Skip to main content
Docs/MCP Integration
DocsMCP Integration
Free

MCP Integration

Connect GenMB to external AI clients via MCP server mode, or extend GenMB Code with external MCP tools - powered by the Model Context Protocol.

Connecting AI clients is free. Deploying via MCP, API keys, and external tool connections require the Pro plan.

What is MCP

MCP (Model Context Protocol) is an open standard for AI tool integration. It defines how AI clients and servers communicate, allowing tools to be shared across different AI environments. GenMB supports MCP in both directions - as a server that exposes tools and as a client that consumes tools from external servers.

  • Open standard for connecting AI clients to tool providers.
  • Enables interoperability between AI platforms like Claude Code, Cursor, and GenMB.
  • Uses Streamable HTTP transport for real-time communication.

What's free and what's Pro

Connecting AI clients to GenMB (server mode) is free: list, read, and edit your apps from Claude Code, claude.ai, or Cursor with browser sign-in. Pro unlocks deploying via MCP, manual API keys, and client mode (connecting external MCP servers to your apps).

Setting Up MCP Server Mode

GenMB exposes an MCP server that external AI clients can connect to. This lets you use tools like Claude Code or Cursor to manage your GenMB apps programmatically - browse, edit, and deploy your apps without leaving your AI client.

1

Add the GenMB server URL in your client

In your MCP-compatible client (Claude Code, claude.ai, Cursor, etc.), add a new MCP server with the URL https://genmb.com/api/mcp/mcp. No API key needed - the Connect wizard in any app's Add-ons panel generates the exact config for your client.
2

Sign in and approve

On first use, your client opens a browser window where you sign in to GenMB and approve the connection. The approval is valid for 90 days and can be revoked anytime.
3

Start using GenMB tools

Once connected, all 7 GenMB tools are available in your AI client. You can list your apps, read and edit project files, and deploy to subdomains, all through natural language within your client.

Best Way to Iterate

MCP server mode is the fastest way to manage multiple apps from Claude Code. You can create, update, and deploy apps in rapid succession without switching contexts, just describe what you want and the AI handles the rest.

Setting Up MCP Client Mode

Connect external MCP servers to your GenMB apps to extend GenMB Code with additional tools from third-party providers - database queries, API calls, code analysis, and more.

1

Open app settings

Navigate to your app in the editor and open the MCP Servers tab in the settings panel.
2

Add an MCP server

Enter the server URL and optional authentication credentials. The URL must use HTTPS and pass SSRF validation.
3

Test the connection

Use GenMB Code to verify the tools from the connected server are available. Try a simple tool call to confirm the connection works.
4

Use tools in GenMB Code

Tools from all connected MCP servers appear automatically in GenMB Code sessions. The AI can use them alongside built-in tools to assist with your app development.

Security Requirements

All MCP server URLs must use HTTPS - plain HTTP connections are rejected. URLs are validated against SSRF protections to block private IP ranges and internal network addresses. This ensures external servers cannot be used to probe your infrastructure.
Each app supports up to 10 connected MCP servers. Auth tokens for external servers are encrypted at rest and only decrypted at the point of outbound calls.

Available Tools

The GenMB MCP server exposes 7 tools for managing apps programmatically from any MCP-compatible client. Each tool maps to a core GenMB operation.

list_apps

List all apps belonging to the authenticated user.

get_app

Get metadata for a specific app by ID.

list_files

List all files in an app's project.

read_file

Read the contents of a project file.

write_file

Create or overwrite a project file. Saves a new version.

edit_file

Replace an exact substring in a file. Saves a new version.

deploy_app

Deploy an app to a *.genmb.com subdomain. Requires Pro.

Using Tools Effectively

Every write_file or edit_file call saves a new version, so any MCP edit can be rolled back from Version History in the editor.

API Key Management

Interactive clients connect via browser sign-in and don't need a key. API keys are the alternative for scripts, CI, and clients without OAuth support - create them from the Connect wizard in any app's Add-ons panel (under Developer / MCP servers).

  • Create up to 5 API keys per user account.
  • Keys use the genmb_sk_ prefix for easy identification.
  • Keys are SHA-256 hashed before storage in Firestore, the raw key is shown only once at creation time.
  • Revoke any key instantly from the dashboard. Revocation takes effect immediately.
  • Each key grants full access to the authenticated user's apps and operations.
Store your API key securely. If you suspect a key is compromised, revoke it immediately from the dashboard and create a new one. The raw key is displayed only once at creation, it cannot be retrieved later.

Security

MCP integration includes multiple security layers to protect your account and prevent abuse.

SSRF protection

All MCP server URLs are validated to block private IP ranges and non-HTTPS schemes.

HTTPS-only

MCP server connections must use HTTPS. Plain HTTP is rejected.

Rate limiting

60 requests per minute per user, enforced via a distributed sliding window shared across instances.

Result truncation

MCP tool results are truncated at 50,000 characters to prevent memory issues.

Encrypted tokens

Auth tokens for external servers are encrypted at rest and only decrypted at the point of outbound calls.

Exceeding the limit returns a JSON-RPC error with HTTP status 429. If you are scripting bulk operations, pace requests to stay under 60 per minute.

FAQs

What AI clients can connect to GenMB's MCP server?
Any AI client that supports the Model Context Protocol with Streamable HTTP transport can connect. This includes Claude Code, claude.ai, Cursor, and other MCP-compatible tools. Most clients connect with just the server URL - GenMB opens a browser window where you sign in and approve access. API keys remain available for scripts and CI.
Is MCP available on the Free plan?
Connecting AI clients (Claude Code, claude.ai, Cursor) via browser sign-in is free - you can list, read, and edit your apps from any client. Deploying via MCP, manual API keys, and client mode (connecting external MCP servers to your apps) require the Pro plan.
How do I connect Claude Code to GenMB?
Run: claude mcp add --transport http genmb https://genmb.com/api/mcp/mcp - no API key needed. On first use, Claude Code opens a browser window where you sign in to GenMB and approve access. Then you can browse, edit, deploy, and manage GenMB apps directly from Claude Code.
Can I connect multiple external MCP servers to one app?
Yes. Each app can connect up to 10 external MCP servers. Tools from all connected servers are available in GenMB Code sessions simultaneously.
What happens if my API key is compromised?
Revoke the key immediately from your GenMB dashboard. Revocation takes effect instantly, all requests using that key will be rejected. Then create a new key and update your client configuration.

Ready to build?

Create your first app for free, no credit card required.