Supero

io.github.supero-platformPublished by GitHub account supero-platformv2.0.2Updated Nov 7, 2026

Build and deploy multi-tenant apps from ChatGPT, Claude or your editor. Sign in with OAuth or a key.

VerifiedStreamable HTTPWeb executableCloud & InfrastructureDeveloper Tools

Overview

AI-generated overview

Supero lets an AI assistant build, validate, publish and deploy a multi-tenant web app into a Supero project, returning a preview or live URL.

What you can do
  • Orient and learn: check which project and roles the key allows, load the live build spec, reference apps and service contracts
  • Plan: turn a description into records, roles and screens for review before building
  • Check: validate the authored bundle and run diagnostics before anything is deployed
  • Ship: publish a version, deploy a preview or go live, poll deploy status and smoke-test the live URL
  • Change: fetch the current bundle, edit it, and validate, publish and deploy again
  • Discover platform services such as bookings, orders, payments, notifications and email
When to use it
Useful when you want an assistant to turn a plain-language app description into a working, hosted web app with sign-in, roles, a database, an admin panel and an API, without writing that plumbing yourself. Also fits iterating on an existing Supero app and redeploying it.
Requirements
Remote streamable HTTP endpoint; no local package. A Supero account and an API key starting with ak_, sent raw in the X-API-Key header (no Bearer prefix). A project key builds into one existing project; a domain key can create projects and needs a domain admin. A paid plan is needed for a permanent live URL.
Before you install
The API key is shown once and acts like a password: keep it out of commits, issues and app folders, and rotate it if lost. Deploys write and publish data to your Supero project and can create projects with a domain key. Free plan previews expire after about 30 minutes and are limited in number; permanent URLs and higher limits require a paid plan. Service secrets for email, SMS or payments belong in the admin panel, not the bundle.

Installation

In SourceWeft

  1. Open Supero in the dashboard and add it to a workspace.
  2. Connect the required credentials. They are stored privately and never shown on public pages.
  3. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.supero-platform%2Fsupero/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config. The client completes OAuth sign-in on first connect.

{
  "mcpServers": {
    "supero": {
      "type": "http",
      "url": "https://mcp.supero.dev/mcp"
    }
  }
}

README

supero-mcp

[smithery badge]

Build and deploy a real web app from your AI assistant, using Supero over MCP.

You describe the app. Your assistant (Claude Code, Cursor, VS Code Copilot, or any MCP client) reads the build spec from Supero, writes the app, validates it, and deploys it to a URL you can open. The app gets sign-in, roles, a database, an admin panel and an API from the platform, so the assistant writes the part that is yours and nothing else.

This repo has three things:

  • This guide: how to connect and build, start to finish.
  • Project briefs: 31 apps worth building, in 16 verticals, written as requirements. Pick one and build it.
  • Community apps: apps people have built, with source. Run one, add your own, or send a fix to someone else's.

The free plan gives you 3 projects and needs no card. Deployments on it are 30-minute previews; a URL that stays up is a paid plan.

Start here

If you want toGo to
Build your first app, with every step spelled outYour first app, step by step (30 minutes)
Choose something to buildPicking a project, then the project list
See a finished example with its sourcePage Turners, a book club app
Fix something in an app that existsCommunity apps
Read about a platform featureLearn more on docs.supero.dev

The rest of this page is the short version for people who have done this before.

Contents

  1. Get a key
  2. Connect your assistant
  3. Check the connection
  4. Build an app
  5. What the assistant does
  6. Change it and ship it
  7. Free plan limits
  8. When something goes wrong
  9. Contribute

1. Get a key

  1. Create a free Supero account. No card.
  2. In the dashboard, open Build via MCP. It is on every project page and in the sidebar.
  3. Create a key. There are two kinds:
KeyWhat the assistant can do with itUse it when
Project keyBuild into one project, and only that oneYou have made a project in the dashboard and want the app there. This is the safer default.
Domain keyCreate new projects and build into themYou want the assistant to create the project too. Needs a domain admin.

The key starts with ak_ and is shown once. Copy it then. If you lose it, rotate it under API Keys to get a new one.

Treat the key like a password. Do not commit it, and do not paste it into an issue or an app folder.

2. Connect your assistant

The server is at https://api.supero.dev/mcp/v1/messages (streamable HTTP). Send the key in an X-API-Key header, raw, with no Bearer in front.

Claude Code

bash
claude mcp add --transport http supero \  https://api.supero.dev/mcp/v1/messages \  --header "X-API-Key: ak_..."

Then run /mcp inside Claude Code and check that supero is connected.

Cursor: ~/.cursor/mcp.json

json
{  "mcpServers": {    "supero": {      "url": "https://api.supero.dev/mcp/v1/messages",      "headers": { "X-API-Key": "ak_..." }    }  }}

VS Code (GitHub Copilot): .vscode/mcp.json

json
{  "servers": {    "supero": {      "type": "http",      "url": "https://api.supero.dev/mcp/v1/messages",      "headers": { "X-API-Key": "ak_..." }    }  }}

Run MCP: List Servers, start supero, and use Copilot in Agent mode.

Anything else. Any client that speaks MCP over streamable HTTP and lets you set a request header will work. More detail, and the one known gap (Claude Desktop's connector screen wants OAuth, which the server does not offer yet), is in docs/connect.md.

3. Check the connection

Ask your assistant:

text
Call build_whoami on Supero and tell me what it says.

You should get back your role, your domain and, for a project key, the project it is bound to. If you would rather check from a terminal:

bash
curl -s https://api.supero.dev/mcp/v1/messages \  -H "Content-Type: application/json" \  -H "X-API-Key: ak_..." \  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"build_whoami","arguments":{}}}'

4. Build an app

Paste this, with your own description in the middle.

With a project key (the project already exists):

text
Connect to Supero over MCP and use your build_ tools. Everything runs through MCP: don't look for a local supero CLI or a SKILLS.md file on disk, there isn't one.
Build this app in my project: [describe your app: the main thing users do, the key screens, and an admin view].
Work in this order: build_whoami, then build_get_skills to load the spec, then build_plan. Echo the plan back to me and wait for my go-ahead. Then build_get_examples with the closest archetype as your reference, author the bundle, run build_validate and fix everything it reports, run build_doctor and fix its warnings, then build_publish and deploy (build_deploy for a ~30-minute preview, build_go_live for the permanent URL). Finally build_smoke_test the deployed URL and finish with a short summary: what you built, the URL, and how I log in.

With a domain key, change the second paragraph to:

text
Create a new project with build_create_project (pick a short name and namespace), then build this app in it: [describe your app].

Stuck for an idea? Every project brief ends with a prompt that is ready to paste.

If the assistant starts searching your disk for a CLI, send it this:

text
Stop reading the local filesystem. There is no CLI and no SKILLS.md. Call build_get_skills over MCP now, author the bundle, then build_validate.

More prompts, for changing an app, fixing a failed deploy and going live, are in docs/prompts.md.

5. What the assistant does

StepToolsWhat happens
1. Orientbuild_whoamiFinds out which project it may build into and what the key allows.
2. Learnbuild_get_skills, build_get_examples, build_get_service_contractReads the build spec, a working reference app, and the contract of each platform service it plans to use. The spec is served live, so it is never out of date.
3. Planbuild_planTurns your description into records, roles and screens. You read it and say go.
4. Write(your assistant)Writes a small bundle: the data model, the configuration, the setup and the front end.
5. Checkbuild_validate, build_doctorThe platform checks the bundle and reports what to fix before anything is deployed.
6. Shipbuild_publish, build_deploy or build_go_live, build_deploy_status, build_smoke_testPublishes a version, deploys it, waits for it to come up, and tests the live URL.

A deploy usually takes a few minutes and can sit in launching for five or more. That is normal: the assistant should keep polling build_deploy_status for up to ten minutes before deciding something is wrong.

The full walk-through is in docs/build-flow.md, and every tool is listed in docs/tools.md (64 tools; you can list them without a key).

What you do not have to build. Sign-in, roles and permissions, per-record and per-field access rules, the database, the REST API, the admin panel, and data kept apart between organisations in a multi-tenant app. There are also ready-made services to switch on instead of writing: bookings, appointments, rentals, cart, orders, payments, approvals, tasks, tickets, reviews, memberships, recurring plans, inventory, document signature, attachments, notifications, email and more. Ask the assistant to call build_list_capabilities to see them all.

6. Change it and ship it

  • Change the app. Tell the assistant what to change. It fetches the current version with build_get_bundle, edits it, then validates, publishes and deploys again. The version number goes up each time.
  • Preview or live. build_deploy gives a preview URL that lasts about 30 minutes, which is enough to click through and share. build_go_live gives a permanent address on supero.live and needs a paid plan.
  • Secrets. Keys for email, SMS or payments go in the app's admin panel under Services. Never put one in the bundle.
  • Dev and live mode. A project starts in dev mode. Switch it to live mode before real users arrive.

Free plan limits

Free
Price$0, no card
Projects3
Preview deployments10 per project, about 30 minutes each
Schemas20
API requests10,000 a month
Permanent live URLFrom the Basic plan

These are the figures on the pricing page on 5 October 2026. That page is the authority if they differ. A plan and a validation pass cost nothing, so get build_validate clean before spending a preview. More in docs/limits.md.

When something goes wrong

You seeIt meansDo this
Authentication requiredNo key reached the serverCheck the header is X-API-Key and the client was restarted after you added it.
401 or Invalid API keyThe key is wrong, cut short, revoked, or has Bearer in frontPaste the raw ak_... value. If it is lost, rotate it under API Keys.
The assistant cannot create a projectYou gave it a project keyCreate the project in the dashboard, or use a domain key.
The assistant looks for a CLI or a SKILLS.md fileIt is guessing from old habitsSend the recovery prompt from step 4.
build_validate failsThe bundle breaks a ruleLet the assistant fix what it lists and run it again. This step is free.
build_doctor warns that workflows "usually need elevated permission"That warning is out of dateIgnore it. Workflows register and run with a project key (checked 6 October 2026).
The app deployed but screens are half emptySome starter data may not have been created. This was a platform fault, fixed on 5 October 2026If you still see it, ask the assistant to call build_logs and look for SEED FAILURES, deploy again, and please open an issue.
Deploy stays in launchingThe app is still startingWait. Poll for up to ten minutes.
A status field will not save for ordinary usersFields named status or state are protectedName lifecycle fields <something>_state, for example booking_state.
Out of previewsThe free plan has tenValidate more before deploying, or upgrade.

Still stuck? Ask in Discussions. Found a way to make the server misbehave? See SECURITY.md and report it privately.

Contribute

There are four ways in, and none of them needs permission first. The open issues list good first ones, and we reply within a day.

  • Publish an app. Build a brief, or your own idea, and add it with its source to community apps.
  • Improve someone else's app. Deploy it into your own project, fix one of its known gaps, and send the change back.
  • Write a brief for an app you wish existed. Copy projects/TEMPLATE.md.
  • Improve this guide: a client we have not covered, a prompt that works better, an error we did not explain.

CONTRIBUTING.md has the details.

Related

Licence

Everything in this repo is MIT. An app you build is yours. The Supero platform itself is a hosted service and is not open source.

Source: README.md at commit 54b132d

Tools

0
This server asks you to sign in, so SourceWeft could not read its tools without an account and has not indexed them. What a connected account sees can depend on that account and its permissions.

Version history

3
  1. v2.0.2LatestNov 7, 2026
  2. v2.0.1Oct 22, 2026
  3. v2.0.0Sep 16, 2026

Score

85% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts