Expose your site's content to external AI tools (Claude Desktop, Cursor, custom agents) via Model Context Protocol. Read-only public endpoint or authenticated read/write.
Where it is
Settings → MCP (/admin/settings?tab=mcp).
What MCP is
Model Context Protocol is an open standard that lets AI tools discover and interact with your content via a typed, structured API. Where REST is for humans + scripts, MCP is for AI.
When you plug an MCP endpoint into Claude Desktop (or Cursor, or a custom agent), the AI sees a list of tools it can call — list_documents, get_document, create_document, search_content, etc. It uses those tools during conversation without you copy-pasting content back and forth.
Two endpoints
The CMS exposes two MCP endpoints per site:
| Endpoint | Auth | Access | Use for |
|---|---|---|---|
| Public MCP | None | Read-only | AI-powered search on your site. Anyone can plug it into their agent |
| Authenticated MCP | API key | Full read + write | Content production from AI tools. Used by staff |
The public endpoint is discoverable via /ai-plugin.json at the site root — AI platforms that support MCP discovery can auto-connect.
Configuration
Public MCP
Nothing to configure. It's on when GEO settings allow crawlers. Toggle it off from this tab if you want a closed site.
Authenticated MCP
- Click Generate new API key — stored as a site secret, never echoed back
- Copy the generated key (shown once)
- Pick scopes: read / write / admin
- Optionally pin to a specific Claude Desktop or Cursor config
The tab also shows the full MCP configuration JSON:
{
"mcpServers": {
"my-site": {
"url": "https://my-site.com/api/mcp/authed",
"headers": {
"Authorization": "Bearer <your-key>"
}
}
}
}Paste that into Claude Desktop's config.json or Cursor's MCP settings to connect.
Available tools via MCP
The authenticated endpoint exposes the same 49-tool surface as the in-app chat, with some additions for file-system operations. The public endpoint exposes a reduced subset (read-only, no configuration or destructive actions).
See AI Chat tools for the full list.
Key rotation
Click Revoke on any API key to invalidate it. Generate a new one — tools configured with the old key stop working, reconfigure with the new.
No automatic rotation; set a calendar reminder if you need 90-day rotation for compliance.
Audit
Every MCP tool call is logged to the event log with: tool name, arguments, timestamp, result summary, duration. Filter the event log to source: mcp to see only MCP activity.
Related
- MCP server concept — protocol explained
- MCP client — the read-only public MCP
- Help panel AI Chat list — tool catalogue
- GEO settings — where public MCP discovery is toggled