Lovable MCP Server: Tools, Setup and Security

The Lovable MCP server lets an AI app create, iterate on, inspect and deploy Lovable projects. You describe what to build, Lovable builds it, and your agent can read the code, run database queries and publish the app. Lovable hosts it at https://mcp.lovable.dev.

Checked against: Lovable's MCP server docs and Claude's Lovable listing on 2 November 2026. eSEOspace did not install or test this server.

At a glance

What it can do

Lovable's docs group the tools like this:

• Identity and workspaces: get_me, list_workspaces and get_workspace.
• Projects: list_projects, get_project, create_project, deploy_project, remix_project, visibility settings, folders, templates and design systems.
• Agent interaction: send_message, get_message and list_messages. send_message supports plan_mode to discuss before building.
• Instructions and skills: read and replace workspace or project knowledge, and manage workspace skills.
• Code inspection: get_diff, list_files, read_file and list_edits.
• Database: get_database_status, enable_database and query_database.
• Connectors and analytics: list or remove connectors, and pull visit and page-view data for published apps.

Claude's listing shows 35 tools. A Claude-only tool, import-claude-design-from-url, turns a Claude design into a new Lovable project.

How to connect it

Claude. Click the + sign, choose Connectors, then Browse Connectors, search for Lovable and connect. Lovable says this works in Claude Desktop and on claude.ai.

Claude Code. Lovable documents:

claude mcp add --transport http lovable "https://mcp.lovable.dev"

You can also install the plugin with /plugin install lovable@claude-plugins-official, which adds slash commands. Claude Code opens a browser window to log in on the first tool call.

VS Code. Add this to your MCP configuration:

{
  "servers": {
    "lovable": {
      "type": "http",
      "url": "https://mcp.lovable.dev"
    }
  }
}

Lovable also documents ChatGPT and Cursor. Local clients that sign in through localhost register automatically. Hosted clients need Lovable to approve their callback address first. Our MCP config generator can format configs for other clients.

Security notes

Lovable's own warning box is worth reading in full. Its main points:

1. Wide reach. "Access can span projects and workspaces." The connection is not limited to one project.
2. Real effects. "Tool calls use real credits and edit real projects."
3. Public deploys. On Free and Pro plans, a deployed app is reachable by anyone with the link unless website access is set to Invite only.
4. Database power. query_database can read, write and change schema.

Lovable adds some guardrails. deploy_project refuses to publish while certain critical security findings are open, returning a security_critical_findings error. Workspaces with Enforce SSO force a fresh login when the session window ends. Enterprise admins control third-party MCP access under Workspace settings, Security.

Keep approval prompts on for deploy_project, query_database and the set_*_knowledge tools, which replace content entirely. The MCP project's security best practices cover scope minimization. See excessive permissions and the MCP Security Center.

Alternatives

• Replit MCP server for building and publishing Replit Apps.
• v0 MCP server for Vercel's app builder.
• Supabase MCP server if your Lovable app uses your own Supabase project.

Next step

Connect Lovable, then ask your agent to "list my Lovable workspaces" before you create anything. Compare app builders in our best AI coding agents with MCP list, or browse the MCP server directory.

Frequently asked questions