ScavioScavio
Feature: serp

RLS Exposed Endpoint Check

Scans a Supabase project URL and reports which tables are publicly readable without row-level security policies enabled.

Try Scavio FreeAPI Docs

What is RLS Exposed Endpoint Check?

RLS Exposed Endpoint Check is the Scavio security endpoint that accepts a Supabase project URL and reports which tables are reachable via the public REST API without row-level security policies enforced. The check uses the public anon key path only, so it never sees private credentials. Returns a per-table verdict (exposed, protected, not-reachable) plus a row-count probe for exposed tables so engineers can triage blast radius immediately.

Example Response

JSON
{ "project": "xyz.supabase.co", "tables": [{ "name": "users", "status": "exposed", "row_sample": 3 }, { "name": "orders", "status": "protected" }] }

Use Cases

  • Supabase security audits
  • Pre-launch security review for agent backends
  • Continuous monitoring for config drift
  • Bug bounty researchers validating findings

Why RLS Exposed Endpoint Check Matters

Row-level security is opt-in on Supabase and the most common cause of data leaks in 2025 to 2026 agent startups; an automated check catches misconfigs before attackers do.

LangChain Example

Drop rls exposed endpoint check data into your LangChain agent in a few lines:

Python
scavio.security.supabase_rls_check(project_url="https://xyz.supabase.co")

Frequently Asked Questions

Send a search request with the appropriate platform (google) and Scavio returns rls exposed endpoint check data in the response. See the example above for the exact field path.

Yes. Scavio fetches rls exposed endpoint check data in real time on each request. There is no caching layer and no stale data.

RLS Exposed Endpoint Check is the Scavio security endpoint that accepts a Supabase project URL and reports which tables are reachable via the public REST API without row-level secu

RLS Exposed Endpoint Check data is returned as part of the standard search response. Each request costs 1 credit. Free tier includes 500 credits/month.

Start Using RLS Exposed Endpoint Check

Scans a Supabase project URL and reports which tables are publicly readable without row-level security policies enabled.

Get Started FreeRead the Docs