Sitecore AI MCP Server
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| SITECORE_SCOPE | No | OAuth scope, if your identity server requires one | |
| SITECORE_API_URL | Yes | Content Management GraphQL endpoint, e.g. https://<cm-host>/sitecore/api/authoring/graphql/v1 | |
| SITECORE_AUDIENCE | No | OAuth audience, if your identity server requires one | |
| SITECORE_CLIENT_ID | Yes | OAuth client id | |
| SITECORE_TOKEN_URL | Yes | OAuth token endpoint (identity server), e.g. https://auth.sitecorecloud.io/oauth/token | |
| SITECORE_ALLOW_PATHS | No | Readable path prefixes. Anything not matched is denied. | /sitecore/content,/sitecore/media library |
| SITECORE_CLIENT_SECRET | Yes | OAuth client secret | |
| SITECORE_DEVELOPER_MODE | No | When true/1/yes/on, lifts the block on the protected areas. | false |
| SITECORE_PROTECTED_PATHS | No | Blocked outright unless developer mode is on. | /sitecore/system,/sitecore/templates,/sitecore/layout |
Capabilities
Features and capabilities supported by this server
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| get_item_detailA | Fetch a single Sitecore / XM Cloud item's full details: id, name, path, template name, display name, all field names/values, and children count. |
| list_itemsA | List the immediate children of a Sitecore / XM Cloud item. Optionally filter by template id. Returns id, name, path, template name and display name. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/KoushikMukherjeeDA/SitecoreAIMCP'
If you have feedback or need assistance with the MCP directory API, please join our Discord server