Keys & roles
Anon vs service role, rotation, and when to use each.
Key roles
| Key | Use for |
|---|---|
| Anon | Browser apps, reads, realtime; writes with user JWT + RLS |
| Service role | Servers, admin scripts, bucket create/delete, RLS bypass |
Rotation
On the dashboard API page, click Rotate next to a key. Copy the new value immediately — the previous JWT stops working once the version increments. Legacy keys without a version claim still work until rotated.