Umbraco MCP: managing Umbraco CMS through an agent

Umbraco-CMS-MCP-Dev

Official Umbraco server gives the agent the Management API: documents, media, document and data types, with API user rights

  • 39 ★ on the repository
  • Last commit
  • MIT
MCP serverOfficial

Broad access

Why this level

  • The agent gets API user rights to create, change and delete documents, media and types, so a mistake touches the live site
  • The API user secret sits in the client config, and the README example disables TLS certificate checks with NODE_TLS_REJECT_UNAUTHORIZED=0
All reasons and checks

umbraco/umbraco-cms-mcp-dev

Install

In your terminal, with SkillFoxx CLI

npx skillfoxx add mcp/umbraco-cms-mcp-dev

Detects the agents on your machine, shows the access level and pins the version.

Other ways to install

Access and checks

How we review

Broad accessThe tool can change data, run commands or handle secrets.

  • The agent gets API user rights to create, change and delete documents, media and types, so a mistake touches the live site
  • The API user secret sits in the client config, and the README example disables TLS certificate checks with NODE_TLS_REJECT_UNAUTHORIZED=0

This is third-party code. Review the repository files before installing.

What it does

The @umbraco-cms/mcp-dev server connects an AI agent to the Umbraco CMS Management API and covers back office tasks: documents and media, document types and data types. Access runs as an Umbraco API user, so agent actions are bound by the ordinary CMS permission system and there is no separate security model. The client config sets the API user ID and secret, the site base URL and the tool collections through UMBRACO_INCLUDE_TOOL_COLLECTIONS, for example document, media, document-type and data-type. The package version is pinned to the site major version, for example umbraco-cms/mcp-dev@17 for Umbraco 17, because tool schemas follow the Management API. For hosting there is a Cloudflare Worker variant with single-tenant and multi-tenant Umbraco Cloud modes.

Who it is for. Developers and content teams on Umbraco CMS who want to edit documents, media and data types by talking to an agent instead of clicking through the back office

Good fit when

  • Document fields across the site, such as SEO descriptions, are updated in bulk from a spreadsheet list
  • The agent creates document types and data types for a new section of the site
  • The media library is tidied up: files with no description are found and filled in
  • Content is checked against rules before publishing and the errors found are fixed
  • The tool set is narrowed to the needed collections so the agent does not get extra rights

Not a fit when

  • The site does not run on Umbraco: the server works only with the Management API of this CMS
  • You cannot create an API user: without one there is no way to connect
  • You need to change templates and site code: the server manages content and settings through the API and does not touch project files
  • The Umbraco version differs from the package major version: tool schemas may not match the API

Example request

Find all article documents in Umbraco with an empty meta description field and suggest text for each without publishing them.

MCP

Transport
stdio
Authentication
API key

Environment variables

UMBRACO_CLIENT_ID required
The Umbraco API user ID
UMBRACO_CLIENT_SECRET required, secret
The Umbraco API user secret
UMBRACO_BASE_URL required
The site base URL, for example https://localhost:port
UMBRACO_INCLUDE_TOOL_COLLECTIONS
The list of tool collections to enable, for example document,media

Limitations

Pick the package major version to match the site: tool schemas follow the Management API, and a mismatch can make calls fail in the middle of a task. The example config disables TLS certificate checks for a local address, which must not be done on a production site. Setup details and the tool list live in separate Umbraco documentation, and the README covers only a quick start. The last commit was made on November 3, 2026.

How to disable. Remove the server from the client config, for example with claude mcp remove umbraco-mcp, and disable or delete the API user in the Umbraco back office. Content changes the agent already made are rolled back with the CMS tools.

FAQ

How does the server get access to Umbraco?

Through an Umbraco API user: the ID and secret go in environment variables, and rights come from the ordinary CMS permission system.

Which package version should I install?

The same major as the site: umbraco-cms/mcp-dev@17 for Umbraco 17 and @18 for Umbraco 18. Avoid the latest tag.

Can I limit what the agent sees?

Yes. The UMBRACO_INCLUDE_TOOL_COLLECTIONS variable enables only the listed collections, for example document and media.

Is there a hosted option?

Yes, the Cloudflare Worker entry point in src/worker.ts runs in single-tenant mode or for several Umbraco Cloud projects.

What licence is the project under?

MIT, as stated in the repository.

Discussion

No questions or reviews yet.

Official

Official Contentful MCP server: entries, content types, assets, locales and AI Actions via the Management API

MCP serverBroad access62Repository stars

A TYPO3 extension with an MCP server: an agent browses the page tree and edits records, and changes queue up in workspaces.

MCP serverExtended access108Repository stars

MCP server for Ghost CMS: posts, members, newsletters, tiers and webhooks via the Admin API

MCP serverBroad access245Repository stars

InstaWP WordPress MCP

InstaWP mcp-wp

An MCP server for WordPress: posts, pages, taxonomies, media, users and plugins across several sites at once.

MCP serverBroad access100Repository stars

TypeScript MCP server with 73 tools for posts, pages, media, SEO and settings across one or several WordPress sites.

MCP serverBroad access114Repository stars

An MCP server for the Meta Marketing API v26: 134 tools for Facebook and Instagram ad campaigns, audiences, creatives and reports

MCP serverBroad access94Repository stars

Comparison with similar tools

Cards that share the main search query, and how they differ.

ToolOfficialAuthenticationRepository starsMain difference
Umbraco MCP: managing Umbraco CMS through an agent (this card)yesAPI key39
Contentful MCP ServeryesAPI key62the cloud CMS Contentful with its own content model, while this covers the Umbraco back office and its Management API
FireCMS MCP ServeryesOAuth1,283a server for FireCMS on Firebase, while this one is for Umbraco on .NET

README in short

The short README walks through a quick start: create an API user, add the config to Claude Desktop and restart it. It then links to the full Umbraco docs, describes hosting on a Cloudflare Worker and has a contributor section with rulesync and instructions for AI tools.

README badge

Report a problem