You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Add critical production environment warning section
Added a prominent 'Never Use Against Production Environments' section in the Host Setup area to strongly warn developers against connecting the MCP Server to production Umbraco instances.
The new section includes:
- Danger-level hint box for maximum visibility
- Clear guidance on appropriate environments (local, staging, test)
- Explicit list of environments to never connect to (production, live sites)
- Reasoning about the risks of LLM-driven actions with direct API access
Also includes minor fixes:
- Fixed broken link to scenarios.md
- Fixed link to available-tools.md (was mcp-toolkit.md)
- Added proper internal links to MCP concepts
- Clarified npx usage description
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
Copy file name to clipboardExpand all lines: 16/umbraco-cms/reference/developer-mcp/README.md
+25-5Lines changed: 25 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -4,7 +4,7 @@ description: Get started with the CMS developer MCP.
4
4
5
5
# Developer Model Context Protocol (MCP) server
6
6
7
-
The Developer MCP Server makes it easy for developers to connect AI tools with Umbraco. It allows you to harness large language models (LLMs) to perform almost any task that can be achieved within the Umbraco backoffice — from generating and editing content to managing media, automating workflows, and assisting with complex development tasks.
7
+
The Developer [MCP Server](./concepts/model-context-protocol#mcp-servers) makes it easy for developers to connect AI tools with Umbraco. It allows you to harness large language models (LLMs) to perform almost any task that can be achieved within the Umbraco backoffice — from generating and editing content to managing media, automating workflows, and assisting with complex development tasks.
8
8
9
9
This MCP Server acts as a secure gateway between your Umbraco installation and MCP-compatible AI environments such as Claude (Desktop or Code), Cursor, or GitHub Copilot. Through this bridge, your AI assistant can interact directly with Umbraco’s Management API, enabling a more natural, conversational way to develop and maintain your sites.
10
10
@@ -17,7 +17,7 @@ Think of it as giving your AI tools a secure, structured way to “speak to Umbr
17
17
Unlike most Umbraco integrations, the Developer CMS MCP Server is not a plugin that you install into your Umbraco site.
18
18
Instead, it runs as a standalone Node.js application that acts as an MCP server.
19
19
20
-
MCP clients—implemented inside compatible host applications such as Claude Desktop, Cursor, or Windsurf—connect to this server. When you interact with your chat-based development environment, the client communicates with the MCP Server using the Model Context Protocol (MCP).
20
+
[MCP clients](/reference/developer-mcp/concepts/model-context-protocol#mcp-clients)—implemented inside compatible [host applications](/reference/developer-mcp/concepts/model-context-protocol#host-applications) such as Claude Desktop, Cursor, or Windsurf—connect to this server. When you interact with your chat-based development environment, the client communicates with the MCP Server using the Model Context Protocol (MCP).
21
21
22
22
Learn more about [Model Context Protocol (MCP)](./concepts/model-context-protocol.md)
23
23
@@ -49,7 +49,7 @@ Use the Developer MCP Server alongside other MCP servers such as Playwright MCP,
49
49
-**Leveraging LLM reasoning**
50
50
Use your LLM to understand, debug, or make better decisions. For example, ask it to interpret entries from Umbraco Logs, suggest schema changes, or explain configuration errors.
51
51
52
-
-[**plus many, many more**](./how-best-to-use.md)
52
+
-[**plus many, many more**](./scenarios.md)
53
53
54
54
**Not recommended for non-developers**
55
55
@@ -121,12 +121,32 @@ This Developer MCP Server requires Node.js version 22 or higher to be installed.
121
121
You can check your current Node.js version by running node -v in your terminal.
122
122
{% endhint %}
123
123
124
+
#### Never Use Against Production Environments
125
+
126
+
{% hint style="danger" %}
127
+
**Critical: Do not connect the Developer MCP Server to a production Umbraco environment.**
128
+
129
+
The Developer MCP Server provides powerful, direct access to your Umbraco Management API. While this makes it an excellent tool for development and testing, it also means that mistakes, misconfigurations, or misunderstood commands can have immediate and potentially destructive consequences.
130
+
131
+
**Always use the Developer MCP Server with:**
132
+
- Local development instances only
133
+
- Isolated staging or test environments
134
+
- Environments where data loss or corruption would not impact live users or business operations
135
+
136
+
**Never connect to:**
137
+
- Production websites
138
+
- Live client sites
139
+
- Any environment where content, media, or configuration changes could affect real users
140
+
141
+
Even with limited user permissions, the scope and power of LLM-driven actions make this tool unsuitable for production use.
142
+
{% endhint %}
143
+
124
144
### Choosing Your Tools
125
145
126
146
Your first step after setup should be deciding which tools you want to enable.
127
147
All tools are grouped into collections for easier management and isolation.
128
148
129
-
[Learn more about Tool Collections](./mcp-toolkit.md)
149
+
[Learn more about Tool Collections](./available-tools.md)
130
150
131
151
Choosing the right tools improves how efficiently the AI communicates with Umbraco, making each conversation faster and more context-aware.
132
152
@@ -135,7 +155,7 @@ Choosing the right tools improves how efficiently the AI communicates with Umbra
135
155
### Why Use npx?
136
156
137
157
We recommend launching the Developer MCP Server using npx.
138
-
This allows you to run the Node.js application without needing to install it globally.
158
+
This allows you to run the Node.js application without needing to install anything globally.
139
159
npx will temporarily download the package, execute it, and clean up automatically — ensuring you’re always using the latest version.
140
160
141
161
If you prefer, you can also install it globally with:
0 commit comments