
  • PASS
    Machine-readable API descriptionDocs serve markdown to machines, at https://supabase.com/docs/guides/getting-started/api-keys

Tell me when this changes

The failures here are the kind nobody notices. An edge rule that starts refusing agents changes nothing a person sees in a browser, so the first sign is usually an integration that quietly stopped working. We rescan weekly and write only when a verdict moves.

This page is the newest scan we hold for supabase.com and changes when we rescan. It is not a judgement of the product: we measure whether an unattended run can get through, not whether the thing is any good. The whole corpus is published as JSON and CSV.

Scan a domain yourself