> ## Documentation Index
> Fetch the complete documentation index at: https://docs.corsair.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Get credentials

> How to get Supabase credentials for the Corsair Supabase plugin

## API key

Use a Supabase personal access token for Management API operations.

1. Open Supabase account settings.
2. Go to **Access Tokens**.
3. Create a personal access token.
4. Store it as `api_key`.

```bash theme={null}
pnpm corsair setup --supabase api_key=<supabase_pat>
```

## OAuth 2.0

Use OAuth when you want users to connect their own Supabase account through Corsair.

1. Create a Supabase OAuth app.
2. Add the redirect URL used by your Corsair app.
3. Store the OAuth app credentials with Corsair.

```bash theme={null}
pnpm corsair setup \
  --supabase client_id=<client_id> \
  --supabase client_secret=<client_secret>
```

Supabase OAuth app scopes are configured in the Supabase dashboard.

## Project API key

Most Supabase Management API operations use the account token above. Project-hosted routes, such as invoking an Edge Function or TUS storage options, need a project API key too.

Pass it in plugin options or per call:

```ts theme={null}
supabase({
  key: process.env.SUPABASE_ACCESS_TOKEN,
  projectApiKey: process.env.SUPABASE_PROJECT_API_KEY,
})
```