Index live · v1.3.0 · MAY 30 2026

Ghost

Community

A community MCP server for the Ghost CMS Admin API (no official TryGhost MCP exists). It exposes browse/read/create/edit/delete across Ghost resources — posts, pages, members, newsletters, offers, tags, tiers, users, and webhooks — using the official @tryghost/admin-api client. Runs locally over stdio via npx, authenticating with a Ghost Admin API key. Note: the Admin API key is full-privilege (write access), so an agent can create and delete content — there is no read-only scope.

stdioTypeScriptAPI Key Required
191stars
191 stars

Configuration

{
  "mcpServers": {
    "ghost": {
      "command": "npx",
      "args": [
        "-y",
        "@modelcontextprotocol/server-ghost"
      ],
      "env": {
        "GHOST_API_KEY": "your-api-key-here"
      }
    }
  }
}

Add this to your claude_desktop_config.json file.

Quick Stats

Trust LevelCommunity
Stars191
Transportstdio
API KeyRequired
LanguageTypeScript
CategoryContent & CMS
View on GitHub

Author

M

MFYDev

Tags

ghostcmsblognewslettercontent

AgenticSkills Audit

Automated framework checks. Deep code review tracked separately. Read the methodology →

4/7
4 of 7 automated checks passed
Audited May 30, 2026
SECURITY.md published
Mitigates: Coordinated disclosure pathNo SECURITY.md in repo root, .github/, or docs/
Commit in last 90 days
Mitigates: Maintainer abandonmentLast push 32 day(s) ago
≥2 active contributors
Mitigates: Bus-factor of one2 contributors with ≥2 commits
Evidence
CI pipeline configured
Mitigates: Code health regressionNo .github/workflows directory
Dependency lockfile committed
Mitigates: Dependency confusionpackage-lock.json
Evidence
Software Bill of Materials (SBOM)
Mitigates: Audit trailNo SBOM file present
License declared
Mitigates: Legal ambiguityMIT

Deep framework checks (OAuth 2.1 / PKCE implementation, input validation, sandboxing) require human source review and are tracked separately. This scorecard covers programmatically verifiable signals only.