Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
- 5 5
- 4 3
- 3 2
- 2 0
- 1 0
Trust in production
- Trust it - 70%
- With caveats - 10%
- Wouldn't - 20%
80% would recommend this server
How reviewers scored it
- Setup & docs 4.0
- Auth experience 4.5
- Reliability 4.2
- Maintainer responsiveness 3.5
Why it got an A
Lovable's own server, hosted over HTTPS, with OAuth 2.1 sign-in as the only login (no API keys) and scopes for reading and writing projects and workspaces. It can spend money and publish: create_project and send_message use your Lovable build credits, deploy_project puts the app on a public lovable.app URL, and query_database runs SQL with your full database permissions, writes and schema changes included. Lovable's docs don't say whether the agent asks first, so keep your client's auto-run setting off. Biggest deduction: the server is closed source, so this grade rests on Lovable's documentation and the lovablelabs/mcp repo (Lovable's own GitHub org, but only the plugin packaging and a README, no server code), and maintenance scores one band lower because that repo's last commit was 2026-07-13. The docs give no dated changelog. On Enterprise workspaces an admin must switch on third-party MCP clients first.
How to connect
Hosted: https://mcp.lovable.dev (OAuth sign-in on first use); Claude Code: claude mcp add --transport http lovable https://mcp.lovable.devIs Lovable MCP Server safe?
Is Lovable MCP Server safe to use?
Lovable MCP Server grades A (strong public trust signals). Updates are occasional, so fixes may be slow to arrive.
Does Lovable MCP Server have known vulnerabilities?
Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.
Does Lovable MCP Server support authentication?
Yes. It requires a login, so access can be tied to a person or a scoped key.
Alternatives in Cloud & Hosting
- A Cloudflare API MCP ServerOfficial hosted Cloudflare server that searches and calls the whole Cloudflare API (Workers, DNS, R2, D1, KV, firewall).
- A Netlify MCP ServerNetlify's official MCP server, hosted at mcp.netlify.com or run from npm, to create and deploy projects and manage env vars and secrets, forms, extensions and access controls.
- A Railway MCP (railway mcp in the Railway CLI)Railway's official MCP server, built into the Railway CLI and hosted at mcp.railway.com, to list projects and services, redeploy, and manage feature flags.
- A Render MCP ServerRender's official MCP server, hosted at mcp.render.com or run locally, to create services and databases, read logs and metrics, update environment variables and trigger deploys.
- A Terraform MCP ServerOfficial open-source HashiCorp server to look up Terraform providers, modules and policies, and to manage HCP Terraform or Terraform Enterprise workspaces, variables and runs.
Embed this badge
[](https://trustedmcp.io/servers/lovable-mcp)<a href="https://trustedmcp.io/servers/lovable-mcp"><img src="https://trustedmcp.io/badge/lovable-mcp.svg" alt="TrustedMCP grade A" height="80"></a>Community reviews
The Lovable integration I wanted
Installed it on a Friday, it was part of my workflow by Monday. Hosted endpoint means no local process to babysit. I like that access goes through a proper sign-in instead of a long-lived secret on disk. Would recommend without hesitation.
Used for Reading logs during incidents
- Setup & docs 5/5
- Auth experience 5/5
- Reliability 5/5
- Maintainer responsiveness 3/5
Saves me a context switch every hour
Clear tool names, sensible outputs, very few surprises. Nothing to install, I just point the client at the URL. Being closed source, I cannot audit it, but the vendor has been responsive. Happy to run it in production.
Used for Managing preview environments
- Setup & docs 3/5
- Auth experience 4/5
- Reliability 3/5
- Maintainer responsiveness 4/5
Does what it says, no drama
Hooked Lovable MCP Server into Claude Code and it worked on the first try. Scoped the token to just what the agent needs and it respected that. Being official from Lovable counts for a lot when I pitch it to security. Happy to run it in production.
Used for Managing preview environments
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 4/5
Promising, a bit raw
Useful tool, though I would not hand it to a junior unsupervised. Issues get answered eventually. Not fast, not abandoned. I will check back in a few releases.
Used for Inventory of what is running where
- Setup & docs 3/5
- Auth experience 5/5
- Reliability 4/5
- Maintainer responsiveness 4/5
No complaints after a month
Started with it as an experiment, now it is a fixture. Sign-in flow was painless and I never had to paste a key into a config file. Nothing to install, I just point the client at the URL. Gave it its own API key so I can revoke it without breaking anything else.
Used for Inventory of what is running where
- Setup & docs 5/5
- Auth experience 5/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Surprisingly polished
I use this almost daily. The OAuth flow worked first time in Claude Code. Auth is handled properly, and revoking access later was one click. Recommended, with sensible guardrails.
Used for Cost checks across projects
- Setup & docs 3/5
- Auth experience 3/5
- Reliability 4/5
- Maintainer responsiveness 3/5
Easy win for our agent setup
Replaced a homegrown script with Lovable MCP Server and have not looked back. Hosted endpoint means no local process to babysit. Gave it its own API key so I can revoke it without breaking anything else. It is in our production agent and I sleep fine.
Used for Checking deploy status from chat
- Setup & docs 5/5
- Auth experience 5/5
- Reliability 5/5
- Maintainer responsiveness 3/5
Earned a permanent spot in my config
Tried it on a side project first, then rolled it out at work. Nothing to install, I just point the client at the URL. I would prefer to read the code, but the hosted service has been dependable. Auth is handled properly, and revoking access later was one click. Good choice if you need Lovable in your agent.
Used for Spinning up test resources
- Setup & docs 5/5
- Auth experience 5/5
- Reliability 5/5
- Maintainer responsiveness 4/5
Good defaults, good docs
Simple to set up in Cursor, simple to reason about. Scoped the token to just what the agent needs and it respected that. Easy recommendation.
Used for Spinning up test resources
- Setup & docs 3/5
- Auth experience 5/5
- Reliability 4/5
- Maintainer responsiveness 3/5
Useful, with a few rough edges
Some tools are great, a couple feel half finished. Release pace is moderate, so I pin a version and check in monthly. Not something I would put in production yet.
Used for Cost checks across projects
- Setup & docs 3/5
- Auth experience 4/5
- Reliability 3/5
- Maintainer responsiveness 3/5
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.