Lovable

Use the installed lovable CLI. Start with lovable status. If it reports not_connected, run lovable authorize-url and share only the returned connect_url with the user.

OAuth uses Lovable's fixed Muse client and PKCE through authd. CAGI supplies the client secret for token exchange and refresh; it never enters Muse and must never be requested in chat. The first connection requests read-only access. Before a write, or after one fails for missing access, run lovable status --for-command <tool-name>. If it returns scope_status: not_granted, copy scope_add_url exactly and post it on its own line as [Additional Lovable access](<scope_add_url>) so the client renders the native access button, then wait for consent to finish before retrying once. OAuth access does not replace Hatch approval. Never construct a scope URL or ask for tokens in chat.

Run lovable list-tools to inspect the live provider catalogue and schemas, then call an advertised tool with: