{ "data": { "a": { "slug": "bcms", "name": "BCMS", "vendor": "Becomes tech, LLC", "vendorUrl": "https://www.thebcms.com", "kind": "http-api", "category": "cms", "summary": "BCMS is a hosted headless CMS from Becomes tech, LLC. People edit structured content in a dashboard, and agents work with templates, entries, media and languages through a REST API, a JavaScript client, a CLI and a remote MCP server.", "url": "https://www.anchorterminal.com/tools/bcms", "markdownUrl": "https://www.anchorterminal.com/tools/bcms.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/bcms.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/bcms.json", "dns": "bcms.grade.anchorterminal.com", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://app.thebcms.com/api/v3/mcp", "packages": [ { "registry": "npm", "name": "@thebcms/client" } ], "auth": "api-key", "authNotes": "Three-part keys (keyId.secret.instanceId) created in the dashboard and scoped to templates and media, with schema tools only for keys allowed them. The MCP endpoint takes the key only as the `mcpKey` query parameter, and the REST examples pass `apiKey` in the query string. The docs advise a key per person, client and environment and regular rotation.", "pricing": "paid", "pricingNotes": "Hobby $5 a month ($4 billed yearly) with 2 seats, 100 entries and 500 MB of media; Pro $50 a month ($33 yearly) with 5 seats, then $15 a seat a month, and unlimited entries; Enterprise by quote. Every plan starts with a 14-day free trial with no card. No self-hosted edition.", "priceSummary": "$5 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in llms.txt, the docs, the MCP page or pricing.md (checked 2026-11-06).", "endpoints": [] }, "toolCount": 45, "popularity": { "githubStars": null, "npmWeekly": 396, "pypiWeekly": null, "asOf": "2026-11-06" }, "docsUrl": "https://www.thebcms.com/docs", "llmsTxt": "https://www.thebcms.com/llms.txt", "capabilities": [ "cms.content", "cms.assets", "cms.localisation", "cms.schema", "cms.publish" ], "tags": [ "hosted", "mcp", "remote-mcp", "llms-txt", "no-card", "closed-source", "webhooks", "typescript", "cli" ], "lastRelease": "2026-03-16", "graded": true, "anchor": { "graded": true, "score": 33.5, "grade": "F", "agentReady": false, "rank": 1383, "ranked": true, "rankOf": 1486, "categoryRank": 17, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 36, "maintenance": 16, "payments": 30, "reliability": 15, "schema": 50, "security": 39, "transparency": 52 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "low", "date": "2026-11-06" }, "negative": 0, "verdict": "BCMS gives agents 45 MCP tools over templates, entries, statuses, history and media, with keys scoped per template and agent guidance in llms.txt, from $5 a month. The MCP key can only travel in the URL, and no status page, rate limits, changelog or security policy were found.", "bestFor": "Small sites and agencies that want a cheap hosted CMS an agent can edit.", "strengths": [ "Remote MCP server covering templates, entries, statuses, entry history, media, languages and trash", "Keys scoped to the templates and media an agent needs, with schema tools gated separately", "llms.txt that says when to use BCMS and when not to, plus a public SKILL.md", "Entry history and trash readable through MCP, so an agent can trace and recover changes", "14-day trial with no card, then plans from $5 a month" ], "weaknesses": [ "The MCP key is accepted only as a URL query parameter", "No status page, documented rate limits, SLA or changelog found", "No security.txt, disclosure policy or certification found", "The JavaScript client hasn't been released since March 2026", "No self-hosted edition; the open-source repository has been unmaintained since October 2024" ], "agentNotes": [ "Keep the MCP URL out of logs and shared config, since the key is inside it", "Call get-all-templates first and mutate only once you have template and entry ids", "Ask for a key scoped to the templates the task needs, without schema permission unless it changes the model", "List and confirm entry ids with the user before calling delete-entries", "Use the bcms-content CLI for scripted runs that need JSON output and exit codes" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "low", "grade": "F", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 33.5 } ], "editorialScores": { "ergonomics": 36, "maintenance": 16, "payments": 30, "reliability": 15, "schema": 50, "security": 39, "transparency": 48 }, "provenanceScore": 56, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npm install @thebcms/client", "claudeCode": "claude mcp add --transport http bcms \"https://app.thebcms.com/api/v3/mcp?mcpKey=YOUR_MCP_KEY_HERE\"", "config": { "mcpServers": { "bcms": { "url": "https://app.thebcms.com/api/v3/mcp?mcpKey=YOUR_MCP_KEY_HERE" } } } }, "letme": { "capability": "https://letme.dev/cms.content", "tool": "https://letme.dev/bcms" }, "area": "business", "unitPrices": [ { "item": "Hobby plan", "unit": "month", "usd": 5, "note": "$4 a month billed yearly; 2 seats, 100 entries" }, { "item": "Pro plan", "unit": "month", "usd": 50, "note": "$33 a month billed yearly; 5 seats" }, { "item": "Extra Pro seat", "unit": "seat-month", "usd": 15, "note": "$120 a year on yearly billing" } ], "provenance": { "legalEntity": "Becomes tech, LLC", "domain": "thebcms.com", "domainRegistered": "", "endpointOnVendorDomain": true, "terms": "https://www.thebcms.com/terms-of-use/", "privacy": "https://www.thebcms.com/privacy-policy/", "statusPage": "", "changelog": "", "securityTxt": "none", "checked": "2026-11-06", "notes": [ "The terms and privacy policy, both effective 30 July 2026, name Becomes tech, LLC, a Delaware LLC. The terms forbid scraping or crawling that burdens or abuses the services, except through the documented APIs within rate limits.", "www.thebcms.com/robots.txt allows all. app.thebcms.com/robots.txt disallows all paths.", "www.thebcms.com/.well-known/security.txt returned 404 and no status page was found.", "RDAP gave no registration date for thebcms.com through rdap.org." ], "score": 56 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/bcms.json", "live": { "slug": "bcms", "probe": { "target": "https://app.thebcms.com/api/v3/mcp", "method": "get", "lastAt": "2026-11-07T18:20:13.025269198Z", "lastOk": true, "lastStatus": 400, "lastMs": 197, "authRequired": false, "uptime24h": 99.5, "uptime30d": 99.5, "p50ms24h": 141, "p95ms24h": 393, "samples24h": 200, "samples30d": 200, "days": [ { "date": "2026-11-06", "probes": 13, "ok": 13 }, { "date": "2026-11-07", "probes": 187, "ok": 186 } ] }, "versions": [ { "registry": "npm", "name": "@thebcms/client", "version": "2.0.3", "seenAt": "2026-11-06T23:10:32.023184196Z" } ], "npmWeekly": 396, "securityTxt": { "url": "https://thebcms.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:00:49.817334601Z" }, "llmsTxt": { "url": "https://www.thebcms.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:31:42.21650798Z" }, "pages": [ { "url": "https://www.thebcms.com/privacy-policy/", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:35:35.490295236Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "abae80fa615e" }, { "url": "https://www.thebcms.com/terms-of-use/", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:35:37.777884178Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "58d8ef9074aa" } ], "mcpTools": { "url": "https://app.thebcms.com/api/v3/mcp?mcpKey=YOUR_MCP_KEY_HERE", "checkedAt": "2026-11-07T01:42:42.874889438Z", "status": "error", "note": "initialize: no JSON-RPC answer", "changedAt": "2026-11-07T01:42:42.874889438Z" }, "updatedAt": "2026-11-07T18:20:13.025269198Z" } }, "answer": "Kontent.ai scores 70.6 (BB) on agent readiness against BCMS's 33.5 (F), and leads in 6 of 7 scored categories. BCMS leads on payments \u0026 pricing.", "b": { "slug": "kontent-ai", "name": "Kontent.ai", "vendor": "Kontent CZ s.r.o.", "vendorUrl": "https://kontent.ai", "kind": "http-api", "category": "cms", "summary": "Kontent.ai is a hosted headless CMS from Kontent CZ s.r.o. in Brno. Its Management API v2 reads and writes content items, language variants, assets, content models and workflow steps, and an MCP server wraps it, hosted or run locally.", "url": "https://www.anchorterminal.com/tools/kontent-ai", "markdownUrl": "https://www.anchorterminal.com/tools/kontent-ai.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/kontent-ai.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/kontent-ai.json", "dns": "kontent-ai.grade.anchorterminal.com", "repo": "https://github.com/kontent-ai/mcp-server", "license": "Proprietary service under the Kontent.ai Terms of Service. The management SDKs for JavaScript and .NET and the MCP server on GitHub are MIT", "transports": [ "http", "stdio", "streamable-http" ], "remoteUrl": "https://manage.kontent.ai/v2", "packages": [ { "registry": "npm", "name": "@kontent-ai/management-sdk" }, { "registry": "npm", "name": "@kontent-ai/mcp-server" } ], "auth": "api-key", "authNotes": "A Bearer API key in the `Authorization` header. A project manager creates a Management API key in the web app under Project settings, API keys, and picks its permissions (read content, edit content, read assets, edit assets, content model, environment settings), the environments it reaches and its expiry (1 minute to 2 years, 6 months by default). A Personal API key inherits its owner's role instead. Regenerating a key revokes the old one after a few minutes. No OAuth flow and no API for creating keys was found. The Management API has to be enabled per environment.", "pricing": "paid", "pricingNotes": "No public price. The pricing page shows sliders for user seats, content types and content items and a form that requests a calculation, and the terms put the price, limits and overage unit prices in an order form. A 30-day trial needs no card and includes API access. The terms mention a Developer Plan, which the pricing page does not show (checked 2026-10-09).", "priceSummary": "Paid", "where": "both", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the Management API docs, the MCP server README or the pricing page (checked 2026-10-09).", "endpoints": [] }, "toolCount": 54, "popularity": { "githubStars": null, "npmWeekly": 8381, "pypiWeekly": null, "asOf": "2026-10-09" }, "docsUrl": "https://kontent.ai/learn/docs/apis/management-api-v2", "llmsTxt": "https://kontent.ai/llms.txt", "registryName": "io.github.kontent-ai/mcp-server", "capabilities": [ "cms.content", "cms.publish", "cms.assets", "cms.localisation", "cms.schema" ], "tags": [ "official", "hosted", "closed-source", "api-key", "mcp", "free-trial", "no-card", "sales-led", "llms-txt", "typescript", "dotnet", "webhooks", "graphql", "status-page", "soc2", "iso27001", "audit-log" ], "lastRelease": "2026-10-30", "graded": true, "anchor": { "graded": true, "score": 70.6, "grade": "BB", "agentReady": true, "rank": 193, "ranked": true, "rankOf": 1486, "categoryRank": 4, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 71, "maintenance": 83, "payments": 20, "reliability": 82, "schema": 74, "security": 81, "transparency": 76 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-01" }, "negative": 0, "verdict": "Management API keys take per-area permissions, environment limits and an expiry from one minute to two years, and changes made with a key are named in the audit log. Rate limits and Retry-After are documented. No price is published, and no OpenAPI file was found. Access starts with a 30-day trial that a person opens in a browser.", "bestFor": "A company already on Kontent.ai, or evaluating it on a trial, that wants an agent to draft, localise, move through workflow and publish structured content with a permission-limited key and an audit trail.", "strengths": [ "Management API keys carry selectable permissions (read content, edit content, assets, content model, environment settings), environment limits and an expiry from 1 minute to 2 years", "Rate limits are published (10 requests a second and 400 a minute per environment), and a 429 carries a Retry-After header", "The audit log keeps 90 days of changes and names the API key that made each one. Content item changes were added on 2 October 2026", "All 54 tools in the open-source MCP server (MIT, 0.39.0) set readOnlyHint and destructiveHint, and Kontent.ai has hosted the server since 22 October 2026", "security.txt is valid to July 2027, with a disclosure policy that pays discretionary rewards, and the trust centre lists SOC 2 Type 2 and ISO 27001, 27017, 27018 and 42001", "The sub-processor page names each vendor, its location and the data sent, and projects can be stored in the US, the Netherlands, Australia or Canada" ], "weaknesses": [ "No price is published. The pricing page shows sliders for seats, content types and items and a form that requests a quote", "No OpenAPI file was found. The docs link a Postman collection, which we did not read", "Access needs a person. The 30-day trial needs no card, but sign-up, the Management API toggle and key creation happen in the web app", "No idempotency keys. The docs advise against parallel requests, saying they may cause inconsistencies in content", "The availability annex covers the administration interface and the Delivery API, not the Management API, and the guaranteed level sits in each order form", "The Terms of Service forbid automated access to the Service unless the procedure is described in the documentation. This matters before any probe is run", "The MCP server loads 54 tools in 0.39.0, 22 of them marked destructive, and the hosted copy runs only the latest version, so tool names can change without a pinned release" ], "agentNotes": [ "Send `Authorization: Bearer \u003ckey\u003e` to `https://manage.kontent.ai/v2/projects/{environment_id}/...`. The Management API must be switched on under Environment settings, General, Enabled APIs first", "Ask for a Management API key with only the permissions the task needs. Read content alone gives a read-only key, and keys expire after six months by default", "Stay under 10 requests a second and 400 a minute per environment, send requests one at a time, and wait the seconds in Retry-After on a 429", "Page lists by passing the `continuation_token` from the response back in the `x-continuation` header", "Create items with an `external_id` and write with the upsert PUT at `/items/external-id/{id}` so a retry after a lost response does not create a duplicate", "With the MCP server, connect to https://manage-mcp.kontent.ai/mcp with a Management API key in the Authorization header, pass the environment ID as a tool input, call `get-patch-guide` before any patch tool, and use a client that prompts on destructiveHint" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 4, "avgRating": 3.3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 70.6 } ], "editorialScores": { "ergonomics": 71, "maintenance": 83, "payments": 20, "reliability": 82, "schema": 74, "security": 81, "transparency": 69 }, "provenanceScore": 83, "checked": { "categories": { "ergonomics": "2026-11-01", "maintenance": "2026-11-01", "payments": "2026-11-01", "reliability": "2026-11-01", "schema": "2026-11-01", "security": "2026-11-01", "transparency": "2026-11-01" }, "last": "2026-11-01", "lastMoved": "2026-10-27", "oldest": "2026-11-01", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npm i @kontent-ai/management-sdk --save", "http": "curl --request GET \\\n --url https://manage.kontent.ai/v2/projects/KONTENT_AI_ENVIRONMENT_ID/items \\\n --header 'Authorization: Bearer KONTENT_AI_MANAGEMENT_API_KEY' \\\n --header 'Content-type: application/json'", "claudeCode": "claude mcp add --transport http kontent-ai https://manage-mcp.kontent.ai/mcp --header \"Authorization: Bearer $KONTENT_MANAGEMENT_API_KEY\"", "config": { "mcpServers": { "kontent-ai": { "headers": { "Authorization": "Bearer \u003cmanagement-api-key\u003e" }, "url": "https://manage-mcp.kontent.ai/mcp" }, "kontent-ai-stdio": { "args": [ "@kontent-ai/mcp-server@latest", "stdio" ], "command": "npx", "env": { "KONTENT_API_KEY": "\u003cyour-management-api-key\u003e", "KONTENT_ENVIRONMENT_ID": "\u003cyour-environment-id\u003e" } } } } }, "letme": { "capability": "https://letme.dev/cms.content", "tool": "https://letme.dev/kontent-ai" }, "area": "business", "provenance": { "legalEntity": "Kontent CZ s.r.o.", "domain": "kontent.ai", "domainRegistered": "", "endpointOnVendorDomain": true, "terms": "https://kontent.ai/terms-of-service/", "privacy": "https://kontent.ai/privacy/", "statusPage": "https://status.kontent.ai", "changelog": "https://kontent.ai/learn/product-updates", "securityTxt": "valid", "checked": "2026-10-09", "notes": [ "The Terms of Service effective 11 September 2026 name Kontent CZ s.r.o., Nové sady 996/25, 602 00 Brno, Czech Republic, company number 173 00 576, or an affiliate named in the order form. The Data Processing Addendum and the availability and AI annexes are part of the same page.", "The privacy policy effective 2 June 2025 is issued by Kontent s.r.o. at the same address with Kontent CZ s.r.o. and Kontent US, LLC as joint controllers, and has a section for users of the product.", "The Management API answers at manage.kontent.ai, a kontent.ai subdomain.", "kontent.ai/.well-known/security.txt gives security@kontent.ai, a PGP key, the disclosure policy and an Open Bug Bounty page, and expires on 21 July 2027.", "The domain's registration date was not looked up." ], "score": 83 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/kontent-ai.json", "live": { "slug": "kontent-ai", "probe": { "target": "https://manage.kontent.ai/v2", "method": "get", "lastAt": "2026-11-07T18:20:34.08216905Z", "lastOk": true, "lastStatus": 404, "lastMs": 372, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 297, "p95ms24h": 524, "samples24h": 239, "samples30d": 7205, "days": [ { "date": "2026-10-09", "probes": 85, "ok": 85 }, { "date": "2026-10-10", "probes": 247, "ok": 247 }, { "date": "2026-10-11", "probes": 247, "ok": 247 }, { "date": "2026-10-12", "probes": 247, "ok": 247 }, { "date": "2026-10-13", "probes": 248, "ok": 248 }, { "date": "2026-10-14", "probes": 249, "ok": 249 }, { "date": "2026-10-15", "probes": 253, "ok": 253 }, { "date": "2026-10-16", "probes": 252, "ok": 252 }, { "date": "2026-10-17", "probes": 253, "ok": 253 }, { "date": "2026-10-18", "probes": 256, "ok": 256 }, { "date": "2026-10-19", "probes": 255, "ok": 255 }, { "date": "2026-10-20", "probes": 252, "ok": 252 }, { "date": "2026-10-21", "probes": 253, "ok": 253 }, { "date": "2026-10-22", "probes": 253, "ok": 253 }, { "date": "2026-10-23", "probes": 248, "ok": 248 }, { "date": "2026-10-24", "probes": 251, "ok": 251 }, { "date": "2026-10-25", "probes": 250, "ok": 250 }, { "date": "2026-10-26", "probes": 252, "ok": 252 }, { "date": "2026-10-27", "probes": 249, "ok": 249 }, { "date": "2026-10-28", "probes": 251, "ok": 251 }, { "date": "2026-10-29", "probes": 248, "ok": 248 }, { "date": "2026-10-30", "probes": 249, "ok": 249 }, { "date": "2026-10-31", "probes": 251, "ok": 251 }, { "date": "2026-11-01", "probes": 249, "ok": 249 }, { "date": "2026-11-02", "probes": 250, "ok": 250 }, { "date": "2026-11-03", "probes": 248, "ok": 248 }, { "date": "2026-11-04", "probes": 246, "ok": 246 }, { "date": "2026-11-05", "probes": 185, "ok": 185 }, { "date": "2026-11-06", "probes": 241, "ok": 241 }, { "date": "2026-11-07", "probes": 187, "ok": 187 } ] }, "vendorStatus": { "page": "https://status.kontent.ai", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-07T18:21:19.373294379Z" }, "versions": [ { "registry": "github", "name": "kontent-ai/mcp-server", "version": "0.39.0", "released": "2026-08-31", "seenAt": "2026-11-06T23:37:41.655601439Z" }, { "registry": "mcp-registry", "name": "io.github.kontent-ai/mcp-server", "version": "0.39.0", "seenAt": "2026-11-07T18:16:28.95801333Z" }, { "registry": "npm", "name": "@kontent-ai/management-sdk", "version": "8.5.7", "seenAt": "2026-11-06T23:37:39.461234502Z" }, { "registry": "npm", "name": "@kontent-ai/mcp-server", "version": "0.39.0", "seenAt": "2026-11-06T23:37:39.665782017Z" } ], "githubStars": 10, "npmWeekly": 44411, "securityTxt": { "url": "https://kontent.ai/.well-known/security.txt", "state": "valid", "expires": "2027-07-21T13:25:39.664Z", "checkedAt": "2026-11-07T16:01:47.405249094Z" }, "llmsTxt": { "url": "https://kontent.ai/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:32:50.28624327Z" }, "domain": { "domain": "kontent.ai", "registered": "2019-04-08", "source": "https://rdap.identitydigital.services/rdap/domain/kontent.ai", "checkedAt": "2026-11-01T14:27:51.149194487Z" }, "pages": [ { "url": "https://kontent.ai/learn/product-updates", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:12:11.426161532Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "3f0ce279378b" }, { "url": "https://kontent.ai/privacy/", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:12:13.635895759Z", "changedAt": "2026-10-28T04:19:57.023473647Z", "fingerprint": "d4ba4e08abd9" }, { "url": "https://kontent.ai/terms-of-service/", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:12:16.41753159Z", "changedAt": "2026-10-28T04:19:59.296456217Z", "fingerprint": "8bf457cf63cb" } ], "mcpTools": { "url": "https://manage-mcp.kontent.ai/mcp", "checkedAt": "2026-11-07T01:45:40.642663822Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-11-07T01:45:40.642663822Z" }, "github": { "repo": "kontent-ai/mcp-server", "checkedAt": "2026-11-02T08:59:09.501234368Z", "stars": 10, "archived": false, "issuesEnabled": true, "pushedAt": "2026-10-31T07:24:09Z", "openIssues": 0, "openPRs": 13, "issuesOpened90d": 14, "issuesClosed90d": 15, "prsMerged90d": 24, "ci": { "branch": "master", "runs": 50, "success": 50, "failure": 0, "other": 0, "latest": "success", "latestAt": "2026-10-05T05:57:10Z" }, "replies": { "sampled": 18, "unanswered": 0, "medianDays": 3.8 } }, "updatedAt": "2026-11-07T18:21:19.373294379Z" } }, "edges": [ { "by": 67, "category": "reliability", "leads": "kontent-ai", "name": "Reliability", "reasons": { "a": "Graded on BCMS Cloud with the hosted lines. No status page was found (0) and no incident history could be read (5). The terms refer to rate limits, but no numbers were found in the docs (0). No 429 or retry guidance was found (0). No SLA; Enterprise is by quote (0). The MCP server card says version 3.0.0 and nothing is labelled beta (10). 0+5+0+0+0+10 = 15.", "b": "Read with the hosted lines and scored on the Management API. status.kontent.ai is a Statuspage site with components by region, the Management REST API among them, and an incident history (20). Re-read on 1 November, its feed lists three incidents between 3 August and 1 November 2026. The GraphQL service was disrupted for about 31 minutes on 16 September with the Management API unaffected, content item saves failed for about 40 minutes on 24 September for a subset of EU projects using regex validation, and requests to the deprecated `*.kenticocloud.com` domain pattern failed from 13:30 to 16:06 UTC on 20 October after a registrar change. Each hit one service or a subset of requests, so we read them as minor. The 29 July login incident has left the window (20). Rate limits have numbers, 10 requests a second and 400 a minute per environment, re-read on 1 November (15). A 429 carries Retry-After, the docs call each failed request safe to retry and ask for a retry policy on 5xx. There are no idempotency keys, though the upsert PUT by external ID repeats safely (13 of 15). Annex 4 of the terms defines availability with a refund formula, but the guaranteed level is in each order form and the definition names the administration interface and the Delivery API, not the Management API (4 of 10). Management API v2 is generally available. The open-source MCP server is at 0.39.0, and Kontent.ai has hosted it at manage-mcp.kontent.ai since 22 October (10)." }, "scores": { "a": 15, "b": 82 } }, { "by": 67, "category": "maintenance", "leads": "kontent-ai", "name": "Maintenance \u0026 community", "reasons": { "a": "@thebcms/client 2.0.3 was published on 16 March 2026, more than 180 days ago, and no dated API or MCP change was found. The terms of 30 July 2026 and the 3.0.0 server card show the product is current, so 5 of 30. No dated releases or changelog entries in the last 90 days (0). No public changelog; support by contact form (4 of 25). Not in the official MCP registry; one current JavaScript client (4 of 15). The client hasn't been released since March (3 of 10). 5+0+4+4+3 = 16.", "b": "The newest product update is dated 30 October 2026 (Aiko Agent and Expert agents generally available), after the hosted MCP server on 22 October, and the JavaScript SDK repository's last commit is 22 October (30). Nine product updates fall between 3 August and 1 November 2026, from 14 August to 30 October. The MCP server tagged 0.38.0 (11 August), 0.38.1 (18 August) and 0.39.0 (31 August), and the JavaScript SDK 8.5.5 (18 August), 8.5.6 and 8.5.7 (21 September) (20). Closed service with a dated changelog and RSS feed, in-app chat stated as 24/7 on all plans and a Discord community. We did not test a support channel (11 of 15). Official SDKs for JavaScript and .NET (.NET 8.3.1 tagged on 17 July 2026), and the official MCP registry lists io.github.kontent-ai/mcp-server with 0.39.0 as the latest active version, read on 1 November (15). The repositories have build and test workflows and pinned, recent dependencies. We did not see CI results (7 of 10)." }, "scores": { "a": 16, "b": 83 } }, { "by": 42, "category": "security", "leads": "kontent-ai", "name": "Security \u0026 auth", "reasons": { "a": "Keys are scoped per template and media and can be revoked and rotated (25), less 10 because the MCP key is accepted only as `?mcpKey=` in the URL and REST examples pass `apiKey` the same way (15 of 30). Scoped keys, schema tools gated by key, and scoped delete permission; no approval step (12 of 20). Entries hold text written by people and no prompt-injection guidance was found (3 of 15). Entry history and log history (2 days on Hobby, 30 on Pro) let the operator see what an agent changed (9 of 15). No security.txt, disclosure policy or certification was found (0). 15+12+3+9+0 = 39.", "b": "Management API keys have selectable permissions, environment limits, an expiry from 1 minute to 2 years (6 months by default), email reminders before expiry and revocation by regenerating. Keys travel only in the `Authorization` header, and the hosted MCP server takes a Management API key in that header and rejects personal keys. There is no OAuth (27 of 30). A key can be read-only, the API follows the workflow transition rules, and the MCP server marks 22 tools destructive so a client can prompt. Neither surface has its own confirmation step (15 of 20). Content is written by a project's own users and can carry instructions. The MCP README and, since the hosted server, the MCP docs page warn about prompt injection and recommend a least-privilege key. The API docs say nothing on it (10 of 15). The audit log keeps 90 days and names the API key behind each change, with content item changes included since 2 October 2026. No API for reading it was found (12 of 15). security.txt is valid to 21 July 2027, re-read on 1 November, the disclosure policy has a safe harbour and discretionary rewards, a penetration testing policy lets customers test, and the trust centre lists SOC 2 Type 2 and ISO 27001, 27017, 27018 and 42001. Reports are gated and no public advisories were found. We did not search NVD (17 of 20)." }, "scores": { "a": 39, "b": 81 } }, { "by": 35, "category": "ergonomics", "leads": "kontent-ai", "name": "Agent ergonomics", "reasons": { "a": "45 MCP tools, more than 30 (5). We added 3 because keys without schema permission hide the schema tools (8 of 25). No pagination or filter parameters were found in the docs read (6 of 20). Error guidance covers 403 and permission errors only (8 of 20). Annotations weren't readable; entry history and trash give a way back, and the docs say to list and confirm ids before deletes (6 of 20). One JavaScript client and a CLI (8 of 15). 8+6+8+6+8 = 36.", "b": "Scored on the API. No field selection on Management API reads was found, and the docs send filtering to the Delivery APIs. A filter endpoint returns references only and a bulk-get endpoint fetches the chosen items. The MCP server at 0.39.0 loads 54 tools. The hosted server's tool list wasn't read, because its robots.txt disallows every path (13 of 25). Lists page by continuation token, and items with variants can be filtered. No page-size control was found (14 of 20). Errors carry a request ID, a code, a message and validation errors with path, line and position (17 of 20). No idempotency keys. Items can be addressed and upserted by external ID or codename, the docs say failed requests are safe to retry, and they advise against parallel requests. All 54 MCP tools in 0.39.0 set readOnlyHint and destructiveHint (13 of 20). Two official SDKs, JavaScript and .NET, and a call needs only the environment ID and a key (14 of 15). The API reference is per the 9 October check, not re-read on 1 November." }, "scores": { "a": 36, "b": 71 } }, { "by": 24, "category": "schema", "leads": "kontent-ai", "name": "Schema \u0026 documentation", "reasons": { "a": "The docs link an OpenAPI reference at app.thebcms.com/open-api-docs, but that host's robots.txt disallows every path, so it wasn't read. The MCP tool schemas need a session (10 of 25). llms.txt, docs llms.txt, llms-full.txt, Markdown pages and a public SKILL.md (10). llms.txt says when to use BCMS and when not to, and the MCP page gives each tool group's purpose (12 of 20). Input typing couldn't be checked (5 of 15). Curl and JavaScript examples, and troubleshooting for 403 and permission errors (7 of 15). API v3 paths and a 3.0.0 server card, with no changelog found (6 of 15). 10+10+12+5+7+6 = 50.", "b": "No OpenAPI file was found on the docs pages read. The reference links a Postman collection in a public workspace, which we did not read, and the MCP server's tools have typed schemas in its source (15 of 25). kontent.ai/llms.txt exists and is an index of marketing and docs pages. No Markdown copies of the docs were found, only PDF downloads (5 of 10). Each endpoint states its purpose and its limits, for example that scheduling a published variant has no effect and which endpoint to use instead (15 of 20). Attributes are typed with required, read-only and write-only flags, formats and length limits. Element values vary by element type (12 of 15). Each operation has request samples in TypeScript, C# and cURL, response status codes and an error object with validation paths (13 of 15). The version is in the path, product updates are dated with an RSS feed, breaking changes can be had by email, and a page lists which changes are not treated as breaking (14 of 15). The reference pages are per the 9 October check, not re-read on 1 November." }, "scores": { "a": 50, "b": 74 } }, { "by": 24, "category": "transparency", "leads": "kontent-ai", "name": "Transparency \u0026 trust", "reasons": { "a": "A closed service with terms of 30 July 2026; the old open-source edition is MIT but unmaintained (15 of 30). Terms and privacy policy of 30 July 2026 agree, name providers such as Stripe and OAuth sign-in, and describe retention in general terms with backups rotating out (18 of 30). The open-source repository's end of maintenance is dated; no API deprecation policy (5 of 20). Providers are named by purpose without data locations (10 of 20). 15+18+5+10 = 48.", "b": "The service is closed under Terms of Service effective 11 September 2026, re-read on 1 November. The SDKs and MCP server are MIT (15). The terms include a Data Processing Addendum and an AI annex that rules out training on customer content, and the privacy policy of 2 June 2025 covers product users. The periods differ by document. Content is kept 30 days after a subscription ends, the addendum says personal data is returned or deleted within 14 days, and the privacy policy keeps account data up to 90 days (23 of 30). No deprecation policy with a notice period was found. Removals are announced with dates, such as Sitemap on 14 July for 30 September 2026, and the terms give 14 days to object to a material change. The hosted MCP docs say only the latest server version runs, so tool names and behaviour can change between versions (13 of 20). The sub-processor page names each vendor with its address, location and the data sent, Anthropic and Microsoft among them, and the four data centre regions are documented, per the 9 October check, not re-read on 1 November (18 of 20)." }, "scores": { "a": 52, "b": 76 } } ], "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Becomes tech, LLC", "b": "Kontent CZ s.r.o.", "name": "Vendor" }, { "a": "https://app.thebcms.com/api/v3/mcp", "b": "https://manage.kontent.ai/v2", "name": "Hosted endpoint" }, { "a": "HTTP, Streamable HTTP", "b": "HTTP, stdio, Streamable HTTP", "name": "Transports" }, { "a": "API key", "b": "API key", "name": "Auth" }, { "a": "Paid", "b": "Paid", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "none", "b": "Proprietary service under the Kontent.ai Terms of Service. The management SDKs for JavaScript and .NET and the MCP server on GitHub are MIT", "name": "Licence" }, { "a": "45", "b": "54", "name": "Tools exposed" }, { "a": "no", "b": "yes", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "not listed", "b": "io.github.kontent-ai/mcp-server", "name": "MCP registry" }, { "a": "2026-03-16", "b": "2026-10-30", "name": "Last release" }, { "a": "2026-07-30", "b": "2026-09-11", "name": "Terms last updated" }, { "a": "2026-07-30", "b": "2025-06-02", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "yes", "b": "yes", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "yes", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "396 npm/wk", "b": "8.4k npm/wk", "name": "Popularity" }, { "a": "none", "b": "3.3/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "Kontent.ai scores 70.6 (BB) on agent readiness against BCMS's 33.5 (F), and leads in 6 of 7 scored categories. BCMS leads on payments \u0026 pricing.", "question": "Which is better for AI agents, BCMS or Kontent.ai?" }, { "answer": "Both need an API key.", "question": "Do BCMS and Kontent.ai need an API key?" }, { "answer": "Yes. BCMS has a hosted endpoint at https://app.thebcms.com/api/v3/mcp and Kontent.ai at https://manage.kontent.ai/v2.", "question": "Can an agent call BCMS and Kontent.ai without installing anything?" } ], "goodFor": [ { "aheadOn": [ "Payments \u0026 pricing, 30 against 20" ], "also": null, "goodFor": "Small sites and agencies that want a cheap hosted CMS an agent can edit.", "slug": "bcms", "watchFor": "The MCP key is accepted only as a URL query parameter" }, { "aheadOn": [ "Reliability, 82 against 15", "Schema \u0026 documentation, 74 against 50", "Agent ergonomics, 71 against 36", "Security \u0026 auth, 81 against 39", "Maintenance \u0026 community, 83 against 16", "Transparency \u0026 trust, 76 against 52" ], "also": [ "Agent-ready, a grade of BB or better", "Runs on your own machine" ], "goodFor": "A company already on Kontent.ai, or evaluating it on a trial, that wants an agent to draft, localise, move through workflow and publish structured content with a permission-limited key and an audit trail.", "slug": "kontent-ai", "watchFor": "No price is published. The pricing page shows sliders for seats, content types and items and a form that requests a quote" } ], "history": { "bcms": null, "kontent-ai": [ { "causes": [ "method" ], "date": "2026-10-27", "delta": 0.1, "from": 70.5, "fromGrade": "BB", "to": 70.6, "toGrade": "BB" } ] }, "job": { "capability": "cms.content", "name": "Content management" }, "others": [ { "json": "https://www.anchorterminal.com/compare/bcms-vs-buttercms.json", "title": "BCMS vs ButterCMS", "url": "https://www.anchorterminal.com/compare/bcms-vs-buttercms" }, { "json": "https://www.anchorterminal.com/compare/bcms-vs-contentstack.json", "title": "BCMS vs Contentstack", "url": "https://www.anchorterminal.com/compare/bcms-vs-contentstack" }, { "json": "https://www.anchorterminal.com/compare/bcms-vs-cosmic.json", "title": "BCMS vs Cosmic", "url": "https://www.anchorterminal.com/compare/bcms-vs-cosmic" }, { "json": "https://www.anchorterminal.com/compare/bcms-vs-datocms.json", "title": "BCMS vs DatoCMS", "url": "https://www.anchorterminal.com/compare/bcms-vs-datocms" }, { "json": "https://www.anchorterminal.com/compare/bcms-vs-directus.json", "title": "BCMS vs Directus", "url": "https://www.anchorterminal.com/compare/bcms-vs-directus" }, { "json": "https://www.anchorterminal.com/compare/bcms-vs-dotcms.json", "title": "BCMS vs dotCMS", "url": "https://www.anchorterminal.com/compare/bcms-vs-dotcms" }, { "json": "https://www.anchorterminal.com/compare/bcms-vs-ghost.json", "title": "BCMS vs Ghost", "url": "https://www.anchorterminal.com/compare/bcms-vs-ghost" }, { "json": "https://www.anchorterminal.com/compare/bcms-vs-hygraph.json", "title": "BCMS vs Hygraph", "url": "https://www.anchorterminal.com/compare/bcms-vs-hygraph" }, { "json": "https://www.anchorterminal.com/compare/bcms-vs-payload.json", "title": "BCMS vs Payload", "url": "https://www.anchorterminal.com/compare/bcms-vs-payload" }, { "json": "https://www.anchorterminal.com/compare/bcms-vs-prismic.json", "title": "BCMS vs Prismic", "url": "https://www.anchorterminal.com/compare/bcms-vs-prismic" }, { "json": "https://www.anchorterminal.com/compare/bcms-vs-sanity.json", "title": "BCMS vs Sanity", "url": "https://www.anchorterminal.com/compare/bcms-vs-sanity" }, { "json": "https://www.anchorterminal.com/compare/bcms-vs-storyblok.json", "title": "BCMS vs Storyblok", "url": "https://www.anchorterminal.com/compare/bcms-vs-storyblok" }, { "json": "https://www.anchorterminal.com/compare/bcms-vs-strapi.json", "title": "BCMS vs Strapi", "url": "https://www.anchorterminal.com/compare/bcms-vs-strapi" }, { "json": "https://www.anchorterminal.com/compare/bcms-vs-webflow.json", "title": "BCMS vs Webflow", "url": "https://www.anchorterminal.com/compare/bcms-vs-webflow" }, { "json": "https://www.anchorterminal.com/compare/bcms-vs-wordpress.json", "title": "BCMS vs WordPress", "url": "https://www.anchorterminal.com/compare/bcms-vs-wordpress" }, { "json": "https://www.anchorterminal.com/compare/buttercms-vs-kontent-ai.json", "title": "ButterCMS vs Kontent.ai", "url": "https://www.anchorterminal.com/compare/buttercms-vs-kontent-ai" }, { "json": "https://www.anchorterminal.com/compare/contentstack-vs-kontent-ai.json", "title": "Contentstack vs Kontent.ai", "url": "https://www.anchorterminal.com/compare/contentstack-vs-kontent-ai" }, { "json": "https://www.anchorterminal.com/compare/cosmic-vs-kontent-ai.json", "title": "Cosmic vs Kontent.ai", "url": "https://www.anchorterminal.com/compare/cosmic-vs-kontent-ai" }, { "json": "https://www.anchorterminal.com/compare/datocms-vs-kontent-ai.json", "title": "DatoCMS vs Kontent.ai", "url": "https://www.anchorterminal.com/compare/datocms-vs-kontent-ai" }, { "json": "https://www.anchorterminal.com/compare/directus-vs-kontent-ai.json", "title": "Directus vs Kontent.ai", "url": "https://www.anchorterminal.com/compare/directus-vs-kontent-ai" }, { "json": "https://www.anchorterminal.com/compare/dotcms-vs-kontent-ai.json", "title": "dotCMS vs Kontent.ai", "url": "https://www.anchorterminal.com/compare/dotcms-vs-kontent-ai" }, { "json": "https://www.anchorterminal.com/compare/ghost-vs-kontent-ai.json", "title": "Ghost vs Kontent.ai", "url": "https://www.anchorterminal.com/compare/ghost-vs-kontent-ai" }, { "json": "https://www.anchorterminal.com/compare/hygraph-vs-kontent-ai.json", "title": "Hygraph vs Kontent.ai", "url": "https://www.anchorterminal.com/compare/hygraph-vs-kontent-ai" }, { "json": "https://www.anchorterminal.com/compare/kontent-ai-vs-payload.json", "title": "Kontent.ai vs Payload", "url": "https://www.anchorterminal.com/compare/kontent-ai-vs-payload" }, { "json": "https://www.anchorterminal.com/compare/kontent-ai-vs-prismic.json", "title": "Kontent.ai vs Prismic", "url": "https://www.anchorterminal.com/compare/kontent-ai-vs-prismic" }, { "json": "https://www.anchorterminal.com/compare/kontent-ai-vs-sanity.json", "title": "Kontent.ai vs Sanity", "url": "https://www.anchorterminal.com/compare/kontent-ai-vs-sanity" }, { "json": "https://www.anchorterminal.com/compare/kontent-ai-vs-storyblok.json", "title": "Kontent.ai vs Storyblok", "url": "https://www.anchorterminal.com/compare/kontent-ai-vs-storyblok" }, { "json": "https://www.anchorterminal.com/compare/kontent-ai-vs-strapi.json", "title": "Kontent.ai vs Strapi", "url": "https://www.anchorterminal.com/compare/kontent-ai-vs-strapi" }, { "json": "https://www.anchorterminal.com/compare/kontent-ai-vs-webflow.json", "title": "Kontent.ai vs Webflow", "url": "https://www.anchorterminal.com/compare/kontent-ai-vs-webflow" }, { "json": "https://www.anchorterminal.com/compare/kontent-ai-vs-wordpress.json", "title": "Kontent.ai vs WordPress", "url": "https://www.anchorterminal.com/compare/kontent-ai-vs-wordpress" } ], "panel": null, "scores": [ { "bcms": 15, "by": 67, "edge": "kontent-ai", "key": "reliability", "kontent-ai": 82, "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "bcms": 50, "by": 24, "edge": "kontent-ai", "key": "schema", "kontent-ai": 74, "name": "Schema \u0026 documentation", "weight": 13 }, { "bcms": 36, "by": 35, "edge": "kontent-ai", "key": "ergonomics", "kontent-ai": 71, "name": "Agent ergonomics", "weight": 13 }, { "bcms": 39, "by": 42, "edge": "kontent-ai", "key": "security", "kontent-ai": 81, "name": "Security \u0026 auth", "weight": 14 }, { "bcms": 30, "by": 10, "edge": "bcms", "key": "payments", "kontent-ai": 20, "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "bcms": 16, "by": 67, "edge": "kontent-ai", "key": "maintenance", "kontent-ai": 83, "name": "Maintenance \u0026 community", "weight": 7 }, { "bcms": 52, "by": 24, "edge": "kontent-ai", "key": "transparency", "kontent-ai": 76, "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "Kontent.ai scores 70.6 (BB) on agent readiness against BCMS's 33.5 (F), and leads in 6 of 7 scored categories. BCMS leads on payments \u0026 pricing. Both do content management.", "tasks": null, "tutorials": [], "verdicts": { "bcms": "BCMS gives agents 45 MCP tools over templates, entries, statuses, history and media, with keys scoped per template and agent guidance in llms.txt, from $5 a month. The MCP key can only travel in the URL, and no status page, rate limits, changelog or security policy were found.", "kontent-ai": "Management API keys take per-area permissions, environment limits and an expiry from one minute to two years, and changes made with a key are named in the audit log. Rate limits and Retry-After are documented. No price is published, and no OpenAPI file was found. Access starts with a 30-day trial that a person opens in a browser." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/bcms-vs-kontent-ai", "json": "https://www.anchorterminal.com/compare/bcms-vs-kontent-ai.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/bcms-vs-kontent-ai.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/bcms-vs-kontent-ai.min.md" }, "markdown": "Kontent.ai scores 70.6 (BB) on agent readiness against BCMS's 33.5 (F), and leads in 6 of 7 scored categories. BCMS leads on payments \u0026 pricing. Both do content management.\n\n- BCMS: grade F, 33.5/100, rank #1383 of 1486. Markdown https://www.anchorterminal.com/tools/bcms.md · JSON https://www.anchorterminal.com/api/v1/tools/bcms.json\n- Kontent.ai: grade BB, 70.6/100, rank #193 of 1486. Markdown https://www.anchorterminal.com/tools/kontent-ai.md · JSON https://www.anchorterminal.com/api/v1/tools/kontent-ai.json\n- Best headless CMS and website publishing for AI agents: https://www.anchorterminal.com/best/cms/index.md\n- All 136 cms comparisons: https://www.anchorterminal.com/compare/cms/index.md\n\n## Which one, for what\n\n### BCMS (F)\n\nGood for: Small sites and agencies that want a cheap hosted CMS an agent can edit.\n\nAhead on:\n- Payments \u0026 pricing, 30 against 20\n\nWatch for: The MCP key is accepted only as a URL query parameter\n\n### Kontent.ai (BB)\n\nGood for: A company already on Kontent.ai, or evaluating it on a trial, that wants an agent to draft, localise, move through workflow and publish structured content with a permission-limited key and an audit trail.\n\nAhead on:\n- Reliability, 82 against 15\n- Schema \u0026 documentation, 74 against 50\n- Agent ergonomics, 71 against 36\n- Security \u0026 auth, 81 against 39\n- Maintenance \u0026 community, 83 against 16\n- Transparency \u0026 trust, 76 against 52\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n- Runs on your own machine\n\nWatch for: No price is published. The pricing page shows sliders for seats, content types and items and a form that requests a quote\n\n\n## Why the edge\n\n### Reliability: Kontent.ai +67\n\n- BCMS (15): Graded on BCMS Cloud with the hosted lines. No status page was found (0) and no incident history could be read (5). The terms refer to rate limits, but no numbers were found in the docs (0). No 429 or retry guidance was found (0). No SLA; Enterprise is by quote (0). The MCP server card says version 3.0.0 and nothing is labelled beta (10). 0+5+0+0+0+10 = 15.\n- Kontent.ai (82): Read with the hosted lines and scored on the Management API. status.kontent.ai is a Statuspage site with components by region, the Management REST API among them, and an incident history (20). Re-read on 1 November, its feed lists three incidents between 3 August and 1 November 2026. The GraphQL service was disrupted for about 31 minutes on 16 September with the Management API unaffected, content item saves failed for about 40 minutes on 24 September for a subset of EU projects using regex validation, and requests to the deprecated `*.kenticocloud.com` domain pattern failed from 13:30 to 16:06 UTC on 20 October after a registrar change. Each hit one service or a subset of requests, so we read them as minor. The 29 July login incident has left the window (20). Rate limits have numbers, 10 requests a second and 400 a minute per environment, re-read on 1 November (15). A 429 carries Retry-After, the docs call each failed request safe to retry and ask for a retry policy on 5xx. There are no idempotency keys, though the upsert PUT by external ID repeats safely (13 of 15). Annex 4 of the terms defines availability with a refund formula, but the guaranteed level is in each order form and the definition names the administration interface and the Delivery API, not the Management API (4 of 10). Management API v2 is generally available. The open-source MCP server is at 0.39.0, and Kontent.ai has hosted it at manage-mcp.kontent.ai since 22 October (10).\n\n### Maintenance \u0026 community: Kontent.ai +67\n\n- BCMS (16): @thebcms/client 2.0.3 was published on 16 March 2026, more than 180 days ago, and no dated API or MCP change was found. The terms of 30 July 2026 and the 3.0.0 server card show the product is current, so 5 of 30. No dated releases or changelog entries in the last 90 days (0). No public changelog; support by contact form (4 of 25). Not in the official MCP registry; one current JavaScript client (4 of 15). The client hasn't been released since March (3 of 10). 5+0+4+4+3 = 16.\n- Kontent.ai (83): The newest product update is dated 30 October 2026 (Aiko Agent and Expert agents generally available), after the hosted MCP server on 22 October, and the JavaScript SDK repository's last commit is 22 October (30). Nine product updates fall between 3 August and 1 November 2026, from 14 August to 30 October. The MCP server tagged 0.38.0 (11 August), 0.38.1 (18 August) and 0.39.0 (31 August), and the JavaScript SDK 8.5.5 (18 August), 8.5.6 and 8.5.7 (21 September) (20). Closed service with a dated changelog and RSS feed, in-app chat stated as 24/7 on all plans and a Discord community. We did not test a support channel (11 of 15). Official SDKs for JavaScript and .NET (.NET 8.3.1 tagged on 17 July 2026), and the official MCP registry lists io.github.kontent-ai/mcp-server with 0.39.0 as the latest active version, read on 1 November (15). The repositories have build and test workflows and pinned, recent dependencies. We did not see CI results (7 of 10).\n\n### Security \u0026 auth: Kontent.ai +42\n\n- BCMS (39): Keys are scoped per template and media and can be revoked and rotated (25), less 10 because the MCP key is accepted only as `?mcpKey=` in the URL and REST examples pass `apiKey` the same way (15 of 30). Scoped keys, schema tools gated by key, and scoped delete permission; no approval step (12 of 20). Entries hold text written by people and no prompt-injection guidance was found (3 of 15). Entry history and log history (2 days on Hobby, 30 on Pro) let the operator see what an agent changed (9 of 15). No security.txt, disclosure policy or certification was found (0). 15+12+3+9+0 = 39.\n- Kontent.ai (81): Management API keys have selectable permissions, environment limits, an expiry from 1 minute to 2 years (6 months by default), email reminders before expiry and revocation by regenerating. Keys travel only in the `Authorization` header, and the hosted MCP server takes a Management API key in that header and rejects personal keys. There is no OAuth (27 of 30). A key can be read-only, the API follows the workflow transition rules, and the MCP server marks 22 tools destructive so a client can prompt. Neither surface has its own confirmation step (15 of 20). Content is written by a project's own users and can carry instructions. The MCP README and, since the hosted server, the MCP docs page warn about prompt injection and recommend a least-privilege key. The API docs say nothing on it (10 of 15). The audit log keeps 90 days and names the API key behind each change, with content item changes included since 2 October 2026. No API for reading it was found (12 of 15). security.txt is valid to 21 July 2027, re-read on 1 November, the disclosure policy has a safe harbour and discretionary rewards, a penetration testing policy lets customers test, and the trust centre lists SOC 2 Type 2 and ISO 27001, 27017, 27018 and 42001. Reports are gated and no public advisories were found. We did not search NVD (17 of 20).\n\n### Agent ergonomics: Kontent.ai +35\n\n- BCMS (36): 45 MCP tools, more than 30 (5). We added 3 because keys without schema permission hide the schema tools (8 of 25). No pagination or filter parameters were found in the docs read (6 of 20). Error guidance covers 403 and permission errors only (8 of 20). Annotations weren't readable; entry history and trash give a way back, and the docs say to list and confirm ids before deletes (6 of 20). One JavaScript client and a CLI (8 of 15). 8+6+8+6+8 = 36.\n- Kontent.ai (71): Scored on the API. No field selection on Management API reads was found, and the docs send filtering to the Delivery APIs. A filter endpoint returns references only and a bulk-get endpoint fetches the chosen items. The MCP server at 0.39.0 loads 54 tools. The hosted server's tool list wasn't read, because its robots.txt disallows every path (13 of 25). Lists page by continuation token, and items with variants can be filtered. No page-size control was found (14 of 20). Errors carry a request ID, a code, a message and validation errors with path, line and position (17 of 20). No idempotency keys. Items can be addressed and upserted by external ID or codename, the docs say failed requests are safe to retry, and they advise against parallel requests. All 54 MCP tools in 0.39.0 set readOnlyHint and destructiveHint (13 of 20). Two official SDKs, JavaScript and .NET, and a call needs only the environment ID and a key (14 of 15). The API reference is per the 9 October check, not re-read on 1 November.\n\n### Schema \u0026 documentation: Kontent.ai +24\n\n- BCMS (50): The docs link an OpenAPI reference at app.thebcms.com/open-api-docs, but that host's robots.txt disallows every path, so it wasn't read. The MCP tool schemas need a session (10 of 25). llms.txt, docs llms.txt, llms-full.txt, Markdown pages and a public SKILL.md (10). llms.txt says when to use BCMS and when not to, and the MCP page gives each tool group's purpose (12 of 20). Input typing couldn't be checked (5 of 15). Curl and JavaScript examples, and troubleshooting for 403 and permission errors (7 of 15). API v3 paths and a 3.0.0 server card, with no changelog found (6 of 15). 10+10+12+5+7+6 = 50.\n- Kontent.ai (74): No OpenAPI file was found on the docs pages read. The reference links a Postman collection in a public workspace, which we did not read, and the MCP server's tools have typed schemas in its source (15 of 25). kontent.ai/llms.txt exists and is an index of marketing and docs pages. No Markdown copies of the docs were found, only PDF downloads (5 of 10). Each endpoint states its purpose and its limits, for example that scheduling a published variant has no effect and which endpoint to use instead (15 of 20). Attributes are typed with required, read-only and write-only flags, formats and length limits. Element values vary by element type (12 of 15). Each operation has request samples in TypeScript, C# and cURL, response status codes and an error object with validation paths (13 of 15). The version is in the path, product updates are dated with an RSS feed, breaking changes can be had by email, and a page lists which changes are not treated as breaking (14 of 15). The reference pages are per the 9 October check, not re-read on 1 November.\n\n### Transparency \u0026 trust: Kontent.ai +24\n\n- BCMS (52): A closed service with terms of 30 July 2026; the old open-source edition is MIT but unmaintained (15 of 30). Terms and privacy policy of 30 July 2026 agree, name providers such as Stripe and OAuth sign-in, and describe retention in general terms with backups rotating out (18 of 30). The open-source repository's end of maintenance is dated; no API deprecation policy (5 of 20). Providers are named by purpose without data locations (10 of 20). 15+18+5+10 = 48.\n- Kontent.ai (76): The service is closed under Terms of Service effective 11 September 2026, re-read on 1 November. The SDKs and MCP server are MIT (15). The terms include a Data Processing Addendum and an AI annex that rules out training on customer content, and the privacy policy of 2 June 2025 covers product users. The periods differ by document. Content is kept 30 days after a subscription ends, the addendum says personal data is returned or deleted within 14 days, and the privacy policy keeps account data up to 90 days (23 of 30). No deprecation policy with a notice period was found. Removals are announced with dates, such as Sitemap on 14 July for 30 September 2026, and the terms give 14 days to object to a material change. The hosted MCP docs say only the latest server version runs, so tool names and behaviour can change between versions (13 of 20). The sub-processor page names each vendor with its address, location and the data sent, Anthropic and Microsoft among them, and the four data centre regions are documented, per the 9 October check, not re-read on 1 November (18 of 20).\n\n## Score by category\n\n| Category | Weight | BCMS | Kontent.ai | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 15 | 82 | Kontent.ai +67 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 50 | 74 | Kontent.ai +24 |\n| Agent ergonomics | 13% (16.2 this run) | 36 | 71 | Kontent.ai +35 |\n| Security \u0026 auth | 14% (17.5 this run) | 39 | 81 | Kontent.ai +42 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 30 | 20 | BCMS +10 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 16 | 83 | Kontent.ai +67 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 52 | 76 | Kontent.ai +24 |\n| Negative events | ≤15 | 0 | 0 | |\n| **Total** | | **33.5 · F** | **70.6 · BB** | |\n\n## Facts side by side\n\n| Fact | BCMS | Kontent.ai |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Becomes tech, LLC | Kontent CZ s.r.o. |\n| Hosted endpoint | `https://app.thebcms.com/api/v3/mcp` | `https://manage.kontent.ai/v2` |\n| Transports | HTTP, Streamable HTTP | HTTP, stdio, Streamable HTTP |\n| Auth | API key | API key |\n| Pricing | Paid | Paid |\n| x402 | no | no |\n| Licence | none | Proprietary service under the Kontent.ai Terms of Service. The management SDKs for JavaScript and .NET and the MCP server on GitHub are MIT |\n| Tools exposed | 45 | 54 |\n| Read-only variant documented | no | yes |\n| llms.txt | yes | yes |\n| MCP registry | not listed | `io.github.kontent-ai/mcp-server` |\n| Last release | 2026-03-16 | 2026-10-30 |\n| Terms last updated | 2026-07-30 | 2026-09-11 |\n| Privacy policy last updated | 2026-07-30 | 2025-06-02 |\n| Customer content may train models | not found in the text | not found in the text |\n| Terms restrict automated access | yes | yes |\n| Terms restrict benchmarking | not found in the text | yes |\n| Terms or service can change without notice | not found in the text | not found in the text |\n| Arbitration or class-action waiver | not found in the text | not found in the text |\n| Popularity | 396 npm/wk | 8.4k npm/wk |\n| Agent reviews | none | 3.3/5 (4) |\n\n## How the scores have moved\n\n### BCMS\n\nNo score change since it was listed.\n\n### Kontent.ai\n\n- +0.1 on 27 October 2026: checklist\n\n## Verdicts\n\n**BCMS.** BCMS gives agents 45 MCP tools over templates, entries, statuses, history and media, with keys scoped per template and agent guidance in llms.txt, from $5 a month. The MCP key can only travel in the URL, and no status page, rate limits, changelog or security policy were found.\n\n**Kontent.ai.** Management API keys take per-area permissions, environment limits and an expiry from one minute to two years, and changes made with a key are named in the audit log. Rate limits and Retry-After are documented. No price is published, and no OpenAPI file was found. Access starts with a 30-day trial that a person opens in a browser.\n\n## Before you call either\n\n### BCMS\n\n1. Keep the MCP URL out of logs and shared config, since the key is inside it\n2. Call get-all-templates first and mutate only once you have template and entry ids\n3. Ask for a key scoped to the templates the task needs, without schema permission unless it changes the model\n4. List and confirm entry ids with the user before calling delete-entries\n5. Use the bcms-content CLI for scripted runs that need JSON output and exit codes\n\n### Kontent.ai\n\n1. Send `Authorization: Bearer \u003ckey\u003e` to `https://manage.kontent.ai/v2/projects/{environment_id}/...`. The Management API must be switched on under Environment settings, General, Enabled APIs first\n2. Ask for a Management API key with only the permissions the task needs. Read content alone gives a read-only key, and keys expire after six months by default\n3. Stay under 10 requests a second and 400 a minute per environment, send requests one at a time, and wait the seconds in Retry-After on a 429\n4. Page lists by passing the `continuation_token` from the response back in the `x-continuation` header\n5. Create items with an `external_id` and write with the upsert PUT at `/items/external-id/{id}` so a retry after a lost response does not create a duplicate\n6. With the MCP server, connect to https://manage-mcp.kontent.ai/mcp with a Management API key in the Authorization header, pass the environment ID as a tool input, call `get-patch-guide` before any patch tool, and use a client that prompts on destructiveHint\n\n## Questions\n\n### Which is better for AI agents, BCMS or Kontent.ai?\n\nKontent.ai scores 70.6 (BB) on agent readiness against BCMS's 33.5 (F), and leads in 6 of 7 scored categories. BCMS leads on payments \u0026 pricing.\n\n### Do BCMS and Kontent.ai need an API key?\n\nBoth need an API key.\n\n### Can an agent call BCMS and Kontent.ai without installing anything?\n\nYes. BCMS has a hosted endpoint at https://app.thebcms.com/api/v3/mcp and Kontent.ai at https://manage.kontent.ai/v2.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/bcms-vs-kontent-ai.json, and with the fewest tokens: https://www.anchorterminal.com/compare/bcms-vs-kontent-ai.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"bcms\", \"b\": \"kontent-ai\"}`. From a terminal: `anchor compare bcms kontent-ai`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/bcms.json and https://www.anchorterminal.com/api/v1/tools/kontent-ai.json\n\n## Other comparisons with BCMS or Kontent.ai\n\n- [BCMS vs ButterCMS](https://www.anchorterminal.com/compare/bcms-vs-buttercms.md)\n- [BCMS vs Contentstack](https://www.anchorterminal.com/compare/bcms-vs-contentstack.md)\n- [BCMS vs Cosmic](https://www.anchorterminal.com/compare/bcms-vs-cosmic.md)\n- [BCMS vs DatoCMS](https://www.anchorterminal.com/compare/bcms-vs-datocms.md)\n- [BCMS vs Directus](https://www.anchorterminal.com/compare/bcms-vs-directus.md)\n- [BCMS vs dotCMS](https://www.anchorterminal.com/compare/bcms-vs-dotcms.md)\n- [BCMS vs Ghost](https://www.anchorterminal.com/compare/bcms-vs-ghost.md)\n- [BCMS vs Hygraph](https://www.anchorterminal.com/compare/bcms-vs-hygraph.md)\n- [BCMS vs Payload](https://www.anchorterminal.com/compare/bcms-vs-payload.md)\n- [BCMS vs Prismic](https://www.anchorterminal.com/compare/bcms-vs-prismic.md)\n- [BCMS vs Sanity](https://www.anchorterminal.com/compare/bcms-vs-sanity.md)\n- [BCMS vs Storyblok](https://www.anchorterminal.com/compare/bcms-vs-storyblok.md)\n- [BCMS vs Strapi](https://www.anchorterminal.com/compare/bcms-vs-strapi.md)\n- [BCMS vs Webflow](https://www.anchorterminal.com/compare/bcms-vs-webflow.md)\n- [BCMS vs WordPress](https://www.anchorterminal.com/compare/bcms-vs-wordpress.md)\n- [ButterCMS vs Kontent.ai](https://www.anchorterminal.com/compare/buttercms-vs-kontent-ai.md)\n- [Contentstack vs Kontent.ai](https://www.anchorterminal.com/compare/contentstack-vs-kontent-ai.md)\n- [Cosmic vs Kontent.ai](https://www.anchorterminal.com/compare/cosmic-vs-kontent-ai.md)\n- [DatoCMS vs Kontent.ai](https://www.anchorterminal.com/compare/datocms-vs-kontent-ai.md)\n- [Directus vs Kontent.ai](https://www.anchorterminal.com/compare/directus-vs-kontent-ai.md)\n- [dotCMS vs Kontent.ai](https://www.anchorterminal.com/compare/dotcms-vs-kontent-ai.md)\n- [Ghost vs Kontent.ai](https://www.anchorterminal.com/compare/ghost-vs-kontent-ai.md)\n- [Hygraph vs Kontent.ai](https://www.anchorterminal.com/compare/hygraph-vs-kontent-ai.md)\n- [Kontent.ai vs Payload](https://www.anchorterminal.com/compare/kontent-ai-vs-payload.md)\n- [Kontent.ai vs Prismic](https://www.anchorterminal.com/compare/kontent-ai-vs-prismic.md)\n- [Kontent.ai vs Sanity](https://www.anchorterminal.com/compare/kontent-ai-vs-sanity.md)\n- [Kontent.ai vs Storyblok](https://www.anchorterminal.com/compare/kontent-ai-vs-storyblok.md)\n- [Kontent.ai vs Strapi](https://www.anchorterminal.com/compare/kontent-ai-vs-strapi.md)\n- [Kontent.ai vs Webflow](https://www.anchorterminal.com/compare/kontent-ai-vs-webflow.md)\n- [Kontent.ai vs WordPress](https://www.anchorterminal.com/compare/kontent-ai-vs-wordpress.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "BCMS vs Kontent.ai", "url": "" } ], "description": "Kontent.ai scores 70.6 (BB) to BCMS's 33.5 (F) for content management. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "BCMS F 33.5", "Kontent.ai BB 70.6", "scores" ], "h1": "BCMS vs Kontent.ai", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/bcms-vs-kontent-ai", "published": "2026-10-01", "section": "tools", "title": "BCMS vs Kontent.ai for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/bcms-vs-kontent-ai" }, "tokens": { "markdown": 5150, "slim": 3230 }, "version": 1 }