54
/ 100
1 month ago
glama

Agentic CMS

Open-source MCP server that turns any CMS backend into an AI-agent-ready content management system. It provides tools for content CRUD, idea management, and publication tracking, with safety features requiring human approval for publishing.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Secret credentials may flow to a network call
1 flow detected: AWC_WEB_REVALIDATE_SECRET. We can’t prove the destination matches the brand the credential belongs to.
⚠️
Known vulnerabilities in dependencies: 3 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
🔐
You'll be asked for 9 credentials: AWC_WEB_REVALIDATE_SECRET, DASHBOARD_MCP_SECRET, GOOGLE_SERVICE_ACCOUNT_KEY, RESEND_API_KEY, GEMINI_API_KEY, IG_PASSWORD, SUPABASE_SERVICE_KEY, OPENAI_API_KEY, ANTHROPIC_API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies3 high

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

high@modelcontextprotocol/sdk@1.12.1GHSA-345p-7cg4-v4c7

@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse

high@modelcontextprotocol/sdk@1.12.1GHSA-8r9q-7v3j-jr4g

Anthropic's MCP TypeScript SDK has a ReDoS vulnerability

high@modelcontextprotocol/sdk@1.12.1GHSA-w48q-cv73-mx4w

Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
🔐 secretAWC_WEB_REVALIDATE_SECRET
configAWC_WEB_REVALIDATE_URL
🔐 secretDASHBOARD_MCP_SECRET
configEDITOR_API_DIR
configEDITOR_API_PORT
🔐 secretGOOGLE_SERVICE_ACCOUNT_KEYGA4/GSC analytics
configNEWSLETTER_FROM뉴스레터 발신인 "Display Name <addr@domain>"
configNEXT_PUBLIC_BRAND_EMOJINEXT_PUBLIC_BRAND_HANDLE / / NEXT_PUBLIC_BRAND_AVATAR_URL — 캐러셀 워터마크/아바타
configNEXT_PUBLIC_BRAND_HANDLE/ NEXT_PUBLIC_BRAND_EMOJI / NEXT_PUBLIC_BRAND_AVATAR_URL — 캐러셀 워터마크/아바타
configNEXT_PUBLIC_CONTACT_DOMAINNEXT_PUBLIC_CONTACT_EMAIL / — 캐러셀 CTA 슬라이드
configNEXT_PUBLIC_EDITOR_API_URL
configNEXT_PUBLIC_GSC_SITE_URL
configNEXT_PUBLIC_SITE_URL고객 웹사이트 URL
configNEXT_PUBLIC_SUPABASE_URL
🔐 secretRESEND_API_KEY
🔐 secretGEMINI_API_KEY
configBRXCE_API
configMIN_LIKES
configIG_USERNAME
🔐 secretIG_PASSWORD
configSUPABASE_URL"": "https://your-project.supabase.co",
🔐 secretSUPABASE_SERVICE_KEYSUPABASE_URL / SUPABASE_SERVICE_ROLE_KEY (혹은 )
configBRXCE_EDITOR_URL
configLEGACY_MEDIA_DIRS
configPORT
configMEDIA_ROOT
🔐 secretOPENAI_API_KEY
🔐 secretANTHROPIC_API_KEY
configDEFAULT_SOURCE_DIR
configNEXT_URL
configFINISHED_DIR
configSTORAGE_MODEcloud (editor/.env, 권장)
configTABLE_VIDEOS
configTABLE_ACCOUNTS
configTABLE_CAROUSELS
configTABLE_PROJECTSvideo_projects (editor/.env, 필수)
configTABLE_FINISHED
configTABLE_PRESETS
configTABLE_RENDER_JOBS
configTABLE_REF_POSTS
configTABLE_REF_ACCOUNTS
configTABLE_REF_SLIDES
configTABLE_STORYBOARDS
configTABLE_SUBTITLES
configTABLE_COLLECTIONS
configTABLE_COLLECTION_ITEMS
configTABLE_PLANS
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/intellieffect-agentic-cms-12bsqj)](https://m8ven.ai/mcp/intellieffect-agentic-cms-12bsqj)
commit: bed32a0f45f38e1e2c55dcc59b4c8620f2affc3e
code hash: b210612d3e1784a7fb8989e06364f71639b54ccfcb4bfa4cdf711120cbd7207f
verified: 6/22/2026, 12:35:23 PM
view raw JSON →