Free tool

Which tables can your anon key read?

Your anon key ships in your frontend, so anyone can use it. This checks what it exposes: every table reachable through the REST API and how many rows are visible without signing in.

Never paste your service_role or secret key here, or anywhere public.

Runs in your browser. Your key goes only to your own Supabase project, never to us. Only check projects you own.