Get started

Bubble for AI agents

Bubble is a visual, no-code platform for building web apps, where records called Things and drag-built workflows stand in for hand-written backend code. Connect it once through Arc0, and your agent, or Claude, ChatGPT and Cursor, can use it through one MCP endpoint, limited to what each user approved.

Connect BubbleSee the 15 actions ↓
Developer toolsAPI keyMCP + RESTbubble.io
AUDIT LOG · BUBBLEPOLICY: acme-support
09:41:09 · claude · u_8f2write
bubble.file_upload
Upload File✓ approved · approved by user
09:41:12 · claude · u_8f2destructive
bubble.data_delete_thing_by_id
Delete Thing By ID✕ blocked · policy: deny
EVERY BUBBLE CALL, ON THE RECORD
01 · USE CASES

What agents do in Bubble.

01

Create a new data record

Add a new Thing to a Bubble app's database, such as a customer record or order entry.

02

Trigger an app workflow

Kick off a Bubble workflow through its API endpoint, like starting a welcome email sequence.

03

Confirm a record before deleting it

Fetch a Thing by its ID to confirm it's the right one before it gets deleted.

02 · ACTIONS

15 Bubble actions, graded by risk.

Every Bubble action is tagged read, write or destructive, so one policy covers the whole app and new actions inherit the right default.

read

0

Look things up. Allowed by default.

  • No read actions.

write

14

Create and change things. Allow, or ask the user first.

  • bubble.file_upload
    Upload File
  • bubble.file_download
    Download File
  • bubble.oauth_authorize
    OAuth Authorize
  • bubble.file_temp_create
    Create Temp File
  • bubble.data_create_thing
    Create Thing
  • bubble.o_auth_access_token
    Get OAuth Access Token
  • bubble.o_auth_register_app
    Bubble OAuth Register App
  • bubble.data_get_thing_by_id
    Get Thing By ID
  • bubble.workflow_trigger_get
    Trigger Bubble Workflow via GET
  • bubble.meta_get_swagger_json
    Get Bubble API Swagger JSON
  • bubble.workflow_trigger_post
    Trigger Bubble Workflow via POST
  • bubble.data_patch_thing_by_id
    Patch Thing By ID
  • bubble.data_bulk_create_things
    Bulk Create Things
  • bubble.data_put_replace_thing_by_id
    Replace Thing by ID

destructive

1

Delete, cancel or archive. Ask first, or deny outright.

  • bubble.data_delete_thing_by_id
    Delete Thing By ID
03 · HOW IT WORKS

Bubble in three steps.

  1. 01Your users connect BubbleThey add their Bubble api key on Arc0 Connect, under your brand. It goes straight into the vault.
  2. 02You set the rulesReads run, writes like “upload File” can wait for the user, and “delete Thing By ID” can be denied outright.
  3. 03Any agent can actYour agent calls Bubble through the Arc0 SDK or MCP, and so can Claude, ChatGPT and Cursor. Every call lands on the audit log.
POLICY.TS
await arc0.policies.set('bubble', {
  read: 'allow',
  write: 'ask',        // file_upload
  destructive: 'deny',  // data_delete_thing_by_id
})

# Claude Code: the same connection, one URL
$ claude mcp add --transport http arc0 \
    https://mcp.arc0.ai/u/u_8f2
04 · AUTH AND DATA

How Bubble connects.

Users add their Bubble api key on Arc0 Connect. It is encrypted in the vault, never shown to the model, and each user can rotate or revoke it at any time.

The same Bubble connection serves your agent over MCP and your own backend over REST and the proxy, so a user connects once. How Arc0 handles credentials →

AUTH
API key
CREDENTIALS
Per-tenant encrypted vault
MODEL SEES
Results only, never credentials
AUDIT LOG
Every call, on every plan
05 · WORKS WITH

Use Bubble from any agent.

Claude
ChatGPT
Cursor
Codex
VS Code
OpenAI Agents SDK
Claude Agent SDK
Vercel AI SDK
Mastra
LangGraph
06 · RELATED

More developer tools apps.

GitHub896 actionsSupabase129 actions0CodeKit8 actionsAbly25 actionsAbstract3 actionsAddressfinder17 actionsAddresszen2 actionsAlchemy36 actions
ALL DEVELOPER TOOLS APPS →
07 · FAQ

Bubble and Arc0, answered.

Q01

Can I use Bubble with Claude, ChatGPT or Cursor?

Yes. Connect Bubble to Arc0 once, then add your Arc0 MCP URL to Claude, ChatGPT, Cursor, Claude Code or any other remote-MCP client. Each assistant only gets the Bubble actions you allow.

Q02

How do users connect Bubble?

Users add their Bubble api key on Arc0 Connect. It is encrypted in the vault, never shown to the model, and each user can rotate or revoke it at any time.

Q03

Which Bubble actions can my agent take?

15 in total: 0 read, 14 write and 1 destructive, such as “upload File”. Your policies decide which of them each agent may call.

Q04

Can I stop my agent from deleting things in Bubble?

Yes. Actions like “delete Thing By ID” are graded destructive. Set destructive actions to deny, or to ask so the user approves each one, and blocked calls still show up on the audit log.

Q05

Can my own backend call Bubble too?

Yes. The same Bubble connection is available over REST and through the Arc0 proxy, so your product and your agent share one connection per user.

Get started

Plug Bubble into your agent.

Your users connect Bubble once, under your brand. Your agent gets 15 actions behind your policies, with every call on the record.

Connect BubbleBrowse all apps →

Free to build · MCP + REST · Audit log on every plan