Discover before acting
List pages, sections, layouts, menus, and shortcodes so the client works with real identifiers and current configuration.
Model Context Protocol
Give an AI client current, tenant-scoped tools for understanding and managing a CMS Max website.
Connect through the website's authenticated Streamable HTTP endpoint, inspect the live tool schemas, read the current site state, preserve rollback context, and make deliberate content or configuration changes.
Ground AI work in the live website
An MCP client can inspect the available tools and the tenant's current website state instead of relying on a stale summary. Teams still decide the goal, evidence, approvals, rollback plan, and quality standard.
List pages, sections, layouts, menus, and shortcodes so the client works with real identifiers and current configuration.
Retrieve content, CSS, scripts, SEO settings, layout relationships, or theme values before deciding what should change.
Read the object back, inspect the public page, exercise interactive states, and retain a useful rollback record.
Connection setup
The token and endpoint belong to one tenant. Client configuration formats vary, so use the client's current Streamable HTTP instructions with the CMS Max values below.
In the website administration, open Settings, then API, and generate a token for the integration.
Keep the bearer token out of public source, browser code, prompts, screenshots, documentation, and shared files.
Set the MCP endpoint to the website domain plus /mcp and supply the token through the Authorization header.
Let the client read current names, descriptions, JSON input schemas, and read-only annotations before calling a tool.
https://your-site.example/mcpBearer <API_CLIENT_TOKEN>application/jsonapplication/json, text/event-streamPOST, GET, and DELETECurrent tool families
The server returns the live tool list to the client. Available tools can evolve with CMS Max; the categories below reflect the current platform implementation.
List, read, create, update, archive, and restore pages, including HTML, CSS, scripts, SEO fields, visibility, layout, and breadcrumbs.
Soft deletion preserves a restoration path.List and read sections, create or edit supported custom HTML sections, delete eligible sections, and restore saved revisions.
System and block-based sections remain protected where required.List layouts and templates, inspect slots, create custom layouts, assign supported sections, clear slots, and delete eligible unused custom layouts.
The content slot is reserved for page content.Read nested menus, create or edit items, connect them to CMS pages, move them within the hierarchy, and remove items or locations deliberately.
Page-linked items follow page URL changes.List installed shortcodes and request current parameter definitions, valid option values, placement rules, and ready-to-use examples.
Raw shortcode syntax belongs in saved content.Inspect colors, fonts, assignments, and button styles, then change only the intended global values through the supported configuration tool.
Theme updates affect the site globally.Request boundary
The website domain establishes tenant context. CMS Max then validates the tenant API-client token, applies the MCP rate limit, dispatches the requested tool, and returns a structured result.
Recommended operating loop
List the relevant objects and identifiers, inspect relationships, and confirm the public URL or site-wide impact.
Read the complete current object and retain a rollback record before any content or configuration write.
Send only the intended fields, preserve unrelated state, and keep secrets or sensitive data out of content.
Compare the saved state, inspect the public result, test links and controls, and document the release evidence.
Safety and rollback
Tool descriptions and validation protect important boundaries, but the client still needs a release discipline proportional to the scope of the change.
AI-assisted website operations
Inventory pages, compare metadata and structures, prepare reviewed source, publish targeted changes, and verify public rendering.
Read theme settings, layouts, sections, and existing page patterns before extending the visual language.
Review page hierarchy, crawl settings, titles, descriptions, links, structured data, and supporting resources.
Read nested menus and page relationships, add page-linked items, repair destinations, and verify the resulting journey.
Update public pages from verified repository or partner evidence while preserving rollback snapshots and reference links.
Read back the live object, check metadata and schema, test interactions, load images, and retain concise QA notes.
CMS Max MCP FAQ
Use the current tool list and client documentation as the authority for available configuration and capabilities.
The endpoint is the CMS Max website domain followed by /mcp, for example https://your-site.example/mcp. It uses authenticated Streamable HTTP.
Create an API client and token in the website administration, store the token as a secret, and send it as a bearer credential to the tenant's MCP endpoint.
No. The website domain resolves the tenant and CMS Max validates the token against that tenant. Use credentials created for the intended website.
The current server exposes supported tools for pages, reusable sections, layouts, menus, shortcodes, and theme configuration. The client should call the live tool-list method because capabilities can evolve.
No. MCP supplies scoped tools, descriptions, validation, authentication, and structured results. Teams still need evidence, approvals, secret handling, narrow writes, rollback snapshots, and public verification.
MCP lets the agent retrieve current website state when needed, which is more reliable than depending on a stale summary. Persistent planning or memory still depends on the AI client's own capabilities and operating process.
Connect an AI-ready website
Plan the tenant, token, client, approved tasks, rollback strategy, validation, human review, and long-term ownership together.
The world's fastest and most SEO friendly website code.