Back to Browse

Umbraco CMS MCP Dev MCP Server

Content & MediaUse Caution4.3MCP RegistryLocal
Free

Server data from the Official MCP Registry

A developer focused model context protocol (MCP) server for Umbraco CMS

About

A developer focused model context protocol (MCP) server for Umbraco CMS

Security Report

4.3
Use Caution4.3High Risk

This is an official Umbraco MCP server with proper authentication requirements and reasonable permission scoping. The code is auto-generated from OpenAPI specs (Zod schemas) with TypeScript support. Minor concerns include broad environment variable access and the disabling of TLS verification in the example configuration, but these are documented trade-offs rather than hidden vulnerabilities. Supply chain analysis found 6 known vulnerabilities in dependencies (0 critical, 1 high severity). Package verification found 1 issue.

3 files analyzed · 11 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

What You'll Need

Set these up before or after installing:

Umbraco API user client IDRequired

Environment variable: UMBRACO_CLIENT_ID

Umbraco API user client secretRequired

Environment variable: UMBRACO_CLIENT_SECRET

Base URL of your Umbraco instanceOptional

Environment variable: UMBRACO_BASE_URL

Comma-separated list of tool collections to include (e.g., document,media,document-type)Optional

Environment variable: UMBRACO_INCLUDE_TOOL_COLLECTIONS

Enable readonly mode to disable all write operations (create, update, delete). Only read and query tools remain available.Optional

Environment variable: UMBRACO_READONLY

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-umbraco-umbraco-cms-mcp-dev": {
      "env": {
        "UMBRACO_BASE_URL": "your-umbraco-base-url-here",
        "UMBRACO_READONLY": "your-umbraco-readonly-here",
        "UMBRACO_CLIENT_ID": "your-umbraco-client-id-here",
        "UMBRACO_CLIENT_SECRET": "your-umbraco-client-secret-here",
        "UMBRACO_INCLUDE_TOOL_COLLECTIONS": "your-umbraco-include-tool-collections-here"
      },
      "args": [
        "-y",
        "@umbraco-cms/mcp-dev"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

Umbraco MCP GitHub License

An MCP (Model Context Protocol) server for Umbraco CMS that unlocks AI-powered content management. It provides comprehensive access to the Umbraco Management API, enabling your AI agent to perform back office tasks through natural conversation - freeing you from the UI and making complex, repetitive workflows that would be tedious or impossible manually become effortless.

Intro

The MCP server authenticates using an Umbraco API user, ensuring secure, permission-based access to the Umbraco Management API. This means you maintain complete control over what your AI agent can do through Umbraco's standard user permission system - no special security model required.

Quick Start

1. Create an Umbraco API User

First, create an Umbraco API user with appropriate permissions. You can find instructions in Umbraco's documentation.

2. Install in Claude Desktop

Download and install the Claude Desktop app, then add the MCP server to your configuration:

  1. Open Claude Desktop Settings > Developer > Edit Config
  2. Add this configuration to your claude_desktop_config.json:
{
  "mcpServers": {
    "umbraco-mcp": {
      "command": "npx",
      "args": ["@umbraco-cms/mcp-dev@17"],
      "env": {
        "NODE_TLS_REJECT_UNAUTHORIZED": "0",
        "UMBRACO_CLIENT_ID": "your-api-user-id",
        "UMBRACO_CLIENT_SECRET": "your-api-secret",
        "UMBRACO_BASE_URL": "https://localhost:{port}",
        "UMBRACO_INCLUDE_TOOL_COLLECTIONS": "document,media,document-type,data-type"
      }
    }
  }
}
  1. Fully restart Claude Desktop (including in the system tray on Windows)

Documentation

For complete installation instructions, configuration options, tool listings, and usage examples, see the full documentation:

Umbraco MCP Documentation

Hosted Deployment

The Cloudflare Worker entry point (src/worker.ts) supports two deployment modes, selected at request time by the @umbraco-cms/mcp-hosted library:

  • Single-tenant (default) — the worker authenticates against the UMBRACO_BASE_URL configured in wrangler.toml. This is the existing behavior and requires no extra configuration.
  • Multi-tenant Umbraco Cloud — set UMBRACO_CLOUD_ROUTING_ENABLED = "true" under [vars] in wrangler.toml. Requests to /at/{alias}/... resolve the upstream Umbraco Cloud project for {alias} and issue access tokens scoped to that resource per the MCP resource-indicator spec. Each Umbraco Cloud project served by the worker must register an OpenIddict client with id umbraco-cms-dev-mcp-hosted.

siteRouting is wired unconditionally; the per-request toggle is the env var.

Contributing with AI Tools

This project is optimized for development with AI coding assistants. We provide instruction files for popular AI tools to help maintain consistency with our established patterns and testing standards.

Using rulesync

The project includes rulesync configuration files that can automatically generate instruction files for 19+ AI development tools. Generate configuration files for your preferred AI tools:

# Generate only for Claude Code
npx rulesync generate --claudecode

# Generate only for Cursor
npx rulesync generate --cursor

# Generate only for Vs Code Copilot
npx rulesync generate --copilot

Other AI Tools

rulesync supports 19+ AI development tools including GitHub Copilot, Cline, Aider, and more. Check the rulesync repository for the complete list of supported tools.

The instruction files cover:

  • MCP development patterns and conventions
  • TypeScript implementation guidelines
  • Comprehensive testing standards with builders and helpers
  • Project-specific context and architecture
  • API integration patterns with Umbraco Management API

Reviews

No reviews yet

Be the first to review this server!