@prefix skos: <http://www.w3.org/2004/02/skos/core#> .
@prefix dcterms: <http://purl.org/dc/terms/> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .
@prefix foaf: <http://xmlns.com/foaf/0.1/> .
@prefix mcr: <https://registry.apicrafter.io/vocab#> .
@prefix dt: <https://registry.apicrafter.io/datatype/> .
@prefix cat: <https://registry.apicrafter.io/category/> .
@prefix country: <https://registry.apicrafter.io/country/> .
@prefix tool: <https://registry.apicrafter.io/tool/> .

dt:supabase_secret_key a skos:Concept ;
    skos:inScheme <https://registry.apicrafter.io/> ;
    skos:notation "supabase_secret_key" ;
    skos:prefLabel "Supabase secret key"@en ;
    skos:definition "Secret API key of a Supabase project, which bypasses row level security and must stay on the server. Supabase documents that secret keys start with sb_secret_ and are short strings, not JWTs; the legacy service_role key is a JWT and is the datatype jwt. The vendor does not document the length or the characters after the prefix; the regexp accepts letters and digits."@en ;
    skos:broader dt:api_key ;
    mcr:status "draft" ;
    mcr:isPII false ;
    mcr:classification "identifier" ;
    mcr:regexp "^sb_secret_[A-Za-z0-9_-]+$" ;
    rdfs:seeAlso <https://supabase.com/docs/guides/api/api-keys> .
