Spec Driven Development
MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.
Description from the maker (original English)
Build multi-tenant apps over MCP. Schemas, CRUD, deploys — access control enforced server-side.
These three are never merged into one score: opinions, measurements and popularity are different things.
We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.
Pick the AI app you use, then copy the settings.
X-API-KeyValues marked secret are keys to your account. Never share them or paste them into a chat.
You need
Which app do you use?
Pick your app above. We remember it, so next time the button says “Install in …”.
This address needs a key in a request header, which the add-connector menu cannot set. Use Claude Code, Cursor or VS Code instead.
Run this in your terminal
claude mcp add --transport http supero https://api.supero.dev/mcp/v1/messages --header 'X-API-Key: your-value'Fill in the empty values before running it.
Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json
{
"mcpServers": {
"supero": {
"url": "https://api.supero.dev/mcp/v1/messages",
"headers": {
"X-API-Key": "your-value"
}
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
Paste into .vscode/mcp.json in your project
{
"servers": {
"supero": {
"type": "http",
"url": "https://api.supero.dev/mcp/v1/messages",
"headers": {
"X-API-Key": "your-value"
}
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
This address needs a key in a request header, which the add-connector menu cannot set. Use Claude Code, Cursor or VS Code instead.
Your choice stays on this device in a cookie; no account needed.
X-API-Key secret required HTTP headerThese settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.
We have not read this server’s tool list yet; we check endpoints in rotation.
We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 6, 2026
The registry name was verified with the GitHub account supero-platform, which owns the repo
We have not read this repo from GitHub yet
We have not read this repo from GitHub yet
Not checked yet; we check endpoints in rotation
Not checked yet; we check endpoints in rotation
Not checked yet; we read the tool list when we check the endpoint
Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.
It passed 1 of 1 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.
You need to fill in: X-API-Key
It runs in the maker’s cloud. Connect over the internet with nothing to install, but what you send passes through the maker’s servers.
The GitHub repo last changed –, and the latest version (2.0.1) reached the registry 15 days ago.
Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. It connects by URL, so apps that accept remote MCP servers work too, such as ChatGPT in developer mode.
In the same category: Spec Driven Development, Remote Desktop Commander, zanadir
Servers in the same category from other makers, sorted by stars.
Reading a card:★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi
MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.
Remote Desktop Commander: use files, terminal and processes on your own computers from any AI app.
Find what a repository's CI is missing, and which security checks cannot fail the build.
Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.
Build and deploy a real web app from your AI assistant, using Supero over MCP.
You describe the app. Your assistant (Claude Code, Cursor, VS Code Copilot, or any MCP client) reads the build spec from Supero, writes the app, validates it, and deploys it to a URL you can open. The app gets sign-in, roles, a database, an admin panel and an API from the platform, so the assistant writes the part that is yours and nothing else.
This repo has three things:
The free plan gives you 3 projects and needs no card. Deployments on it are 30-minute previews; a URL that stays up is a paid plan.
| If you want to | Go to |
|---|---|
| Build your first app, with every step spelled out | [Your first app, step by step](docs/first-app.md) (30 minutes) |
| Choose something to build | Picking a project, then the project list |
| See a finished example with its source | Page Turners, a book club app |
| Fix something in an app that exists | Community apps |
| Read about a platform feature | Learn more on docs.supero.dev |
The rest of this page is the short version for people who have done this before.
| Key | What the assistant can do with it | Use it when |
|---|---|---|
| Project key | Build into one project, and only that one | You have made a project in the dashboard and want the app there. This is the safer default. |
| Domain key | Create new projects and build into them | You want the assistant to create the project too. Needs a domain admin. |
The key starts with ak_ and is shown once. Copy it then. If you lose it, rotate it under API Keys to get a new one.
Treat the key like a password. Do not commit it, and do not paste it into an issue or an app folder.
The server is at https://api.supero.dev/mcp/v1/messages (streamable HTTP). Send the key in an X-API-Key header, raw, with no Bearer in front.
Claude Code
claude mcp add --transport http supero \
https://api.supero.dev/mcp/v1/messages \ --header "X-API-Key: ak_..."
Then run /mcp inside Claude Code and check that supero is connected.
Cursor: ~/.cursor/mcp.json
{
"mcpServers": { "supero": { "url": "https://api.supero.dev/mcp/v1/messages", "headers": { "X-API-Key": "ak_..." } } } }
VS Code (GitHub Copilot): .vscode/mcp.json
{
"servers": { "supero": { "type": "http", "url": "https://api.supero.dev/mcp/v1/messages", "headers": { "X-API-Key": "ak_..." } } } }
Run MCP: List Servers, start supero, and use Copilot in Agent mode.
Anything else. Any client that speaks MCP over streamable HTTP and lets you set a request header will work. More detail, and the one known gap (Claude Desktop's connector screen wants OAuth, which the server does not offer yet), is in docs/connect.md.
Ask your assistant:
Call build_whoami on Supero and tell me what it says.
You should get back your role, your domain and, for a project key, the project it is bound to. If you would rather check from a terminal:
curl -s https://api.supero.dev/mcp/v1/messages \
-H "Content-Type: application/json" \ -H "X-API-Key: ak_..." \ -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"build_whoami","arguments":{}}}'
Paste this, with your own description in the middle.
With a project key (the project already exists):
Connect to Supero over MCP and use your build_ tools. Everything runs through MCP: don't look for a local supero CLI or a SKILLS.md file on disk, there isn't one.
Build this app in my project: [describe your app: the main thing users do, the key screens, and an admin view].
Work in this order: build_whoami, then build_get_skills to load the spec, then build_plan. Echo the plan back to me and wait for my go-ahead. Then build_get_examples with the closest archetype as your reference, author the bundle, run build_validate and fix everything it reports, run build_doctor and fix its warnings, then build_publish and deploy (build_deploy for a ~30-minute preview, build_go_live for the permanent URL). Finally build_smoke_test the deployed URL and finish with a short summary: what you built, the URL, and how I log in.
With a domain key, change the second paragraph to:
Create a new project with build_create_project (pick a short name and namespace), then build this app in it: [describe your app].
Stuck for an idea? Every project brief ends with a prompt that is ready to paste.
If the assistant starts searching your disk for a CLI, send it this:
Stop reading the local filesystem. There is no CLI and no SKILLS.md. Call build_get_skills over MCP now, author the bundle, then build_validate.
More prompts, for changing an app, fixing a failed deploy and going live, are in docs/prompts.md.
| Step | Tools | What happens |
|---|---|---|
| 1. Orient | build_whoami | Finds out which project it may build into and what the key allows. |
| 2. Learn | build_get_skills, build_get_examples, build_get_service_contract | Reads the build spec, a working reference app, and the contract of each platform service it plans to use. The spec is served live, so it is never out of date. |
| 3. Plan | build_plan | Turns your description into records, roles and screens. You read it and say go. |
| 4. Write | (your assistant) | Writes a small bundle: the data model, the configuration, the setup and the front end. |
| 5. Check | build_validate, build_doctor | The platform checks the bundle and reports what to fix before anything is deployed. |
| 6. Ship | build_publish, build_deploy or build_go_live, build_deploy_status, build_smoke_test | Publishes a version, deploys it, waits for it to come up, and tests the live URL. |
A deploy usually takes a few minutes and can sit in launching for five or more. That is normal: the assistant should keep polling build_deploy_status for up to ten minutes before deciding something is wrong.
The full walk-through is in docs/build-flow.md, and every tool is listed in docs/tools.md (64 tools; you can list them without a key).
What you do not have to build. Sign-in, roles and permissions, per-record and per-field access rules, the database, the REST API, the admin panel, and data kept apart between organisations in a multi-tenant app. There are also ready-made services to switch on instead of writing: bookings, appointments, rentals, cart, orders, payments, approvals, tasks, tickets, reviews, memberships, recurring plans, inventory, document signature, attachments, notifications, email and more. Ask the assistant to call build_list_capabilities to see them all.
build_get_bundle, edits it, then validates, publishes and deploys again. The version number goes up each time.build_deploy gives a preview URL that lasts about 30 minutes, which is enough to click through and share. build_go_live gives a permanent address on supero.live and needs a paid plan.| Free | |
|---|---|
| Price | $0, no card |
| Projects | 3 |
| Preview deployments | 10 per project, about 30 minutes each |
| Schemas | 20 |
| API requests | 10,000 a month |
| Permanent live URL | From the Basic plan |
These are the figures on the pricing page on 5 October 2026. That page is the authority if they differ. A plan and a validation pass cost nothing, so get build_validate clean before spending a preview. More in docs/limits.md.
| You see | It means | Do this |
|---|---|---|
Authentication required | No key reached the server | Check the header is X-API-Key and the client was restarted after you added it. |
401 or Invalid API key | The key is wrong, cut short, revoked, or has Bearer in front | Paste the raw ak_... value. If it is lost, rotate it under API Keys. |
| The assistant cannot create a project | You gave it a project key | Create the project in the dashboard, or use a domain key. |
The assistant looks for a CLI or a SKILLS.md file | It is guessing from old habits | Send the recovery prompt from step 4. |
build_validate fails | The bundle breaks a rule | Let the assistant fix what it lists and run it again. This step is free. |
build_doctor warns that workflows "usually need elevated permission" | That warning is out of date | Ignore it. Workflows register and run with a project key (checked 6 October 2026). |
| The app deployed but screens are half empty | Some starter data may not have been created. This was a platform fault, fixed on 5 October 2026 | If you still see it, ask the assistant to call build_logs and look for SEED FAILURES, deploy again, and please open an issue. |
Deploy stays in launching | The app is still starting | Wait. Poll for up to ten minutes. |
| A status field will not save for ordinary users | Fields named status or state are protected | Name lifecycle fields _state, for example booking_state. |
| Out of previews | The free plan has ten | Validate more before deploying, or upgrade. |
Still stuck? Ask in Discussions. Found a way to make the server misbehave? See SECURITY.md and report it privately.
There are four ways in, and none of them needs permission first. The open issues list good first ones, and we reply within a day.
CONTRIBUTING.md has the details.
Only the beginning is shown; read the rest in the repo