1. Get your keys

Open your project in the dashboard and copy two things:
  • The API URL, like https://api.example.com.
  • The publishable key, which starts with pb_pk_. It is safe to put in a web page. It identifies your project, and what people can do is decided by your access rules.
Never put a secret key (pb_sk_…) in a web page. It bypasses every rule. The client refuses to start with one in a browser.

2. Install

3. Create the client

Create it once and import it wherever you need it.

4. Create a table to read

In the dashboard, open Database, create a table called tasks with a title (text) and done (true or false) column, and add a row or two. Give signed-in users permission to read it.

5. Sign a user in

Sign-in later is signInWithPassword. The client stores the session in the browser and refreshes it, so the user stays signed in across page loads.

6. Read data

Because a user is signed in, the request carries their identity, and your access rules decide which rows come back.

7. Write data

Next

Auth

Passkeys, social login, two-factor.

Database

Filtering, pages and relations.

Storage

Add avatars and uploads.

Realtime

Make the list live.