Build a SaaS with a coding agent.

When Stripe subscriptions fit a SaaS, when a one-time payment does, and what each changes in Checkout, webhooks and your app's access checks.

The anon key is safe in a browser; the service role key bypasses RLS and stays on your server. Where to find each, and the new publishable and secret keys.

Add the Supabase MCP server to Claude Code in one command, sign in with OAuth, scope it to one project in read-only mode, and keep production safe.

Supabase pricing as of October 2026: Free plan limits, what Pro and Team cost, overage rates, and real monthly bills for a SaaS at 100 to 10,000 users.

What Supabase RLS is, how to enable or disable it, why the secret key bypasses it, and how to write and test row level security for a multi-tenant app.

Supabase vs Firebase for a SaaS as of October 2026: Postgres or Firestore, RLS or Security Rules, pricing, lock-in, and which suits multi-tenant B2B.

What a coding agent needs from a codebase, how shipanysaas provides it, and a worked example of adding a feature without weakening the security rules.

A public demo of a multi-tenant app breaks in predictable ways. These are the problems, and how the kit's demo mode handles each one in the database, not just the UI.

Multi-tenant apps leak data when one query forgets a filter. Here is how shipanysaas puts the rule in the database instead, how it is tested, and where its limits are.