Email Allowlist

What Is the Allowlist

The email allowlist is a database table that controls who is permitted to create an Arc account. When someone attempts to sign up, the system checks whether their email address exists in the allowlist. If it does not, sign-up is blocked at the database level.

This is the primary access control mechanism for the platform during the pilot phase.

Managing the Allowlist

Super admins can manage the allowlist from /admin/allowlist.

Adding an Email

1. Go to /admin/allowlist
2. Click Add Email
3. Enter the email address
4. Optionally add a note (e.g. "Pilot user – Acme Corp")
5. Click Add Email to save

The email is immediately active — the person can sign up as soon as they are added.

Removing an Email

Click the trash icon next to any email in the table. Removing an email from the allowlist does not delete their existing account — it only prevents new sign-ups from that address.

Who Is a Super Admin

Super admin access is set in Supabase by running:

UPDATE auth.users 
SET raw_app_meta_data = raw_app_meta_data || '{"role": "super-admin"}'::jsonb
WHERE email = 'your@email.com';

After running this, sign out and back in. The /admin panel will be accessible.

Existing Users

When the allowlist was first created, all existing users in auth.users were automatically seeded into it. No existing accounts were disrupted.