Unity Supabase Toolkit

At a glance · current release v1.53.0

The finished version of Supabase for Unity.

Raw Supabase bindings are free, and they are a fine start. The work that follows is the part you pay for: sessions that survive scene loads, RLS for an economy ledger, retries and pagination, AOT-safe serialization, dashboards for the season you are running. This toolkit is that work, finished and documented.

38 backend packs with RLS and C# services

724 automated tests · 720 EditMode + 4 PlayMode

0 ShipIt proxy servers between you and your backend

Install notes · v1.53.0

What you get, how long it takes, and what you need.

What you get

Typed C# services for Auth, Postgres, Realtime, Storage and Edge Functions; 38 backend SQL packs with RLS, editor tools, UI kits, offline caching and a self-hosted live-ops console.

Setup time

About 10 minutes from import to a working leaderboard, following the package quick start: connect your project, install its SQL pack and run the sample.

Unity & prerequisites

Unity 2022.3 LTS or newer. Requires TextMeshPro, a Supabase project URL and anon/publishable key. Install the matching SQL pack for each backend feature; the editor secret key is optional.

Read the Supabase setup and platform guide Browse FAQs

Capabilities

Backend pieces
that fit Unity.

Auth, typed database, realtime and storage, plus 38 backend packs for game systems. One runtime SDK with the editor windows that install, generate and inspect them.

01

Authentication

Email and password, magic link, phone OTP, anonymous sign-in that upgrades to a permanent account, OAuth PKCE deep links and MFA.

9auth methods

02

Typed database

A lambda-style query builder with generated models, full-text search and auto-paged reads. No SQL strings in gameplay code.

100%typed C# models

03

Realtime

Postgres changes, broadcast and presence with heartbeat monitoring, bounded reconnect backoff and automatic rejoin.

3channel types

04

Storage

Uploads, resumable TUS with offset recovery, image transforms, signed URLs and Texture2D loaders that survive expired sessions.

TUSresumable uploads

Process

Connect.Build.Operate.

From empty project to playable backend in three moves. Prototype against open policies, then harden the same system for production.

01Anon key ships in builds

02Service role stays in the editor

03RLS on every backend pack

01

Connect your project

Store the anon key in runtime settings, keep privileged keys in editor-local storage, and verify the connection from the setup window.

SupabaseClient.InitializeFromResources();

02

Build gameplay systems

Generate models from your schema, query with typed lambdas, and install backend packs for saves, economy, guilds and more.

.From<Player>("players")
.Where(p => p.score > 1000)
.OrderByDescending(p => p.score)

03

Operate after launch

Tune flags, publish announcements and support players from the live-ops console — without patching a build.

if (flags.IsEnabled("double_xp"))
ApplyDoubleXp();

Game systems

Your project,
your data.

Your Unity build talks directly to your Supabase project — Postgres, Auth, Realtime, Storage and Edge Functions. ShipIt never sees your credentials or your players' rows.

38 game-ready backend packs, installed as idempotent SQL

Leaderboards, cloud saves, wallets, trading, guilds, quests, battle pass, moderation and more — each with RLS policies and C# services.

Unity buildanon key only

Your Supabase projectpostgres · auth · realtime

Playersyour data, your rules

100% full C# source — runtime and editor, no DLLs

0 ShipIt servers in the request path

Idempotent SQL

Safe to re-run on existing projects without duplicating work.

RLS everywhere

Row Level Security ships with every pack, not as an afterthought.

Editor secrets

Service-role keys never leave machine-local editor storage.

Offline cache

Reads keep working offline; mutations replay on reconnect.

Package v1.53.0

Real numbers,
not promises.

v1.53.0 release suite · Unity 6000.3.11f1 and 2022.3.62f1

38

Backend packs

SQL + C# services included

724

Automated tests passing

720 EditMode on both editors + 4 PlayMode at Unity 6.3

15

Game-pattern guides

auth → experimentation

Auth · Database · Realtime · Storage · Edge Functions · Queues · Cron · Search — included in one package

Integrations

Works where
you build.

Unity 2022.3 LTS and Unity 6 across Mono, IL2CPP and WebGL. Render-pipeline agnostic, with TextMeshPro-ready samples you can restyle.

EngineUnity 2022.3 LTS

EngineUnity 6

RuntimeIL2CPP

PlatformWebGL

RenderBuilt-in · URP · HDRP

SamplesTextMeshPro UI

DatabasePostgres

SecurityRow Level Security

ComputeEdge Functions

InfraQueues · pgmq

InfraJobs · pg_cron

DeploySelf-hosted Supabase

38backend packs

RLSon every pack

0ShipIt proxies

Read the compatibility notes

Security

Connected,
never privileged.

The anon key ships in builds. Everything privileged stays in editor and server contexts — Postgres functions, Edge Functions and admin tooling.

Active protection

0player rows passing through ShipIt servers

Your game talks to your project. There is no ShipIt account, no ShipIt server and no separate backend deployment to trust.

RLS policies Editor-local secrets Build guards Audit ledger

Editor secrets

Keys stay local

Service-role keys live in machine-local editor preferences, never in runtime assets.

Build guards

Privileged config blocked

Configuration checks stop privileged keys from shipping in player builds.

Server validation

Clients stay untrusted

Economy, scores and entitlements change through trusted functions, not client writes.

RLS everywhere

Policies by default

Every backend pack enables Row Level Security with explicit policies.

Honest boundary

What it does not do

It does not host your game backend for you.
It does not bypass Supabase Row Level Security.
It does not treat client-reported economy or scores as trusted.
It does not send player data through ShipIt servers.

Unity-native API

Readable C#.
No proxy SDK.

Call your Supabase project directly with async APIs, typed models, cancellation support and errors you can act on.

Typed query builder. Lambda filters with generated models — no SQL strings in gameplay code.

Async with cancellation. Every call supports cancellation tokens and reports actionable server errors.

IL2CPP-safe. No Expression.Compile in query paths, linker protection included, WebGL paths covered.

Token streaming. Proxy AI providers through your own Edge Function with SSE or raw chunk streams.

Read the API guide

PlayerBackend.cs

await SupabaseClient.Instance.Auth
    .SignInAnonymouslyAsync(captchaToken);

var profile = await SupabaseClient.Instance.Database
    .From<PlayerProfile>("player_profiles")
    .Where(p => p.id == playerId)
    .MaybeSingleAsync();

var channel = SupabaseClient.Instance.Realtime
    .FromTable("player_profiles");

channel.OnUpdate<PlayerProfile>(Render);
await channel.SubscribeAsync();

FAQ

Before you connect your backend.

Do I need my own Supabase project?

Yes. The toolkit connects directly to your project; ShipIt does not proxy requests or host your player data.

Which key goes in the game?

The anon or publishable key is intended for client use, with Row Level Security protecting data. A secret or legacy service-role key is optional for editor tools and must never ship in a player build.

Do I need to install database tables myself?

Install the matching SQL pack for each feature you use. Packs create the schema and Row Level Security policies that the C# services expect.

Does this replace multiplayer netcode?

No. It handles backend systems such as accounts, saves, progression and live-ops. Use your chosen netcode package for authoritative match simulation and player movement.

Build on infrastructure you own

Ready to ship
your backend?

Review the documentation, install the packs, and operate from day one. The listing is live on the Unity Asset Store, and updates are free for existing buyers.

View on Unity Asset Store Open documentation Email support

shipit.unity@gmail.com · v1.53.0 · Unity 2022.3 LTS + Unity 6