r/boltnewbuilders

I made an MCP to turn claude into replit
▲ 24 r/boltnewbuilders+7 crossposts

I made an MCP to turn claude into replit

Most agents today are already pretty powerful and requires minimum prompt engineering, and the app builder's value was in the easy set up. So I made an MCP that does what lovable/replit do, but uses your AI subscription's tokens instead. It ends up being a 60+ tool MCP but it's been working pretty well. It does require a good model (opus or terra) to work well, but overall it's been able to do a pretty good job.

Check it out here: https://floot.com

And let me know if you have any feedbacks!

u/dakrclaud — 7 days ago

~50M Tokens to expire

I have nearly 50M tokens that will expire in 2 days.

I have no use for them. Any ideas how can I utilise them?

If you have an idea how to safely give them away, too, I will consider option.

reddit.com
u/MichaelHadTo — 6 days ago
▲ 18 r/boltnewbuilders+5 crossposts

Can you tear apart my authorization model for self serve DAST?

I made a deeper security scanner self serve and I’m not totally convinced the permission model is enough.

Right now:

  • domain gets verified through DNS or a file on the domain
  • repo gets verified separately through our GitHub App
  • user signs the exact target and checks
  • ownership gets checked again before it runs
  • DAST is bounded and rate limited
  • repo analysis runs in isolation
  • authenticated testing only uses two throwaway users
  • credentials are deleted after

We built this because our old free scanner only checked the logged-out surface. A clean result could make someone think the app was safe while completely missing broken access control.

So what are we missing here?

Verification expiry? CNAMEs? Subdomain takeover? DNS rebinding? A malicious target attacking the runner? Compromised GitHub installs?

Also, is there any test you just wouldn’t allow without a human approving it first?

https://www.task-bounty.com/secure-my-app#deep-review

Feel free to be harsh. Better now than after someone actually abuses it.

u/elidanipipe — 9 days ago

i built 6 ai micro-saas generating $20k/mo. i started a small group to share exactly how.

I currently run 6 operational micro ai saas products that generate a little over $20k in monthly recurring revenue.

I hardly wrote a single line of traditional code. i used ai to generate literally everything, from the database architecture to the user interface.

it wasn't magic on day one. i spent hours stuck in endless debugging loops and dealing with faulty ai code before i finally cracked the formula.

it basically comes down to three rules:

- keeping the idea aggressively minimalist (build a true mvp, not a platform).

- guiding the ai step-by-step instead of asking it to build the whole app at once.

- launching fast to get real user traction instead of perfecting features in secret.

lately, i've seen way too many non-technical founders give up at the very first ai bug or deployment error. or the worst, give up without push anything in marketing !!!!

it's a massive shame, because the technical barrier to entry has practically disappeared and the marketing is easy in 2026

because of this, i’m launching a skool community to share my exact method.

to be completely transparent: i will likely charge for the full course later down the road. it just makes sense given the specific prompt sequences, n8n workflows, and copy-and-paste templates i'll be sharing.

but right now, our main objective is simply to build together. working alone in a silent corner is the absolute fastest way to quit.

if you want to join a group of active creators and build or launch your own ai saas: drop a comment below or send me a dm, and i’ll send you the invite link.

reddit.com
u/Wide-Tap-8886 — 11 days ago

super disappointed... did not know tokens expire

I had a bolt subscription with a ton of unused tokens saved up. Started working on an app, realized I didn’t have everything mapped out or documented properly, so I stopped developing and started documenting. Jumped back in today and saw all my saved tokens are gone. Guess they expire after 2 months? That’s crazy to me. What other industry sells you something and then two months later it’s just not yours anymore (I’m sure there are plenty and someone will tell me). Would allowing people to retain their unused tokens really hurt there business? Is it just a cash grab? I am really disappointed because I was hyped to start building today, but I guess I’ll have to take my business somewhere else.

reddit.com
u/Conscious-Item-837 — 13 days ago