Quickstart

Connect a Postgres or Supabase database in about two minutes. The connection is read-only, so Tabkeel can never write, drop or change anything.

1Create a read-only role

Run this in your database. Swap your_db and the password for your own.

-- 1. Create a read-only role for Tabkeel
CREATE ROLE tabkeel LOGIN PASSWORD 'a-strong-password';

GRANT CONNECT ON DATABASE your_db TO tabkeel;
GRANT USAGE ON SCHEMA public TO tabkeel;
GRANT SELECT ON ALL TABLES IN SCHEMA public TO tabkeel;

-- Cover tables created later, too
ALTER DEFAULT PRIVILEGES IN SCHEMA public
  GRANT SELECT ON TABLES TO tabkeel;

On Supabase, run it in the SQL Editor. You can scope the grants to specific schemas or tables if you only want part of the database watched.

2Grab the connection string

Use the new role to build a connection string:

postgresql://tabkeel:a-strong-password@HOST:5432/your_db

On Supabase it is under Project Settings → Database. Use the role you just created, not the default postgres user.

3Paste it into Tabkeel

Create your workspace, add the connection, and Tabkeel discovers your tables and starts learning each one's baseline. Alerts begin once a table has about ten readings of history, so the baseline is real instead of noisy.

Connect your database

Want to revoke access later? DROP ROLE tabkeel; in your database. Nothing in Tabkeel can touch your data once the role is gone.