AnalyticDB for PostgreSQL Supabase is a fully managed application development platform built on an enhanced version of open-source Supabase. The platform preserves the native developer experience of Supabase, provides core features such as a database, user authentication, and Edge Functions, and integrates with the Alibaba Cloud infrastructure to provide higher performance, enhanced security, and more comprehensive ecosystem support. Compared to open-source self-hosted solutions, AnalyticDB for PostgreSQL Supabase provides comprehensive managed capabilities, lets you select compute and storage specifications on demand, natively supports third-party OAuth features such as Alipay and WeChat, includes core features, such as Edge Functions, that are not available in the open-source solution, and maintains a user experience and API compatibility that are highly consistent with Supabase Cloud.
Core features
Feature | Description |
Native Alipay/WeChat OAuth support | Natively integrates Alipay and WeChat third-party logon authentication. You can use it out-of-the-box without adapting the OAuth flow. This applies to various scenarios, such as web, app, and miniapps, significantly reducing integration costs. |
Full-lifecycle Edge Functions experience | Supports the full lifecycle of Supabase Edge Functions, including development, deployment, and log observation. It provides low-latency calls, stable execution, and event-triggering capabilities. It also offers a native Secrets management feature to securely manage sensitive information such as API keys and tokens. |
Full-link log observability | Modules such as Edge Functions, Database, Auth, and Storage all have a clear and observable logging system. You can view execution logs, debug information, and locate errors in the dashboard. This improves development efficiency and troubleshooting speed, providing a true self-service development experience. |
Ecosystem compatibility and easy migration | APIs and software development kits (SDKs) are compatible. Migration solutions are provided, allowing you to easily migrate from the official Supabase without modifying your application code. |
Native MCP Server support | Supports Model Context Protocol (MCP) Server. This allows intelligent applications such as Large Language Models (LLMs) and Agents to directly call resources like databases, Storage, and Edge Functions. This enables a more natural and powerful AI call chain, suitable for building intelligent assistants, automated services, and data-driven applications. |
Enterprise-grade security | Provides VPC network isolation, access auditing, encrypted transmission, a permission system, and security policies for Object Storage Service. |
Fully managed and maintenance-free experience | Provides multiple instance types and supports scaling to meet different business needs. It offers enterprise-grade capabilities such as version upgrades and data backups, allowing you to focus on your business without managing your own clusters. |
Billing
Free Edition: A free tier with 1 vCPU and 2 GB of memory is available.
ImportantThe free project is for development and testing only. Do not use it in a production environment.
Paid Edition: Creating a project incurs fees for compute and storage resources. For the prices of different compute resource specifications, see Supabase. For a detailed breakdown of project charges, see the console order page.
Create a Supabase project
Log on to the AnalyticDB for PostgreSQL console.
In the upper-left corner of the console, select the region where the instance is located.
In the navigation pane on the left, click Supabase.
In the upper-right corner of the page, click Create Project, and select Free test creation or Paid creation.
Set the parameters.
Create for Free Trial
Parameter
Description
Project Name
The name of the project.
Zone
A zone is an independent physical area within a region. There is no significant difference between zones.
Specifications
Select the project specifications.
Database Account
Fixed at postgres.
Database Password, Confirm Password
The password for the initial account. The password must meet the following requirements:
Be 8 to 32 characters in length.
Contain at least three of the following character types: uppercase letters, lowercase letters, digits, and special characters.
The supported special characters are:
!@#$%^&*()_+-=.
NoteAfter you create the instance, you can change the database password in the console or call the ResetSupabaseProjectPassword operation to change the database password of the Supabase project.
VPC
Select the ID of the virtual private cloud (VPC).
A VPC is an isolated network environment that provides higher security and performance than the classic network. You must first create a VPC and a vSwitch in the same region as the instance.
VSwitch
Select a vSwitch in the VPC.
If no vSwitches are available, it means no vSwitch resources are available in the current zone. You can switch to another zone or create a vSwitch in the current zone.
Enable Whitelist
Select whether to enable the whitelist restriction.
IP Address Whitelist
Enter the IP addresses to add to the whitelist.
Create with Payment
Parameter
Description
Product Type
Select Subscription or Pay-As-You-Go.
Region And Zone
Select the region and zone. A zone is an independent physical area within a region. There is no significant difference between zones.
Computing resource specifications
Select the size of the compute resource specifications. A specification with 4 GB of memory or more is recommended.
Disk Storage Type
Select the disk storage class.
Storage resource specifications
Select the size of the storage resource specifications.
Project Name
Enter a project name.
ImportantThe project name must be unique.
Initialize Password
Set the password for the database. The password must meet the following requirements:
Be 8 to 32 characters in length.
Contain at least three of the following character types: uppercase letters, lowercase letters, digits, and special characters.
The supported special characters are:
!@#$%^&*()_+-=.
NoteThe initial password is the database password, not the logon password for the dashboard.
After you create the instance, you can change the database password in the console or call the ResetSupabaseProjectPassword operation to change the database password of the Supabase project.
Virtual Private Cloud (VPC)
Select the ID of the VPC.
A Virtual Private Cloud (VPC) is an isolated virtual network that provides higher security and higher performance than the classic network. You must first create a VPC and vSwitch in the same region as the instance.
VSwitch
Select a vSwitch in the VPC.
If no vSwitches are available, it means that the selected zone does not have any vSwitch resources. You can switch to another zone or create a vSwitch in the current zone.
Resource Group
Select a resource group.
Confirm the parameter settings and complete the project creation.
For a free trial: Click OK.
Paid creation: Click Purchase Now, confirm your order information, and click Enable Now.
Use a Supabase project
Log on to the Supabase Dashboard.
In the Actions column of the target instance, click Manage.
Copy the logon account and logon password, and then click OK. You are redirected to the Supabase Dashboard logon window.
Enter the username and password to log on to the Supabase Dashboard.

Obtain API keys.
Obtain the anon key. This key is used for database operations such as create, read, update, and delete (CRUD).
In the upper-left corner of the Supabase Dashboard, click Connect.
In the pop-up window, click App Frameworks to obtain the
SUPABASE_URLandSUPABASE_ANON_KEYof the Supabase instance.

Obtain the service role key. This key is used for operations such as identity verification and authorization.
In the navigation pane on the left of the Supabase Dashboard, click API Docs.
Click Introduction > Bash. For Project API Key, select service_role(secret).

Click Authentication to obtain the SERVICE KEY.

Use the instance.
ImportantConfigure the API key as an environment variable. This prevents you from having to explicitly include the API key in your code, which reduces the risk of key leakage.
Manage the database using the Supabase RESTful API.
You can perform CRUD operations on the database at
https://<SUPABASE_URL>/rest/v1/. For example, to query the users table in the database, run the following command:curl 'http://<SUPABASE_URL>/rest/v1/users'-H "Authorization: Bearer <anon key>" -H "apikey: <anon key>" -H "Content-Type: application/json"Manage features such as user registration and identity authentication using the Supabase Auth API.
For example, to query all users in the database, run the following command:
curl 'http://<SUPABASE_URL>/admin/users' -H "Authorization: Bearer <service role key>" -H "apikey: <service role key>" -H "Content-Type: application/json"
For more information, see the official Supabase documentation.
Manage a Supabase project
Change the database password
In the Actions column of the target instance, click Change Password. In the pop-up window, enter the new password and click OK.
Modify the whitelist
In the Actions column of the target instance, click Modify Whitelist. In the pop-up window, enter the IP addresses for the whitelist and click OK.
Delete a Supabase project
In the Actions column of the target instance, click Release. In the pop-up window, click OK.
Related APIs
API | Description |
Creates a Supabase project. | |
Queries a list of Supabase projects. | |
Queries the API keys of a Supabase project, including the anon key and the service role key. | |
Resets the database password of a Supabase project. | |
Sets the whitelist of a Supabase project. | |
Deletes a Supabase project. |
FAQ
How do I connect directly to the PostgreSQL database?
For instances created after August 27, 2025, AnalyticDB for PostgreSQL Supabase supports standard PostgreSQL direct connections. You can use common tools such as psql, JDBC, DBeaver, DataGrip, and Tableau to connect to AnalyticDB Supabase.
Follow these steps to connect:
Log on to the AnalyticDB for PostgreSQL console, select the region where the instance is located, and then in the navigation pane on the left, click Supabase.
Configure the whitelist.
Click Modify Whitelist in the Actions column for the target project to add the public IP address of your client to the Supabase project whitelist.

(Optional) Set and save the database account password.
Click Modify Password in the Actions column for the target project, and then set and securely store the database account password.
Obtain the connection information and connect to the database.
Default port: 5432.
Connection address: Click Manage in the Actions column for the target project, and then click Go To. You are redirected to a URL in the format
http://<IP>:8000. The<IP>part of this URL is the database connection address.