Sitecore MCP server

by Antonytm·io.github.Antonytm/mcp-sitecore-server·v1.3.2·53 stars

No reviews yet

A Model Context Protocol server for Sitecore

A85/100grade A

Write a review Install

What users say

No reviews yet

Be the first

Safety scan

A85/100

full report

Adoption

Growing

53 stars

Reviews

Write one

Nobody has reviewed Sitecore yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Sitecore tools (100, 28 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

common-add-base-template-by-id
Adds a base template to a template item by its ID.
common-add-base-template-by-path
Adds a base template to a template item by its path.
common-add-item-version-by-idwrite action
Creates a version of the item (by its id) in a new language based on an existing language version.
common-add-item-version-by-pathwrite action
Creates a version of the item (by its path) in a new language based on an existing language version.
common-get-archive
Gets Sitecore database archives.
common-get-archive-item
Gets a list of items found in the specified archive.
common-get-cache
Gets information about Sitecore caches.
common-get-database
Gets information about Sitecore databases.
common-get-item-field-by-id
Gets item fields as either names or fields or template fields by its ID.
common-get-item-field-by-path
Gets item fields as either names or fields or template fields by its path.
common-get-item-reference-by-id
Gets item references for a Sitecore item by its ID, showing where it is used throughout the system.
common-get-item-reference-by-path
Gets item references for a Sitecore item by its path, showing where it is used throughout the system.
common-get-item-referrer-by-id
Gets items referring to a Sitecore item by its ID, showing which items reference it.
common-get-item-referrer-by-path
Gets items referring to a Sitecore item by its path, showing which items reference it.
common-get-item-template-by-id
Gets template information for a Sitecore item by its ID.
common-get-item-template-by-path
Gets template information for a Sitecore item by its path.
common-get-item-workflow-event-by-id
Gets entries from the workflow history for the specified item by its ID.
common-get-item-workflow-event-by-path
Gets entries from the workflow history for the specified item by its path.
common-get-sitecore-job
Gets list of the current Sitecore jobs.
common-invoke-workflow-by-idwrite action
Executes workflow action for a Sitecore item by its ID.
common-invoke-workflow-by-pathwrite action
Executes workflow action for a Sitecore item by its path.
common-new-item-workflow-event-by-idwrite action
Creates a new entry in the workflow history for a Sitecore item by its ID.
common-new-item-workflow-event-by-pathwrite action
Creates a new entry in the workflow history for a Sitecore item by its path.
common-publish-item-by-idwrite action
Publishes a Sitecore item by its ID.
common-publish-item-by-pathwrite action
Publishes a Sitecore item by its path.
common-remove-archive-itemwrite action
Removes items permanently from the specified archive.
common-remove-base-template-by-idwrite action
Removes a base template from a template item by its ID.
common-remove-base-template-by-pathwrite action
Removes a base template from a template item by its path.
common-remove-item-version-by-idwrite action
Removes a version of a Sitecore item by ID.
common-remove-item-version-by-pathwrite action
Removes a version of a Sitecore item by path.
common-reset-item-field-by-id
Resets item fields, specified as either names, fields or template fields by ID.
common-set-item-template-by-id
Sets the item template by the item's ID.
common-set-item-template-by-path
Sets the item template by the item's path.
get-powershell-documentation
Gets the documentation describing all Sitecore Powershell commands.
indexing-find-item
Finds items using the Sitecore Content Search API. Date format should be in ISO 8601 format (e.g., '2023-10-01T00:00:00Z').
indexing-get-search-index
Get information about Sitecore search indexes. Can filter by name, database, running status, or corrupted status.
indexing-initialize-search-index
Initialize one or more Sitecore search indexes. If no name is provided, all indexes will be initialized.
indexing-initialize-search-index-item-by-id
Rebuilds the index for a given tree with the specified root item by id and index name. Supports wildcard filtering for the index name.
indexing-initialize-search-index-item-by-path
Rebuilds the index for a given tree with the specified root item by path and index name. Supports wildcard filtering for the index name.
indexing-remove-search-index-item-by-idwrite action
Removes the item with the specified ID from the search index. Supports wildcard filtering for the index name.
indexing-remove-search-index-item-by-pathwrite action
Removes the item with the specified path from the search index. Supports wildcard filtering for the index name.
indexing-resume-search-index
Resume one or more Sitecore search indexes. If no name is provided, all paused indexes will be resumed.
indexing-stop-search-index
Stop one or more Sitecore search indexes. If no name is provided, all running indexes will be stopped.
indexing-suspend-search-index
Suspend one or more Sitecore search indexes. If no name is provided, all running indexes will be suspended.
item-service-create-itemwrite action
Create a new Sitecore item under parent path with name using template id.
item-service-delete-itemwrite action
Delete a Sitecore item by its ID.
item-service-edit-item
Edit a Sitecore item by its ID.
item-service-get-item
Get a Sitecore item by its ID.
item-service-get-item-by-path
Get a Sitecore item by its path.
item-service-get-item-children
Get children of a Sitecore item by its ID.
item-service-get-item-descendants
Get descendants of a Sitecore item by its ID.
item-service-get-languages
Get Sitecore languages.
item-service-run-stored-querywrite action
Run a stored Sitecore query by its definition item ID.
item-service-run-stored-searchwrite action
Run a stored Sitecore search by its definition item ID.
item-service-search-items
Search Sitecore items using the ItemService RESTful API.
provider-get-item-by-id
Gets a Sitecore item by its ID.
provider-get-item-by-path
Gets a Sitecore item by its path.
provider-get-item-by-query
Gets a Sitecore item by Sitecore query.
provider-get-item-by-uri
Gets a Sitecore item by its URI.
run-powershell-scriptwrite action
Runs a PowerShell script and returns the output.
security-add-item-acl-by-id
Adds an access control entry to a Sitecore item by its ID.
security-add-item-acl-by-path
Adds an access control entry to a Sitecore item by its path.
security-add-role-member
Adds a member to a Sitecore role.
security-clear-item-acl-by-id
Clears all access rules from a Sitecore item by its ID.
security-clear-item-acl-by-path
Clears all access rules from a Sitecore item by its path.
security-disable-user
Disables the Sitecore user account.
security-enable-user
Enables the Sitecore user account.
security-get-current-user
Get the current Sitecore user.
security-get-domain
Get all Sitecore domains.
security-get-domain-by-name
Get a Sitecore domain by its name.
security-get-item-acl-by-id
Gets the access control list (ACL) of a Sitecore item by its ID.
security-get-item-acl-by-path
Gets the access control list (ACL) of a Sitecore item by its path.
security-get-role-by-filter
Get Sitecore roles by filter criteria.
security-get-role-by-identity
Get a Sitecore role by its identity.
security-get-role-member
Get members of a Sitecore role.
security-get-user-by-filter
Get a Sitecore users by filter.
security-get-user-by-identity
Get a Sitecore user by its name.
security-lock-item-by-id
Lock a Sitecore item by its ID.
security-lock-item-by-path
Lock a Sitecore item by its path.
security-new-domainwrite action
Creates a new Sitecore domain.
security-new-rolewrite action
Creates a new Sitecore role.
security-new-userwrite action
Creates a new Sitecore user.
security-protect-item-by-id
Protect a Sitecore item by its ID.
security-protect-item-by-path
Protect a Sitecore item by its path.
security-remove-domainwrite action
Removes a Sitecore domain.
security-remove-rolewrite action
Removes a Sitecore role.
security-remove-role-memberwrite action
Removes members from a Sitecore role.
security-remove-userwrite action
Removes the Sitecore user.
security-set-item-acl-by-id
Sets an access control entry to a Sitecore item by its ID.
security-set-item-acl-by-path
Sets an access control entry to a Sitecore item by its path.
security-set-userwrite action
Updates properties of a Sitecore user account.
security-set-user-password
Sets a new password for a Sitecore user.
security-test-account
Tests if a Sitecore user exists and has specific properties.
security-test-item-acl-by-id
Tests whether a user or role has specific access rights to a Sitecore item by its ID.
security-test-item-acl-by-path
Tests whether a user or role has specific access rights to a Sitecore item by its path.
security-unlock-item-by-id
Unlocks a Sitecore item by its ID.
security-unlock-item-by-path
Unlocks a Sitecore item by its path.
security-unlock-user
Unlocks a Sitecore user account that has been locked out due to failed login attempts.
security-unprotect-item-by-id
Unprotect a Sitecore item by its ID.
security-unprotect-item-by-path
Unprotect a Sitecore item by its path.

Public scan report

scanner v0.1.10 · 2026-10-01 · same rubric, same numbers if you re-run it

1 medium

Code scan352 source files scanned20/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 15 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (1)

mediumeval / new Function usedexec.eval

dist/bundle.js: …e; try { var makeValidate = new Function( 'self', 'RULES', …

Overall 85/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

How Sitecore compares

Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score: 85/100; higher than 73% of 4,460 AI and agents servers
Tools: 100; the typical AI and agents server has 6
Tools that change things: 28%; typical: 0%. Fewer write tools means less an agent can break
GitHub stars: 53; more than 92% of 2,711 AI and agents servers

What its tools let an agent do: 72 read · 27 change · 1 run or deploy

Install Sitecore in Claude Code, Cursor or VS Code

Runs npx -y @antonytm/mcp-sitecore-server on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add mcp-sitecore-server -- npx -y @antonytm/mcp-sitecore-server

Add to Cursor

What the publisher says

From the Sitecore repository's README, as published. We do not edit it. Read it on GitHub

Sitecore Community MCP

This repository contains the source code for the Sitecore Community MCP server — an open-source Model Context Protocol server that gives AI agents direct read/write access to Sitecore, so you stop copy-pasting between your agent and the Content Editor.

121 tools across search, query, create, read, update, delete, media, PowerShell, logging, security and presentation
Three guides — guide://compose-page, guide://bulk-update and guide://diagnose-connection — resources an agent can read mid-task: two common, complex workflows that you'd want to use this MCP for, plus a connection issue self diagnosis helper.
Covers four Sitecore API surfaces: the Authoring and Management GraphQL API, the Item Service, GraphQL Edge and Sitecore PowerShell Extensions
Works with SitecoreAI and Sitecore XM/XP (all versions), from any MCP-compatible client
Implements MCP protocol revision 2026-07-28, and answers the older initialize handshake from the same tool registrations — negotiating down to any revision from 2025-11-25 to 2024-10-07, so a client on either era sees the same tools
Reported impact: 5× faster Figma-to-Sitecore workflows and ~70% less manual scaffolding (case study)
Three ways to run it: npm, Docker, or from source

Getting started with Sitecore Community MCP

To run the Sitecore Community MCP server, you need:

work: the authoring.* groups need only the Authoring and Management API (normally already on in the cloud) plus a token, while the Item Service and SPE Remoting are off by default and need a config patch. Preparing your Sitecore instance covers all three and how to verify each.

Node — the latest long-term support (LTS) release.
A Sitecore XM, XP or SitecoreAI instance. Which parts you enable decides which tools

Adding the server to your MCP client

Add the entry below to your client's server map — mcpServers in Cursor, Claude Code and most other clients, servers in VS Code — and fill in your own endpoints and credentials:

{
  "mcpServers": {
    "sitecore-mcp": {
      "type": "stdio",
      "command": "npx",
      "args": ["@antonytm/mcp-sitecore-server@latest"],
      "env": {
        "TRANSPORT": "stdio",
        "GRAPHQL_ENDPOINT": "https://xmcloudcm.localhost/sitecore/api/graph/",
        "GRAPHQL_SCHEMAS": "edge",
        "GRAPHQL_API_KEY": "{6D3F291E-66A5-4703-887A-D549AF83D859}",
        "GRAPHQL_HEADERS": "",
        "ITEM_SERVICE_DOMAIN": "sitecore",
        "ITEM_SERVICE_USERNAME": "admin",
        "ITEM_SERVICE_PASSWORD": "b",
        "ITEM_SERVICE_SERVER_URL": "https://xmcloudcm.localhost/",
        "POWERSHELL_DOMAIN": "sitecore",
        "POWERSHELL_USERNAME": "admin",
        "POWERSHELL_PASSWORD": "b",
        "POWERSHELL_SERVER_URL": "https://xmcloudcm.localhost/",
        "AUTHORING_CLIENT_ID": "",
        "AUTHORING_CLIENT_SECRET": "",
        "TOOL_PROFILE": ""
      }
    }
  }
}

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Sitecore: common questions

Is Sitecore MCP server safe?: Yes, by our scan: it is graded A (85/100). Read the Sitecore safety report
How do I install Sitecore?: It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Sitecore need an API key?: No secret keys are declared. It reads 1 setting from the environment.
Is Sitecore maintained?: The last commit was 48 days ago (2026-09-17). The latest release is v1.3.2.
How does Sitecore compare with other AI and agents MCP servers?: safety score 85/100 (higher than 73% of 4,460 AI and agents servers); tools 100 (the typical AI and agents server has 6); tools that change things 28% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.