Skip to content

Supabase

Connect Supabase to Inconvo

Supabase runs on PostgreSQL. To connect your Supabase database to Inconvo, we recommend using Supabase’s Session Pooling feature with a dedicated read-only role.

  • Create a dedicated reader role (SQL below).
  • Connection info from Supabase (session pooler).
  • Role must be able to read information_schema plus any tables you want exposed.

Run in the Supabase SQL editor:

-- Dedicated login role
create role inconvo_reader
with login password '[YOUR-STRONG-PASSWORD]';
-- Allow connections and basic schema visibility
grant connect on database postgres to inconvo_reader;
grant usage on schema public to inconvo_reader;
-- Clean slate + read access
revoke all privileges on all tables in schema public from inconvo_reader;
revoke all privileges on all sequences in schema public from inconvo_reader;
grant select on all tables in schema public to inconvo_reader;
-- Make future tables readable by default
alter default privileges in schema public
grant select on tables to inconvo_reader;
-- Bypass RLS for this role
alter role inconvo_reader bypassrls;
-- If you prefer RLS policies, add per-table SELECT policies instead of bypassing RLS
-- create policy "inconvo read all"
-- on public.your_table
-- for select
-- to inconvo_reader
-- using (true);
  • In Supabase, click Connect at the top of the dashboard.
  • In the connection string card, change the method to Session pooler.
  • You should see something like:
postgresql://postgres.abcdefghij:[YOUR-PASSWORD]@aws-1-eu-west-2.pooler.supabase.com:5432/postgres

From that string:

  • Host: aws-1-eu-west-2.pooler.supabase.com (between @ and the colon).
  • Port: 5432 (after the colon and before the slash).
  • Database: postgres (after the last slash).
  • User: postgres.abcdefghij — replace postgres with your role, e.g. inconvo_reader.abcdefghij (or <role_name>.abcdefghij).
  • Password: [YOUR-PASSWORD] (the part after the first colon).
  • Display name: Label shown inside Inconvo.
  • Host / Port: The session pooler host and port 5432 (from connection string).
  • Database: Typically postgres unless you created another database.
  • Username / Password: Use your role, suffixed with the random string from Supabase (e.g. inconvo_reader.abcdefghij).
  • Advanced options → Custom options: Add sslmode=require to enforce TLS. We append custom options to the connection string.
  • Schema: Set to public if you want to limit Inconvo to the public schema.
  • We deploy the connector and sync the schema.