For engineers

Exactly how it's built.

The rest of the site keeps things simple on purpose. This page doesn't: the architecture, the stack, and the reasoning behind every decision, in full technical detail.

~/my-app

$ npx agentlink-sh@latest my-app

Project scaffolded

Database schema applied

RLS + schema isolation enforced

Resend + queue worker wired

Agent loaded: 6 skills

MCP server connected

ready: true

// THE REASONING

The Bets Behind Every Decision

Everything below (the architecture, the stack) follows from five bets about what actually works when an AI agent is doing the building.

ARCHITECTURE

How It's Built

Everything runs on Supabase: one platform, nothing extra to manage.

RPC-First

Business logic lives in Postgres functions, exposed as RPCs. One backend serves every frontend.

Edge Functions for Externals

Edge Functions handle webhooks, third-party APIs, and anything outside your database.

Native MCP Server

Every project ships with a typed MCP server out of the box. Any MCP-compatible AI tool can query, create, and automate against your app directly.

Cron + Queues in Postgres

Background work runs on pg_cron and pgmq. No external job runners.

RLS + Schema Isolation

Row-Level Security on every table plus schema isolation to keep application logic out of the public schema. Your security boundary, tenant isolation, and access control, all enforced by the database itself.

Local Development Ready

One command scaffolds your entire local environment: Supabase, schemas, queues, MCP, and agent tooling. What runs on your machine runs in production.

THE STACK

Every layer, explicit.

Here's exactly what ships, and how it's wired.

Security best practices

Schema isolation with a dedicated api schema exposed to clients and RLS enabled on every table.

Multi-tenancy built in

Tenants, memberships, and invitations tables with RLS policies and helper functions.

Background jobs

pgmq and cron pre-enabled with an internal-queue-worker edge function ready for async work.

Transactional email with Resend

Customizable react-email templates and an internal-send-auth-email edge function with auth hooks wired up from day one.

Frontend pre-wired

React + TanStack Start (SPA) frontend with a typed Supabase client and auth flows connected.

Agent fully loaded

Plugin installed for Cursor or Claude Code with all six skills, MCP server connected, destructive commands blocked.

Ready for production grade apps.

Your agents will choose Supabase. Make sure they use it right.