Lovable

Lovable is a browser-based AI app builder. MCP servers are added as chat connectors from the Connectors dashboard, and Perfai Cloud connects as a remote streamable-http server.

Custom MCP servers are available on every Lovable plan. If your workspace is on Enterprise, an admin needs to enable Third-party MCP clients first under Workspace settings → Security → Privacy & security — it’s on by default for Free, Pro, and Business.

Generate your Bearer token

The Bearer value Lovable needs is a PerfAI Token (id_token which is a JWT)

id_tokens are short-lived. If Lovable later reports “could not connect” after previously working, your token has likely expired — generate a fresh one with either method below and update the connector.

macOS / Linux
Windows (PowerShell)

read -s -p "PerfAI password: " PERFAI_PASSWORD; echo
curl -s -X POST "https://api.perfai.ai/api/v1/auth/token" \
  -H "Content-Type: application/json" \
  -d "{\"username\":\"you@example.com\",\"password\":\"$PERFAI_PASSWORD\"}" \
  | grep -o '"id_token":"[^"]*"' | cut -d'"' -f4

read -s masks the password prompt so it never lands in your shell history. Copy the printed id_token value in full.

$cred = Get-Credential -UserName "you@example.com" -Message "PerfAI password"
$body = @{ username = $cred.UserName; password = $cred.GetNetworkCredential().Password } | ConvertTo-Json
$resp = Invoke-RestMethod -Uri "https://api.perfai.ai/api/v1/auth/token" -Method Post -Body $body -ContentType "application/json"
$resp.id_token

Get-Credential masks the password prompt and, unlike a plain double-quoted string, won’t let PowerShell mangle special characters ($, `, ") in your password. Copy the printed value in full.

Copy the resulting string — you’ll paste it into Lovable’s connector form as the Bearer token value, exactly as-is (no further encoding).

Installation

Open the Connectors dashboard in Lovable and click the + button (top right).
Select MCP server.
Fill in:
- Server name: Perfai Cloud
- Connection type: Direct connection (default — “Lovable static IPs” is Enterprise-only and not needed here)
- Server URL: https://mcp-server.perfai.ai/mcp
- Authentication: Bearer token or API key
- Token: paste the id_token from above
Click Add & authorize.

Verify the server is connected

Reopen the Connectors dashboard and find Perfai Cloud in your connector list.
It should show as connected with 19 tools discovered.
If it fails, re-check the token value for trailing whitespace, confirm Bearer token or API key was selected, and make sure the token hasn’t expired (generate a fresh id_token if it has).

The prompts below run inside Lovable’s project chat, not your terminal. The only setup step outside the chat is adding the connector above.

In a Lovable project chat, with the connector enabled, type:

Login to Perfai

This calls login with no arguments. Confirm the session with:

What's my Perfai auth status?

Register an app and run a scan

Register https://your-app.example.com with Perfai

Check the onboarding status for that app

Run a security test on the selected app

Show me the vulnerabilities it found

Fix and verify

Generate an auto-fix plan for all critical and high findings

Mark vulnerability 3 as fixed

Give me the fix summary

Getting Started

Core Concepts

Hybrid Deployment

Changelog

Generate your Bearer token

Installation

Verify the server is connected

Register an app and run a scan

Fix and verify

​Generate your Bearer token

​Installation

​Verify the server is connected

​Login

​Register an app and run a scan

​Fix and verify

Generate your Bearer token

Installation

Verify the server is connected

Login

Register an app and run a scan

Fix and verify