@HubSpot fans, we have news 👀 You can now connect HubSpot natively to WeWeb! ✨ And yes, WeWeb AI can build with your HubSpot data too. Give it a brief and start building the dashboards, portals, and internal tools your team needs:

Now do more with @Stripe in WeWeb. A lot more 💳 Sell a subscription → send an invoice → issue a refund → build a billing dashboard... and more! Try it out and tell us what's still missing 👀 Here’s what you could do before vs. what you can do now 👇

Prompts tell AI what to do. Taste is knowing when to say NO 🚫 Now you can protect the parts of your WeWeb project AI shouldn’t change: Pages, workflows, components, tables, APIs, variables, and more 🔒 Set your AI guardrails today:

ICYMI, we launched our @mondaydotcom integration last week 🎉 So this Monday, beat the blues. Build instead. Build that client portal. Automate that team workflow. ✨ Connect monday to WeWeb → Ask AI to build on top of your boards:

👨‍💻 Vibe coding your app? Before you ship it, run this security checklist: 🔐 AUTH & ACCESS Test like a hacker. ☐ Create two test users. Copy one user's read request as cURL, replay it in Postman with the other user's record ID. Do you get their data? ☐ Replay the same request as an update. Does their record change? ☐ Replay it as a delete action. Is their record gone? ☐ As a normal user, call an admin or privileged endpoint directly. Does the backend reject you? ☐ Change fields like `role`, `owner_id`, `user_id` or `workspace_id` in a request. Can you give yourself access you shouldn’t have? ☐ Sign out completely. Replay a write request with the authorization header removed. Does the backend accept it? 🗄️ DATA & SECRETS Consider it public until you test it. ☐ Open DevTools → Network and reload every sensitive page. Do any responses contain records or fields the current user shouldn’t receive? ☐ Inspect request headers, payloads, frontend bundles and browser storage. Can you find any private API key, service credential or secret? ☐ Are you storing sensitive data you don’t actually need? 🧹 INPUT & INTEGRATIONS Never trust user input. ☐ Replay a request without using the UI. Send missing fields, extra fields, invalid values and oversized input. Does the backend reject them safely? ☐ Upload an invalid or oversized file. Does the backend enforce the same rules as the frontend? ☐ Make a third-party integration fail or timeout in staging. Does your workflow fail safely without leaking internal details? 🚦 ABUSE PROTECTION Never assume the user “won’t find out". ☐ Repeat a harmless action several times in staging. Do login, AI, email, upload and export actions eventually hit an appropriate limit? ☐ Retry an action that should only happen once. Can it accidentally send two emails, create two payments or run twice? 🔎 LOGGING & RETESTING No app is 100% secure. Keep testing. ☐ Trigger a failed login or denied request. Can you find the event in your backend logs without passwords, tokens or secrets being logged? ☐ Change a role, workflow or data model, then rerun the permission tests. Do the same security rules still hold? 💡 And one worth remembering: Hiding a button, field or page in the frontend is UX. It is NOT security. Save this before your next launch. 🔖

Hey @NotionHQ & @n8n_io lovers 👋 Look what's new today:

🥁 𝗔𝗱𝗱 𝗔𝗜 𝘁𝗼 𝘆𝗼𝘂𝗿 𝗮𝗽𝗽 𝗶𝗻 𝗷𝘂𝘀𝘁 𝗮 𝗳𝗲𝘄 𝗰𝗹𝗶𝗰𝗸𝘀 with native integrations for @OpenAI, @AnthropicAI, and @GeminiApp. 1️⃣ Choose an action: generate text, create images, or build embeddings 2️⃣ Pick the best model for your use case 3️⃣ Connect the output to your app’s data and logic And once it’s live, 𝘁𝗿𝗮𝗰𝗸 𝗿𝗲𝗾𝘂𝗲𝘀𝘁𝘀, 𝘁𝗼𝗸𝗲𝗻 𝘂𝘀𝗮𝗴𝗲, 𝗮𝗻𝗱 𝗰𝗼𝘀𝘁𝘀 in one place. Hear the full update from @msandys_ 👇

🤯 @SpotifyEng shipped Xirp, an agent-agnostic vibe coding environment. We loved the idea, and of course, the team had to try it. So we connected the agents to WeWeb through MCP and gave them a few apps to build: → KPI Dashboard → Task Management Under the hood, they share the same global design system, so every app stays on-brand as we build. Plus, a routing skill that hands off tasks cleanly: mockups to Gemini, frontend to Claude, and backend to Codex. And the end result isn’t a throwaway prototype. It’s a secure, working WeWeb app that’s still easy to understand and edit visually when a human wants to jump in. 🫵 What are you waiting for? Bring your own agents and start building with a visual editor in the loop: weweb.io/product/mcp

😲 Wow, what a UI library. Time to bring these components into WeWeb: 1. Paste the component code into Claude 2. Ask it to build the component in your WeWeb project 3. Restyle it, wire up the logic, and make it yours ✨

🧩 Our marketing team is big fans of building HTML artifacts with Claude and ChatGPT. It’s fast. It feels interactive. No context switching. The problem starts when the wider team needs to rely on it. You can share these artifacts in one click. But suddenly it’s hard to answer: • Who can see and edit what? • Can someone on the team update this next week? • Is this a one-off file? Or is it becoming an actual internal tool? With WeWeb MCP, our team is moving those HTML artifacts into WeWeb. Same speed to build. Now the whole team can use it, maintain it, and control who gets access. And this isn’t unique to our team. Across companies, non-engineers are building and shipping the tools they need themselves. It makes sense. They’re the people closest to the problem. Then IT gets pulled in to review data security and permissions. And too often, the “safe” answer is to ban citizen development altogether. That fixes the mess. It also kills the momentum. With WeWeb, teams don’t have to choose between speed and control: → Vibe code when you want to move fast. → Open the visual editor when you need visibility into workflows, data, and access rules. Here’s a glimpse of how authentication and user data are handled 👇

🎬 It always starts with a spreadsheet. Then someone adds a form, a few automations. Then a second spreadsheet to fix the first one. Before long, the team is running an important process through a system nobody intentionally designed. Today, the person closest to the problem can build the tool properly. An internal CRM. An approval portal. A work-order tracker. An inventory app. An admin dashboard. And more. 1️⃣ Give AI the messy idea. 2️⃣ Get a clear build plan. 3️⃣ Build the app with AI, then refine it in WeWeb. Keep improving it as the process evolves. No waiting for IT. No forcing fitting your workflow into another SaaS tool. Go find the internal tool hiding in your spreadsheet and start building today: weweb.io/use-cases

Shoutout to @jptrinhh who is building a library of WeWeb components, blocks, and logic. Check it out: community.weweb.io/t/weweb-l… He'd love your feedback and requests 😀

🙋‍♀️ What's your go-to component library? @21st_dev? Here's the fun part: with the WeWeb MCP, you can import any component from your favorite library straight into your WeWeb project, as code. Then use it like any other no-code component, fully styleable and wireable into your logic with properties, variables, and triggers. Custom code power meets no-code control ❤️ Follow along as Matthew imports a scroll-wheel date picker 👇

🧑‍💻 It's settled: you can prompt an app to life in a weekend. BUT... If you're not a developer, can you actually control what AI ships? Or are you just trusting a black box you can't read or change? In this build guide, @msandys_ starts with a prompt and builds it into a real, secure project management app in WeWeb. You'll see exactly how the whole app gets built inside the visual editor, from screens to data to APIs to auth. You're not left to prompt and hope. Follow along and build the app with him 👇

WeWeb MCP is here. Your favorite AI agents can now build directly inside WeWeb. Bring Claude Code, Cursor, ChatGPT, Codex, Antigravity, or any agent you choose. Your agent can help build secure web apps using WeWeb’s pages, components, workflows, API requests, databases, integrations, auth, storage, and more. You decide what it can work on: the full app, or only specific parts of your project. Everything stays visible and editable in WeWeb, so you can review what was built, make changes visually, and keep maintaining the app with your team. No black box. Open beta starts today.