rls-pilot·for vscode + cursor

Your Supabase RLS policies.
Right in your editor.

Stop alt-tabbing to Supabase Studio to check a policy. See every RLS rule in a sidebar tree inside VSCode or Cursor. Inspect, edit, export the SQL, commit it. The one paid feature generates Vitest isolation tests you'd never write by hand.

try the live preview→no signup, no install, client-side only

// or join the launch waitlist

memberships.rls.sql

organizations.rls.sql

-- memberships.rls.sql
alter table public.memberships
  enable row level security;
 
create policy "members_read_own"
  on public.memberships
  for select
  to authenticated
  using (
    user_id = auth.uid()
  );

✓0 issues · 1 policy · authenticated scope

paste your own schema →

// what it does

Every RLS policy. Every table. One sidebar.

Tree view

Tables group their policies with scope (SELECT/INSERT/UPDATE/DELETE) and role (authenticated/anon/service_role) as inline badges. Dot indicators flag issues.

▾ memberships

● members_read_own · S · auth

Inline editor

Expand a policy, see the USING and WITH CHECK expressions. Edit, save. The diff goes into your migration files — no hidden writes.

using (

auth.uid() = user_id

)

AI test scaffolds

One click generates a Vitest suite that creates two test users and asserts policy isolation. Paid tier. The one feature you would never hand-write.

describe('rls', () => {

// user A cannot see B

// questions

Things devs ask

Q. Does this send my schema anywhere?: No. The extension is local-only. The free preview at /preview runs client-side — your SQL never leaves the browser tab.
Q. What does the paid tier unlock?: AI-generated Vitest/Jest test scaffolds for your RLS policies. Two-user isolation assertions, cross-tenant leak checks, anon-visibility checks. One feature, one price: $9/mo or $79/yr.
Q. Will it ever need Supabase credentials?: The free viewer, no. The paid test-scaffold feature needs read-only access to regenerate test patterns when your schema changes — credentials stay on your machine via the VSCode secret store, never sent to our servers.
Q. When does it ship?: Extension publishes to VSCode + Cursor Marketplace within 2 weeks of hitting 50 waitlist signups. Founding members (early waitlist) get lifetime 50% off.
Q. Who is behind this?: A small, anonymous dev team that ships multi-tenant SaaS on Supabase and got tired of alt-tabbing to Studio to check an RLS policy.

// tl;dr

Paste a schema. See your policies. No signup.

open the preview→

Your Supabase RLS policies.Right in your editor.