Lobu MCP Server

by lobu-ai Your server? Claim it

answering

Lobu is answering right now. Last checked 1 min ago. Last commit 7 Nov 2026.

Shared, permission-aware company context for AI agents, with provenance, approvals and audit.

Uptime history 91 days of history · worst day 92%

91 days agonow

100.0%

Uptime 24h

92 of 92 checks

—

Tools

hidden behind auth

286 ms

Response time

average over 24h

233

Stars

last commit 7 Nov 2026

What the code does

We read the source, 15 h ago · rules 995398eba69f

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

Builds a file path from a variable packages/server/src/utils/mcp-app-bundle.ts:25, packages/connector-worker/src/daemon/agent-binaries.ts:47, packages/server/src/gateway/files/artifact-store.ts:237

  const rel = path.join('dist-mcp-apps', appDir, relPath);

Builds a database query by concatenation packages/cli/src/commands/_lib/apply/rollback-cmd.ts:258, packages/server/src/tools/admin/manage_connections/handlers/connect.ts:249, packages/server/src/notifications/triggers.ts:116 и ещё 3

    plan.counts.update +
    plan.counts.delete;

Runs an external command packages/cli/src/commands/connect/agent-detect.ts:24, packages/cli/src/commands/connect/install-targets.ts:361, packages/connector-worker/src/daemon/agent-binaries.ts:67 и ещё 9

      execFileSync(command, [name], {

Image runs as root db/postgis/Dockerfile:33

USER 0

Reads files and sends them to the network packages/cli/src/commands/memory/_lib/seed-cmd.ts:1

import { existsSync, readdirSync, readFileSync, statSync } from "node:fs";

Sends data to a third-party sink packages/server/src/gateway/connections/platforms/telegram.ts:43

    : "https://api.telegram.org";

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 1 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add lobu --transport http https://lobu.ai/mcp

Settings → Connectors → Add custom connector, then paste this address

https://lobu.ai/mcp

~/.codex/config.toml

[mcp_servers.lobu]
url = "https://lobu.ai/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "lobu": {
      "url": "https://lobu.ai/mcp"
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "lobu": {
      "type": "http",
      "url": "https://lobu.ai/mcp"
    }
  }
}

This endpoint answered with an authorization challenge. The server is running, and it signs you in through your browser: there is no API key to paste.

Endpoints

URL	Transport	State	Latency	Checked
https://lobu.ai/mcp	streamable-http	sign-in	300 ms	1 min ago

Alternatives to Lobu

same job, measured the same way

Catalyst Governance

by stratogenic-ai

Governance middleware for AI agents: permission gates, approvals, compliance scanning, audit ledger.

31 tools answering

agentleFS

by agentlefs

Shared second brain for any AI with agent permissions

answering

Prubex

by prubex

Every email and calendar account you connect, for AI agents, with permissions and approvals.

answering

promptev

by promptev

Sovereign AI agents for business: answers from company data, each person's permissions, approvals.

answering

SpineFrame

by ratnaditya-j

Governance runtime for AI agents with signed provenance, compliance audits, and OSINT.

5 installs/wk local only

Feason Context

by feason-com

Christian source evidence for AI agents, with provenance, tradition coverage, and citation checks.

answering

BenchFleet

by jimbob1414

Let AI agents use your real Android phones safely, with permissions, approvals and an audit log.

40 installs/wk local only

Runeward

by runewardd

Governed execution cells for AI agents: Docker/K8s sandboxes with policy, audit, and approvals.

local only

Lobu — questions

Answers built from our own checks of this server.

Why is there no tool list for Lobu?

The server answered our handshake with an authorization challenge, so it is running — but it will not describe its tools to an anonymous client. To see them you need to connect with your own credentials. We record it as alive, not as broken: 100.0% of checks in the last 24 hours got a reply.

Is Lobu working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 92 of 92 checks got a reply (100.0%), average response time 286 ms. The bar chart above shows every period we have measured.

How do I connect Lobu?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address. You sign in through your browser once and the client keeps the session: no key to copy, and it refuses anonymous clients.

How do you sign in to Lobu?

No API key is involved. Lobu answers our knock with an OAuth challenge, so you authorise it once in your browser and the client keeps the session. That is also why we see no tool list: it will not describe itself to an anonymous client, and that is the server working as intended, not a fault.

How fast is Lobu?

It answers our handshake in 286 ms on average, which is faster than 48% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.

Is Lobu open source?

The code is open source: it is published under the Apache-2.0 licence, written in TypeScript, 233 stars on GitHub and 55 open issues. The licence covers the code in the repository, not the hosted service at lobu.ai, which runs on its operator's own terms.