Head to head · Content management · October 2026 research run

BCMS vs Cosmic

Cosmic scores 72.5 (BB) on agent readiness against BCMS's 33.5 (F), and leads in every scored category. Both do content management.

Best headless CMS and website publishing for AI agents · All 136 cms comparisons

Which one, for what

BCMS F

Best for Small sites and agencies that want a cheap hosted CMS an agent can edit.

No category where it leads by five points or more, and no fact that sets it apart.

Watch for

The MCP key is accepted only as a URL query parameter

Cosmic BB

Best for Teams that want an agent to set up and fill a hosted CMS end to end, including signup.

Ahead on

  • Reliability, 90 against 15
  • Schema & documentation, 88 against 50
  • Agent ergonomics, 82 against 36
  • Security & auth, 47 against 39
  • Payments & pricing, 45 against 30
  • Maintenance & community, 86 against 16
  • Transparency & trust, 63 against 52

Also in its favour

  • Agent-ready, a grade of BB or better
  • Runs on your own machine

Watch for

No SOC 2, ISO 27001 or HIPAA certification, by the security page's own statement

Why the edge

Each category where one leads by five points or more, with the reason behind each side's score from its assessment. The numbers are in the table below; this is what they stand for.

Reliability Cosmic +75

BCMS 15

Graded on BCMS Cloud with the hosted lines. No status page was found (0) and no incident history could be read (5). The terms refer to rate limits, but no numbers were found in the docs (0). No 429 or retry guidance was found (0). No SLA; Enterprise is by quote (0). The MCP server card says version 3.0.0 and nothing is labelled beta (10). 0+5+0+0+0+10 = 15.

Cosmic 90

Graded on the hosted service with the hosted lines. Statuspage at cosmicstatus.com with API and Web Dashboard components (20). The history page shows no incidents in September, October or November 2026, and the newest incident in the feed is from 26 May 2025. The MCP server isn't a component, so 25 of 30. 100 requests a second with a burst of 200, timeouts and size limits are documented (15). 429 is documented and the error page says which codes to fix and not retry; no Retry-After guidance was found. Agent signup is idempotent (12 of 15). The security page says Enterprise has an SLA from 99.95 per cent uptime; the SLA page itself wasn't read (8 of 10). Hosted MCP is announced as available now, with no beta label (10). 20+25+15+12+8+10 = 90.

Maintenance & community Cosmic +70

BCMS 16

@thebcms/client 2.0.3 was published on 16 March 2026, more than 180 days ago, and no dated API or MCP change was found. The terms of 30 July 2026 and the 3.0.0 server card show the product is current, so 5 of 30. No dated releases or changelog entries in the last 90 days (0). No public changelog; support by contact form (4 of 25). Not in the official MCP registry; one current JavaScript client (4 of 15). The client hasn't been released since March (3 of 10). 5+0+4+4+3 = 16.

Cosmic 86

MCP server v1.7.1 was tagged on 2 November 2026 (30). v1.7.0 on 9 September and v1.7.1, plus changelog entries on 14 and 31 August, 1, 8, 10, 22 and 23 September and 5 and 9 October 2026 (20). A dated changelog, a Discord server and support email; GitHub issue activity wasn't read because the GitHub API refused us for its rate limit (12 of 25). com.cosmicjs/mcp in the official MCP registry under a domain namespace, though the registry has 1.6.0 while the repository is at 1.7.1 (15). CI, deploy and publish workflows in the MCP repository (9 of 10). 30+20+12+15+9 = 86.

Agent ergonomics Cosmic +46

BCMS 36

45 MCP tools, more than 30 (5). We added 3 because keys without schema permission hide the schema tools (8 of 25). No pagination or filter parameters were found in the docs read (6 of 20). Error guidance covers 403 and permission errors only (8 of 20). Annotations weren't readable; entry history and trash give a way back, and the docs say to list and confirm ids before deletes (6 of 20). One JavaScript client and a CLI (8 of 15). 8+6+8+6+8 = 36.

Cosmic 82

24 tools, in the 11 to 30 band (15), plus 5 because omitting the write key gives a read-only subset (20 of 25). limit, props, depth, cursor pagination with after, status and locale filters (20). Status codes with specific messages and fix-or-retry guidance per code (17 of 20). readOnlyHint and destructiveHint on the MCP tools; no idempotency keys for writes, though agent signup is idempotent (14 of 20). Few required parameters, a TypeScript SDK and a CLI, no SDK in a second language found (11 of 15). 20+20+17+14+11 = 82.

Schema & documentation Cosmic +38

BCMS 50

The docs link an OpenAPI reference at app.thebcms.com/open-api-docs, but that host's robots.txt disallows every path, so it wasn't read. The MCP tool schemas need a session (10 of 25). llms.txt, docs llms.txt, llms-full.txt, Markdown pages and a public SKILL.md (10). llms.txt says when to use BCMS and when not to, and the MCP page gives each tool group's purpose (12 of 20). Input typing couldn't be checked (5 of 15). Curl and JavaScript examples, and troubleshooting for 403 and permission errors (7 of 15). API v3 paths and a 3.0.0 server card, with no changelog found (6 of 15). 10+10+12+5+7+6 = 50.

Cosmic 88

openapi.json at www.cosmicjs.com covers 21 operations on 12 paths, each with a summary, a description and documented 401, 402, 404, 429 and 500 responses, though the docs describe more endpoints than it covers (revisions, AI, search); MCP tools have typed inputs (20 of 25). llms.txt and every docs page as Markdown (10). Tool descriptions say when to use each tool and when not to, such as never calling delete speculatively (18 of 20). 11 enums in the spec, typed metafields and validation messages (11 of 15). Examples on every API page and an error model with a sample (14 of 15). API v3 paths and a dated changelog (15). 20+10+18+11+14+15 = 88.

Payments & pricing Cosmic +15

BCMS 30

No x402, MPP or L402 (0). Plan and seat prices are public; no per-call prices (10). 14-day trial with no card on every plan (20). Signup with GitHub or Google in a browser, keys made in the dashboard (0). 0+10+20+0 = 30.

Cosmic 45

No x402, MPP or L402 (0). Plan prices and quotas are public, with add-ons; no per-call price (10). Free plan with no card (20). Agent signup returns working bucket keys with no human signup; the human claims the project by emailed code within 14 days, so partial (15 of 20). 0+10+20+15 = 45.

Transparency & trust Cosmic +11

BCMS 52

A closed service with terms of 30 July 2026; the old open-source edition is MIT but unmaintained (15 of 30). Terms and privacy policy of 30 July 2026 agree, name providers such as Stripe and OAuth sign-in, and describe retention in general terms with backups rotating out (18 of 30). The open-source repository's end of maintenance is dated; no API deprecation policy (5 of 20). Providers are named by purpose without data locations (10 of 20). 15+18+5+10 = 48.

Cosmic 63

A closed service; the MCP server is MIT (18 of 30). Terms and privacy policy of 13 January 2025 give general retention, and the security FAQ says data is kept indefinitely unless deletion is requested; storage in MongoDB Atlas is disclosed (15 of 30). Some fields are marked deprecated in v3 and the changelog is dated; no deprecation policy (8 of 20). The security page answers who the sub-processors are, but that answer wasn't readable in the page source (12 of 20). 18+15+8+12 = 53.

Score by category

CategoryWeight this runBCMSCosmicEdge
Reliability16%201590Cosmic +75
Performance10%pendingpendingpendingnot scored in this run
Schema & documentation13%16.25088Cosmic +38
Agent ergonomics13%16.23682Cosmic +46
Security & auth14%17.53947Cosmic +8
Payments & pricing10%12.53045Cosmic +15
Task success10%pendingpendingpendingnot scored in this run
Maintenance & community7%8.81686Cosmic +70
Transparency & trust7%8.85263Cosmic +11
Negative events≤1500
TotalF 33.5/100BB 72.5/100

Facts side by side

FactBCMSCosmic
KindHTTP APIHTTP API
VendorBecomes tech, LLCCosmic Inc.
Hosted endpointhttps://app.thebcms.com/api/v3/mcphttps://mcp.cosmicjs.com/v1/buckets/{bucket_slug}
TransportsHTTP, Streamable HTTPHTTP, Streamable HTTP, stdio
AuthAPI keyAPI key
PricingPaidFreemium
x402nono
Tools exposed4524
Read-only variant documentednoyes
llms.txtyesyes
MCP registrynot listedcom.cosmicjs/mcp
Last release2026-03-162026-11-02
Terms last updated2026-07-30no date given
Privacy policy last updated2026-07-30no date given
Customer content may train modelsnot found in the textnot found in the text
Terms restrict automated accessyesyes
Terms restrict benchmarkingnot found in the textnot found in the text
Terms or service can change without noticenot found in the textnot found in the text
Arbitration or class-action waivernot found in the textyes
Popularity396 npm/wk295 npm/wk

Verdicts

BCMS

BCMS gives agents 45 MCP tools over templates, entries, statuses, history and media, with keys scoped per template and agent guidance in llms.txt, from $5 a month. The MCP key can only travel in the URL, and no status page, rate limits, changelog or security policy were found.

Cosmic

Cosmic gives agents 24 annotated MCP tools with when-to-use descriptions, a read-only mode by key, documented limits and an agent signup API that returns working keys before a human claims the project. It holds no SOC 2 or ISO certification by its own statement, and read keys can travel in the URL.

Before you call either

BCMS

  1. Keep the MCP URL out of logs and shared config, since the key is inside it
  2. Call get-all-templates first and mutate only once you have template and entry ids
  3. Ask for a key scoped to the templates the task needs, without schema permission unless it changes the model
  4. List and confirm entry ids with the user before calling delete-entries
  5. Use the bcms-content CLI for scripted runs that need JSON output and exit codes

Cosmic

  1. Send only the read key in the Bearer token unless the task needs writes
  2. Use cosmic_agent_signup when the user has no Cosmic account, and hand the human the claim URL within 14 days
  3. Fix and don't retry on 400; wait and retry on 429
  4. Use props, depth=0 and cursor pagination with after to stay under the 6 MB response limit
  5. Confirm with the user before cosmic_objects_delete, which deletes permanently

Questions

Which is better for AI agents, BCMS or Cosmic?

Cosmic scores 72.5 (BB) on agent readiness against BCMS's 33.5 (F), and leads in every scored category.

Do BCMS and Cosmic need an API key?

Both need an API key.

Can an agent call BCMS and Cosmic without installing anything?

Yes. BCMS has a hosted endpoint at https://app.thebcms.com/api/v3/mcp and Cosmic at https://mcp.cosmicjs.com/v1/buckets/{bucket_slug}.

Other comparisons with BCMS or Cosmic

Machine-readable

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.