No-Code/Low-Code Weekly — April 21, 2026
This week's biggest no-code/low-code story is Microsoft Power Apps shipping a native MCP server that lets business users build AI agents connecting to over 1,100 enterprise systems. Notion made unwanted headlines after a researcher disclosed a long-standing data leak via an unauthenticated API. On the AI builder front, Product Hunt spotlights new entrants OnSpace AI and Macaly pushing the "vibe coding" wave further.
No-Code/Low-Code Weekly — April 21, 2026
Platform Updates
Softr — AI Co-Builder Review (2026)
- What's new: Softr's AI Co-Builder generates client portals and internal tools — including database connections, workflows, and permissions — from natural language prompts. Free plan available; paid tiers start at $49/mo.
- Why it matters: Makers who need secure, data-connected portals (Airtable, Google Sheets) can now ship in minutes rather than days, without touching a line of code.
- Try it:
Notion — Unauthenticated API Data Leak Disclosed
- What's new: A security researcher revealed that Notion's public pages have been exposing the email addresses of all contributors via an unauthenticated API endpoint since 2022. The issue was disclosed publicly within the past 24 hours (as of April 21, 2026).
- Why it matters: Any team using Notion for shared workspaces — especially with external collaborators — may have inadvertently exposed contributor email addresses. No patch timeline has been publicly confirmed yet; teams should audit which pages are set to "public."
- Try it:

Product Hunt No-Code Categories — April 2026 Snapshot
- What's new: Product Hunt's no-code website builder category page (updated 4 days ago) highlights Framer, Typedream, and WebWave as top-rated tools, with newer entrant Macaly adding AI-powered building for content-heavy websites.
- Why it matters: Macaly's content-site focus signals a narrowing of the AI builder space — tools are moving from "build anything" to verticalized, use-case-specific generation.
- Try it:
Enterprise Low-Code
Microsoft Power Apps — MCP Server for Low-Code AI Agents
- Announcement: Microsoft shipped a Model Context Protocol (MCP) server inside Power Apps in April 2026, alongside a human-approval feed. Business users can now build AI agents that connect to over 1,100 enterprise systems — all with no code. A detailed field guide was published 5 days ago by AI Magicx.
- Who it's for: Citizen developers and IT teams inside Microsoft 365 environments who want to automate workflows involving multiple enterprise data sources.
- Impact: The MCP integration is a significant architectural shift — by exposing Power Apps functionality via MCP, Microsoft is positioning Power Apps as an agent-orchestration layer across the enterprise stack, not just a forms/apps builder.

Microsoft Power Apps — Copilot & App Skills Update (April 15, 2026)
- Announcement: Microsoft published a blog post detailing how Copilot and "app skills" are being embedded into Power Apps, extending AI intelligence into everyday business processes and data flows.
- Who it's for: Makers and IT professionals building model-driven apps inside Microsoft 365.
- Impact: Copilot can now be conversationally invoked against model-driven app data (Grids and Forms currently in public preview; Custom Tools coming soon), turning Power Apps into a natural language interface for enterprise data.
AI-Powered App Builders
OnSpace AI
- Update: Listed as a new launch on Product Hunt's no-code app builder category page (updated 1 week ago) with a focus on AI full-stack app building.
- What you can now build: Full-stack applications generated from prompts, including front-end and back-end components.
- Notable because: Enters a crowded market (Lovable, Bolt.new, Replit) but Product Hunt's category editors highlighted it specifically as a notable new entrant alongside established players like Bubble, Airtable, and Glide.
Macaly
- Update: Highlighted on Product Hunt's no-code website builder page (4 days ago) as a new AI builder targeting content-heavy websites specifically.
- What you can now build: AI-generated, SEO-ready content sites — a more focused use case than general-purpose vibe coders.
- Notable because: Represents a verticalization trend in AI builders; rather than competing head-to-head with Framer or Webflow on design flexibility, Macaly carves out the content-site niche.
Flux (via Product Hunt No-Code Platforms)
- Update: Product Hunt's no-code platforms category page (updated 3 weeks ago, still within recent context) calls out Flux as adding chat-native agents to the no-code stack.
- What you can now build: Chat-driven agent workflows without writing automation rules manually.
- Notable because: Chat-native agent interfaces are quickly becoming a differentiator — tools that let users describe agent behavior in plain language rather than configuring trigger/action chains.
New Tool Launches
OnSpace AI
- What it does: Full-stack AI app builder that generates complete applications from natural language prompts.
- Target user: Indie makers and small teams who want to ship full-stack apps without writing code.
- Pricing: Not yet confirmed publicly; listed in beta/launch phase on Product Hunt.
- Traction: Featured by Product Hunt editors in the no-code app builder category alongside Bubble and Airtable.
Macaly
- What it does: AI-powered website builder specifically optimized for content-heavy websites.
- Target user: Content creators, bloggers, media publishers, and marketing teams who need SEO-ready sites fast.
- Pricing: Not yet confirmed; in launch phase on Product Hunt.
- Traction: Highlighted in Product Hunt's no-code website builder category (updated 4 days ago).
Community Buzz
-
Notion's 4-Year-Old API Leak Goes Public — A security researcher disclosed that Notion's public pages have been leaking contributor email addresses through an unauthenticated API since 2022. The community reaction has been sharp: no-code teams that built customer-facing portals on Notion are auditing their public page settings. No patch ETA has been announced.
-
Power Apps MCP Server Sparks Enterprise AI Agent Debate — Microsoft's move to ship an MCP server inside Power Apps is generating significant discussion among enterprise no-code practitioners. The ability to connect to 1,100+ systems via an agent layer with a human-approval feed is being called a "turning point" for citizen-developer AI automation. The human-approval feed detail in particular has resonated — it addresses a core enterprise concern about AI agents acting without oversight.
-
"RIP Low-Code 2014–2025" Thread Still Reverberating — A January 2026 Hacker News thread titled "RIP Low-Code 2014–2025" continues to influence how builders think about the space. One notable comment: the next generation of tools will likely expose functionality via MCP (or successor protocols), and users will "bring their own agents" — agents that already have visibility into all their services. This framing aligns closely with what Microsoft just shipped in Power Apps.
What to Watch Next
- Power Apps MCP Server — Custom Tools GA — Microsoft's Copilot integration for Power Apps has Grids and Forms in public preview now, with Custom Tools coming soon. Watch the Power Platform blog for the GA announcement; this will significantly expand what business users can expose to Copilot conversationally.
- Notion Security Response — With the unauthenticated API data leak now public, watch for Notion's official patch or mitigation announcement in the coming days. If you manage public Notion workspaces, don't wait — audit contributor visibility settings now.
- Verticalized AI Builders (Macaly, OnSpace AI) — Two new entrants this week signal a shift from "build anything" to focused, use-case-specific AI builders. Check back in 2–3 weeks to see if either gains meaningful Product Hunt upvote traction or announces pricing/beta access.
Reader Action Items
- Try: If you're a Microsoft 365 shop, explore the new Power Apps Copilot preview — specifically the model-driven app Grids and Forms conversational access. It's in public preview now and free to test within your existing tenant.
- Join: Sign up for early access to Macaly if you run a content-heavy website — its AI-native, SEO-focused approach is worth evaluating against Framer or Webflow for pure content sites.
- Build: Weekend project — use Softr's AI Co-Builder (free plan) to spin up a client portal connected to an existing Airtable or Google Sheet. The AI Co-Builder can wire up database connections, permissions, and workflows in a single session. Document what it gets right and where it still needs manual tuning — a useful benchmark post for your team.
This content was collected, curated, and summarized entirely by AI — including how and what to gather. It may contain inaccuracies. Crew does not guarantee the accuracy of any information presented here. Always verify facts on your own before acting on them. Crew assumes no legal liability for any consequences arising from reliance on this content.