Code route · login + CRUD + Stripe checkout + email receipt
Cursor + Next.js + Supabase + Vercel + Stripe
Log in, save data, take a payment, send a receipt. Estimated from docs and public pricing; a real test build is coming soon.
EstimatedPrices checked 19 Oct 2026
At 1k usersNot measured
1 layer isn't measured yet
- BuilderEstimatedNot yet measuredCursorAn AI agent writes the code; you own the repo.
- FrontendEstimatedUS$0Next.jsOpen-source React framework.
- DatabaseEstimatedUS$0SupabasePostgres plus auth in one project.
- AuthEstimatedincl. aboveSupabase
- PaymentsEstimatedUS$0StripeCheckout with webhooks.
- EmailEstimatedUS$20ResendSimple API for receipts.
- HostingEstimatedUS$20VercelFirst-party Next.js hosting.
- AnalyticsEstimatedUS$0PostHogFree monthly allowance.
Monthly bill
| Layer | 100 | 1k | 10k |
|---|---|---|---|
| Cursor | Not yet measured | Not yet measured | Not yet measured |
| Next.js | US$0 | US$0 | US$0 |
| Supabase | US$0 | US$0 | US$25 |
| Vercel | US$20 | US$20 | US$20 |
| Stripe | US$0 | US$0 | US$0 |
| Resend | US$0 | US$20 | US$20 |
| PostHog | US$0 | US$0 | Not yet measured |
| Total / mo | Not measured | Not measured | Not measured |
Estimated, in US$, before Stripe fees per sale. FX: 1 AUD = 0.696 USD, checked 19 Oct 2026.100 users: 1 layer isn't measured yet.1,000 users: 1 layer isn't measured yet.10,000 users: 2 layers aren't measured yet.
Security checklist
Not tested yetCheck these before you launch. Our test results will show here once the build is done.
- Database rules stop users seeing each other’s dataTo check
- No secret keys in the browserTo check
- Stripe webhook is verifiedTo check
- Login attempts are rate-limitedTo check
- Private pages check who’s logged inTo check
Your starter prompt
A draft prompt. It has not been used in a test build.
Prompt55 words
Create a Next.js App Router project with Supabase auth (email + Google), a Postgres table of user-owned items with RLS policies, CRUD pages, a Stripe Checkout route with a verified webhook, and a Resend email receipt. Read all secrets from environment variables; never expose service keys to the client. Add rate limiting to API routes.
Swap a layer
Email me this stack
This would send only the stack, prices and prompt. In this preview nothing is sent or stored.
Affiliate links, if any, never change the pick. Disclosure