Free public scanner
Paste your project's public details. In a few seconds we'll show you what anyone on the internet can read — using only the public key that already ships in your app.
This is the public key from your app. We never store it. We only read row counts, never your data, and never write anything.
The anon key can't list your tables (Supabase locks that to service_role). Paste yours here and we'll probe them directly — otherwise we guess from a wordlist plus your deployed bundle.
Why this is safe. The anon key is public by design — it's in every visitor's browser already. We do exactly what a visitor's browser can do: read only counts (not your data), make no changes, and don't keep your key.