Supero

io.github.supero-platform由 GitHub 账号 supero-platform 发布v2.0.2更新于 Nov 7, 2026

Build and deploy multi-tenant apps from ChatGPT, Claude or your editor. Sign in with OAuth or a key.

已验证Streamable HTTP可网页运行云端与基础设施开发者工具

概览

AI 生成的概览

Supero 让 AI 助手在 Supero 项目中构建、校验、发布并部署多租户 Web 应用,并返回预览或正式网址。

可以做什么
  • 定位与学习:查看密钥可构建的项目与角色,加载实时构建规范、参考应用和服务契约
  • 规划:把描述转成数据记录、角色和页面,供你确认后再动手
  • 检查:在部署前校验应用包并运行诊断
  • 发布:发布版本、部署预览或正式上线、轮询部署状态并对线上网址做冒烟测试
  • 修改:取回当前应用包,修改后再次校验、发布和部署
  • 查看平台服务:预订、订单、支付、通知、邮件等现成能力
适用场景
适合希望助手把一段自然语言的应用描述变成可访问的托管 Web 应用,并自带登录、角色、数据库、管理后台和 API,而无需自己编写这些基础设施。也适合在已有 Supero 应用上迭代并重新部署。
运行要求
远程 streamable HTTP 端点,无需本地安装包。需要 Supero 账号和以 ak_ 开头的 API 密钥,通过 X-API-Key 请求头原样发送(不加 Bearer)。项目密钥只能构建到已有项目;域密钥可创建项目,需域管理员权限。永久正式网址需要付费套餐。
安装前请注意
API 密钥只显示一次,等同密码:不要提交到代码库、粘贴到 issue 或应用目录,丢失后应轮换。部署会向你的 Supero 项目写入并发布数据,域密钥还能创建项目。免费套餐的预览约 30 分钟后失效且有次数限制,永久网址和更高额度需付费。邮件、短信、支付等服务密钥应放在管理后台,不要写进应用包。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Supero,将其添加到工作区。
  2. 连接 所需的 凭据。它们会被私密存储,绝不会在公开页面上展示。
  3. 为需要使用其工具的对话启用该服务。

Web executable,通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。

交给智能体安装

把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体,或 SourceWeft 对话中。智能体会读取该服务器的安装指南,先向你展示发布者、端点和登录方式,经你同意后再把它添加到你的客户端。密钥不会写进任何命令。

阅读 https://sourceweft.com/mcp/io.github.supero-platform%2Fsupero/install.md,并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前,先告诉我它的发布者、端点和登录方式,等我确认。不要把 API 密钥写进命令或我会提交的文件;问我密钥应从哪里获取。

查看智能体所依据的安装指南

其他 MCP 客户端

把它添加到你客户端的 mcpServers 配置中。 客户端会在首次连接时完成 OAuth 登录。

{
  "mcpServers": {
    "supero": {
      "type": "http",
      "url": "https://mcp.supero.dev/mcp"
    }
  }
}

README

supero-mcp

[smithery badge]

Build and deploy a real web app from your AI assistant, using Supero over MCP.

You describe the app. Your assistant (Claude Code, Cursor, VS Code Copilot, or any MCP client) reads the build spec from Supero, writes the app, validates it, and deploys it to a URL you can open. The app gets sign-in, roles, a database, an admin panel and an API from the platform, so the assistant writes the part that is yours and nothing else.

This repo has three things:

  • This guide: how to connect and build, start to finish.
  • Project briefs: 31 apps worth building, in 16 verticals, written as requirements. Pick one and build it.
  • Community apps: apps people have built, with source. Run one, add your own, or send a fix to someone else's.

The free plan gives you 3 projects and needs no card. Deployments on it are 30-minute previews; a URL that stays up is a paid plan.

Start here

If you want toGo to
Build your first app, with every step spelled outYour first app, step by step (30 minutes)
Choose something to buildPicking a project, then the project list
See a finished example with its sourcePage Turners, a book club app
Fix something in an app that existsCommunity apps
Read about a platform featureLearn more on docs.supero.dev

The rest of this page is the short version for people who have done this before.

Contents

  1. Get a key
  2. Connect your assistant
  3. Check the connection
  4. Build an app
  5. What the assistant does
  6. Change it and ship it
  7. Free plan limits
  8. When something goes wrong
  9. Contribute

1. Get a key

  1. Create a free Supero account. No card.
  2. In the dashboard, open Build via MCP. It is on every project page and in the sidebar.
  3. Create a key. There are two kinds:
KeyWhat the assistant can do with itUse it when
Project keyBuild into one project, and only that oneYou have made a project in the dashboard and want the app there. This is the safer default.
Domain keyCreate new projects and build into themYou want the assistant to create the project too. Needs a domain admin.

The key starts with ak_ and is shown once. Copy it then. If you lose it, rotate it under API Keys to get a new one.

Treat the key like a password. Do not commit it, and do not paste it into an issue or an app folder.

2. Connect your assistant

The server is at https://api.supero.dev/mcp/v1/messages (streamable HTTP). Send the key in an X-API-Key header, raw, with no Bearer in front.

Claude Code

bash
claude mcp add --transport http supero \  https://api.supero.dev/mcp/v1/messages \  --header "X-API-Key: ak_..."

Then run /mcp inside Claude Code and check that supero is connected.

Cursor: ~/.cursor/mcp.json

json
{  "mcpServers": {    "supero": {      "url": "https://api.supero.dev/mcp/v1/messages",      "headers": { "X-API-Key": "ak_..." }    }  }}

VS Code (GitHub Copilot): .vscode/mcp.json

json
{  "servers": {    "supero": {      "type": "http",      "url": "https://api.supero.dev/mcp/v1/messages",      "headers": { "X-API-Key": "ak_..." }    }  }}

Run MCP: List Servers, start supero, and use Copilot in Agent mode.

Anything else. Any client that speaks MCP over streamable HTTP and lets you set a request header will work. More detail, and the one known gap (Claude Desktop's connector screen wants OAuth, which the server does not offer yet), is in docs/connect.md.

3. Check the connection

Ask your assistant:

text
Call build_whoami on Supero and tell me what it says.

You should get back your role, your domain and, for a project key, the project it is bound to. If you would rather check from a terminal:

bash
curl -s https://api.supero.dev/mcp/v1/messages \  -H "Content-Type: application/json" \  -H "X-API-Key: ak_..." \  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"build_whoami","arguments":{}}}'

4. Build an app

Paste this, with your own description in the middle.

With a project key (the project already exists):

text
Connect to Supero over MCP and use your build_ tools. Everything runs through MCP: don't look for a local supero CLI or a SKILLS.md file on disk, there isn't one.
Build this app in my project: [describe your app: the main thing users do, the key screens, and an admin view].
Work in this order: build_whoami, then build_get_skills to load the spec, then build_plan. Echo the plan back to me and wait for my go-ahead. Then build_get_examples with the closest archetype as your reference, author the bundle, run build_validate and fix everything it reports, run build_doctor and fix its warnings, then build_publish and deploy (build_deploy for a ~30-minute preview, build_go_live for the permanent URL). Finally build_smoke_test the deployed URL and finish with a short summary: what you built, the URL, and how I log in.

With a domain key, change the second paragraph to:

text
Create a new project with build_create_project (pick a short name and namespace), then build this app in it: [describe your app].

Stuck for an idea? Every project brief ends with a prompt that is ready to paste.

If the assistant starts searching your disk for a CLI, send it this:

text
Stop reading the local filesystem. There is no CLI and no SKILLS.md. Call build_get_skills over MCP now, author the bundle, then build_validate.

More prompts, for changing an app, fixing a failed deploy and going live, are in docs/prompts.md.

5. What the assistant does

StepToolsWhat happens
1. Orientbuild_whoamiFinds out which project it may build into and what the key allows.
2. Learnbuild_get_skills, build_get_examples, build_get_service_contractReads the build spec, a working reference app, and the contract of each platform service it plans to use. The spec is served live, so it is never out of date.
3. Planbuild_planTurns your description into records, roles and screens. You read it and say go.
4. Write(your assistant)Writes a small bundle: the data model, the configuration, the setup and the front end.
5. Checkbuild_validate, build_doctorThe platform checks the bundle and reports what to fix before anything is deployed.
6. Shipbuild_publish, build_deploy or build_go_live, build_deploy_status, build_smoke_testPublishes a version, deploys it, waits for it to come up, and tests the live URL.

A deploy usually takes a few minutes and can sit in launching for five or more. That is normal: the assistant should keep polling build_deploy_status for up to ten minutes before deciding something is wrong.

The full walk-through is in docs/build-flow.md, and every tool is listed in docs/tools.md (64 tools; you can list them without a key).

What you do not have to build. Sign-in, roles and permissions, per-record and per-field access rules, the database, the REST API, the admin panel, and data kept apart between organisations in a multi-tenant app. There are also ready-made services to switch on instead of writing: bookings, appointments, rentals, cart, orders, payments, approvals, tasks, tickets, reviews, memberships, recurring plans, inventory, document signature, attachments, notifications, email and more. Ask the assistant to call build_list_capabilities to see them all.

6. Change it and ship it

  • Change the app. Tell the assistant what to change. It fetches the current version with build_get_bundle, edits it, then validates, publishes and deploys again. The version number goes up each time.
  • Preview or live. build_deploy gives a preview URL that lasts about 30 minutes, which is enough to click through and share. build_go_live gives a permanent address on supero.live and needs a paid plan.
  • Secrets. Keys for email, SMS or payments go in the app's admin panel under Services. Never put one in the bundle.
  • Dev and live mode. A project starts in dev mode. Switch it to live mode before real users arrive.

Free plan limits

Free
Price$0, no card
Projects3
Preview deployments10 per project, about 30 minutes each
Schemas20
API requests10,000 a month
Permanent live URLFrom the Basic plan

These are the figures on the pricing page on 5 October 2026. That page is the authority if they differ. A plan and a validation pass cost nothing, so get build_validate clean before spending a preview. More in docs/limits.md.

When something goes wrong

You seeIt meansDo this
Authentication requiredNo key reached the serverCheck the header is X-API-Key and the client was restarted after you added it.
401 or Invalid API keyThe key is wrong, cut short, revoked, or has Bearer in frontPaste the raw ak_... value. If it is lost, rotate it under API Keys.
The assistant cannot create a projectYou gave it a project keyCreate the project in the dashboard, or use a domain key.
The assistant looks for a CLI or a SKILLS.md fileIt is guessing from old habitsSend the recovery prompt from step 4.
build_validate failsThe bundle breaks a ruleLet the assistant fix what it lists and run it again. This step is free.
build_doctor warns that workflows "usually need elevated permission"That warning is out of dateIgnore it. Workflows register and run with a project key (checked 6 October 2026).
The app deployed but screens are half emptySome starter data may not have been created. This was a platform fault, fixed on 5 October 2026If you still see it, ask the assistant to call build_logs and look for SEED FAILURES, deploy again, and please open an issue.
Deploy stays in launchingThe app is still startingWait. Poll for up to ten minutes.
A status field will not save for ordinary usersFields named status or state are protectedName lifecycle fields <something>_state, for example booking_state.
Out of previewsThe free plan has tenValidate more before deploying, or upgrade.

Still stuck? Ask in Discussions. Found a way to make the server misbehave? See SECURITY.md and report it privately.

Contribute

There are four ways in, and none of them needs permission first. The open issues list good first ones, and we reply within a day.

  • Publish an app. Build a brief, or your own idea, and add it with its source to community apps.
  • Improve someone else's app. Deploy it into your own project, fix one of its known gaps, and send the change back.
  • Write a brief for an app you wish existed. Copy projects/TEMPLATE.md.
  • Improve this guide: a client we have not covered, a prompt that works better, an error we did not explain.

CONTRIBUTING.md has the details.

Related

Licence

Everything in this repo is MIT. An app you build is yours. The Supero platform itself is a hosted service and is not open source.

来源:README.md,提交 54b132d

工具

0
该服务器需要登录,因此 SourceWeft 无法在没有账号的情况下读取其工具,也未收录。已连接账号所能看到的内容可能因账号及其权限而异。

版本历史

3
  1. v2.0.2最新Nov 7, 2026
  2. v2.0.1Oct 22, 2026
  3. v2.0.0Sep 16, 2026

评分

已满足适用检查项的 85%

该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。

  • 近 30 天内可连通必需25 分
  • 已声明认证方式必需10 分
  • 已列出工具15 分

    请让服务器在无凭据时响应 tools/list,或发布可在沙箱中无凭据启动的软件包。

  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分