Model Context Protocol moderate risk

Contentful

This MCP server provides full CRUD operations for Contentful's Content Management API, including content, comments, assets, spaces, and content types.

Connections & Capabilities

Connects To

GitHub

Capabilities

readwriteadmin

Quickstart

Install

npx -y @smithery/cli install @ivotoby/contentful-management-mcp-server --client claude

Config

{
  "mcpServers": {
    "contentful": {
      "command": "npx",
      "args": ["-y", "@ivotoby/contentful-management-mcp-server"],
      "env": {
        "CONTENTFUL_MANAGEMENT_ACCESS_TOKEN": "<Your CMA token>"
      }
    }
  }
}

Exposed MCP Tools (33)

safe

search_entries

Search for entries within Contentful using specified query parameters.

Read-only operation; no content is modified.

moderate

create_entry

Create a new entry in Contentful with specified content and metadata.

Creates new content, but doesn't modify existing content without explicit instruction.

safe

get_entry

Retrieve an existing entry from Contentful by its ID.

Read-only operation; no content is modified.

high

update_entry

Update the fields of an existing entry in Contentful.

Modifies existing content, potentially causing data loss or corruption if not handled carefully.

critical

delete_entry

Delete an entry from Contentful.

Destructive operation; permanently removes content.

moderate

publish_entry

Publish an entry to make it available on the delivery API.

Changes the state of content, making it publicly accessible.

moderate

unpublish_entry

Unpublish an entry to remove it from the delivery API.

Changes the state of content, removing it from public access.

safe

get_comments

Retrieve comments for a specific entry, optionally filtering by status.

Read-only operation; retrieves existing comments.

moderate

create_comment

Create a new comment on an entry, supporting plain-text and rich-text formats.

Adds new content in the form of comments.

safe

get_single_comment

Retrieve a specific comment by its ID for an entry.

Read-only operation; retrieves a single comment.

high

delete_comment

Delete a specific comment from an entry.

Removes a comment, which could be important for context or discussion.

moderate

update_comment

Update the content or status of an existing comment.

Modifies existing comment content or status.

high

bulk_publish

Publish multiple entries and assets in a single operation.

Publishes multiple content items, potentially exposing unintended content.

high

bulk_unpublish

Unpublish multiple entries and assets in a single operation.

Unpublishes multiple content items, potentially disrupting content delivery.

safe

bulk_validate

Validate multiple entries for content consistency and required fields.

Read-only operation; validates content without modifying it.

safe

list_assets

List assets with pagination.

Read-only operation; lists existing assets.

moderate

upload_asset

Upload new assets with metadata.

Adds new assets to the content repository.

safe

get_asset

Retrieve asset details and information.

Read-only operation; retrieves asset information.

high

update_asset

Update asset metadata and files.

Modifies existing asset metadata and files.

critical

delete_asset

Remove assets from space.

Destructive operation; permanently removes assets.

moderate

publish_asset

Publish assets to delivery API.

Changes the state of assets, making them publicly accessible.

moderate

unpublish_asset

Unpublish assets from delivery API.

Changes the state of assets, removing them from public access.

safe

list_spaces

List available spaces.

Read-only operation; lists available spaces.

safe

get_space

Get space details.

Read-only operation; retrieves space details.

safe

list_environments

List environments in a space.

Read-only operation; lists environments.

high

create_environment

Create new environment.

Creates a new environment, which can impact content organization and workflows.

critical

delete_environment

Remove environment.

Destructive operation; permanently removes an environment.

safe

list_content_types

List available content types.

Read-only operation; lists content types.

safe

get_content_type

Get content type details.

Read-only operation; retrieves content type details.

high

create_content_type

Create new content type.

Creates a new content type, which can impact content structure.

high

update_content_type

Update content type.

Modifies an existing content type, which can impact content structure.

critical

delete_content_type

Remove content type.

Destructive operation; permanently removes a content type.

moderate

publish_content_type

Publish a content type.

Publishes a content type, making it available for content creation.

Safety Assessment

This MCP server offers extensive content management capabilities, making it powerful but potentially risky. It is relatively safe when space and environment scoping are configured and the LLM is carefully instructed. It becomes risky if the management token is exposed or the LLM is given broad permissions without proper safeguards.

Space and environment scoping limits operations to defined areas.
Bulk operations provide status updates.
Pagination limits the number of items returned per request.
App Identity can be used instead of a management token.

Requires a Content Management API token, which needs to be securely stored.
Full CRUD operations available, including deletion.
No explicit sandboxing is mentioned.
Potential for unintended modifications if the LLM is not properly instructed.