https://shipreadyai.dev/learn/findings/o8-schema-not-readable

> Discover all available pages from the documentation index at https://shipreadyai.dev/llms.txt

# The table list is not readable without signing in

An anonymous request could not list the tables behind the app.

## Why AI-built apps get this

AI builders create tables in seconds and leave the access rules for later. The browser key is published in your app by design, so a table with no rule behind it answers anyone who copies that key. This is CVE-2025-48757 across 170 apps, and the Moltbook exposure, in one sentence.

## Evidence line

table profiles answered the published browser key with 42 rows

## The fix

Nothing to change here.

## Prompt

Keep the table list closed to anonymous readers.