Skip to content

Stacksync × Supabase Miami: AI-Native OperationsOct 13Reserve your spot

New

Stacksync MCP is here. Give Claude, Cursor, and any MCP client governed access to your syncs, workflows, and connections.

Set up MCP
CRM / Database · Two-way sync platform

Attio and Supabase integration — two-way sync

Keep supported Attio and Supabase records aligned with two-way sync. Give each team access to current data while controlling which system can update each field.

Set this up from Claude or ChatGPT
  • Field mappings and sync direction under your control
  • Inspect and resolve record errors in one dashboard
Two-way sync for supported objects
stacksync.com
Attio
Supabase
Explore record coverage

Built for teams where self-serve, reliability and scale matter

Case study
Migrated from MuleSoft
Case study
Migrated from Celigo
Migrated from Heroku Connect
Migrated from Matillion
Case study
Migrated from Fivetran
Case study
Migrated from Celigo

Example workflow

Company reporting workflow

Object-specific availability and field permissions determine this mapping. Use the restrictions shown for each record type.

Starting eventA change involving Attio Companies or the proposed company table in Supabase needs a defined result in the other system.

  1. Start with Attio Companies and the proposed company table in Supabase. Use the record-matching and field-ownership rules from your mapping worksheet.

  2. Resolve parent organizations, business units, and currency references before dependent transactions.

  3. Test a normal update and one failed or repeated update in the supported direction. Keep both record IDs with the test results.

What to verifyUse two organizations with similar names and one with multiple business units. Verify that an update reaches the intended entity only.

Review records and field ownership

AI assistant

Set up Attio and Supabase from Claude or ChatGPT

Connect the Stacksync MCP server to your AI assistant, then ask for the sync in plain language. You only sign in; there is no code to write and no API key to paste.

1. Add the Stacksync MCP server

Server URL

https://mcp.stacksync.com/mcp

In Claude

  1. Open Customize → Connectors, select + Add, then Add custom connector.
  2. Name it Stacksync and enter https://mcp.stacksync.com/mcp.
  3. Select Connect, sign in to Stacksync and choose your workspace.

In ChatGPT

  1. Open Settings → Apps → Advanced settings and turn on Developer mode.
  2. Select Create app, name it Stacksync, enter https://mcp.stacksync.com/mcp and choose OAuth.
  3. Sign in to Stacksync, then enable Stacksync from the tools menu in a chat.
Set up Codex or Claude Code

Codex

codex mcp add stacksync --url https://mcp.stacksync.com/mcp
codex mcp login stacksync

Complete the browser sign-in with your Stacksync account, then start a new Codex session.

Claude Code

claude mcp add --transport http stacksync https://mcp.stacksync.com/mcp

Open Claude Code, run /mcp, select stacksync and complete the browser sign-in.

Then ask: “List my Stacksync workspaces.” Sign-in connects your assistant; it does not create a sync yet.

Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI and other assistants: setup steps in the docs.

2. Ask your assistant

Create a two-way sync between my Attio and Supabase.

Also from the same chat

You can also ask for workflows and AI agents (Genies) that use Attio and Supabase. The assistant checks what each app supports, for example:

  • “Build a workflow that messages our team in Slack when a Attio record changes.”
  • “Create a Genie that answers questions about our Supabase data in Slack.”

What happens next

  • Signs you in with your Stacksync login (OAuth). No API key is pasted into the chat.
  • Gives you a secure sign-in link for each app it connects; you open it and sign in to that app.
  • Builds the sync with your permissions in Stacksync, nothing more. Turn on Ask before every change in the MCP settings to approve each change first.

New to Stacksync? Create an account first, then sign in from your assistant.

Mapping essentials

Records and field ownership

Match records by stable IDs and assign an owner for each field. The record notes identify the coverage to check.

Download the mapping worksheet

CSV · No email required

Example record relationships between Attio and Supabase
Attio recordSupabase recordRecord matchingField ownership
CompaniesDocumented record: SupportedReporting datasetProposed company tableProposed table; choose its name and schema.Retain the source company ID and the destination customer/company ID. Separate legal entities, subsidiaries, and business units; a shared name or web domain is insufficient.Assign ownership separately for relationship details and finance-controlled billing details.
PeopleDocumented record: SupportedReporting datasetProposed contact tableProposed table; choose its name and schema.Use a stable person/contact ID and an explicit cross-system lookup. Email can change and can be shared, so treat it as a matching clue rather than a universal key.Keep consent and communication preferences under an agreed authority; a general contact update must not silently resubscribe someone.
DealsDocumented record: SupportedReporting datasetProposed deal or opportunity tableProposed table; choose its name and schema.Keep the opportunity/deal ID separate from any later order or invoice ID.The sales process owns qualification and stage changes; downstream financial records have their own state and approval rules.

Use writable fields from the connected accounts. Read values from read-only fields without writing changes back to them, and define deletion handling separately.

Why teams connect Attio and Supabase

Put your Attio and Supabase data to work

Start with the work your team needs to complete: keep records up to date, make operational data available for reporting, or move data to a new system. Choose one Attio and Supabase workflow to test, define what success looks like, and decide who handles failed updates.

  • Match Supabase auth.users to Attio People to link product accounts with CRM records.

  • Apply Row Level Security Policies to synced Attio data for per-tenant access control.

  • Build in-app views over Attio Deals using Supabase Views.

What records can you sync?

Start with the records your workflow needs. Check each system’s read and write requirements before mapping fields.

Attio

Read and write support varies by record

Record types covered in the setup guide

Record typesCoverage and requirements
  • People
  • Companies
  • Users
  • Deals
  • Workspaces
  • Custom objects (all)
Supported. Confirm field permissions and sync direction.

Read the Attio connector guide

Supabase

Read and write support varies by record

Record types covered in the setup guide

Record typesCoverage and requirements
  • Tables
See connector requirements. Confirm field permissions and sync direction.

Read the Supabase connector guide

Connection essentials

Review how each system connects, detects changes, and permits access to your records.

View setup requirements and limits
Connection requirementAttioSupabase
Integration interfaceREST APIPostgreSQL connection through the Supabase IPv4-compatible Transaction Pooler
AuthenticationGuided authorization in the Stacksync connection flow; the saved guide does not name the authentication protocol.Postgres database credentials entered in the secure Stacksync connection form
Change detectionThe saved Stacksync guide does not specify the change-detection mechanism.Postgres connector requirements apply.
Read accessAvailable for supported recordsAvailable for supported records
Write accessAvailable for supported recordsAvailable for supported records

Enterprise controls

Security and control for your integrations

Explore security controls

Compliance and data transfers

As a data company, we understand the importance of keeping your data secure. Stacksync is built with security best practices to keep your data safe at every layer, and is DPF-certified for US, EU, UK and CH data transfers.

  • SOC 2 Type II
  • ISO 27001
  • HIPAA BAA
  • GDPR
  • CCPA
  • DPF US-EU-UK-CH

SSO & SCIM

Let your users access Stacksync from your centralized user management systems. Works with Okta, Azure, Google SSO and more.

Alerts

Immediately get alerted about record syncing issues over email, Slack, PagerDuty and WhatsApp. Resolve issues from a centralized dashboard with retry and revert options.

Secure connection options

Securely connects to your systems with:

Record-level recovery

Inspect sync errors and use retry and revert controls to resolve failed updates.

Read the recovery guide

Implementation

Technical reference

Review setup, record relationships, testing, and recovery for your implementation.

Authentication, permissions and API limits

Connection requirements and limits

Attio
Integration interface
REST API
Authentication
Guided authorization in the Stacksync connection flow; the saved guide does not name the authentication protocol.
Change detection
The saved Stacksync guide does not specify the change-detection mechanism. Confirm it for the selected objects.
Read access
Available for supported records
Write access
Available for supported records
Setup requirements
  • Create an Attio connection in Stacksync and complete the guided authorization flow.
  • Check that the required objects appear in the documented catalog; confirm write-back for each intended object.
Limitations to check
  • The connector documents two-way sync, but the object table does not specify which individual fields are writable. Confirm field permissions and change detection for the intended use case.
Technical documentation

Documentation reviewed 2026-09-15. Check the linked guides for current account and record requirements.

Attio setup guide
Supabase
Integration interface
PostgreSQL connection through the Supabase IPv4-compatible Transaction Pooler
Authentication
Postgres database credentials entered in the secure Stacksync connection form; use the Supabase IPv4-compatible Transaction Pooler connection string.
Change detection
Postgres connector requirements apply. If logical replication permissions are unavailable, the documented Postgres Heroku connector provides a trigger-based alternative, including for non-Heroku databases.
Read access
Available for supported records
Write access
Available for supported records
Setup requirements
  • Connect the Supabase database through the Postgres connection flow using an IPv4-compatible Transaction Pooler connection string.
  • Each synced table needs a single-column primary key with an automatically generated default.
  • The database role needs table ownership and the documented read, write, trigger and logging-schema permissions. Confirm the appropriate Postgres connector before creating the sync.
Limitations to check
  • IPv6 connections are not supported by Stacksync; select the IPv4-compatible Supabase pooler.
  • This evidence covers Postgres tables. It does not establish support for Supabase Auth or Storage APIs, or write access to managed schemas.
  • Verify the actual tables, fields and permissions in the connected workspace before enabling either direction.
Technical documentation

Documentation reviewed 2026-10-20. Check the linked guides for current account and record requirements.

Supabase setup guide

Prepare Attio and Supabase access

Set up both accounts before testing the mapping. Use test records where available, and identify the account administrator who can approve access and help resolve setup errors.

Attio setup checklist
  • Create an Attio connection in Stacksync and complete the guided authorization flow.
  • Check that the required objects appear in the documented catalog; confirm write-back for each intended object.

Setup guides: Authorize Attio

Supabase setup checklist
  • Connect the Supabase database through the Postgres connection flow using an IPv4-compatible Transaction Pooler connection string.
  • Each synced table needs a single-column primary key with an automatically generated default.
  • The database role needs table ownership and the documented read, write, trigger and logging-schema permissions. Confirm the appropriate Postgres connector before creating the sync.

Setup guides: Authorize SupabasePostgres connectorRequired Postgres permissions

Prepare to go live

Record the fields each system can update, the first-load cutoff, both record IDs, the expected update delay, and who handles errors. Complete the tests before production before expanding to more records.

Use the Attio and Supabase planning worksheet to capture these decisions. Record the access owner in the worksheet and enter credentials only in the connection setup.

See Stacksync in action · Review current pricing

Record identity and field ownership

Keep each record tied to its source ID. Use the references below to choose field owners and preserve relationships between records.

Download the mapping worksheet · CSV, no email required

Reporting dataset

Companies / Proposed company table in Supabase (choose its name)

Plan a company dataset while preserving its source meaning.

Object-specific availability and field permissions determine this mapping. Use the restrictions shown for each record type.

Attio
Documented record · Supported
Supabase
Your database schema
Record identity
Retain the source company ID and the destination customer/company ID. Separate legal entities, subsidiaries, and business units; a shared name or web domain is insufficient.
Field ownership
Assign ownership separately for relationship details and finance-controlled billing details.

Fields to include

  • Source record ID
  • Legal or display name
  • Business-unit reference
  • Lifecycle status
Record dependencies
Resolve parent organizations, business units, and currency references before dependent transactions.
Validation
Use two organizations with similar names and one with multiple business units. Verify that an update reaches the intended entity only.
Recovery
Repair the cross-system ID relationship before retrying dependent records; do not merge companies solely to remove a sync error.

References: Attio: Companies documentation

Reporting dataset

People / Proposed contact table in Supabase (choose its name)

Plan a contact dataset while preserving its source meaning.

Object-specific availability and field permissions determine this mapping. Use the restrictions shown for each record type.

Attio
Documented record · Supported
Supabase
Your database schema
Record identity
Use a stable person/contact ID and an explicit cross-system lookup. Email can change and can be shared, so treat it as a matching clue rather than a universal key.
Field ownership
Keep consent and communication preferences under an agreed authority; a general contact update must not silently resubscribe someone.

Fields to include

  • Source person ID
  • Display name
  • Email address
  • Organization reference
  • Consent state
Record dependencies
Resolve the organization relationship and any owner or consent references required by the destination.
Validation
Test an email change, two records sharing an email, and a person associated with multiple organizations.
Recovery
Hold ambiguous matches for review and reconcile the person ID before retrying; preserve the consent decision already recorded by its owner.

References: Attio: People documentation

Reporting dataset

Deals / Proposed deal or opportunity table in Supabase (choose its name)

Plan a deal or opportunity dataset while preserving its source meaning.

Object-specific availability and field permissions determine this mapping. Use the restrictions shown for each record type.

Attio
Documented record · Supported
Supabase
Your database schema
Record identity
Keep the opportunity/deal ID separate from any later order or invoice ID.
Field ownership
The sales process owns qualification and stage changes; downstream financial records have their own state and approval rules.

Fields to include

  • Source deal ID
  • Stage
  • Amount and currency
  • Expected close date
  • Company reference
Record dependencies
Map the customer and sales pipeline before the opportunity; map stage values deliberately.
Validation
Test a reopened won deal, a stage with no destination equivalent, and an amount using a different currency.
Recovery
Suspend downstream creation for a rejected deal and review whether an order already exists before retrying.

References: Attio: Deals documentation

Reporting dataset

Users / Proposed application user or identity table in Supabase (choose its name)

Plan a application user or identity dataset while preserving its source meaning.

Object-specific availability and field permissions determine this mapping. Use the restrictions shown for each record type.

Attio
Documented record · Supported
Supabase
Your database schema
Record identity
Use the immutable user ID within the tenant or directory. Do not equate an application user with a CRM customer contact.
Field ownership
Identity and application owners approve account lifecycle and access changes; synchronize only approved attributes.

Fields to include

  • Source user ID
  • Tenant reference
  • Account status
  • Group references
Record dependencies
Resolve tenant and group references and establish a protected administrative-account policy.
Validation
Test a renamed login, disabled account, missing group, and a user existing in two tenants.
Recovery
Review access impact before retrying a lifecycle change; reconcile current identity state and retain an approval trail.

References: Attio: Users documentation

Compare integration approaches

Use Attio Companies and Supabase Proposed company table in Supabase (choose its name) for the first pilot. Verify its identity and permitted direction, then add dependent records only when the acceptance checks pass.

Stacksync managed sync

Best fit
Two-way sync for supported objects. Choose the records, writable fields, and permissions for your workflow.
Operating responsibility
Fits ongoing record synchronization when the required operations are supported. Add workflow steps for approvals or business actions that go beyond copying fields.
Before you choose
Check record matching: Retain the source company ID and the destination customer/company ID. Separate legal entities, subsidiaries, and business units; a shared name or web domain is insufficient. Verify field coverage, deletion handling, and how changes are detected.

Native vendor integration

Best fit
A vendor-built integration may fit if it supports your Attio and Supabase record types.
Operating responsibility
Can reduce setup for a supported workflow. You may need another method for records or business steps it does not cover.
Before you choose
First check whether either vendor offers this integration. If available, verify Companies / Proposed company table in Supabase (choose its name), update direction, account tier, and related-record handling.

Custom API or workflow

Best fit
Consider when Attio and Supabase need a transformation, approval, or action outside a direct record sync.
Operating responsibility
Provides control over business steps; the team owns credentials, version changes, error queues, and reconciliation.
Before you choose
Verify endpoint permissions, pagination, quotas, duplicate detection, and failure recovery.

File or scheduled snapshot

Best fit
Consider for a one-time Attio / Supabase migration or a reporting need with an explicit freshness window.
Operating responsibility
Can simplify a bounded transfer; later changes and deletion history require another extraction or a separately designed incremental process.
Before you choose
Record the extraction cutoff, source IDs, encoding, date/number formats, and reconciliation totals.

Workflow scenarios and expected results

Company reporting workflow

Object-specific availability and field permissions determine this mapping. Use the restrictions shown for each record type.

Starting event: A change to the selected Companies or Proposed company table in Supabase (choose its name) record needs a defined result in the other system.

  1. Start with Attio Companies and Supabase Proposed company table in Supabase (choose its name). Use the record-matching and field-ownership rules from your mapping worksheet.
  2. Resolve parent organizations, business units, and currency references before dependent transactions.
  3. Test a normal update and one failed or repeated update in the supported direction. Keep both record IDs with the test results.

Expected result: Use two organizations with similar names and one with multiple business units. Verify that an update reaches the intended entity only.

If it fails: Repair the cross-system ID relationship before retrying dependent records; do not merge companies solely to remove a sync error.

Contact reporting workflow

Object-specific availability and field permissions determine this mapping. Use the restrictions shown for each record type.

Starting event: A change to the selected People or Proposed contact table in Supabase (choose its name) record needs a defined result in the other system.

  1. Start with Attio People and Supabase Proposed contact table in Supabase (choose its name). Use the record-matching and field-ownership rules from your mapping worksheet.
  2. Resolve the organization relationship and any owner or consent references required by the destination.
  3. Test a normal update and one failed or repeated update in the supported direction. Keep both record IDs with the test results.

Expected result: Test an email change, two records sharing an email, and a person associated with multiple organizations.

If it fails: Hold ambiguous matches for review and reconcile the person ID before retrying; preserve the consent decision already recorded by its owner.

Deal or opportunity reporting workflow

Object-specific availability and field permissions determine this mapping. Use the restrictions shown for each record type.

Starting event: A change to the selected Deals or Proposed deal or opportunity table in Supabase (choose its name) record needs a defined result in the other system.

  1. Start with Attio Deals and Supabase Proposed deal or opportunity table in Supabase (choose its name). Use the record-matching and field-ownership rules from your mapping worksheet.
  2. Map the customer and sales pipeline before the opportunity; map stage values deliberately.
  3. Test a normal update and one failed or repeated update in the supported direction. Keep both record IDs with the test results.

Expected result: Test a reopened won deal, a stage with no destination equivalent, and an amount using a different currency.

If it fails: Suspend downstream creation for a rejected deal and review whether an order already exists before retrying.

Plan the customer lifecycle across Attio and Supabase

Validate the selected objects and operations even where connector-level direction is documented.

Starting event: A customer-facing change in Attio needs operational context in Supabase.

  1. Select the relevant People or Companies records and identify whether the downstream relationship is a person, a company, a deal, or a reporting row.
  2. Define which lifecycle transitions are informative and which should request a downstream action. Keep conversion and merge history connected to stable IDs.
  3. Choose a representative reopened deal, changed contact identity, or reassigned account to test the handoff before expanding.

Expected result: The relationship survives a lifecycle change without creating a duplicate customer or triggering an unintended business action.

If it fails: Inspect merge/conversion history and existing destination records before replaying a lifecycle transition.

Initial load and acceptance testing

Keep both record IDs with the expected and actual result. Reconcile the same filters and time window in each system.

Companies / Proposed company table in Supabase (choose its name)

Test case

Use two organizations with similar names and one with multiple business units. Verify that an update reaches the intended entity only.

Expected result

The expected company relationship is preserved with no duplicate action or unintended write.

People / Proposed contact table in Supabase (choose its name)

Test case

Test an email change, two records sharing an email, and a person associated with multiple organizations.

Expected result

The expected contact relationship is preserved with no duplicate action or unintended write.

Deals / Proposed deal or opportunity table in Supabase (choose its name)

Test case

Test a reopened won deal, a stage with no destination equivalent, and an amount using a different currency.

Expected result

The expected deal or opportunity relationship is preserved with no duplicate action or unintended write.

Users / Proposed application user or identity table in Supabase (choose its name)

Test case

Test a renamed login, disabled account, missing group, and a user existing in two tenants.

Expected result

The expected application user or identity relationship is preserved with no duplicate action or unintended write.

Direction and permissions

Test case

Check that each connected account can read and write the chosen objects. Exercise both directions with a test record before enabling production changes.

Expected result

Only an approved, supported direction and permitted fields are written.

Freshness and reconciliation

Test case

Measure source and destination times for the selected records under normal load and a burst. Reconcile IDs and values using the same filters and cutoff.

Expected result

The process meets its agreed freshness target and reconciliation has no unexplained differences.

Failed updates, retries and recovery

Start with the failed record and the destination error, then inspect the source value, field requirements, and access.

Rejected or repeated company change

Investigate

Inspect Attio Companies and Supabase Proposed company table in Supabase (choose its name), their IDs, and the destination error.

Next action

Repair the cross-system ID relationship before retrying dependent records; do not merge companies solely to remove a sync error.

Rejected or repeated contact change

Investigate

Inspect Attio People and Supabase Proposed contact table in Supabase (choose its name), their IDs, and the destination error.

Next action

Hold ambiguous matches for review and reconcile the person ID before retrying; preserve the consent decision already recorded by its owner.

Rejected or repeated deal or opportunity change

Investigate

Inspect Attio Deals and Supabase Proposed deal or opportunity table in Supabase (choose its name), their IDs, and the destination error.

Next action

Suspend downstream creation for a rejected deal and review whether an order already exists before retrying.

A record type or update is unavailable

Investigate

Check the Attio and Supabase connector guides, account permissions, and any operations marked On Request.

Next action

Ask the integration team to confirm a supported way to handle that record. Verify whether it needs connector configuration or a separate workflow step.

Source and destination disagree after a retry

Investigate

Compare current source values, destination validation, identity mappings, and any side effects already completed.

Next action

Stacksync issue retry reads the current source state. Decide the intended state before retrying or reverting; reconcile downstream effects separately.

Read the Stacksync issues dashboard guide for retry and revert behavior.

Change detection and update delivery

How updates move between Attio and Supabase

See how each system detects changes and which updates the other system can receive. Each direction has its own permissions and record requirements.

Attio Supabase Timing depends on the connected systems

Detect changesThe saved Stacksync guide does not specify the change-detection mechanism. Confirm it for the selected objects.

Apply updatesSelected writable fields update in Supabase. Its permissions and validation rules still apply; rejected records can be inspected in the Issues dashboard.

Supabase Attio Timing depends on the connected systems

Detect changesPostgres connector requirements apply. If logical replication permissions are unavailable, the documented Postgres Heroku connector provides a trigger-based alternative, including for non-Heroku databases.

Apply updatesSelected writable fields update in Attio. Its permissions and validation rules still apply; rejected records can be inspected in the Issues dashboard.

Update timing and record limits
  • Measure initial-load and ongoing-change latency separately. Source detection, selected objects, account limits, and destination validation determine the observed delay.
FAQ

Attio and Supabase integration FAQ

Further reading

Guides and resources

Next step

See your workflow in Stacksync

Walk through your Attio and Supabase records, field mappings, and requirements with an integration engineer.

See Stacksync in action Explore plans and pricing