Supabase stops auto-exposing new tables to the Data API on October 30

Starting October 30, 2026, Supabase will no longer automatically grant the anon, authenticated and service_role roles access to new tables in the public schema; developers must issue an explicit Postgres GRANT. Existing tables keep their current grants, and Row Level Security behaves as before.

• New public tables no longer get automatic Data API access
• Existing tables keep their current grants and RLS settings
• Each new table needs an explicit Postgres GRANT
• New projects have used this model since May, the CLI since June