MCP Integration
Connect GenMB to external AI clients via MCP server mode, or extend GenMB Code with external MCP tools - powered by the Model Context Protocol.
Connecting AI clients is free. Deploying via MCP, API keys, and external tool connections require the Pro plan.
What is MCP
MCP (Model Context Protocol) is an open standard for AI tool integration. It defines how AI clients and servers communicate, allowing tools to be shared across different AI environments. GenMB supports MCP in both directions - as a server that exposes tools and as a client that consumes tools from external servers.
- Open standard for connecting AI clients to tool providers.
- Enables interoperability between AI platforms like Claude Code, Cursor, and GenMB.
- Uses Streamable HTTP transport for real-time communication.
What's free and what's Pro
Connecting AI clients to GenMB (server mode) is free: list, read, and edit your apps from Claude Code, claude.ai, or Cursor with browser sign-in. Pro unlocks deploying via MCP, manual API keys, and client mode (connecting external MCP servers to your apps).Setting Up MCP Server Mode
GenMB exposes an MCP server that external AI clients can connect to. This lets you use tools like Claude Code or Cursor to manage your GenMB apps programmatically - browse, edit, and deploy your apps without leaving your AI client.
Add the GenMB server URL in your client
https://genmb.com/api/mcp/mcp. No API key needed - the Connect wizard in any app's Add-ons panel generates the exact config for your client.Sign in and approve
Start using GenMB tools
Best Way to Iterate
MCP server mode is the fastest way to manage multiple apps from Claude Code. You can create, update, and deploy apps in rapid succession without switching contexts, just describe what you want and the AI handles the rest.Setting Up MCP Client Mode
Connect external MCP servers to your GenMB apps to extend GenMB Code with additional tools from third-party providers - database queries, API calls, code analysis, and more.
Open app settings
Add an MCP server
Test the connection
Use tools in GenMB Code
Security Requirements
All MCP server URLs must use HTTPS - plain HTTP connections are rejected. URLs are validated against SSRF protections to block private IP ranges and internal network addresses. This ensures external servers cannot be used to probe your infrastructure.Available Tools
The GenMB MCP server exposes 7 tools for managing apps programmatically from any MCP-compatible client. Each tool maps to a core GenMB operation.
list_appsList all apps belonging to the authenticated user.
get_appGet metadata for a specific app by ID.
list_filesList all files in an app's project.
read_fileRead the contents of a project file.
write_fileCreate or overwrite a project file. Saves a new version.
edit_fileReplace an exact substring in a file. Saves a new version.
deploy_appDeploy an app to a *.genmb.com subdomain. Requires Pro.
Using Tools Effectively
Everywrite_file or edit_file call saves a new version, so any MCP edit can be rolled back from Version History in the editor.API Key Management
Interactive clients connect via browser sign-in and don't need a key. API keys are the alternative for scripts, CI, and clients without OAuth support - create them from the Connect wizard in any app's Add-ons panel (under Developer / MCP servers).
- Create up to 5 API keys per user account.
- Keys use the genmb_sk_ prefix for easy identification.
- Keys are SHA-256 hashed before storage in Firestore, the raw key is shown only once at creation time.
- Revoke any key instantly from the dashboard. Revocation takes effect immediately.
- Each key grants full access to the authenticated user's apps and operations.
Security
MCP integration includes multiple security layers to protect your account and prevent abuse.
All MCP server URLs are validated to block private IP ranges and non-HTTPS schemes.
MCP server connections must use HTTPS. Plain HTTP is rejected.
60 requests per minute per user, enforced via a distributed sliding window shared across instances.
MCP tool results are truncated at 50,000 characters to prevent memory issues.
Auth tokens for external servers are encrypted at rest and only decrypted at the point of outbound calls.
FAQs
What AI clients can connect to GenMB's MCP server?▾
Is MCP available on the Free plan?▾
How do I connect Claude Code to GenMB?▾
Can I connect multiple external MCP servers to one app?▾
What happens if my API key is compromised?▾
Ready to build?
Create your first app for free, no credit card required.