Replit MCP Server: Tools, Setup and Security

The Replit MCP server lets an AI app create, find, update and publish Replit Apps. Your request goes to Replit Agent, which builds the app and returns a link. Replit runs it as a native connector in Claude, ChatGPT and Slack, and as a direct server for any MCP client.

Checked against: Replit's MCP server docs, Replit in Claude and Claude's Replit listing on 2 November 2026. eSEOspace did not install or test this server.

At a glance

What it can do

Replit's docs list these tools:

• create_app_from_prompt starts a new app from a description and an app_stack. Stacks include react_website, mobile_app, design, slides, data_visualization, 3d_game, document and spreadsheet. Set sourceReplId to start from a private copy of an existing app.
• search_apps, list_apps and resolve_app_by_name find apps by keyword, URL, date or exact title.
• ask_question asks Agent about an app without changing it.
• update_app_using_prompt starts an Agent update on an existing app.
• publish_app publishes an app or republishes its latest changes.
• get_publish_status checks whether an app is published and returns its public URL.

Claude's listing shows create_app_from_prompt, resolve_app_by_name, update_app_using_prompt, ask_question and import-claude-design-from-url. That last tool sends a design made in Claude's design canvas to Replit, where it opens as a runnable app.

How to connect it

Claude, ChatGPT or Slack. Use the native connector. In Claude, open the connectors directory, find Replit and connect. Claude then walks you through Replit sign-in.

Claude Code. Replit documents:

claude mcp add replit https://mcp.replit.com/server/mcp --transport http

Restart Claude Code, run /mcp, select replit and choose Authenticate. Pick the Replit workspace to connect, then select Allow.

Codex. Open Settings, Plugins, MCPs, and add a custom Streamable HTTP server with the URL above. Replit says, "Do not add a bearer token or custom headers." Authenticate from the MCP list.

Other clients. Add the URL to any client that supports Streamable HTTP and OAuth. Replit adds, "Do not create a custom OAuth server," because the server publishes the OAuth metadata your client needs. Our MCP client support matrix shows which clients handle remote OAuth.

Security notes

The main control is the OAuth workspace choice. When you sign in, you pick one Replit workspace and approve access. The server can then act on any app you can edit there, including shared apps.

Write tools matter most here:

• Publishing. publish_app makes an app public at its URL. Keep your client's approval prompt on for it.
• Agent updates. update_app_using_prompt lets Replit Agent change code. Review the result in Replit before you publish.
• Retries. Replit's troubleshooting table says to wait if a create, update or publish is still running, and to check get_publish_status instead of retrying. Repeated calls can start duplicate work.

Prompts that include customer data or secrets end up in Agent's build context. Keep secrets in Replit's own secrets settings, not in chat. The MCP project's security best practices cover scope minimization. Read approval fatigue and visit the MCP Security Center for more.

Alternatives

• Lovable MCP server for building and deploying Lovable apps from chat.
• v0 MCP server for Vercel's AI app builder.
• Vercel MCP server if you deploy your own code to Vercel.

Next step

Ask your AI to "List my recently updated Replit projects" to confirm the connection, then try one small update before publishing anything. See our best AI coding agents with MCP list or the MCP server directory.

Frequently asked questions