100 of 100 — copy any prompt into Lovable, or read the guide.
Turn on Lovable's built-in backend — Postgres, auth, storage, edge functions — with zero external accounts.
Prompt Lovable to create a public table with proper GRANTs and Row Level Security policies in one migration.
Never store role on the profile table. Use a dedicated user_roles table + has_role() SECURITY DEFINER function to prevent privilege escalation.
Ask Lovable to create a public/private bucket, RLS-style policies, and a typed upload helper.
Edge Functions are for webhooks, cron, and public HTTP endpoints. For app-internal RPC use TanStack server functions instead.
Store a third-party API key in Lovable Cloud and read it inside a server function handler.
Schedule a daily cleanup via pg_cron hitting a public API route.
Subscribe to Postgres change events and re-render a list live.
Every CREATE TABLE in public must be followed by GRANTs before ENABLE RLS — otherwise the API returns permission errors even with policies in place.
Backfill a new column with a batched update to avoid long locks.
The first cause of slow Lovable Cloud pages is a missing index on the query's filter/order columns.
Cloud → Advanced settings → Export data gives you a downloadable dump when you need it.
Call a hosted Gemini/OpenAI chat model from a server function — no API keys needed.
Stream tokens to the browser using a server route + Web Streams.
Use the AI Gateway to generate an image and save it to Cloud storage.
Store document embeddings in pgvector and retrieve top-k chunks for a chat prompt.
Give the model tools it can call and route them to your server functions.
Match model to task: Flash for cheap/fast, Pro for reasoning, image models for pixels.
Set per-user daily caps and short-circuit before calling the model.
Treat all model output and all retrieved content as untrusted input.
Generate an MP3 from text and stream it back to the client.
Accept an audio blob and return a transcript with word timestamps.
Force the model to return typed JSON matching a Zod schema.
Ship a small eval set before iterating on prompts — otherwise you're guessing.
Add Lovable Cloud auth with sign-up, sign-in, and a protected route.
Send a one-click sign-in link via email.
Add managed Google OAuth in one step.
Add managed Apple OAuth.
Use the built-in `_authenticated/` layout — never gate in a loader on a public route.
One hook that returns the current user + loading state everywhere.
Forgot-password → email → new-password page.
Verify a caller is admin inside a server function.
Sign out and clear all cached user data.
Admin sends an invite that lets the recipient set a password.
Connect Stripe to Lovable and store the keys as secrets.
Create a Checkout Session and redirect the user.
Stripe subscription with trial and metadata.
Verify the signature, use raw body, respond fast, be idempotent.
Let users manage their subscription in Stripe's hosted portal.
Admin-only refund with audit log.
Turn on automatic tax so you stop calculating VAT/GST/sales tax by hand.
Paddle handles global tax for you — trade lower control for zero tax paperwork.
Let users apply a promo code at checkout.
Prorate on plan change, immediate for upgrades, end-of-period for downgrades.
Every route sets its own title, description, og:title, og:description via head().
Add a 1200×630 og:image at the leaf route.
Put canonical only on leaf routes and self-reference the page.
Ship a sitemap listing every public route.
A wildcard Disallow: / blocks the whole site — probably not what you want.
Add Article schema to blog posts and Organization to the root.
Title <60 chars with the primary keyword; description <160 chars.
Every meaningful image has descriptive alt; decorative images use alt="".
Show breadcrumbs on deep pages and add BreadcrumbList JSON-LD.
Every generated page needs ≥300 words of unique content or Google will penalize the domain.
summary_large_image for content pages; verify with Twitter's card validator.
Preserve link equity when you rename a URL.
Transactional and auth email from your own domain, branded.
Server function to send a receipt with dynamic data.
Replace the default auth email with your logo and copy.
DKIM + SPF + DMARC or Gmail drops you in spam.
Author templates in one place, render with typed props.
Include List-Unsubscribe headers and a working link.
Use mail-tester.com before you press send at scale.
Send yourself an email and check headers before a launch.
Push new records into a Notion database from a server function.
Fire an n8n workflow from a Lovable event.
Connect the project to GitHub before you push production.
Pull top keywords for a domain and store them.
Sync Shopify products into your app.
Post to a Slack channel via incoming webhook.
Read/write Airtable base as a lightweight CMS.
Expose a Zapier polling endpoint or webhook trigger.
Push analytics events to a Sheet for non-tech stakeholders.
Create/update HubSpot contacts on signup.
Post to a Discord channel via webhook.
Let customers register their own webhook URL and receive events.
Never hardcode colors — declare tokens and let Tailwind utilities read them.
Add a theme toggle that stores the choice and respects the OS preference.
Add a "premium" button variant using tokens and a gradient.
Use Motion for enter/exit animations; keep durations short (150–250ms).
Skip the purple-gradient-on-white, two-CTA, three-feature-grid trap.
Use imagegen for hero art, avoiding stock-photo defaults.
Ship one icon set. Mixing icon libraries makes the UI look pasted-together.
One display face + one text face is almost always enough.
Add reusable gradient-text and gradient-hero utilities.
Glass cards work over rich backdrops; on flat surfaces they look like a bug.
Contrast ≥ 4.5:1 for text; interactive elements need a visible focus ring.
Design mobile-first; add breakpoints only where the layout actually changes.
Click Publish in the top-right; your app goes live at `<name>.lovable.app`.
Point your own domain at the Lovable app with HTTPS.
Use project--<id>.lovable.app for webhooks — it never changes on rename.
Connect the project to GitHub before you accept contributors.
GitHub Action that boots the preview and screenshots key routes.
Add a manifest so users can add the app to their home screen.
Set a budget and enforce it in CI or it will slip.
Wire an error boundary and a client error reporter before launch.
Long-cache hashed assets; short-cache HTML.
Publish is instant — so is reverting.
Public, unlisted, or password-gated — pick per environment.
Ten things to verify before you tweet.