From Dev.to
Supabase anon key vs service role key: what each one opens
TL;DR. The anon key, now called the publishable key, is meant to be public. It maps to the anon or authenticated role, and your RLS policies decide what it sees. The service role key, now the secret k...