Unverified60% confidenceFactExact time
Supabase's public anonymous key (anon key) is by design not a secret, is permitted to appear in frontend code, and only represents the identity of an 'unauthenticated user'.
2
Sources
60%
Confidence
Long-term
Relevance
9/25/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedSupabase has two types of keys: the publishable key (formerly called anon) is intended for the browser and is constrained by row-level security, while the secret key (formerly called service_role) completely bypasses row-level security.80% similarUnverifiedSupabase's anon key is by design publicly embedded in front-end code and does not itself constitute a security risk, provided that RLS policies are correctly configured.79% similarUnverifiedCryptographic identity usually refers to an identity identifier built on an asymmetric key system, for example using public-private key pairs to generate digital signatures or credentials.68% similarUnverified由于服务器不记录调用方身份的历史状态，单凭一串API Key字符串就足以代表完整的身份权限，Key一旦泄露即可被无限制滥用67% similarUnverifiedAn agent key is not a brand-new key format, but adds an 'identity marker' layer on top of a Restricted Key, and Stripe automatically binds default approval rules to it.66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/950677API
curl https://kongchang.com/api/v1/knowledge/claims/950677MCP
get_claim(id=950677)