Skip to content
All documentation

Server

Server, on the project bar, holds the app's backend, payments and secret keys. Enter credentials once; the assistant uses them without seeing them.

Updated Oct 19, 2026

The Server window: the Backend, Monetization and API keys and secrets tabs, the five backends, and the two ways to connect Supabase
Server holds the backend, payments and keys. Each value is entered once and stored encrypted.

Steps

  1. Click Server in the project bar.
  2. Pick a tab, Backend, Monetization or API keys & secrets, then a provider.
  3. Follow its short walkthrough, fill in the form and save. Values are stored encrypted. A wrong URL or key prefix is named as you type; Cancel closes without saving.
  4. Ask the assistant in chat to use the connection. It creates tables and functions and adds the public values to the app.

Which backend should I choose?

Most apps should start with Supabase: free to start with no card, sign-in included, and the assistant creates its tables, security rules and functions. Choose Firebase when the app already uses it, Appwrite for open source or your own server, and HTTP API when a store, site or backend already exists (WooCommerce, WordPress, Shopify or your own API). Cloudflare has no database or sign-in, so it never replaces one of them for bookings, orders or accounts.

BackendFree to start?Card needed?Sign-in built inThe assistant sets upWhere data lives
SupabaseYes; a Free project pauses after 7 days without activityNoYes: email, magic link, Google, AppleTables, row-level security, functions and their secrets (with the access token)The region you pick when creating the project
FirebaseYes: Firestore and sign-inOnly for file storage and Cloud Functions (Blaze plan)Yes: email, Google, Apple, phoneSecurity rules, the app's config, Secret Manager; you create the database and turn sign-in onThe Firestore location you pick
AppwriteYes, with usage limitsNoYes: email, OAuth providersTables, columns, indexes, storage buckets and the app's platformsThe Appwrite Cloud region you pick, or your own server
CloudflareYes: 100,000 Worker requests a dayFor R2 file storageNo; it has no database either: pair it with Supabase or Firebase for bookings, orders and accountsWorkers and KV storageCloudflare's network
Your store, site or APIWhatever its host chargesDepends on its hostThrough your store's or API's own loginReads your products, posts or endpoints while it builds; asks before changing anythingWhere your WooCommerce, WordPress, Shopify or API runs

Costs

ProviderCost to know
SupabaseFree: two projects, one paused after a week idle. Pro from $25 a month.
FirebaseFree to start. Storage, Functions and Secret Manager need Blaze.
AppwriteCloud Free plan with limits; self-hosted costs its hosting.
CloudflareWorkers free: 100,000 requests a day. R2 needs a payment method.
Your store, site or APIIts host's price. The assistant asks before it changes anything there.
RevenueCatFree until $2,500 a month of tracked revenue. Stores keep 15–30%.
AdMobFree; Google pays past its payment threshold.

Good to know

  • No backend yet? The app runs on sample data on the phone and nothing syncs. Add one when people sign in or share data.
  • Connecting is a chat turn that costs credits. A project holds one connection of each kind, except up to four HTTP APIs.
  • What people enter lands in your provider, such as Supabase's Table Editor.
  • A connected backend's row links to the provider's console, opens the Security check of its live rules (Creator and up), and lists any Supabase sign-in setting that would stop email sign-in on a phone, with Ask the assistant to fix. Connected editors with backend tools change it as you.
  • Add or replace a backend: saving the same provider replaces the connection; another provider adds a second backend, which most apps never need.
  • A replacement is checked first: Save and test asks the provider about the new key before saving it. If the provider refuses it, nothing is replaced and the previous key stays in use.
  • Public values go in the app's .env; secrets stay on the server.

Moving from sample data

  • Catalog data the app made up (services, staff, products, opening hours) becomes your starting rows in the backend, to edit there. Ask the assistant when it connects the app.
  • Sample bookings, orders or messages are never copied, and what people entered on their own phones before stays on those phones.
  • Test data: while it checks its work, the assistant may create a test user (an address ending in @example.invalid) and test rows in your real project. Its reply names them; delete them in the provider's dashboard.
  • How customers book or order, with an account or as a guest with a name and phone number, is your choice: the assistant asks before it adds sign-in.
  • You see what arrives in the provider's dashboard; a staff-only screen in the app is a later change you can ask for.

Supabase · API keys and secrets

Did this page help?

Which app will you launch first?

Start with a prompt, images, or Figma. No credit card required.

Start building Explore plans

Taking a little longer than usual…

Loading FluxNative