Introducing FlowCP: Turn Your Bubble App into an MCP Server in minutes

Hi Bubblers,

I’m working on a new product called FlowCP.

FlowCP turns your Bubble app API into a hosted MCP server, so AI clients like Claude, ChatGPT, Cursor, Windsurf, Cline, and Zed can safely discover and use approved tools from your app.

The goal is to make it easier for Bubble builders to connect their apps to AI agents without writing custom MCP servers manually.

You can use it to let AI agents safely:

  • Search and summarize records from your Bubble database

  • Create or update records through approved API workflows

  • Trigger backend workflows from AI clients

  • Help internal teams explore customer, order, booking, or support data

  • Build AI assistants for admin dashboards, CRMs, marketplaces, SaaS apps, and internal tools

  • Connect your Bubble app to agentic tools like Cursor or Claude

FlowCP also supports:

  • Multiple workspaces, apps, and multiple app versions.

  • Tool review before publishing

  • Tool testing, renaming, enabling, and disabling

  • End-user Bubble OAuth instead of shared admin tokens

  • Tool call logs for debugging and visibility

The platform is now available in private beta.

DM me if you’d like early access, or if you’re building a Bubble app that could benefit from AI agent access.

Just added a new stats and logs dashboard! You can now monitor exactly how your users are interacting with your App MCP Server.

Note on privacy: Prompts, responses, or headers are ever shared or stored.

FlowCP updates — this week

  • Skills, Prompts & Widgets — Servers offer more than tools: skill:// playbooks, /slash-command prompts, and inline ui:// widgets. AI Suggestions drafts skills and prompts from your tools.

  • Playground — Chat-test any server before publishing. Connect through the real OAuth flow, pick an OpenRouter model, and watch it call your tools, skills, and prompts live. Sessions save to history.

  • Capability tests + publish gate — A Tests page runs the runtime’s own checks (tools, auth, safety, skills, widgets, prompts). Publish-critical failures now block publishing.

  • Alerts — Email or Slack when a server spikes on failures or unauthorized calls, with windows and cooldowns.

  • More OAuth providers + per-server auth — Auth0, Clerk, Okta, and Generic OAuth2 alongside Bubble. Each version can use per-user OAuth, a shared key/bearer, or none.

  • Bring-your-own domain — Serve on your own host with auto-provisioned TLS. Point a CNAME and the published URL switches over.

What shipped this week (June 8–15)

Big week at FlowCP. Here’s what’s new, in plain terms.

Easier ways to share your server
• Add an AI chat widget to your own app with a single line of code — your users get an assistant that can safely use your tools, each in their own session.
• New copy-paste setup snippets for Claude, ChatGPT, Cursor, and VS Code, all in one place.
• Export your server and run it on your own infrastructure (paid).

Manage it like real software
• Separate test and live environments, so you can try things out before your users see anything.
• One-click deploys with a checklist that shows exactly what’s happening as it goes live.
• Full change history — see every edit, compare versions, and roll back anytime.

Built for developers
• A new command-line tool to manage everything from your terminal.
• Plug FlowCP into your GitHub workflow to test and publish automatically.

More for your AI tools

• Expose structured data, trim what the AI sees, and let large APIs load tools only when needed.
• A built-in feedback tool so your users can report issues you can track in one place.

Smoother onboarding
• A getting-started checklist, usage alerts before you hit your limits, and a clearer landing page for teams new to MCP.

Security
• Closed several security gaps and tightened login protections across the board.

FlowCP Product Update — June 15–22, 2026

It’s been a big week, headlined by a brand-new embeddable AI chat widget that lets your users talk to your MCP server right inside your own app — plus a major expansion of identity providers, a remote connector library, and a redesigned Playground.

The embeddable AI chat widget (new!)

Drop a single snippet into your Bubble app — and your published MCP server becomes a chat assistant for your end-users. We shipped the whole experience this week:

  • Per-user sign-in, built in. The widget runs your server’s OAuth in a popup, so each conversation executes in that user’s own authorization context — no host-page token plumbing required.
  • Rich, live conversations. Replies render as markdown and stream token-by-token (including the model’s reasoning), with a multiline composer, a / command menu for your prompts/skills/resources, and inline @mention chips.
  • File attachments. Users can attach images, audio, PDFs, and documents. Files are read in the browser and sent inline — never uploaded or stored on our servers — and are opt-in per widget with a size cap.
  • Human-in-the-loop approvals. Before the agent runs a sensitive (confirmation-gated or destructive) tool, it pauses and shows a confirm/decline card with the exact arguments and “as whom” context. The model can never self-approve.
  • Polish & control. Fullscreen mode, a drag-to-resize panel, collapsible “thinking,” a visual Preview button to see your widget before going live, per-widget model selection, and the option to bring your own OpenRouter key.
  • Multiple servers in one chat. A single widget can now aggregate several MCP servers (“connectors”) in one conversation, each with its own sign-in, with tools namespaced so nothing collides.

Remote connector library

A new Connectors catalog lets your workspace browse and enable ~110 external/remote MCP servers (GitHub, Notion, Linear, Stripe, Sentry, and more) and attach them to your chat widgets — with per-end-user OAuth against those third-party servers and all traffic routed through our SSRF-safe network layer.

11 new identity providers

The MCP Auth picker now supports Microsoft Entra ID, AWS Cognito, Keycloak, WorkOS (AuthKit), Zitadel, FusionAuth, Ory Hydra, Frontegg, Descope, Stytch, and Supabase — joining Auth0, Clerk, and Okta. Each resolves endpoints automatically via OIDC discovery.

Redesigned Playground

  • New three-pane workspace with capability toggles — flip individual tools and skills on/off to test a deliberately narrowed toolset.
  • Chat against your draft server before publishing — no more “server not found” errors on unpublished work.
  • Tools collapsed by default and the composer pinned so it never scrolls out of view.

Dashboard & site improvements

  • New Distribute sidebar group bringing the Chat widget and MCP-client setup together.
  • Redesigned Servers page as an operational overview.
  • New public Pricing page covering all four tiers.
  • YAML OpenAPI documents now supported for Git and URL imports.
  • Provider-aware import copy (no longer Bubble-specific) and one-click copy buttons on OAuth and branch values.
  • New guides for publishing to the ChatGPT and Claude directories.

Reliability & trust

  • Clearer tool errors — upstream 4xx/5xx responses now surface a meaningful message instead of a generic “unexpected error.”
  • Golden-scenario replay — record a read-only tool’s response shape and replay it to catch upstream API drift.
  • Expanded Privacy Policy (GDPR/CCPA), a full commercial Terms of Service, and a public Subprocessors page.

Great work on this!

What’s new

The last two weeks were about reach and revenue: taking the MCP servers you build on FlowCP to more places, letting you get paid for them, and giving you more ways to run and observe them. Here’s a tour of what shipped, grouped by what it lets you do.

Ship your server as a chat bot

You can now distribute a published MCP server as a hosted chat bot in Slack, Discord, Telegram, or WhatsApp. People @mentionmention the bot in a channel (or DM it) and it answers in-thread using your server’s tools — the same agentic loop as the Playground and the embeddable chat widget, now living where your team already works.

Crucially, the bot runs in each chat user’s own account, not one shared identity. The first time someone invokes a user_oauth tool, the bot privately DMs them a sign-in link; after they connect, it acts as them. Those sign-ins now refresh automatically, so users aren’t re-prompted every time an access token expires. And when a tool needs confirmation — anything destructive — the bot posts Approve / Reject buttons right in the thread, and only the person who started the turn can act on them.

Distribute as a chat bot

Get paid for your MCP server

FlowCP now supports agentic payments end to end. You can charge for tool calls using the x402 standard, settled through a real Coinbase CDP facilitator, with the platform fee billed via Stripe. A new Monetization area gives you earnings analytics and payout UX, and you can test the whole paid flow safely in the Playground with a test wallet before you go live.

Agentic payments (x402) · Monetize your MCP server

Run it your way, export and self-host

If you’d rather own the runtime, you now can. Export a server as an installable Claude Code plugin, or run the self-hosted Docker image with plan-based feature gating and signed licenses. Best of all, an exported runtime no longer freezes at export time: with snapshot sync, it polls FlowCP and hot-swaps your latest published config in memory — no restart, no redeploy — while failing closed to the last good config if anything goes wrong. Secrets are never pulled; your upstream credential stays where you put it.

Export & self-host your MCP server · Export as a Claude Code plugin · Self-host the platform

Build and test faster

The Playground and embeddable chat were rebuilt on a cleaner component set, and the Playground gained Inspector-style direct testing surfaces plus live streaming of MCP logging and progress notifications — you see what your server is doing as it happens.

You can also now author tools by hand. A new Manual app source lets you define a tool’s method, path, and schema directly — no OpenAPI document required — and test-call it inline. We also added client-side field selection so callers can trim large responses, and fixed a Bubble edge case where list results could be truncated or collapsed to empty objects.

Chat-test in the Playground

See more, get help faster

Teams on Enterprise can now stream execution logs to DataDog, Splunk, or a generic HTTP endpoint from a new Log streaming page — the same privacy-safe projection as the Execution logs view (never tokens, headers, or bodies), with per-destination filtering and SSRF-validated targets.

And when you need a hand, there’s now an in-app Support form in the account menu: pick a category, describe the issue, optionally attach an image or video, and it emails a ticket to our team attributed to your workspace.

Stream logs to external sinks · Get support