ISSUE API KEYS FOR YOUR SUPABASE APP
WITH ONE LINE OF SQL

Vend API keys to your customers without compromising on Row Level Security.

CREATE POLICY "allow_owner_access"
ON "public"."table_name"
USING (
  (SELECT "auth"."uid"() = "table_name"."owner_id")
  OR (SELECT "keyhippo"."key_uid"() = "table_name"."owner_id") 
);

KeyHippo extends your Row Level Security policies to enable API key authentication.

Backed byCombinator
Works With Row-Level-Security

Add secure API keys to
Supabase apps in seconds

KeyHippo integrates with Supabase's existing infrastructure to provide robust API key functionality. By leveraging Supabase Vault and the auth schema, we offer a solution that maintains the security standards you expect while expanding your authentication options.

import { KeyHippo } from "keyhippo";
import { createClient } from "@supabase/supabase-js";

// Initialize Supabase client
const supabase = createClient(
  process.env.SUPABASE_URL!,
  process.env.SUPABASE_ANON_KEY!
);

// Sign in using your preferred auth provider
const { data, error } = await supabase.auth.signInAnonymously();
if (error) throw new Error("Error signing in");
const userId = data.user!.id;

// Initialize KeyHippo with the Supabase client
const keyHippo = new KeyHippo(supabase);

// Create a new API key for the authenticated user
const createdKey = await keyHippo.createApiKey(userId, "description");

// Show createdKey.apiKey to your user.
// The key is never stored and can't be rederived.
Supabase Integration
Seamlessly integrate with Supabase Auth and Vault for secure API key management, maintaining full compatibility with RLS policies.
Instant Revocation
Revoke API keys in real-time by leveraging Supabase's infrastructure, ensuring immediate security control across your application.
Efficient Implementation
Utilize Supabase database functions and triggers to manage the complete lifecycle of API keys, keeping your application logic clean and performant.
Scalable Solution
Add robust API key support to your Supabase app without additional services, ensuring smooth scaling as your user base grows.
Built for Founders

Turbocharge Your Auth,
Own Your Stack

Built for founders who depend on performance, security, and complete control. Streamline your auth, accelerate development, and maintain full ownership of your stack.

Ship Your API 10x Faster
Eliminate weeks of custom auth development. Launch with robust API key management out of the box.
Seamless Scalability
From MVP to unicorn, KeyHippo grows with you. No refactoring needed as you hit millions of users.
Full Supabase Integration
Use your existing Supabase stack. No new services to manage or points of failure to worry about.
Developer-Centric API
Intuitive SDK that your team will love. Spend less time onboarding, more time building core features.
Local Development Ready
Works seamlessly in local environments. Accelerate your development cycle without compromising on features.
Self-Hostable & Open Source
Full control over your infrastructure. MIT licensed for maximum flexibility and transparency.

Early access is now available.

Get a competitive edge with KeyHippo's lightning-fast API key management.

Ready to ship 10x faster? Our founder will personally onboard you in 15 minutes.