Built for internal tools

The admin panel nobody had time to build.

Describe the screen your team keeps asking for. Master builds it on your data, with sign-in, roles and permissions that hold up to review.

On your data

A working ops screen, not a spreadsheet export.

Connect the database and ask for the view your team needs. Filters, bulk actions and permissions come with it.

ops.yourcompany.com/refunds
Refund requests
Order
Customer
Amount
State
#4821
K. Novak
€128.00
Pending
#4818
T. Weber
€42.50
Approved
#4802
M. Silva
€310.00
Escalated
#4795
A. Dubois
€19.90
Approved
Access control

Permissions in the database, where they belong.

Roles live in their own table and access is enforced by row-level security — so a hidden button is never the only thing standing between a user and your data.

  • Roles are checked server-side with a security-definer function.
  • Every table gets explicit policies, never a blanket allow.
  • Secrets and API keys stay in encrypted storage, out of the repo.
supabase/migrations/policies.sql
create policy "agents read own queue"
on public.refund_requests
for select to authenticated
using (
  assigned_to = auth.uid()
  or public.has_role(auth.uid(), 'admin')
);
Capabilities

The unglamorous features that make a tool usable.

Tables that edit themselves

Sortable, filterable, paginated views over your Postgres data — with inline editing where it makes sense.

Accounts and roles

Email or Google sign-in plus a real role table, so admin routes are actually protected.

Row-level security

Access rules live in the database, not in a component that someone can bypass.

Import and export

CSV in, CSV out, bulk actions and audit-friendly change logs.

Notifications

Trigger emails on approval, rejection or threshold breaches without a separate service.

Scheduled jobs

Nightly syncs, reminders and clean-up tasks running on the server, not on someone's laptop.

Why now

The backlog answer, and the Master answer.

Waiting on the backlog
With Master
Requesting a tool
Ticket, triage, next quarter
A prompt from the person who needs it
Small change
Another ticket
A sentence in chat
Access rules
Often UI-only
Enforced in Postgres
Ownership
Team that has no time
Ops team, with engineering review

Bring your own APIs.

Server functions let a tool call your internal services, sign requests with stored secrets and run scheduled jobs — without exposing anything to the browser.
Server functions docs

Frequently asked.

Can it use our existing database?+

Yes. Connect your Postgres instance, or start with the built-in Cloud database and migrate later — the schema is plain SQL.

How do we keep it secure?+

Access rules are enforced in the database with row-level security, roles live in a dedicated table, and secrets are stored outside the code.

Who can use the tool once it is built?+

Anyone you invite. Sign-in, roles and per-role screens are part of the build, not an afterthought.

Is it only for simple CRUD?+

No. Approvals, multi-step workflows, scheduled jobs and integrations with your APIs are all normal requests.

Give the team the screen they keep asking for.

Build it today, review it tomorrow.