Tool

Lovable

Observed OAuth behavior for this client.

Latest behavior: CIMD metadata URL

Latest OAuth behavior: CIMD metadata URL
Behavior evidence: Lovable authorization used client_id metadata URL https://api.lovable.dev/.well-known/oauth-client.
Behavior observed at: 2026-08-19T19:46:51.714Z
Name source: Known product association
Identity association: Matched an explicitly configured metadata URL or trusted metadata namespace.
Last successful metadata URL: https://api.lovable.dev/.well-known/oauth-client
Vendor: Unknown
Source URL: https://api.lovable.dev/.well-known/oauth-client
Claimed status: unknown

OAuth client identities

Names reported by a client describe its own registration. The client ID and issuer identify the OAuth client.

Client ID: https://api.lovable.dev/.well-known/oauth-client
Issuer: Not recorded
Registration method: CIMD metadata URL
Reported name: Lovable

MCP protocol version history

Newest protocol versions first, then most recently seen. Repeated client releases and version outcomes are counted together. Protocol acceptance and request outcomes are shown separately; an unsupported method does not reject an accepted version. A counter-offer or discovery response does not prove the client used that version. New observations from token-linked sessions are associated with the exact OAuth identity; older observations without an identity link remain on the global protocol history.

No protocol observations are linked to this OAuth identity yet. Historical observations without an identity link remain on the global protocol history.

No protocol versions recorded yet. Reconnect the MCP client and make a request to capture its version.

Last Successful CIMD Metadata

2026-08-19T19:46:52.220Z

Name in CIMD metadata: Lovable
Client URI: https://lovable.dev
Logo URI: Not observed
Grant types: authorization_code, refresh_token
Response types: code
Token endpoint auth method: none
Application type: Not observed
Redirect URIs: https://api.lovable.dev/workspaces/connectors/mcp/oauth/callback

Latest OAuth Attempt

Timestamp: 2026-08-19T19:46:52.652Z
Path: POST /token
Client ID: https://api.lovable.dev/.well-known/oauth-client
Client name: Go-http-client
Client version: 2.0
Redirect URI: https://api.lovable.dev/workspaces/connectors/mcp/oauth/callback
Scope: Unknown
PKCE: Unknown
User agent: Go-http-client/2.0

Latest CIMD Check

Passed at 2026-08-19T19:46:52.220Z

Errors

No validation errors.

Warnings

metadata.application_type is missing
metadata.logo_uri is missing

Raw metadata JSON

{
  "client_id": "https://api.lovable.dev/.well-known/oauth-client",
  "client_name": "Lovable",
  "redirect_uris": [
    "https://api.lovable.dev/workspaces/connectors/mcp/oauth/callback"
  ],
  "grant_types": [
    "authorization_code",
    "refresh_token"
  ],
  "response_types": [
    "code"
  ],
  "token_endpoint_auth_method": "none",
  "client_uri": "https://lovable.dev",
  "policy_uri": "https://lovable.dev/privacy",
  "tos_uri": "https://lovable.dev/terms",
  "software_id": "lovable",
  "code_challenge_methods_used": [
    "S256"
  ]
}