Lovable
by Lovable
Create, build, inspect and deploy Lovable apps from your AI assistant. 35 tools, OAuth sign-in, and a deploy_project tool that publishes a live site to the public internet.
Verified connector
Listed by Anthropic as a partner connector in its Connectors Directory.
Connection checked by Agentman on .
Anthropic states this reflects the level of review a connector received, not a security audit.
Connect Lovable via MCP
https://mcp.lovable.devWorks in any MCP-compatible client. In Agentman Studio it is one click — no config file to edit.
Lovable Tools & Capabilities (35)
Tool names from Anthropic's directory listing. This server requires sign-in, so we could not read tool descriptions or parameter schemas.
Limits
- This connector publishes to the public internet.
deploy_projectputs a real site on a reallovable.appURL. On Free and Pro plans Lovable states website access cannot be restricted, so anyone with the link can reach it. Restricting the audience requires Business or Enterprise. - The connection is account-wide, not project-scoped. Lovable's own warning states the connected client can list, read and edit every project you have access to. There is no per-project narrowing at the consent screen, and no scope in the descriptor expresses one.
query_databaseruns SQL with your full database permissions. Lovable names reads, writes and schema changes. Nothing in the published surface limits it toSELECT.- Two tools spend credits, and the guard rail is a notification, not a cap.
create_projectandsend_messagebill. The credit check-in pauses a run at a threshold — 20 credits by default — but Lovable calls it a notification threshold that a run can overshoot, and the feature is in beta. Auto top-up will buy more credits automatically if you have enabled it. - A Free workspace's build allowance is small. Lovable grants 5 daily build credits, up to 30 per month, so a handful of
send_messagecalls can exhaust a day. - The directory's 35 names omit at least five write-capable tools the vendor documents, including
delete_workspace_skill, which Lovable describes as not undoable except by recreating the skill. Three published lists give 35, 41 and 33 as of the dates above, and their union is 48. Treat no single count as the surface. - Only five client families can complete the OAuth flow. Lovable names ChatGPT, Claude, Claude Code, Cursor and VS Code, and states other MCP clients cannot authenticate at this time. A gateway outside that list will not connect regardless of configuration.
- The refresh-token scope is
offline, notoffline_access. A client hardcoding the conventional spelling gets no refresh token and will re-authenticate unexpectedly. workspaces:createis grantable but has no tool behind it in any of the three lists we collected. Grant narrowly; a scope on a consent screen is not evidence of a matching capability.- Lovable's own pages disagree on the server's status. The MCP page presents general availability; the Lovable API overview calls it a Research Preview. Both were read on 2026-08-18.
- Deleting a Lovable project is permanent. Lovable's remix documentation states there is no way to recover or remix a deleted project afterwards. No delete-project tool appears in any of the three lists, but the irreversibility bounds what a remix-based backup can save you from.
- We read no schemas or annotations. Our checks were anonymous protocol requests that returned an authentication challenge, plus reads of public well-known documents and public documentation. We never signed in, never called a tool, never created a project and never deployed anything.
Frequently asked questions
Which plans can use the Lovable MCP server?
All plans. Lovable's MCP documentation states the server is available on every plan, including Free. On Enterprise workspaces a workspace admin or owner must first enable Third-party MCP clients under Settings, Security, Privacy and security. Lovable's settings reference records that control as disabled by default on Enterprise and enabled by default on Free, Pro and Business.
Can I connect to the Lovable MCP server with an API key?
No. Lovable's MCP documentation states that API key authentication is not currently available and OAuth is the only supported way to connect. We confirmed the posture on 2026-08-18: an anonymous request to the endpoint returned HTTP 401 with a Bearer challenge pointing at the server's OAuth resource descriptor, so nothing connects without a browser sign-in.
Does using the Lovable MCP server consume my Lovable credits?
Yes, for two tools. Lovable's MCP documentation states standard credits apply to create_project and send_message calls, and that other tools are free. Lovable's credits reference prices Plan mode at 1 credit per message and Build mode by complexity, with illustrative examples from 0.50 credits for a styling change to 2.00 for a landing page.
What does deploy_project actually publish, and where?
It deploys a snapshot of the project to a live URL on lovable.app and returns that URL. Lovable's publishing documentation states each publish deploys only the current version, that later changes are not pushed automatically, and that a published site stays live indefinitely with no expiry and no automatic unpublishing for inactivity.
Can an agent make my Lovable app public without me realising?
On Free and Pro plans, yes. Lovable's publishing documentation states website access cannot be restricted on those plans, so anyone with the link can visit a published app. Business and Enterprise workspaces can set a default website access policy and restrict the audience to workspace members, groups or named people.
Is publishing a Lovable app reversible?
Yes. Lovable documents three ways to unpublish: Project settings, the Publish dialog overflow menu, or selecting several projects on the dashboard. Once unpublished the live URL becomes inaccessible and the project remains in the editor. Unpublishing is not among the 35 directory tool names, so it is a UI action rather than an agent one.
What can the Lovable MCP server see once I connect it?
Every project you can reach. Lovable's own warning states the connected client has the same account access you do, so it can list, read and edit every project you have access to, and that scope is your full account rather than one project. Lovable also states the server inherits your user permissions exactly, with no additional surface area.
Can the Lovable connector run SQL against my database?
Yes, with full permissions. Lovable's documentation states query_database runs SQL with your full database permissions covering reads, writes and schema changes. The vendor's machine-readable tool reference lists SELECT, INSERT, UPDATE, DELETE and DDL as supported, so an agent can alter or drop tables in a project's Cloud database.
Sources
- Live OAuth posture check against
https://mcp.lovable.dev— an anonymousinitializereturns - Lovable authorization server metadata (HTTP 200, retrieved 2026-08-18). Issuer
https://lovable.dev/oauth, ten scopes includingworkspaces:createwhich the resource descriptor omits,code_challenge_methods_supported: ["S256"], aregistration_endpoint, andclient_id_metadata_document_supported.mcp.lovable.dev/.well-known/oauth-authorization-server302s here. The OpenID configuration atlovable.dev/.well-known/openid-configurationreturns HTTP 200 with the identical scope list. · retrieved 2026-08-18 - Lovable MCP server documentation (HTTP 200, retrieved 2026-08-18, read as Markdown via the
.mdsuffix the host advertises). Source for the 41-tool reference, prerequisites, the supported-client list, the "same account access you do" warning, the credit rule, the plan gate, troubleshooting and the vendor FAQ. · retrieved 2026-08-18 - Lovable machine-readable MCP skill (HTTP 200 over unauthenticated GET, retrieved 2026-08-18). A 33-tool reference with parameter names, served from the same host that 401s every MCP POST. Source for the
query_databaseSQL statement types and the retry-deduplication behaviour. · retrieved 2026-08-18 - Lovable credits and usage (HTTP 200, retrieved 2026-08-18). Source for Plan mode at 1 credit, the four Build mode examples, the 5-per-day and 30-per-month Free allowance, the 20-credit check-in default and its 20–100,000 range, and auto top-up. · retrieved 2026-08-18
- Lovable publish documentation (HTTP 200, retrieved 2026-08-18). Source for what
deploy_projectpublishes, the snapshot behaviour, the Free and Pro public-access limit, the Business and Enterprise audience picker, the three unpublish routes and the no-expiry statement. · retrieved 2026-08-18 - Lovable remix documentation (HTTP 200, retrieved 2026-08-18). Source for what a remix carries over, the Public remixing default, and the permanence of project deletion. · retrieved 2026-08-18
- Lovable privacy and security settings (HTTP 200, retrieved 2026-08-18). Source for the Third-party MCP clients control and its per-plan defaults. · retrieved 2026-08-18
- Lovable API overview (HTTP 200, retrieved 2026-08-18). Source for the "MCP Server (Research Preview)" framing that contradicts the MCP page. · retrieved 2026-08-18
- Lovable's official MCP repository (README retrieved 2026-08-18). Source for the OAuth 2.1 statement, the bare-host endpoint and the public client ID requirement for clients other than Claude, Claude Code and ChatGPT. · retrieved 2026-08-18
- Lovable documentation index (HTTP 200, retrieved 2026-08-18).
docs.lovable.dev/robots.txtcarriesContent-Signal: ai-train=yes, search=yes, ai-input=yes— synthesis into AI-generated output is expressly permitted by the publisher.lovable.dev/robots.txtallows the site with a named allowance for ClaudeBot and disallows/projects/for AI crawlers. · retrieved 2026-08-18 - Sibling scope-spelling comparison — Agentman connector pages for Teamtailor, Close, MuleSoft, Rally, Smartling, Aleph and Roboflow, each recording that server's own OAuth descriptor with
offline_access(probed 2026-08-17 and 2026-08-18) · retrieved 2026-08-17 - Anthropic Connectors Directory entry, including the 35 tool names, transport and tier (from the committed directory snapshot of 2026-08-16) · retrieved 2026-08-16
- Lovable support — · Privacy
Use in Agentman
Connect once and your agents call these tools on their own — on a schedule, in a workflow, with nobody at the keyboard.
Open in Agentman StudioServer Info
- Category
- Developer Tools
- Developer
- Lovable
- Tools
- 35
- Domain
- mcp.lovable.dev
Using Claude Desktop or another MCP client? Setup docs — the connection URL above works anywhere.