Skip to content

Commit 461a4fd

Browse files
Phil Whittakerclaude
andcommitted
Add critical production environment warning section
Added a prominent 'Never Use Against Production Environments' section in the Host Setup area to strongly warn developers against connecting the MCP Server to production Umbraco instances. The new section includes: - Danger-level hint box for maximum visibility - Clear guidance on appropriate environments (local, staging, test) - Explicit list of environments to never connect to (production, live sites) - Reasoning about the risks of LLM-driven actions with direct API access Also includes minor fixes: - Fixed broken link to scenarios.md - Fixed link to available-tools.md (was mcp-toolkit.md) - Added proper internal links to MCP concepts - Clarified npx usage description 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <[email protected]>
1 parent e676062 commit 461a4fd

File tree

1 file changed

+25
-5
lines changed
  • 16/umbraco-cms/reference/developer-mcp

1 file changed

+25
-5
lines changed

16/umbraco-cms/reference/developer-mcp/README.md

Lines changed: 25 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ description: Get started with the CMS developer MCP.
44

55
# Developer Model Context Protocol (MCP) server
66

7-
The Developer MCP Server makes it easy for developers to connect AI tools with Umbraco. It allows you to harness large language models (LLMs) to perform almost any task that can be achieved within the Umbraco backoffice — from generating and editing content to managing media, automating workflows, and assisting with complex development tasks.
7+
The Developer [MCP Server](./concepts/model-context-protocol#mcp-servers) makes it easy for developers to connect AI tools with Umbraco. It allows you to harness large language models (LLMs) to perform almost any task that can be achieved within the Umbraco backoffice — from generating and editing content to managing media, automating workflows, and assisting with complex development tasks.
88

99
This MCP Server acts as a secure gateway between your Umbraco installation and MCP-compatible AI environments such as Claude (Desktop or Code), Cursor, or GitHub Copilot. Through this bridge, your AI assistant can interact directly with Umbraco’s Management API, enabling a more natural, conversational way to develop and maintain your sites.
1010

@@ -17,7 +17,7 @@ Think of it as giving your AI tools a secure, structured way to “speak to Umbr
1717
Unlike most Umbraco integrations, the Developer CMS MCP Server is not a plugin that you install into your Umbraco site.
1818
Instead, it runs as a standalone Node.js application that acts as an MCP server.
1919

20-
MCP clients—implemented inside compatible host applications such as Claude Desktop, Cursor, or Windsurf—connect to this server. When you interact with your chat-based development environment, the client communicates with the MCP Server using the Model Context Protocol (MCP).
20+
[MCP clients](/reference/developer-mcp/concepts/model-context-protocol#mcp-clients)—implemented inside compatible [host applications](/reference/developer-mcp/concepts/model-context-protocol#host-applications) such as Claude Desktop, Cursor, or Windsurf—connect to this server. When you interact with your chat-based development environment, the client communicates with the MCP Server using the Model Context Protocol (MCP).
2121

2222
Learn more about [Model Context Protocol (MCP)](./concepts/model-context-protocol.md)
2323

@@ -49,7 +49,7 @@ Use the Developer MCP Server alongside other MCP servers such as Playwright MCP,
4949
- **Leveraging LLM reasoning**
5050
Use your LLM to understand, debug, or make better decisions. For example, ask it to interpret entries from Umbraco Logs, suggest schema changes, or explain configuration errors.
5151

52-
- [**plus many, many more**](./how-best-to-use.md)
52+
- [**plus many, many more**](./scenarios.md)
5353

5454
**Not recommended for non-developers**
5555

@@ -121,12 +121,32 @@ This Developer MCP Server requires Node.js version 22 or higher to be installed.
121121
You can check your current Node.js version by running node -v in your terminal.
122122
{% endhint %}
123123

124+
#### Never Use Against Production Environments
125+
126+
{% hint style="danger" %}
127+
**Critical: Do not connect the Developer MCP Server to a production Umbraco environment.**
128+
129+
The Developer MCP Server provides powerful, direct access to your Umbraco Management API. While this makes it an excellent tool for development and testing, it also means that mistakes, misconfigurations, or misunderstood commands can have immediate and potentially destructive consequences.
130+
131+
**Always use the Developer MCP Server with:**
132+
- Local development instances only
133+
- Isolated staging or test environments
134+
- Environments where data loss or corruption would not impact live users or business operations
135+
136+
**Never connect to:**
137+
- Production websites
138+
- Live client sites
139+
- Any environment where content, media, or configuration changes could affect real users
140+
141+
Even with limited user permissions, the scope and power of LLM-driven actions make this tool unsuitable for production use.
142+
{% endhint %}
143+
124144
### Choosing Your Tools
125145

126146
Your first step after setup should be deciding which tools you want to enable.
127147
All tools are grouped into collections for easier management and isolation.
128148

129-
[Learn more about Tool Collections](./mcp-toolkit.md)
149+
[Learn more about Tool Collections](./available-tools.md)
130150

131151
Choosing the right tools improves how efficiently the AI communicates with Umbraco, making each conversation faster and more context-aware.
132152

@@ -135,7 +155,7 @@ Choosing the right tools improves how efficiently the AI communicates with Umbra
135155
### Why Use npx?
136156

137157
We recommend launching the Developer MCP Server using npx.
138-
This allows you to run the Node.js application without needing to install it globally.
158+
This allows you to run the Node.js application without needing to install anything globally.
139159
npx will temporarily download the package, execute it, and clean up automatically — ensuring you’re always using the latest version.
140160

141161
If you prefer, you can also install it globally with:

0 commit comments

Comments
 (0)