---
title: "Introducing @supabase/server"
description: "Supabase is releasing @supabase/server in public beta, a package for authentication verification, client setup, request context, and common server-side boilerplate across backend runtimes. Supabase says an anonymous analysis of 25,000 deployed Edge Functions found developers repeatedly rebuilding setup for clients, JWT verification, claims parsing, CORS, auth context, and shared files. The package's withSupabase wrapper or createSupabaseContext function supplies a SupabaseContext containing a user-scoped client, service-role admin client, verified identity, JWT claims, auth metadata, and auth mode, while declarative modes cover user, none, secret, publishable, or combined access. It returns standard Request-to-Response handlers for Edge Functions, Vercel Functions, Cloudflare Workers, Hono, Bun, and Deno, and includes primitives for custom middleware and adapters. @supabase/server does not replace @supabase/ssr, which remains focused on cookie-based sessions, and the release invites feedback on its public-beta API and adapters."
---

# Introducing @supabase/server

[Supabase](https://yomu.fyi/company/supabase) · tomas\_pozo, kalleby\_santos, katerina\_skroumpelou, matt\_johnston · May 6, 2026

**Type:** Announcement

## Summary

Supabase is releasing @supabase/server in public beta, a package for authentication verification, client setup, request context, and common server-side boilerplate across backend runtimes. Supabase says an anonymous analysis of 25,000 deployed Edge Functions found developers repeatedly rebuilding setup for clients, JWT verification, claims parsing, CORS, auth context, and shared files. The package's withSupabase wrapper or createSupabaseContext function supplies a SupabaseContext containing a user-scoped client, service-role admin client, verified identity, JWT claims, auth metadata, and auth mode, while declarative modes cover user, none, secret, publishable, or combined access. It returns standard Request-to-Response handlers for Edge Functions, Vercel Functions, Cloudflare Workers, Hono, Bun, and Deno, and includes primitives for custom middleware and adapters. @supabase/server does not replace @supabase/ssr, which remains focused on cookie-based sessions, and the release invites feedback on its public-beta API and adapters.

## Context

An anonymous analysis of 25,000 deployed Edge Functions found developers repeatedly rebuilding the same server-side setup, including Supabase clients, JWT verification, claims parsing, CORS, auth context, environment-variable wiring, and shared utility files.

## Approach / What changed

@supabase/server provides withSupabase and createSupabaseContext, which configure request context, authentication, clients, and CORS. Its SupabaseContext includes user-scoped and admin clients, verified identity, JWT claims, auth metadata, and auth mode. The package also exposes lower-level primitives and runtime or framework adapters for custom middleware and routing.

## Takeaways

- withSupabase supports declarative auth modes for users, unauthenticated requests, secret keys, publishable keys, or combinations of user and secret authentication.
- The context exposes both an RLS-respecting user-scoped Supabase client and a service-role admin client for privileged operations.
- @supabase/server supports standard Request/Response handlers across Edge Functions, Vercel Functions, Cloudflare Workers, Bun, Deno, and Hono, while @supabase/ssr remains focused on cookie-based session management.

**Tags:** [Authentication](https://yomu.fyi/topic/authentication), [Developer Experience](https://yomu.fyi/topic/developer-experience), [Serverless](https://yomu.fyi/topic/serverless)

- Source: [Supabase](https://supabase.com/blog/introducing-supabase-server)
- Source URL: https://supabase.com/blog/introducing-supabase-server
- Ingested by Yomu: 2026-08-30T00:01:08.572Z

[Read original post](https://supabase.com/blog/introducing-supabase-server)