Lobu
Shared, permission-aware company context for AI agents, with provenance, approvals and audit.
Connector by lobu-ai · GitHub account verified by the MCP Registry
Install
Works with Claude Code, VS Code, Cursor, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install connector/lobu-ai-lobu
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Remote endpoint
https://lobu.ai/mcpRemote (HTTP)
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Use cases: agent-orchestration, agent-memory, workflow-automation
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.
- Tools
- 12 read · 27 write · 6 delete · 3 not yet classified
- Secrets
- None asked for
- Install scripts
- Nothing to install (hosted)
- Runs as
- Hosted (remote endpoint)
Tools by what they do 48
Read from the source code; the running server may list different tools.
Read 12 · Look things up without changing anything.
ask_userget_automationgreplist_conversationslist_metricslist_organizationsmetric_seriesopen_viewquery_metricread_conversationread_knowledgeresolve_path
Write 27 · Create, change, send or run things.
edit_messageget_approvalinvoke_event_actioninvoke_view_actionmanage_agentsmanage_auth_profilesmanage_automationsmanage_catalogmanage_classifiersmanage_connectionsmanage_conversationsmanage_entity
Show 15 more tools
manage_entity_schemamanage_feedsmanage_operationsmanage_schedulesmanage_viewsnotifyquery_sdkquery_sqlreactsave_memoryschedule_followupsearch_memorysearch_sdksend_messageupload_file
Delete 6 · Delete, drop, revoke or wipe things.
bashClickdelete_messageresolve_approvalrun_sdkScroll
Not yet classified 3 · We could not tell from the name and description.
generate_audiogenerate_imagepresent_event
Network hosts it talks to 1
lobu.ai· found in remote endpoint, install command
Tools (48)
Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].
ask_userbashDescription is built at runtime.
Clickcan change or delete dataClick an element id, query, or coordinates. Events are delivered to whatever owns the point, so a target that is visible but not frontmost can absorb the click; set foreground:true to raise the target app/window first.
delete_messageedit_messagegenerate_audiogenerate_imageget_approvalGet approvalGet the server-authored review card for one approval run returned by a pending action. On an unscoped OAuth session, pass organization with the target workspace slug or id. The card reads the canonical durable approval, exposes in-card controls only when this OAuth app context can resolve it, and always includes a review link while pending. Reading does not change workspace content or external systems. OAuth and PAT calls append a private audit/activity record.
get_automationAutomation detail + windows. SDK alternative: client.automations.get.
grepDescription is built at runtime.
invoke_event_actionInvoke event actionAppend the declared event for a JSON-template interaction using the signed-in MCP App user as the actor. The server revalidates the source event, rendered action/value, and event-kind registry.
invoke_view_actionInvoke view actionAppend the declared event for a view action using the signed-in MCP App user as the actor. The server revalidates the CURRENT view row: an action the view no longer declares is rejected.
list_conversationslist_metricsList metricsread-onlyList governed declared and SQL-derived metrics per entity type, including business KPIs such as spend and net worth. SDK alternative: client.metrics.list.
list_organizationsList organizationsread-onlyList organizations the authenticated user belongs to, plus any public workspaces the session can read. Managed connector providers include structured managed_auth onboarding metadata. SDK alternative: client.organizations.list via `query_sdk` / `run_sdk`.
Show 33 more tools
manage_agentsAgent management. SDK alternative: client.agents.
manage_auth_profilesAuth-profile management. SDK alternative: client.authProfiles.
manage_automationsCreate, list, and manage Automations. SDK alternative: client.automations.
manage_catalogBrowse installable connectors, skills, and Automation templates. Use `list_catalog` to see available (manifest) entries — each connector entry's `detail.source_uri` feeds into `manage_connections` action `install_connector`. Use `list_installed` with `include_catalog: true` to see installed + available with `installed`/`installable` flags. Read-only. SDK alternative: client.catalog.
manage_classifiersClassifiers (label schemas) and labels. `classify` is the only way labels are written; an Automation labels events by calling it with source 'llm'. SDK alternative: client.classifiers.
manage_connectionsConnection and connector lifecycle. Use `manage_catalog` → `install_connector` → `connect`; poll `get` until active. Also: list/get/update/delete connections and connector config. Event/message subscriptions are Automations managed through `manage_automations`. Note: some connectors auto-register from a paired device (Chrome extension / Mac app advertising a capability) and appear in `list` without an explicit install. SDK alternative: client.connections.
manage_conversationsList/get an agent's conversations and send a turn (awaits the reply). SDK alternative: client.conversations.
manage_entityEntity management. SDK alternative: client.entities.
manage_entity_schemaEntity-type schema management. SDK alternative: client.entitySchema.
manage_feedsFeed management. SDK alternative: client.feeds.
manage_operationsManage operationsOperation execution / approval. SDK alternative: client.operations.
manage_schedulesCreate / list / pause / cancel recurring or one-shot scheduled jobs. Supports send_notification and wake_agent action types. Per-row attribution lets you trace what scheduled it and from where. SDK alternative: client.schedules.
manage_viewsView management. SDK alternative: client.views.
metric_seriesMetric seriesread-onlyRead-only time-series SQL for dashboard sparklines. SDK alternative: client.metrics.series.
notifySend a notification to org users (admins / all / specific user ids).
open_viewOpen viewread-onlyOpen a Lobu view. Frame-capable hosts render it inline as an MCP App; the result also carries a web URL that renders the same view with the same params for hosts that cannot show a frame.
present_eventquery_metricQuery metricread-onlyRun a governed declared or SQL-derived measure, such as spend or net worth. SDK alternative: client.metrics.query.
query_sdkQuery SDK (read-only)Run capability-scoped, read-only TypeScript through the Lobu SDK. On bare OAuth /mcp, select a workspace with await client.org(target) before workspace methods. Query entities, relationships, feeds, operations, metrics, and authorized connected-source data; write, administrative, and external-action methods are rejected by the sandbox. Use `run_sdk` for mutations and `search_sdk` to discover methods. Keep batches within the wall-clock budget and return a partial result with a cursor before expiry; reserve `ctx.sleep(ms)` for short bounded retries. Start long device work in `run_sdk` with opera…
query_sqlQuery SQLRun a paginated, sortable, searchable read-only SQL query (member-safe). Table references auto-scope to the bound org, or pass `connection` to push read-only SQL fully into an external database connector. Source-backed feeds are queried explicitly with query_sdk client.feeds.readMany. Prefer client.metrics.query for declared measures; use client.query in query_sdk for simple one-shot SQL. Do NOT use positional parameters ($1, $2, …). `org_slug` selects a granted workspace on bare OAuth /mcp and is required when the connection has no workspace binding. The query does not change workspace conten…
reactread_conversationread_knowledgeRead content/memory. SDK alternatives: search_memory, client.knowledge.search.
resolve_approvalResolve approvalcan change or delete dataResolve the exact pending approval represented by this Lobu MCP App. This tool is app-only and requires the hidden, host-bound capability delivered with the review card.
resolve_pathResolve pathread-onlyResolve a namespace-based URL path like /acme/entity-type/entity-slug into namespace and entity details.
run_sdkRun SDKcan change or delete dataExecute a capability-scoped Lobu SDK script. On bare OAuth /mcp, select workspace operations with await client.org(target); account discovery and conversation titles require no target. The script can create, update, or delete Lobu data and invoke connector, agent, or device operations only through documented `client` methods; workspace permissions, operation policies, human approvals, and audit remain enforced. Use `query_sdk` for reads, `search_sdk` to discover methods, and `dry_run=true` to preview write, administrative, or external calls without executing them. For connector setup, do the a…
save_memorySave memorySave user-shared facts, preferences, decisions, observations, and notes to workspace memory. The returned id is immediately readable with `client.knowledge.read`; the result also echoes the bounded saved payload for inline display. Semantic search indexing is asynchronous and reported as `indexing_status`. Storage is append-only — pass `supersedes_event_id` to replace an existing fact (the old event is hidden from future searches without losing history). Use a stable `idempotency_key` when a write may be retried. Optionally attach to entities via `entity_ids`. Always search first to avoid dupl…
schedule_followupScrollcan change or delete dataScroll up/down/left/right at the current pointer or target element.
search_memorySearch memorySearch local saved workspace memory: entities, facts, decisions, preferences, observations, notes, and authorized channel transcripts. To open a known memory, event, or content ID, pass query: "memory 1234" and include_content: true. entity_id is only for entity records, never memory IDs. Source-backed feeds are never queried implicitly; `coverage` reports local stores searched and visible source feeds with status `not_queried`, which agents can read explicitly through query_sdk client.feeds.readMany. Pair writes with `save_memory`. The search does not change workspace content or external syst…
search_sdkSearch SDK docsDiscover available SDK methods and runtime helpers. Search by method name, namespace (e.g. "entities", "connections", "automations"), or keyword. Returns documentation, signatures, and access requirements for each method. (Then call methods via query_sdk for reads or run_sdk for writes. Pass mode="read" to show only query_sdk-safe methods.) The search does not change workspace content or external systems. OAuth and PAT calls append a private audit/activity record.
send_messageupload_file
Signals
- Stars
- 230
- Forks
- 31
- Open issues
- 62
- Contributors
- 44
- Last commit
- Oct 24, 2026 (4 days ago)
- Last release
- Oct 21, 2026 (7 days ago)
From GitHub (fetched Oct 24, 2026).
Details
- Registry name
io.github.lobu-ai/lobu- Version
- 0.2.0
- Auth
- Auth not stated
- License
- Apache-2.0
- Repository
- github.com/lobu-ai/lobu
- Website
- lobu.ai/mcp
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
Cite this page
Lobu MCP server. Agent Mart. https://agentmart.dev/connectors/lobu-ai-lobu (last updated 2026-10-24)