# Lovable

Build something Lovable

Source: https://wheredoirunthis.com/products/lovable · JSON: https://wheredoirunthis.com/api/products/lovable · Read on 2026-10-14

## At a glance

- Type: AI app builder
- Kind: Hosted
- Isolation: Not disclosed
- Free tier: Yes
- Starting price: €25/mo
- GPU: No
- Regions: 3
- Coverage: 25 of 61 assessed capabilities supported
- Agent readiness: read 10 of 10 signals, drive 8 of 11 signals

## Links

- Homepage: https://lovable.dev/
- Docs: https://docs.lovable.dev/
- Pricing: https://lovable.dev/pricing

## Pricing

- Model: Per-workspace credit subscription with one balance for build, chat, Cloud, app AI and connectors; usage-specific grants applied first. Unlimited collaborators, not per-seat.
- Unit: workspace subscription plus heterogeneous usage credits
- Free tier: Yes

| Tier | Price | Includes | Notes |
| --- | --- | --- | --- |
| Free | €0 | Workspace-private projects; unlimited collaborators; daily chat allowance; 5 lovable.app domains |  [source](https://lovable.dev/pricing) |
| Pro | €25/month | Plus 5 daily build credits without monthly cap, 20 Cloud, 4 AI and 1 connector credit/month; shared by unlimited users. |  [source](https://lovable.dev/pricing) |
| Business | €50/month | Plus 5 daily build credits without monthly cap, 20 Cloud, 4 AI and 1 connector credit/month; shared by unlimited users. |  [source](https://lovable.dev/pricing) |
| Enterprise | Contact sales / platform fee | Contract-specific volume pricing, SCIM, audit logs and enterprise governance; no standard usage grants. | Book a demo / contact sales. [source](https://lovable.dev/pricing) |

- Overages: Top-ups and auto top-up use shared credit balance; build/Cloud/AI/connector rates differ by workload and plan. Storage charges continue while backend paused.
- Card required: No
- Source: https://docs.lovable.dev/introduction/plans-and-credits.md

## Website design

Desktop public website · assessed 2026-10-14

Partial assessment — some pages could not be captured.

Documentation uses a white, spacious three-column layout with restrained sans-serif hierarchy, blue navigation accents and a colorful product screenshot. Fresh anonymous landing and pricing coverage was unavailable.

- Styles: Corporate
- Landing page: unavailable
- Pricing: unavailable
- Docs: captured

## Runtime

- **GPU & accelerators**: No — "Managed app-builder; no GPU provisioning. AI generation runs on Lovable's bundled models (Anthropic/OpenAI/Google under the hood), not user-provisioned GPUs." [source](https://lovable.dev/) (confidence: high)
- **BYOC (Bring your own cloud)**: Enterprise private preview: deploy app data plane into your own AWS account. — "Lovable manages dedicated VPC, EKS preview sandboxes, Lambda apps, Aurora PostgreSQL, S3 and connector gateway; control plane and build AI remain with Lovable." [source](https://lovable.dev/blog/deploy-on-aws) (confidence: high)
- **Secrets management**: Cloud secrets encrypted at rest and scoped by role/environment; gateway connector credentials stay outside project behind opaque connection keys. — "Gateway handles OAuth and authentication; provider tokens are not accessible inside project." [source](https://docs.lovable.dev/integrations/security.md) (confidence: high)
- **Storage options**: Managed Cloud object storage and database disk; storage billed while Cloud paused; separate export required for stored files. — "Database export excludes files in storage; pausing does not stop storage billing." [source](https://docs.lovable.dev/features/advanced-settings.md) (confidence: high)
- **Supported workloads**: ai-generated-web-apps, ai-generated-websites, internal-tools, dashboards, interactive-prototypes, mvps, landing-pages, shopify-storefronts, lightweight-saas — "llms.txt hubs: Internal tools, Prototyping, Shopify storefronts, Templates (apps/e-commerce/internal-tools/landing-pages/portfolio/websites). Vibe-coded full-stack web apps + websites." [source](https://lovable.dev/llms.txt) (confidence: high)
- **Persistence**: Persistent managed database and object storage; project version history, remix, and two-way GitHub/GitLab/Bitbucket sync. — "Git sync keeps your project code in your own repository with automatic two-way sync." [source](https://docs.lovable.dev/integrations/git-sync-overview.md) (confidence: high)
- **Data jurisdiction**: Americas, Europe, Asia Pacific — "Three data-hosting regions; country-specific Enterprise regions on request. Region fixed after enablement." [source](https://docs.lovable.dev/features/cloud.md) (confidence: high)
- **Resource limits & quotas**: Unified credits for building, chatting, hosting/Cloud, app AI and paid connectors. Free grants: 5 build credits/day capped at 30/month, 20 Cloud/month, 4 AI/month, 1 connector/month. Pro/Business start at 100 general credits/month plus uncapped daily build grants. — "Usage-specific grants are consumed before general credits; Plan mode costs 1 credit plus subagent research; Build mode depends on work." [source](https://docs.lovable.dev/introduction/plans-and-credits.md) (confidence: high)
- **SDK languages**: Not documented — "Documented REST API and MCP; no official packaged client SDK found." [source](https://docs.lovable.dev/integrations/lovable-api.md) (confidence: high)
- **Network & egress controls**: No documented user-configurable outbound firewall on default managed apps; connector stable outbound IP allowlisting and Enterprise AWS VPC connectivity are separately scoped. — "Stable connector gateway IP ranges can be allowlisted by destination services; not a platform outbound deny policy." [source](https://docs.lovable.dev/integrations/security.md) (confidence: medium)
- **Snapshots & forks**: Project history/revert, remixes and drafts; application copies, not running-instance snapshots. — "Lovable saves every change as a version automatically." [source](https://docs.lovable.dev/features/projects/history.md) (confidence: high)
- **Deployment methods**: dashboard, mcp, api, template — "Versioned REST API deploys existing projects; MCP creates/edits/deploys; dashboard publishes. Git sync is not push-to-production." [source](https://docs.lovable.dev/integrations/lovable-api.md) (confidence: high)
- **Isolation**: Not disclosed — "Managed generated-app hosting; no guaranteed primary isolation boundary disclosed. Enterprise AWS preview separately names EKS, Lambda and Aurora; not evidence of the default hosting substrate." [source](https://docs.lovable.dev/features/cloud.md) (confidence: low)

## Capabilities

### AI & agents

| Capability | Status | Evidence |
| --- | --- | --- |
| Agent skills | Supported | "Portable named markdown skills, workspace-level, loaded on matching tasks or invoked by slash command; GitHub/ZIP import." [source](https://docs.lovable.dev/features/skills.md) |
| AI app builder | Supported | "Core identity: 'AI App Builder \| Vibe Code Apps & Websites' — describe an app in natural language -> a full-stack app is generated." [source](https://lovable.dev/) |
| Autonomous QA agent | Partially supported | "Browser testing: an agent 'interacts with your app in a real browser ... click buttons, fill forms, navigate pages, and verify real user behavior with screenshots'. In-loop / on-request (conservative), tied to the build agent — not a standalone autonomous QA product (cf. AppDeploy)." [source](https://docs.lovable.dev/features/browser-testing.md) |
| Built-in coding agent | Supported | "The Lovable AI agent builds the app from natural-language messages; 'Agent is now the default mode'. First-party build/coding agent." [source](https://lovable.dev/pricing) |
| BYOK for LLMs | Not supported | "Built-in AI connector automatically generates project key, no provider setup required; bringing external API integrations is not builder-model BYOK." [source](https://docs.lovable.dev/features/ai.md) |
| Credential-injection proxy | Supported | "Opaque connection key stands in for provider secrets. Gateway authenticates third-party requests; provider tokens stay in Lovable secret store and are not exposed in project." [source](https://docs.lovable.dev/integrations/security.md) |
| LLM gateway | Supported | "Built-in AI connector manages keys and routes app calls to selectable Google/OpenAI/Anthropic and other provider models; unified credit billing." [source](https://docs.lovable.dev/features/ai.md) |
| MCP client | Supported | "'Chat connectors: Connect your tools to Lovable using MCP servers' — the Lovable agent connects to YOUR MCP servers/tools while building." [source](https://docs.lovable.dev/integrations/mcp-servers.md) |
| MCP-server hosting | Supported | "Lovable creates and hosts the published app MCP server, maintains compatibility; all plans for public apps." [source](https://docs.lovable.dev/features/agent-integrations.md) |
| MCP server | Supported | "'Lovable exposes itself as a Model Context Protocol (MCP) server at https://mcp.lovable.dev' — OAuth; tools create_project/deploy_project; supported clients ChatGPT/Claude/Claude Code/Cursor/VS Code." [source](https://docs.lovable.dev/integrations/lovable-mcp-server.md) |
| Model inference API (first-party) | Not supported | "Built-in AI connector calls external model providers; no standalone first-party hosted model catalogue inference API documented for this SKU." [source](https://docs.lovable.dev/features/ai.md) |
| Preinstalled coding agent | Not applicable | "External agents use hosted MCP; no third-party coding harness installed in a user sandbox." [source](https://docs.lovable.dev/integrations/lovable-mcp-server.md) |

### Networking & delivery

| Capability | Status | Evidence |
| --- | --- | --- |
| Automatic HTTPS | Supported | "Published apps are served over HTTPS on *.lovable.app + custom domains." [source](https://docs.lovable.dev/features/publish.md) |
| Custom domains | Supported | "'Custom domains' (Pro+); 'Unlimited lovable.app domains'. Docs: Set up a custom domain." [source](https://lovable.dev/pricing) |
| Direct public IPv6 | Not applicable | "Managed hosting; no per-instance public IPv6 / raw sockets. Category-wrong per the shape note." [source](https://lovable.dev/) |
| Edge KV store | Not applicable | "Not an edge runtime; no edge KV. Category-wrong per the shape note." [source](https://lovable.dev/) |
| Egress controls | Partially supported | "Gateway-based connector requests leave from stable outbound IP ranges for destination allowlisting. Scoped static egress, not a general outbound firewall for all app traffic." [source](https://docs.lovable.dev/integrations/security.md) |
| Email send / receive | Supported | "'Send branded emails from your own domain' (custom emails); Mailgun integration for app email sending." [source](https://docs.lovable.dev/features/custom-emails.md) |
| Public preview URLs | Supported | "Apps publish to *.lovable.app; the MCP create_project flow 'returns a preview URL'; shareable preview/published links." [source](https://docs.lovable.dev/integrations/lovable-mcp-server.md) |
| Private networking | Partially supported | "Enterprise AWS private preview apps reach internal systems over VPC peering; not default hosted networking." [source](https://lovable.dev/blog/deploy-on-aws) |
| Built-in reverse proxy | Supported | "Lovable hosts/serves the generated app (one-click publish to a live URL)." [source](https://docs.lovable.dev/features/publish.md) |

### Organisation & security

| Capability | Status | Evidence |
| --- | --- | --- |
| Built-in auth | Supported | "Lovable Cloud 'Built-in authentication: Lovable can generate signup/login pages for your app. Supports email, phone, and Google sign-in.' Auth-as-a-service for generated apps." [source](https://docs.lovable.dev/integrations/cloud.md) |
| BYOC | Partially supported | "Enterprise private preview, customer AWS dedicated VPC/EKS/Lambda/Aurora/S3, managed by Lovable; incomplete parity." [source](https://lovable.dev/blog/deploy-on-aws) |
| Deploy into customers' VPCs | Not supported | "Preview deploys own enterprise workspace into own AWS account; no documented nested SaaS vendor-to-customer-VPC fleet product." [source](https://lovable.dev/blog/deploy-on-aws) |
| Secrets management | Supported | "Cloud secrets encrypted at rest, role/environment-scoped, rotatable/revocable, auto-injected into Edge Functions; not exposed in logs." [source](https://lovable.dev/security) |
| Self-host / OSS core | Not supported | "Closed SaaS; the OSS gpt-engineer (MIT) is an ARCHIVED precursor, not a self-hostable core of the hosted product." [source](https://github.com/AntonOsika/gpt-engineer) |
| Sharing | Supported | "Workspace-private projects available on all plans; preview links and access controls. Prior free-public-only claim removed." [source](https://docs.lovable.dev/features/project-visibility.md) |
| SSO / SAML | Supported | "Workspace SSO (Business plan) + 'Add SAML single sign-on to Lovable Cloud apps'; Enterprise SCIM." [source](https://docs.lovable.dev/features/cloud-saml-sso.md) |
| Teams | Supported | "Business: 'Team workspace', 'Role-based access', user roles & permissions; Enterprise: SCIM, centralized governance." [source](https://lovable.dev/pricing) |
| Workload identity | Not supported | "No documented per-workload OIDC/SPIFFE short-lived credential federation surface." [source](https://docs.lovable.dev/features/cloud.md) |

### Developer access

| Capability | Status | Evidence |
| --- | --- | --- |
| CLI | Not supported | "No official Lovable CLI; the surfaces are the web editor, MCP server, and GitHub/GitLab sync." [source](https://docs.lovable.dev/) |
| E2B-compatible API | Not applicable | "App management REST API, not raw sandbox/E2B workload API." [source](https://docs.lovable.dev/integrations/lovable-api.md) |
| Filesystem API | Not applicable | "No remote filesystem-operations API over an instance (managed app-builder). Category-wrong per the shape note." [source](https://lovable.dev/) |
| Git deploy | Partially supported | "Automatic two-way GitHub, GitLab and Bitbucket sync, code portability; not push-to-production." [source](https://docs.lovable.dev/integrations/git-sync-overview.md) |
| HTTP data API | Not supported | "Table/SQL management is documented; standalone HTTP data query API not evidenced. Removed prior PostgREST inference." [source](https://docs.lovable.dev/features/database.md) |
| OpenAPI spec | Supported | "Fetched complete current OpenAPI YAML from linked API host (922794 bytes; pointer retained)." [source](https://api.lovable.dev/v1/openapi.yaml) |
| Private container registry | Not applicable | "No container registry (managed app-builder, no user containers). Category-wrong per the shape note." [source](https://lovable.dev/) |
| Public API | Partially supported | "Documented versioned REST API for projects, deployments, workspaces, analytics and security; Business/Enterprise owner/admin keys required (plan-gated)." [source](https://docs.lovable.dev/integrations/lovable-api.md) |
| SDK | Not supported | "No packaged client SDK library; integration is via MCP + Build-with-URL." [source](https://docs.lovable.dev/integrations/lovable-api.md) |
| SSH access | Not applicable | "Managed generated-app platform; no shell into the app runtime. Category-wrong per the ai-app-builder shape note." [source](https://lovable.dev/) |

### Compute & storage

| Capability | Status | Evidence |
| --- | --- | --- |
| Cloud-init / ignition config | Not applicable | "Managed app-builder; no VM/microVM cloud-init/ignition launch customisation. Category-wrong per the shape note." [source](https://lovable.dev/) |
| Desktop / computer-use sandbox | Not applicable | "Browser testing uses a remote browser VM for the QA agent (scored autonomous-qa-agent); there is no user-facing computer-use desktop sandbox. Category-wrong per the shape note." [source](https://docs.lovable.dev/features/browser-testing.md) |
| GPU compute | Not applicable | "No GPU provisioning (managed app-builder; AI generation uses Lovable's bundled models). Category-wrong per the ai-app-builder shape note." [source](https://lovable.dev/) |
| Live-state (memory) snapshots | Not applicable | "Managed generated-app platform offers backend pause, not memory/process restore guarantee." [source](https://docs.lovable.dev/features/advanced-settings.md) |
| Multi-region | Partially supported | "'Lovable Cloud supports regional data hosting in the EU, US, and Australia ... data ... does not move across regions by default.' Data residency / region selection (not full multi-region compute placement)." [source](https://lovable.dev/security) |
| Object storage | Supported | "Lovable Cloud Storage: 'files are stored securely in a project bucket ... Storage buckets are private by default, but can be made public'; files up to 2 GB (Supabase-powered S3-style object storage, native to Cloud)." [source](https://docs.lovable.dev/integrations/cloud.md) |
| Persistent disk | Not applicable | "Managed app-builder: ships a managed Postgres DB + storage buckets (captured in first-party-db/object-storage), not a user-attachable block volume. Category-wrong per the ai-app-builder shape note." [source](https://docs.lovable.dev/integrations/cloud.md) |
| Sandbox templates / custom images | Not applicable | "Templates here are clonable PROJECT starters (template-marketplace), not compute base images to fork instances from. Category-wrong per the shape note." [source](https://lovable.dev/templates) |
| Scale to zero | Partially supported | "Cloud automatically pauses inactive projects and can be paused manually; storage still billed and Wake up is manual, not traffic-triggered." [source](https://docs.lovable.dev/features/advanced-settings.md) |
| Selectable isolation runtime | Not applicable | "Managed generated-app hosting, no user-selectable isolation runtime." [source](https://docs.lovable.dev/features/cloud.md) |
| Snapshots / forking | Partially supported | "Application version history/revert and project remix; not running compute state forks." [source](https://docs.lovable.dev/features/projects/history.md) |

### Data

| Capability | Status | Evidence |
| --- | --- | --- |
| Database branching | Not supported | "Managed database tables, SQL and backups documented; no copy-on-write DB branching primitive." [source](https://docs.lovable.dev/features/database.md) |
| Ephemeral instant DB (no-signup) | Not supported | "Cloud DB requires a project/workspace; no no-signup claimable instant database." [source](https://docs.lovable.dev/integrations/cloud.md) |
| First-party database | Supported | "Lovable Cloud 'Database' = a managed Postgres database (Supabase-powered) provisioned for the generated app, with instance sizing." [source](https://docs.lovable.dev/integrations/cloud.md) |
| Vector search | Supported | "Supported PostgreSQL extension vector: embeddings and vector similarity search." [source](https://docs.lovable.dev/features/database.md) |

### Platform & operations

| Capability | Status | Evidence |
| --- | --- | --- |
| Managed CI/CD runners | Not applicable | "Not a managed CI/CD runner provider. Category-wrong per the shape note." [source](https://lovable.dev/) |
| Built-in observability | Supported | "Searchable first-party backend logs across functions, database, authentication and storage." [source](https://docs.lovable.dev/features/logs.md) |
| Preview environments | Not supported | "Drafts are separate project copies for trying changes, not documented automatic per-PR ephemeral full infrastructure environments." [source](https://docs.lovable.dev/features/drafts.md) |
| Scheduled tasks | Supported | "Jobs are scheduled background tasks; create via chat or SQL, view run history and enable/disable." [source](https://docs.lovable.dev/features/jobs.md) |
| Project template marketplace | Supported | "'Templates — Browse starter templates by category' (apps, e-commerce, internal tools, landing pages, portfolio, websites): clone/remix a starter project and customise." [source](https://lovable.dev/templates) |
| Durable workflows | Not supported | "Cloud Edge Functions automate workflows, but no durable-execution engine with retry/state guarantees is advertised." [source](https://docs.lovable.dev/integrations/cloud.md) |

## Agent readiness

### Read: 10 of 10 signals present

10/10 signals (7 full, 3 partial)

- Llms txt: pass — "Substantive apex llms.txt and 65358-byte docs index fetched."
- Llms full txt: pass — "Comprehensive docs.lovable.dev/llms-full.txt fetched, 4082178 bytes; pointer retained."
- Robots AI policy: pass — "robots.txt explicitly ALLOWS AI UAs (GPTBot, OAI-SearchBot, ChatGPT-User, ClaudeBot, Claude-Web, PerplexityBot, Google-Extended, Applebot-Extended) with Allow: /"
- JSON LD: partial — "Rendered homepage HTML includes WebSite and Organization; no rich Product/SoftwareApplication offers."
- Sitemap: pass — "GET /sitemap.xml 200 — a sitemap index of 11 locale sitemaps (en, pt-br, de, fr, es, it, hi, id, th, ko, ja)"
- Meta quality: pass — "Descriptive <title> + meta description + og:title/og:description/og:image + twitter:card"
- Markdown negotiation: pass — "https://docs.lovable.dev/introduction/welcome Accept: text/markdown returns clean markdown; .md content also fetched."
- Content efficiency: error — "Direct homepage HTTP 403. Recovered rendered DOM ratio 1.779% is not the raw server HTML measurement; probe unavailable, excluded."
- Docs discoverable: partial — "Current landing Resources/Learn docs links found in footer, not first-class header documentation nav."
- Pricing machine readable: pass — "Structured pricing tiers with prices + credit allotments (some detail in RSC, but tiers/prices are clearly parseable)"
- Anti bot: partial — "Direct landing HTTP 403; foxcrawl markdown and HTML recovered content. Other public docs and pricing fetched successfully; intermittent public block."

### Drive: 8 of 11 signals present

8/11 signals (6 full, 2 partial)

- Public API: pass — "https://docs.lovable.dev/integrations/lovable-api.md: documented stable /v1 projects/deployments/workspaces/security API; Business/Enterprise gated."
- Openapi spec: pass — "https://api.lovable.dev/v1/openapi.yaml fetchable linked specification; full artifact pointer."
- MCP server: pass — "Hosted MCP server documented at mcp.lovable.dev (OAuth; tools create_project/deploy_project) + .well-known/mcp at the docs subdomain"
- SDK packages: fail — "No official client SDK"
- Auth docs: pass — "https://docs.lovable.dev/api-reference/introduction.md: Lovable-API-Key header, scopes, verified email, OAuth and versioning documented."
- Agent self serve creds: partial — "https://docs.lovable.dev/features/api-keys.md: Business/Enterprise owners/admins create workspace keys in dashboard; human approval not programmatic issuance."
- Webhooks: fail — "No documented first-party platform webhooks (app-level Stripe/integration webhooks aside)"
- CLI tool: fail — "No official CLI"
- Error model: pass — "https://docs.lovable.dev/api-reference/introduction.md: JSON type/title/status/request_id/detail/errors/props error envelope."
- Rate limit docs: pass — "https://docs.lovable.dev/api-reference/introduction.md: sliding windows, X-RateLimit-Limit/Remaining/Reset and Retry-After headers."
- Agent config: partial — "https://docs.lovable.dev/features/skills.md: one reusable markdown skills surface; no agents.md or well-known agent found."

## Coding harnesses

- Claude Code (Anthropic) — "Lovable MCP server 'Supported AI clients: ChatGPT, Claude (Claude Desktop ... and claude.ai), Claude Code, Cursor, VS Code' — the agent can 'create projects, send messages to Lovable, inspect code, deploy apps' via create_project/deploy_project." [source](https://docs.lovable.dev/integrations/lovable-mcp-server.md)
- Cursor (Anysphere) — "Lovable MCP server lists Cursor among the supported OAuth clients that can manage Lovable projects through natural language." [source](https://docs.lovable.dev/integrations/lovable-mcp-server.md)

## Compliance & regions

- SOC 2 Type II: certified (scope: hosted) — "SOC 2 Type II; completed observation period February 1 to August 1, 2026; release October 5, 2026." [source](https://trust.lovable.dev/)
- SOC 2 Type I: certified (scope: hosted) — "SOC 2 Type I - 2026 audit report listed." [source](https://trust.lovable.dev/)
- ISO/IEC 27001: certified (scope: hosted) — "ISO 27001:2022 - Certificate of Registration" [source](https://trust.lovable.dev/)
- GDPR: self-attested (scope: hosted) — "GDPR listed in rendered Compliance section; privacy policy and DPA available." [source](https://trust.lovable.dev/)
- Regions: Americas (Lovable Cloud data hosting), Europe (Lovable Cloud data hosting), Asia Pacific (Lovable Cloud data hosting)
- Regions note: Data residency, not full compute placement map. Country-specific Enterprise regions on request; private-preview BYOC workload regions selected through customer AWS account.

## Company & presence

- Headquarters: Stockholm, Sweden
- Founded: 2023
- Privacy policy: https://lovable.dev/privacy
- Terms of service: https://lovable.dev/terms
- Documentation (docs.lovable.dev): https://docs.lovable.dev/
- Blog: https://lovable.dev/blog
- Changelog: https://lovable.dev/changelog
- Community: https://lovable.dev/community
- X/Twitter (@lovable): https://twitter.com/lovable
- LinkedIn: https://www.linkedin.com/company/lovable-dev
- YouTube (@lovable): https://www.youtube.com/@lovable
- GitHub org (lovablelabs): https://github.com/lovablelabs
- Status page: https://status.lovable.dev/
- Experts directory: https://lovable.dev/experts
- Partners / Affiliates: https://lovable.dev/partners
- Templates marketplace: https://lovable.dev/templates

## Nearby in the atlas

- [AppDeploy](/products/appdeploy.md)
- [Base44](/products/base44.md)
- [Playcode](/products/playcode.md)
- [Prized](/products/prized.md)
- [Remy](/products/goremy.md)

## Method

Facts come from the product's own public pages. Each claim carries its evidence: a quote and the page it came from. We count capabilities rather than grade products, and "Not assessed" means we have not checked, never that the product lacks it.