rewi.sh / craft-mcp

1.2.2 2026-11-03 14:58 UTC

Requires

• php: >=8.2
• craftcms/cms: ^5.0.0 || ^6.0
• mcp/sdk: ^0.7 || ^0.8
• nyholm/psr7: ^1.8
• symfony/finder: ^6.4 || ^7.3 || ^8.0

Requires (Dev)

• php-cs-fixer/shim: ^3.85
• phpunit/phpunit: ^11.5

Suggests

• psy/psysh: Required only if the tinker tool is turned on

MIT

• rewi.sh

• ai
• craftcms
• mcp
• craft-plugin
• model-context-protocol

Published on Packagist.org on 2026-11-03 14:59 UTC

README

MCP server for Craft CMS. Agents can read and write content, inspect the schema, and you get a control panel for tokens, activity, and drafts.

Docs: docs/README.md
Source: github.com/rewishapp/craft-mcp
Packagist: packagist.org/packages/rewi.sh/craft-mcp
Contributing: CONTRIBUTING.md

Package: rewi.sh/craft-mcp
Handle: craft-mcp
Craft: 5.0+ and 6.0+
PHP: 8.2+

Install

composer require rewi.sh/craft-mcp -w && php craft plugin/install craft-mcp

With DDEV:

ddev composer require rewi.sh/craft-mcp -w && ddev craft plugin/install craft-mcp

Local path (this repo next to your Craft project):

composer config repositories.craft-mcp '{"type": "path", "url": "../plugins/craft-mcp", "options": {"symlink": true}}'
composer require rewi.sh/craft-mcp:@dev -w && php craft plugin/install craft-mcp

Open MCP - All in one in the control panel. In production the server starts off. Turn it on under Settings, or in config/craft-mcp.php:

<?php

return [
    'enabled' => true,
    'enableDangerousTools' => true,
];

enableDangerousTools is what unlocks entry writes. Writes are drafts until someone publishes them.

Connect Cursor, Claude Code, Codex, or other

Generate local client config:

php craft craft-mcp/install

That writes .mcp.json (Claude Code) and .cursor/mcp.json by default. Codex (.codex/config.toml) is offered interactively but not preselected. For a remote client, turn on HTTP, create a token, and paste the Claude Code .mcp.json HTTP block (type: http). Or turn on the OAuth connector so Claude web/Desktop/mobile can add the MCP URL under Connectors. Claude Desktop’s local config file is for local servers only — use the connector, Claude Code, Cursor, or Codex for a remote Craft site.

Scopes

• readonly can look at content and schema.
• content can also write entries, assets, categories, tags, and globals.
• full can use system, database, and GraphQL mutation tools. Only admins can mint it.

A token can be limited to specific sections. Calls still have to pass Craft’s own permissions for that user.