General workspace settings
Manage the core identity of your workspace and workspace-level publishing options.Billing and usage
Manage your subscription, credits, billing settings, and workspace usage from Workspace settings → Plans & credit usage. Lovable uses credits to measure and pay for credit-based usage across your workspace, including building your app, hosting and running it on Lovable, and powering AI features in deployed apps. Workspace owners and admins can upgrade or downgrade plans, switch billing cycles, change credit tiers, add credits with one-time top-ups, enable auto top-up, and manage billing history and payment settings. All other roles can open Plans & credit usage to see the current plan, credit balance, and usage, but billing controls are disabled for them. They cannot initiate or approve charges against the workspace. For more information, see Subscription plans and Credits and usage.Usage limits & alerts
Control credit spend with usage limits and low-balance alerts from Workspace settings → Usage limits & alerts, available on all paid plans. Workspace owners and admins can set credit thresholds for the workspace, projects, members, groups, and access tokens, and choose whether reaching a threshold sends a notification, blocks further usage, or both. This includes the default member credit limit and per-member overrides. See Usage limits and alerts.Insights
Use Workspace settings → Workspace → Insights to see how your workspace adopts Lovable: how many apps and builders are active, how many visits your published apps receive, which apps rank highest by visits, and which members contribute the most edits. You can export the full app list and the full builder list to CSV. Insights is available on Business and Enterprise plans to workspace admins and owners. It reports adoption rather than security, and it complements the Security center, which reports which projects need attention. See Insights.Access
Manage who has access to your workspace and how members are structured for collaboration.People
The main place to manage workspace members. Workspace owners and admins can invite members, change roles, remove members, approve workspace and project access requests, and export the workspace member list as CSV. You can also track per-member credit usage and set individual credit limits that override workspace defaults. See People.Groups
Organize members into groups to simplify sharing and access control. Groups can be granted access to projects, folders, and published apps as a unit, reducing the need to manage permissions individually. Groups can also be synced from your identity provider using SCIM, so externally managed groups appear alongside manually created ones. Group-level roles control who can manage the group itself. Each group can also have a default design system that its members get pre-selected when they create a project. Available on Business and Enterprise plans. See Groups.Identity
Manage workspace identity and single sign-on (SSO). Configure SAML or OIDC providers, enforce SSO, set session duration, and control how users authenticate. You can also verify your organization’s email domains which are used for SSO and user provisioning. Users can join your workspace automatically in three ways, controlled from the User provisioning section: through their first SSO login, by signing up with an email on one of your verified domains (Verified email sign-up), or through Add existing users, which brings existing Lovable accounts on your verified domains into the workspace in one step. SCIM-based sync from your identity provider is configured separately. Provisioned users appear in the People tab, where you manage their roles and access. SCIM provisioning is available on Enterprise plans. All other features are available on Business and Enterprise plans. See Workspace identity, Verified domains, SSO, and SCIM.API keys & OAuth
Open Workspace settings → API keys & OAuth to manage credentials for external integrations. Both sections require the workspace owner or admin role.
See Manage workspace API keys and Connect apps to Lovable with OAuth.
Customization
Standardize how projects are created and ensure consistency across teams.Instructions
Define workspace-level instructions and context that Lovable uses across all projects. This is useful for coding standards, architecture rules, preferred libraries, and other conventions that should stay consistent. Only workspace owners and admins can manage workspace instructions. Project instructions can add project-specific context and override workspace-level guidance when needed. You can also set your own personal instructions, which are not managed here. See Workspace and project instructions.Skills
Define reusable, on-demand instructions that Lovable can apply across projects in your workspace. Skills help teams standardize repeatable workflows, such as launch checks, support replies, release notes, and review processes, without adding those instructions to every message. Use skills for task-specific guidance that should load only when relevant. Use workspace instructions for rules and context that should apply broadly across all projects. You can also keep your own personal skills, which are not managed here. See Define reusable instructions with skills.Templates
Create reusable design templates from existing projects. Templates copy the full project codebase, including structure, components, styles, and configuration, so new projects start from a consistent foundation. You can set a default template for the workspace so all new projects begin with a predefined setup, while still allowing customization. Available on Business and Enterprise plans. See Design templates.Design systems
Define reusable component libraries, styling guidelines, and setup instructions that apply across projects. Unlike templates, design systems provide ongoing guidance during project generation rather than copying files at the start. Design systems are managed as projects and can be connected to one or more projects in the workspace. Updates to a design system are applied to connected projects on future generations. You can set one design system as the workspace default, so Lovable pre-selects it when members create a project. Available on all paid plans. Wrapping an existing npm package as a design system is available on Enterprise plans only. See Design systems.Announcements
Post one announcement banner that every workspace member sees at the top of the dashboard and in the project editor. Format the text, add links and a countdown timer, choose a background color, and decide whether members can dismiss it. Available on Business and Enterprise plans. See Show an announcement banner to your workspace.Events & hooks
Extend your workspace with your own services or Lovable projects. Events notify your HTTPS endpoint after something happens, such as a project being published. Hooks let your endpoint allow or block an action first, such as checking a message sent in a project’s chat for sensitive data before Lovable processes it. Available on Business and Enterprise plans. See Events & hooks.Connector settings
Govern the connectors your workspace uses. Workspace owners and admins control who can create connections and clients for app + chat connectors and app user connectors, and which chat connectors (MCP servers) members can enable. These are the same controls as Connectors → Admin settings, available on Business and Enterprise plans. Under App + chat connectors, a Custom connectors section lists the custom connectors your workspace has created for its own APIs. Owners and admins choose who can use each one, edit it, or delete it. The section appears when your workspace has at least one custom connector. The tab also includes the MCP registries section, where owners and admins add browsable directories of MCP servers so members can connect servers without pasting URLs. MCP registries are available on all plans. See Admin controls and MCP registries.Build & deploy
Manage shared configuration used during development and integrations with built-in or external services.Git
Manage workspace-level Git connections for GitHub, GitLab, and Bitbucket. Git connections let projects sync their code to an external repository for backup, developer collaboration, local editing, and deployment outside Lovable. Workspace owners and admins can manage Git providers and connections at the workspace level. Projects can then be linked to repositories for two-way sync. GitLab also supports GitLab.com and self-managed GitLab instances. Bitbucket connections use Bitbucket Cloud workspaces. Workspace owners and admins can also enable Include member email addresses in commits, which records which member triggered each change in the commit message. Available on Business and Enterprise plans. See Commit attribution. See GitHub, GitLab, and Bitbucket.Build secrets
Store and manage environment variables used during project builds. Secrets are encrypted and available in sandbox environments, but their values are not displayed after being set. Workspace editors can see secret names (read-only) so they can reference the right secret, while adding, editing, and deleting secrets is limited to workspace admins and owners. Use build secrets for tasks like installing private npm packages, accessing external APIs, or configuring build-time dependencies. Secrets are managed at the workspace level and can be used across projects. Available on Enterprise plans. See Build secrets.Managed registry
Provide your workspace with its own npm registry, hosted privately inside Lovable. You can publish npm packages directly to it without making them public, and any project in your workspace can install those packages. Available on Enterprise plans only. See Managed registry.MCP server
Connect AI clients and developer tools, such as ChatGPT, Claude, and Cursor, to Lovable through the Lovable MCP server. The tab shows the server URL, setup steps for common clients, and a Manage access shortcut to the workspace’s Third-party MCP clients setting in Workspace settings → Security → Privacy & security → Integrations. Available on all plans. See Lovable MCP server.Workspace domains
Open Workspace domains (Workspace settings → Workspace domains) to see domains bought through Lovable, domains connected from other providers, and email domains. Search by name and check each domain’s status. Open a domain to view its Projects, Email, and Advanced sections. For domains bought or transferred into Lovable, you can also manage registration, renewals, contact information, and DNS records. Buying or connecting a domain requires a paid plan. See Custom domain. On the Enterprise plan, the same tab also shows a Publishing domain section, where admins and owners connect one domain that every project in the workspace publishes under. See Publishing domain.Security
Configure workspace-wide security policies, authentication, and visibility, and monitor overall security posture.Privacy and security
The main control panel for workspace-wide security and access settings. The page groups its settings into five tabs:- Access: workspace invites, workspace discovery, default project access, external collaborator access, and sharing rules such as preview links and code downloads
- Publishing: default published app access, external viewer invites, app login methods, blocking publishing with critical security findings, and publishing policies
- Security: auto-fix defaults for eligible security findings and cleanup of abandoned projects
- Integrations: access for third-party MCP clients and MCP connectors
- Data protection: sensitive data scanning, storage bucket rules, the default data hosting region, and EU inference
Security center
A workspace-wide security dashboard for monitoring risks across all projects. View security scan results, dependency vulnerabilities, secrets usage, authentication policies, and project-level risk signals in one place. Use the Security center to identify and prioritize issues, track scan coverage, compare security status across projects, filter and export data, and trigger security scans without opening individual projects. Security center includes:- Code analysis, Supply chain security, and Secrets overview for reviewing security findings, dependency vulnerabilities, and secrets across the workspace.
- Security insights for a portfolio-level view of project risk, including review priority, publish status, ownership, activity, sensitive data findings, security findings, and credit usage. Available on Business and Enterprise plans.
- Schedule security scans for automatically running recurring Deep scans across workspace projects. Available on Enterprise plans.