03 / Scorecard / Object & File Storage

Supabase Storage

Name: Supabase Storage Agent Readiness Scorecard
Item: Supabase Storage
Rating: 50
Author: Headless Index pipeline (auto)

Headless Index

50/100

JAIRF

N/A

Verified

MAY 21, 2026

Methodology v1 · JAIRF v1.0.0

Editorial verdict

Supabase Storage is partially headless and partly UI-led. The Headless Index thesis-fit score of 50/100 puts it mid-table on the index, and JAIRF is recorded as N/A for this vendor because no public OpenAPI specification was reachable for the open-source scorer. In practice, vendors at this tier are partly machine-consumable: the core flows are reachable through code but several adjacent surfaces still expect a human at a dashboard, and the rest of this verdict explains where Supabase Storage lands inside that pattern. On the API surface, the question is whether the API is the product or a layer beneath the dashboard. Supabase Storage is S3-compatible plus a REST API atop the Postgres-driven Supabase architecture. The supabase-js, supabase-py, and other client libraries provide the canonical integration. The product is shaped around the broader Supabase developer experience.^[1] Schema observability is the related test: can an agent introspect the contract from cold, or does it have to read prose documentation to do so? REST documented and PostgREST-derived endpoints expose machine-readable schema. Schema discoverability is reference-class for the Supabase ecosystem.^[2] An agent can drive parts of this product, but not all of it: integrators should plan for human-in-the-loop checkpoints where the headless surface stops short. On headless operability: Buckets, objects, RLS policies, and upload signatures are programmable. The supabase CLI plus Docker images plus Kubernetes give deployment paths. Self-host plus Supabase Cloud share the surface.^[3] On the MCP and agent-integration axis, which is the fastest-moving criterion in the index: Supabase has been publicly active on MCP integration. The supabase-community MCP work covers some of the storage use cases.^[4] Event posture closes the loop: an agent that cannot react to state changes is reduced to polling. Supabase Storage events integrate with Database webhooks for downstream automation. The platform's broader webhook story extends naturally. Net assessment: integrators can build agent flows against Supabase Storage, but the rough edge to plan around is webhooks and events^[5]. Expect to wrap missing pieces in bespoke glue or accept human-in-the-loop checkpoints. Workable but requires scaffolding.

Verdict by Headless Index pipeline (auto)

// AI-drafted from the evidence layer. Editorial review pending.

Scores

Scorecard detail

Headless Index · 5 sub-criteria

API-first design intent10/20

scored

Supabase Storage is S3-compatible plus a REST API atop the Postgres-driven Supabase architecture. The supabase-js, supabase-py, and other client libraries provide the canonical integration. The product is shaped around the broader Supabase developer experience.

signals (5)

+AI review appliedReviewer: Editorial review on 2026-05-20
−OpenAPI specNot found across 17 probe paths
−GraphQL endpointNot discovered (5 probes; project-scoped endpoints require a real project ID)
·SDKs maintained2 (rust, swift); top by stars: supabase/supabase-swift (1234 stars)
+SDK recency2 of 2 SDK repos pushed within 30 days (most recent SDK commit: 2026-05-18)

cite (4)

openapi.probes_tried@2026-05-19
graphql.probes_tried@2026-05-19
github.sdks@2026-05-19
freshness.most_recent_sdk_commit@2026-05-19

Headless operation12/20

scored

Buckets, objects, RLS policies, and upload signatures are programmable. The supabase CLI plus Docker images plus Kubernetes give deployment paths. Self-host plus Supabase Cloud share the surface.

signals (9)

+AI review appliedReviewer: Editorial review on 2026-05-20
−API operations exposedNo OpenAPI spec; operations count unknown
·Docs pages crawled0 pages (crawler: none)
·Auth schemes documentedAuth documentation page not reached by crawler
·Setup / quickstart docsNot reached by crawler
·Billing docsNot reached by crawler
·Teams / org docsNot reached by crawler
·CLI docsNot reached by crawler
·Schema / data model docsNot reached by crawler

cite (1)

ai_review_browser.topics_found@2026-05-20

MCP & agent posture8/20

scored

Supabase has been publicly active on MCP integration. The supabase-community MCP work covers some of the storage use cases.

signals (4)

+AI review appliedReviewer: Editorial review on 2026-05-20
−Official MCP serverNone found in vendor's GitHub org or the official MCP registry
−Community MCP serversNone found
−Agent-friendly SDKsNo TypeScript/JavaScript SDK published (agents commonly run in TS/JS)

cite (1)

ai_review_browser.mcp@2026-05-20

Schema observability16/20

scored

REST documented and PostgREST-derived endpoints expose machine-readable schema. Schema discoverability is reference-class for the Supabase ecosystem.

signals (3)

+AI review appliedReviewer: Editorial review on 2026-05-20
−OpenAPINot discovered across 17 standard probe paths
−GraphQL introspectionNo GraphQL endpoint discovered (5 probes; some vendors use project-scoped endpoints that require a real project handle)

cite (1)

ai_review_browser.schema@2026-05-20

Webhooks & events4/20

scored

Supabase Storage events integrate with Database webhooks for downstream automation. The platform's broader webhook story extends naturally.

signals (2)

+AI review appliedReviewer: Editorial review on 2026-05-20
·Webhook docs pageNot reached by crawler within budget (0 pages crawled). Cannot confirm whether vendor offers webhooks.

cite (1)

ai_review_browser.pages_fetched@2026-05-20

JAIRF · 6 dimensions

JAIRF · N/A

This vendor does not publish a public OpenAPI specification. JAIRF cannot be computed. The Headless Index score and editorial verdict carry the readiness assessment.

No public OpenAPI specification discovered during collection

Band rationale:C band: scores 40-75 range

04 / Embed

Show Supabase Storage's score on your site.

Drop a live badge into your README, footer, or marketing page. It updates automatically when we re-score, and every embed is a dofollow link back here.

Get embed code

Calibration

How THI compares to external scorers

Source	Score	Measures	Last checked
Fern Agent Score	75 · C	Documentation completeness and SDK shape (~22 checks)	April 11, 2026
CLIRank Agent Friendliness	not found	CLI readiness, docs quality, and overall agent affordances	—
Cloudflare Is It Agent Ready?	blocked	Cloudflare's manual agent-readiness heuristic per vendor URL	—
Jentic Scorecard	n a	JAIRF-based scorecard requiring a public OpenAPI specification	—

THI 50 vs external median 75, delta -25

THI display 50 vs external median 75 (delta -25). Within calibration band.

Peers in Object & File Storage

Tigris DataC

Headless Index 50/100

DigitalOcean SpacesC

Headless Index 50/100

Vultr Object StorageC

Headless Index 50/100

See full Object & File Storage ranking →