Help
Connecting Supabase and your database
How Stableship reads your Supabase project, what it never touches, and the options when you cannot connect it.
How do I connect Supabase?
In setup, you approve read access to your Supabase project's structure. It is one click, and you can revoke it in Supabase any time. Then you pick the project behind your app.
What does Stableship read, and what does it never touch?
Stableship reads your project's structure: tables, roles, policies and functions. It never reads your customers' rows. It builds a temporary Supabase project from your migrations and Edge Functions, with sign-in set up for testing, and every active test runs on that private copy. The copy is deleted after the run, and your live project is never written to.
I built with Lovable and have no Supabase account
Lovable manages your database, so there is no Supabase dashboard to sign in to. Choose to build the copy from the migrations in your repository instead. Changes made only in a dashboard, never in a migration, will not be in the copy, and the report says so.
My Bolt app uses Bolt's built-in database
Stableship tests apps on Supabase. Claim the database to Supabase in Bolt (in your project's database settings), then connect it here. Bolt apps already on Supabase connect as usual.
My app is not on Supabase
Stableship tests apps with code on GitHub and the database on Supabase today, including apps whose builder runs Supabase for you (Lovable Cloud, Bolt). Plain Postgres (Neon, Railway, RDS), Firebase, MongoDB and Base44 apps cannot be tested yet. In setup, choose Not on Supabase?, tell us your stack, and we email you when we support it.
Do you need my Stripe key?
Only if you want checkout tested. The key is optional and must be a Stripe test key: the secret or restricted key (sk_test_ or rk_test_), and the publishable key (pk_test_) if your checkout page loads Stripe. A live key is rejected, and production keys are never requested or stored. Setup's Test setup step asks for it, and for a test key for each AI service your app calls (OpenAI, Anthropic, Gemini, OpenRouter), which the copy uses through a proxy capped at $5 an audit.
For your coding agent: this page as Markdown