Macaly

About 40 integrations connect a built app to outside services, including HubSpot, Notion, Gmail, Google Workspace, Figma, Mailchimp and Apify, and the agent asks for a key or an OAuth sign in when a request needs one. Stripe payments come with managed webhooks on Pro and higher plans. Any custom MCP server can be added with OAuth or header sign in, and each tool on it can be held to read only, write or destructive access. With GitHub connected, a push from the agent opens a pull request titled Updates from Macaly.

Sourcemacaly.com/docs/en/integrations/other-tools.mdread 2026-11-08

Three modes set how the agent works: Auto decides for itself, Plan writes a plan and waits for a go ahead, and Build runs straight through without pausing. Skill groups for design, research, files, building and tools let one request chain research, image work, database setup and debugging in sequence. Variants act like branches, so a person can try a different direction on a copy and keep the one that works. The security check backs up the project, applies its fixes and tests them before reporting back.

Sourcemacaly.com/docs/en/agent/modes.mdread 2026-11-08

An assets library holds the logos, images and documents a person uploads, and the agent draws on them automatically while building, with a 5 MB cap per file. Research skills let it search the web, read pages from links, pull text from PDFs and run Apify scrapers to gather content for a site. Nothing builds a persistent index over a company's documents or code for the agent to search across projects, so grounding stays with the files and pages attached to one project.

Sourcemacaly.com/docs/llms.txtread 2026-11-08

Plan mode writes out what the agent intends to do and stops at a Start building prompt until a person approves, and the agent asks for confirmation before steps that need a human decision.

Version history restores any earlier state of the code, variants keep experiments apart from the main app, and a separate testing database keeps trial data away from live records. Tools on custom MCP servers can be held to read only, with write and destructive actions switched off.

An overview before going live lists security, database, payment and SEO results, and nothing reaches the public until a person presses the button.

Sourcemacaly.com/docs/en/agent/modes.mdread 2026-11-08

Projects belong to an owner who invites members on team plans, with Owner and Member as the only roles described and no admin controls beyond them. Keys and secrets for integrations are stored encrypted and kept out of the code. Customer data does not train Macaly's models, and requests sent through OpenRouter run with no training and zero retention. There is no SOC 2 or ISO attestation, trust center or single sign on, so access control and compliance stay basic for a business buyer.

Sourcemacaly.com/ai-transparency-noticeread 2026-11-08

Credit usage breaks down by task and by chat, so a person can see what each request cost. Built apps get cookieless analytics for visitors and pages. The Debug skill reads server logs and live error logs to find what broke, and version history records each change the agent made to the code. There is no audit log of user or agent actions across a workspace and no export of traces to an outside monitoring tool.

Sourcemacaly.com/docs/llms.txtread 2026-11-08

The agent remembers a person's preferences across conversations, so choices about style, wording or tooling carry from one chat into the next. No setting shows what it keeps, how long a preference lasts or how to clear one, and there is no shared memory a team can read or edit. Each project keeps its own chat history alongside version history and variants, so a build can be picked up later exactly where it stopped.

Sourcemacaly.com/docs/en/changelog.mdread 2026-11-08

Live apps run on Vercel in Frankfurt and project databases on Convex in Ireland, so hosting stays in the European Union by default. Each model in the picker carries an EU, US or Global label, which lets a customer keep inference in Europe by choosing an EU model, though the privacy terms allow processing outside the European Economic Area. The platform cannot be self hosted or run in a customer's own cloud, and code leaves through a ZIP download on paid plans or GitHub sync on Pro and higher.

Sourcemacaly.com/dparead 2026-11-08

A templates gallery offers about 36 starting points for websites and apps, each with a Clone button that copies it into a new project the agent can then reshape on request. Community projects shared by other builders open and clone the same way, so a working app with its pages, database and styling can serve as the base for a new one. Projects started in Lovable can be imported and carried on from where they stand.

Sourcemacaly.com/templatesread 2026-11-08

Work starts from a person: the web chat, WhatsApp, Telegram, the Macaly Cloud MCP server called from Claude, ChatGPT or Cursor, and the REST API on the Agency plan all begin a build from a request. Comments a client leaves on a shared preview go straight into the chat as new instructions. No schedule, webhook or event from an outside system starts the agent on its own, and connections for Slack, Microsoft Teams and Discord are still marked coming soon.

Sourcemacaly.com/docs/en/chat/overview.mdread 2026-11-08

Customers pick the model for a whole account or a single project from a list that includes Claude Opus 5.5, Claude Sonnet 5.5, Claude Haiku 5.5, GPT 6.1 Sol, GPT 5.6 Terra, GPT 6 Luna, Grok 4.6, Kimi K3, GLM 5.3 and GLM 5.3 Flash, which is the default. Each model carries a label showing whether it runs in the EU, the US or globally, so the choice weighs cost, speed and where inference happens. Bring your own key is not offered, and every model draws on Macaly credits.

Sourcemacaly.com/docs/en/agent/models.mdread 2026-11-08

The Agency plan adds a REST API to create chats, send messages, upload files, check status, stream replies and deploy, signed with Bearer keys that start with macaly_. Macaly Cloud is an MCP server with 20 tools that lets Claude, Claude Code, ChatGPT, Cursor, Codex and Grok create and manage projects from outside the builder. Apps built on the platform can expose their own MCP server, and custom MCP servers plug into the agent with access switches for each tool.

Sourcemacaly.com/docs/en/integrations/macaly-cloud.mdread 2026-11-08

Before an app goes live, an AI security review checks eight areas of it, backs up the project, applies fixes and tests them. An SEO audit scores the site in seven categories and lists what to change, and accessibility checks test key pages. A database compatibility check runs before changes reach the live database, and the Debug skill reads server and error logs and checks how the app behaves in a browser to trace a fault to its cause.

Sourcemacaly.com/docs/en/features/security.mdread 2026-11-08

A website screenshots tool captures pages at 10,000 credits a capture, and the Debug skill checks how a built app behaves in a browser, with Browserbase and ScreenshotOne named among the subprocessors that do the work. The agent does not take control of a browser session to click through outside sites or apps for a person, so browser work stays with capturing pages and checking the app it builds.

Sourcemacaly.com/dparead 2026-11-08