Mcp Sitecore Server

io.github.Antonytm由 GitHub 帳號 Antonytm 發布v1.3.2更新於 Oct 25, 2026

A Model Context Protocol server for Sitecore

已驗證STDIO僅桌面檔案與儲存開發者工具

概覽

AI 產生的概覽

一個本機 MCP 伺服器,透過 121 個工具讓 AI 助理讀寫 Sitecore XM、XP 或 SitecoreAI 執行個體。

可以做什麼
透過 Authoring GraphQL API 和 Item Service 搜尋、查詢、建立、讀取、更新與刪除 Sitecore 項目與範本,包含媒體和呈現版面變更。執行原始 Sitecore PowerShell 腳本以及原始 Edge 或 Authoring GraphQL 查詢作為替代手段。管理帳戶、角色和項目安全性,並檢視索引、記錄和發佈狀態。讀取內建指南,用於組合頁面、批次更新和診斷連線問題。
適用情境
適用於建置、移轉、稽核或維運 Sitecore 解決方案,並希望助理直接在 CMS 中操作而非與內容編輯器之間複製貼上的情境。適合使用 XM/XP 或 SitecoreAI(包含本機 Docker CM)的開發人員。
執行需求
本機 Node.js LTS 執行環境(或 Docker,或從原始碼建置)。可存取的 Sitecore XM、XP 或 SitecoreAI 執行個體。認證資訊透過環境變數提供,例如 GRAPHQL_ENDPOINT、GRAPHQL_API_KEY、ITEM_SERVICE_USERNAME、ITEM_SERVICE_PASSWORD、POWERSHELL_USERNAME、POWERSHELL_PASSWORD 以及 AUTHORING_CLIENT_ID/AUTHORING_CLIENT_SECRET。Item Service 和 SPE Remoting 預設關閉,需要設定修補程式啟用。
安裝前請注意
它對 Sitecore 內容、媒體、呈現、安全性和帳戶具有寫入權限,並可在 CM 上執行任意 PowerShell 腳本。設定中會在環境變數裡保存 Sitecore 管理員使用者名稱、密碼、API 金鑰和用戶端密鑰。可使用 TOOL_PROFILE 預設集(如 no-account-management 或 no-spe)隱藏助理不應具備的能力。約四分之三的工具需要啟用 SPE Remoting。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Mcp Sitecore Server,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only,透過 STDIO。 STDIO 服務會啟動本機處理程序,因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

Sitecore Community MCP

[Build] [MCP spec 2026-07-28] [Legacy handshake 2025-11-25 to 2024-10-07] [PRs Welcome]

This repository contains the source code for the Sitecore Community MCP server — an open-source Model Context Protocol server that gives AI agents direct read/write access to Sitecore, so you stop copy-pasting between your agent and the Content Editor.

  • 121 tools across search, query, create, read, update, delete, media, PowerShell, logging, security and presentation
  • Three guides — guide://compose-page, guide://bulk-update and guide://diagnose-connection — resources an agent can read mid-task: two common, complex workflows that you'd want to use this MCP for, plus a connection issue self diagnosis helper.
  • Covers four Sitecore API surfaces: the Authoring and Management GraphQL API, the Item Service, GraphQL Edge and Sitecore PowerShell Extensions
  • Works with SitecoreAI and Sitecore XM/XP (all versions), from any MCP-compatible client
  • Implements MCP protocol revision 2026-07-28, and answers the older initialize handshake from the same tool registrations — negotiating down to any revision from 2025-11-25 to 2024-10-07, so a client on either era sees the same tools
  • Reported impact: 5× faster Figma-to-Sitecore workflows and ~70% less manual scaffolding (case study)
  • Three ways to run it: npm, Docker, or from source

Getting started with Sitecore Community MCP

To run the Sitecore Community MCP server, you need:

  • Node — the latest long-term support (LTS) release.
  • A Sitecore XM, XP or SitecoreAI instance. Which parts you enable decides which tools work: the authoring.* groups need only the Authoring and Management API (normally already on in the cloud) plus a token, while the Item Service and SPE Remoting are off by default and need a config patch. Preparing your Sitecore instance covers all three and how to verify each.

Adding the server to your MCP client

Add the entry below to your client's server map — mcpServers in Cursor, Claude Code and most other clients, servers in VS Code — and fill in your own endpoints and credentials:

json
{  "mcpServers": {    "sitecore-mcp": {      "type": "stdio",      "command": "npx",      "args": ["@antonytm/mcp-sitecore-server@latest"],      "env": {        "TRANSPORT": "stdio",        "GRAPHQL_ENDPOINT": "https://xmcloudcm.localhost/sitecore/api/graph/",        "GRAPHQL_SCHEMAS": "edge",        "GRAPHQL_API_KEY": "{6D3F291E-66A5-4703-887A-D549AF83D859}",        "GRAPHQL_HEADERS": "",        "ITEM_SERVICE_DOMAIN": "sitecore",        "ITEM_SERVICE_USERNAME": "admin",        "ITEM_SERVICE_PASSWORD": "b",        "ITEM_SERVICE_SERVER_URL": "https://xmcloudcm.localhost/",        "POWERSHELL_DOMAIN": "sitecore",        "POWERSHELL_USERNAME": "admin",        "POWERSHELL_PASSWORD": "b",        "POWERSHELL_SERVER_URL": "https://xmcloudcm.localhost/",        "AUTHORING_CLIENT_ID": "",        "AUTHORING_CLIENT_SECRET": "",        "TOOL_PROFILE": ""      }    }  }}

TOOL_PROFILE takes a comma-separated list of presets, and unions what each one hides. Every preset names something absent or unwanted rather than a platform. Four name an API surface your instance does not serve — no-spe, no-item-service, no-edge-graphql and no-authoring-api — so an instance missing two of them can say so. no-account-management is the one that is not about a missing surface: it hides the twelve tools that create or edit an account on the CM, for a deployment that would rather an agent could not do that at all (item security, and reading accounts and roles, are untouched):

TOOL_PROFILE=no-spe,no-item-service

no-spe is the big one: without SPE installed and its remoting service enabled, roughly three quarters of this server's tools cannot run, and hiding them is schema an agent no longer pays for on every turn. An unknown name is reported on stderr and ignored, leaving the rest of the list in force.

Every setting is documented in Configuration. Agents have a limit on how many tools they can hold, so before you get far, read Tool selection and trim the surface with TOOL_PROFILE, TOOL_GROUPS and DISABLED_TOOLS.

To run the server in a container or from source instead, see Running the server.

How this compares to the Sitecore Marketer MCP

Sitecore's own Marketer MCP is a hosted service aimed at marketers on SitecoreAI. This server is the developer-grade counterpart, and on that ground it is the stronger tool:

Sitecore Community MCPSitecore Marketer MCP
PlatformsSitecoreAI and XM/XP, all versions — including your local Docker CMSitecoreAI only
HostingSelf-hosted (npm, Docker, source); credentials never leave your infrastructureHosted by Sitecore; OAuth through the cloud
Surface121 tools across the full developer surface: items, templates, presentation, media, security, indexing, logs, publishing, GraphQL, raw PowerShellMarketer operations: pages, components, briefs, brand kits, personalization, A/B tests
Escape hatchrun-powershell-script, raw Edge GraphQL and raw Authoring GraphQL — if a tool doesn't exist, the capability still doesClosed tool set
Layout safetyadd-rendering-to-placeholder refuses components the placeholder settings forbid, naming the allow-listWrites are not validated against placeholder settings
Tool gatingTOOL_GROUPS / DISABLED_TOOLS / TOOL_PROFILE trim the schema cost per turnFixed tool list

They are complementary rather than exclusive: the Marketer MCP carries the cloud marketing features this server has no API for (briefs, brand kits, personalization variants, A/B tests), and nothing stops a client from connecting both. For building, migrating, auditing and operating Sitecore solutions, this server is the one with the depth.

Documentation and community resources

  • Preparing your Sitecore instance — SPE Remoting, the Item Service, GraphQL keys, and the config patch that enables them
  • Running the server — npm, Docker, from source, and the two transports
  • Tool reference — every tool, grouped by API surface
  • Configuration — environment variables, transports, timeouts and TLS
  • Tool selection — TOOL_GROUPS, DISABLED_TOOLS and TOOL_PROFILE
  • Guides — the guide://compose-page, guide://bulk-update and guide://diagnose-connection resources, and when each is offered
  • Docker images — the published Linux and Windows images
  • Changelog — what's new in 2.0 and its breaking changes

Community resources:

Contributions

We are very grateful to the community for contributing bug fixes and improvements. We welcome all efforts to evolve and improve this server; read below to learn how to participate in those efforts.

Contributing Guide

Read our contributing guide to learn about our development process, how to propose bug fixes and improvements, and how to build, debug and test your changes.

License

Sitecore Community MCP is using the Apache 2.0 license.

Support

This is a community project and is not supported by Sitecore.

來源:README.md,提交 4e10b09

工具

0
SourceWeft 尚未在沙箱中啟動過該軟體包,因此其工具未知。

版本歷史

1
  1. v1.3.2最新Sep 16, 2026

評分

已滿足適用檢查項的 50%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手;SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭,或保持端點能夠回應探測,以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list,或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分