AivahHelp CenterGo to Aivah

Connect and publish an Aivah Code application

Connect supported backend services, protect private configuration, and publish a reviewed application.

Who this is forAivah Code project owners preparing a reviewed application for delivery

You will achieveConnect the required backend, verify the production path, and publish or update the application deliberately.

Before you beginReview the requirements before changing anything.

Last reviewed 22 July 2026Owner: Product EducationCurrent guide
On this page
  1. Before you begin
  2. Steps
  3. 1. Open Database
  4. 2. Connect the required service
  5. 3. Keep secrets out of messages and source
  6. 4. Test with non-production data
  7. 5. Review the delivery state
  8. 6. Publish deliberately
  9. Expected result
  10. Status meanings
  11. Usage credit impact
  12. Information stored or shared
  13. Limits and permanent actions
  14. Common problems and recovery
  15. Next step

Use this guide after the interface and primary workflow have been reviewed. Connect only the services the application needs and verify what data each service will receive.

Before you begin

  • Decide whether the product needs persistent data, authentication, server functions, or file storage.
  • Create the supported backend project in the account your team controls.
  • Prepare non-production test data.
  • Confirm who can approve publication and who owns rollback.

Steps

1. Open Database

Choose Database in the project toolbar. The current workspace presents supported paths including Supabase and Neon, along with areas for tables, authentication, server functions, secrets, user management, and file storage.

Current Aivah Code backend database connection workspace
Connect a supported backend from the current Aivah Code database workspace.

2. Connect the required service

Choose the supported provider and add the connection value in the field provided. Use a project created for this application. Do not reuse production credentials from an unrelated system.

3. Keep secrets out of messages and source

Store private configuration in the supported secrets or environment controls. Never include a password, private key, database password, or unrestricted token in a prompt, screenshot, public repository, or client-side file.

4. Test with non-production data

Verify sign-in, record creation, updates, file handling, errors, and permission boundaries in Preview. Confirm that one user cannot read or change another user's information unless the product explicitly requires it.

5. Review the delivery state

Before publishing, check the final preview, page titles, navigation, mobile behavior, forms, error states, and any public data. Confirm that analytics, consent, and privacy notices match the data actually collected.

6. Publish deliberately

Choose Publish only after review. Record the published address and test it in a signed-out browser. Later changes may use Update. If Unpublish is available, understand that it removes public access but does not necessarily delete project data or connected service data.

Expected result

The reviewed application is available at its published address, required backend features work with appropriate permissions, and private configuration is not exposed in the public interface or source.

Status meanings

Disconnected means no backend is available to the project. Connected means a service is configured but still needs testing. Published means a public delivery is available. Unpublished means public access is removed; connected data can still remain with its provider.

Usage credit impact

Publishing itself has no fixed charge documented here. Model revisions, builds, and connected services can have separate usage or provider costs. Review the notices in Aivah and the connected account.

Information stored or shared

Publishing can make the interface publicly reachable. A connected backend can store account, form, file, and application data according to its configuration. Review both Aivah Code and the connected provider before collecting personal or confidential information.

Limits and permanent actions

Provider choices and delivery controls can vary by project. Deleting provider data, rotating credentials, or removing a production project can be permanent. Unpublishing does not guarantee deletion of connected data.

Common problems and recovery

  • The backend will not connect: confirm the provider, connection value, project status, and network restrictions.
  • The preview works but the published app fails: check production configuration and published environment values.
  • A secret appears in source or chat: rotate it immediately, remove the exposed value, and check access logs.
  • A published change causes a regression: stop further changes, capture the failing workflow, and use the team's rollback or unpublish process.

Next step

Monitor the live product and keep its dependencies, permissions, and privacy information current.