Mcp Sitecore Server

io.github.Antonytm由 GitHub 账号 Antonytm 发布v1.3.2更新于 Oct 25, 2026

A Model Context Protocol server for Sitecore

已验证STDIO仅桌面文件与存储开发者工具

概览

AI 生成的概览

一个本地 MCP 服务器,通过 121 个工具让 AI 助手读写 Sitecore XM、XP 或 SitecoreAI 实例。

可以做什么
通过 Authoring GraphQL API 和 Item Service 搜索、查询、创建、读取、更新和删除 Sitecore 项目与模板,包括媒体和呈现布局变更。运行原始 Sitecore PowerShell 脚本以及原始 Edge 或 Authoring GraphQL 查询作为补充手段。管理账户、角色和项目安全,并查看索引、日志和发布状态。读取内置指南,用于组装页面、批量更新和诊断连接问题。
适用场景
适用于构建、迁移、审计或运维 Sitecore 解决方案,并希望助手直接在 CMS 中操作而非与内容编辑器之间复制粘贴的场景。适合使用 XM/XP 或 SitecoreAI(包括本地 Docker CM)的开发者。
运行要求
本地 Node.js LTS 运行时(或 Docker,或从源码构建)。可访问的 Sitecore XM、XP 或 SitecoreAI 实例。凭据通过环境变量提供,例如 GRAPHQL_ENDPOINT、GRAPHQL_API_KEY、ITEM_SERVICE_USERNAME、ITEM_SERVICE_PASSWORD、POWERSHELL_USERNAME、POWERSHELL_PASSWORD 以及 AUTHORING_CLIENT_ID/AUTHORING_CLIENT_SECRET。Item Service 和 SPE Remoting 默认关闭,需要配置补丁启用。
安装前请注意
它对 Sitecore 内容、媒体、呈现、安全和账户具有写权限,并可在 CM 上运行任意 PowerShell 脚本。配置中会在环境变量里保存 Sitecore 管理员用户名、密码、API 密钥和客户端密钥。可使用 TOOL_PROFILE 预设(如 no-account-management 或 no-spe)隐藏助手不应具备的能力。约四分之三的工具需要启用 SPE Remoting。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Mcp Sitecore Server,将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Desktop only,通过 STDIO。 STDIO 服务会启动本地进程,因此需要 SourceWeft 桌面宿主。

其他 MCP 客户端

参照 仓库 中的启动说明。

README

Sitecore Community MCP

[Build] [MCP spec 2026-07-28] [Legacy handshake 2025-11-25 to 2024-10-07] [PRs Welcome]

This repository contains the source code for the Sitecore Community MCP server — an open-source Model Context Protocol server that gives AI agents direct read/write access to Sitecore, so you stop copy-pasting between your agent and the Content Editor.

  • 121 tools across search, query, create, read, update, delete, media, PowerShell, logging, security and presentation
  • Three guides — guide://compose-page, guide://bulk-update and guide://diagnose-connection — resources an agent can read mid-task: two common, complex workflows that you'd want to use this MCP for, plus a connection issue self diagnosis helper.
  • Covers four Sitecore API surfaces: the Authoring and Management GraphQL API, the Item Service, GraphQL Edge and Sitecore PowerShell Extensions
  • Works with SitecoreAI and Sitecore XM/XP (all versions), from any MCP-compatible client
  • Implements MCP protocol revision 2026-07-28, and answers the older initialize handshake from the same tool registrations — negotiating down to any revision from 2025-11-25 to 2024-10-07, so a client on either era sees the same tools
  • Reported impact: 5× faster Figma-to-Sitecore workflows and ~70% less manual scaffolding (case study)
  • Three ways to run it: npm, Docker, or from source

Getting started with Sitecore Community MCP

To run the Sitecore Community MCP server, you need:

  • Node — the latest long-term support (LTS) release.
  • A Sitecore XM, XP or SitecoreAI instance. Which parts you enable decides which tools work: the authoring.* groups need only the Authoring and Management API (normally already on in the cloud) plus a token, while the Item Service and SPE Remoting are off by default and need a config patch. Preparing your Sitecore instance covers all three and how to verify each.

Adding the server to your MCP client

Add the entry below to your client's server map — mcpServers in Cursor, Claude Code and most other clients, servers in VS Code — and fill in your own endpoints and credentials:

json
{  "mcpServers": {    "sitecore-mcp": {      "type": "stdio",      "command": "npx",      "args": ["@antonytm/mcp-sitecore-server@latest"],      "env": {        "TRANSPORT": "stdio",        "GRAPHQL_ENDPOINT": "https://xmcloudcm.localhost/sitecore/api/graph/",        "GRAPHQL_SCHEMAS": "edge",        "GRAPHQL_API_KEY": "{6D3F291E-66A5-4703-887A-D549AF83D859}",        "GRAPHQL_HEADERS": "",        "ITEM_SERVICE_DOMAIN": "sitecore",        "ITEM_SERVICE_USERNAME": "admin",        "ITEM_SERVICE_PASSWORD": "b",        "ITEM_SERVICE_SERVER_URL": "https://xmcloudcm.localhost/",        "POWERSHELL_DOMAIN": "sitecore",        "POWERSHELL_USERNAME": "admin",        "POWERSHELL_PASSWORD": "b",        "POWERSHELL_SERVER_URL": "https://xmcloudcm.localhost/",        "AUTHORING_CLIENT_ID": "",        "AUTHORING_CLIENT_SECRET": "",        "TOOL_PROFILE": ""      }    }  }}

TOOL_PROFILE takes a comma-separated list of presets, and unions what each one hides. Every preset names something absent or unwanted rather than a platform. Four name an API surface your instance does not serve — no-spe, no-item-service, no-edge-graphql and no-authoring-api — so an instance missing two of them can say so. no-account-management is the one that is not about a missing surface: it hides the twelve tools that create or edit an account on the CM, for a deployment that would rather an agent could not do that at all (item security, and reading accounts and roles, are untouched):

TOOL_PROFILE=no-spe,no-item-service

no-spe is the big one: without SPE installed and its remoting service enabled, roughly three quarters of this server's tools cannot run, and hiding them is schema an agent no longer pays for on every turn. An unknown name is reported on stderr and ignored, leaving the rest of the list in force.

Every setting is documented in Configuration. Agents have a limit on how many tools they can hold, so before you get far, read Tool selection and trim the surface with TOOL_PROFILE, TOOL_GROUPS and DISABLED_TOOLS.

To run the server in a container or from source instead, see Running the server.

How this compares to the Sitecore Marketer MCP

Sitecore's own Marketer MCP is a hosted service aimed at marketers on SitecoreAI. This server is the developer-grade counterpart, and on that ground it is the stronger tool:

Sitecore Community MCPSitecore Marketer MCP
PlatformsSitecoreAI and XM/XP, all versions — including your local Docker CMSitecoreAI only
HostingSelf-hosted (npm, Docker, source); credentials never leave your infrastructureHosted by Sitecore; OAuth through the cloud
Surface121 tools across the full developer surface: items, templates, presentation, media, security, indexing, logs, publishing, GraphQL, raw PowerShellMarketer operations: pages, components, briefs, brand kits, personalization, A/B tests
Escape hatchrun-powershell-script, raw Edge GraphQL and raw Authoring GraphQL — if a tool doesn't exist, the capability still doesClosed tool set
Layout safetyadd-rendering-to-placeholder refuses components the placeholder settings forbid, naming the allow-listWrites are not validated against placeholder settings
Tool gatingTOOL_GROUPS / DISABLED_TOOLS / TOOL_PROFILE trim the schema cost per turnFixed tool list

They are complementary rather than exclusive: the Marketer MCP carries the cloud marketing features this server has no API for (briefs, brand kits, personalization variants, A/B tests), and nothing stops a client from connecting both. For building, migrating, auditing and operating Sitecore solutions, this server is the one with the depth.

Documentation and community resources

  • Preparing your Sitecore instance — SPE Remoting, the Item Service, GraphQL keys, and the config patch that enables them
  • Running the server — npm, Docker, from source, and the two transports
  • Tool reference — every tool, grouped by API surface
  • Configuration — environment variables, transports, timeouts and TLS
  • Tool selection — TOOL_GROUPS, DISABLED_TOOLS and TOOL_PROFILE
  • Guides — the guide://compose-page, guide://bulk-update and guide://diagnose-connection resources, and when each is offered
  • Docker images — the published Linux and Windows images
  • Changelog — what's new in 2.0 and its breaking changes

Community resources:

Contributions

We are very grateful to the community for contributing bug fixes and improvements. We welcome all efforts to evolve and improve this server; read below to learn how to participate in those efforts.

Contributing Guide

Read our contributing guide to learn about our development process, how to propose bug fixes and improvements, and how to build, debug and test your changes.

License

Sitecore Community MCP is using the Apache 2.0 license.

Support

This is a community project and is not supported by Sitecore.

来源:README.md,提交 4e10b09

工具

0
SourceWeft 尚未在沙箱中启动过该软件包,因此其工具未知。

版本历史

1
  1. v1.3.2最新Sep 16, 2026

评分

已满足适用检查项的 50%

该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。

  • 近 30 天内可连通25 分

    请保持端点能够响应 MCP 握手;SourceWeft 每 30 天探测一次。

  • 已声明认证方式10 分

    请在注册中心条目中声明凭据请求头,或保持端点能够响应探测,以便判定其认证方式。

  • 已列出工具15 分

    请让服务器在无凭据时响应 tools/list,或发布可在沙箱中无凭据启动的软件包。

  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分