Index live · v1.7.0 · OCT 13 2026

Ghost

Community

A community MCP server for the Ghost CMS Admin API (no official TryGhost MCP exists). It exposes browse/read/create/edit/delete across Ghost resources — posts, pages, members, newsletters, offers, tags, tiers, users, and webhooks — using the official @tryghost/admin-api client. Runs locally over stdio via npx, authenticating with a Ghost Admin API key. Note: the Admin API key is full-privilege (write access), so an agent can create and delete content — there is no read-only scope.

stdioTypeScriptAPI Key Required
191stars

Configuration

{
  "mcpServers": {
      "ghost-mcp": {
        "command": "npx",
        "args": ["-y", "@fanyangmeng/ghost-mcp"],
        "env": {
            "GHOST_API_URL": "https://yourblog.com",
            "GHOST_ADMIN_API_KEY": "your_admin_api_key",
            "GHOST_API_VERSION": "v5.0"
        }
      }
    }
}

Add this to your claude_desktop_config.json file. Copied verbatim from the upstream README.

AgenticSkills Audit

Automated framework checks. Deep code review tracked separately. Read the methodology →

3/7
3 of 7 automated checks passed
Audited Aug 7, 2026
SECURITY.md published
Mitigates: Coordinated disclosure pathNo SECURITY.md in repo root, .github/, or docs/
Commit in last 90 days
Mitigates: Maintainer abandonmentLast push 101 day(s) ago (>90)
≥2 active contributors
Mitigates: Bus-factor of one2 contributors with ≥2 commits
Evidence
CI pipeline configured
Mitigates: Code health regressionNo .github/workflows directory
Dependency lockfile committed
Mitigates: Dependency confusionpackage-lock.json
Evidence
Software Bill of Materials (SBOM)
Mitigates: Audit trailNo SBOM file present
License declared
Mitigates: Legal ambiguityMIT

Deep framework checks (OAuth 2.1 / PKCE implementation, input validation, sandboxing) require human source review and are tracked separately. This scorecard covers programmatically verifiable signals only.

Quick Stats

Trust LevelCommunity
Stars191
Transportstdio
API KeyRequired
LanguageTypeScript
CategoryContent & CMS

Author

M

MFYDev

Tags

ghostcmsblognewslettercontent

Get new MCP servers in your inbox. What we added, what failed the security audit, and why. See a past issue.