# Critical: How can we use rest apis when the key is public? Or Supabase at all **URL:** \ **Category:** How do I?\ **Tags:** authentication, supabase\ **Created:** [November 29, 2023, 3:12pm UTC](https://community.weweb.io/t/critical-how-can-we-use-rest-apis-when-the-key-is-public-or-supabase-at-all/5621 "2023-11-29T15:12:01Z")\ **Posts on this page:** 1\ **Showing post:** 2
**Author:** ![Alexis](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/alexis/32/13248_2.png) [@Alexis](https://community.weweb.io/u/Alexis)\ **Post date:** [November 29, 2023, 3:13pm UTC](https://community.weweb.io/t/critical-how-can-we-use-rest-apis-when-the-key-is-public-or-supabase-at-all/5621/2 "2023-11-29T15:13:11Z")
> [@Help with Supabase RLS policies](https://community.weweb.io/t/help-with-supabase-rls-policies/4251/15): > > Supabase provide two separate keys. One is private, the other one is public. In our supabase plugin we ask for both. The private one allow to connect to your supabase as an administrator (like accessing to the supabase back office), it’s used in the editor to analyse your instance and improve the user experience, it make us able to display your table list for example. The private key is never embed inside the published website of course. The public one is used to connect to your supabase as a… --- _[View the full topic](https://community.weweb.io/t/critical-how-can-we-use-rest-apis-when-the-key-is-public-or-supabase-at-all/5621)._