Feature
Auth and service accounts
Supabase Auth for people, PATs for service accounts, audit events for both.
People sign in with Supabase Auth, and the API verifies their JWT. A Service account is a non-human caller that belongs to exactly one Organization and authenticates with a PAT.
Audit events record who did what to which resource, including denied attempts. All /api routes sit behind a rate limiter.
More features
All features →- 01
Typed API with OpenAPI
A Hono API whose routes are OpenAPI definitions, with a generated client for the web.
- 02
Next.js web app
A Next.js 16 App Router app with a login page and a signed-in dashboard shell.
- 03
Organizations and roles
Every record is scoped to an Organization, and every caller holds a Role in it.