{ "data": { "a": { "slug": "bcms", "name": "BCMS", "vendor": "Becomes tech, LLC", "vendorUrl": "https://www.thebcms.com", "kind": "http-api", "category": "cms", "summary": "BCMS is a hosted headless CMS from Becomes tech, LLC. People edit structured content in a dashboard, and agents work with templates, entries, media and languages through a REST API, a JavaScript client, a CLI and a remote MCP server.", "url": "https://www.anchorterminal.com/tools/bcms", "markdownUrl": "https://www.anchorterminal.com/tools/bcms.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/bcms.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/bcms.json", "dns": "bcms.grade.anchorterminal.com", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://app.thebcms.com/api/v3/mcp", "packages": [ { "registry": "npm", "name": "@thebcms/client" } ], "auth": "api-key", "authNotes": "Three-part keys (keyId.secret.instanceId) created in the dashboard and scoped to templates and media, with schema tools only for keys allowed them. The MCP endpoint takes the key only as the `mcpKey` query parameter, and the REST examples pass `apiKey` in the query string. The docs advise a key per person, client and environment and regular rotation.", "pricing": "paid", "pricingNotes": "Hobby $5 a month ($4 billed yearly) with 2 seats, 100 entries and 500 MB of media; Pro $50 a month ($33 yearly) with 5 seats, then $15 a seat a month, and unlimited entries; Enterprise by quote. Every plan starts with a 14-day free trial with no card. No self-hosted edition.", "priceSummary": "$5 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in llms.txt, the docs, the MCP page or pricing.md (checked 2026-11-06).", "endpoints": [] }, "toolCount": 45, "popularity": { "githubStars": null, "npmWeekly": 396, "pypiWeekly": null, "asOf": "2026-11-06" }, "docsUrl": "https://www.thebcms.com/docs", "llmsTxt": "https://www.thebcms.com/llms.txt", "capabilities": [ "cms.content", "cms.assets", "cms.localisation", "cms.schema", "cms.publish" ], "tags": [ "hosted", "mcp", "remote-mcp", "llms-txt", "no-card", "closed-source", "webhooks", "typescript", "cli" ], "lastRelease": "2026-03-16", "graded": true, "anchor": { "graded": true, "score": 33.5, "grade": "F", "agentReady": false, "rank": 1405, "ranked": true, "rankOf": 1510, "categoryRank": 18, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 36, "maintenance": 16, "payments": 30, "reliability": 15, "schema": 50, "security": 39, "transparency": 52 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "low", "date": "2026-11-06" }, "negative": 0, "verdict": "BCMS gives agents 45 MCP tools over templates, entries, statuses, history and media, with keys scoped per template and agent guidance in llms.txt, from $5 a month. The MCP key can only travel in the URL, and no status page, rate limits, changelog or security policy were found.", "bestFor": "Small sites and agencies that want a cheap hosted CMS an agent can edit.", "strengths": [ "Remote MCP server covering templates, entries, statuses, entry history, media, languages and trash", "Keys scoped to the templates and media an agent needs, with schema tools gated separately", "llms.txt that says when to use BCMS and when not to, plus a public SKILL.md", "Entry history and trash readable through MCP, so an agent can trace and recover changes", "14-day trial with no card, then plans from $5 a month" ], "weaknesses": [ "The MCP key is accepted only as a URL query parameter", "No status page, documented rate limits, SLA or changelog found", "No security.txt, disclosure policy or certification found", "The JavaScript client hasn't been released since March 2026", "No self-hosted edition; the open-source repository has been unmaintained since October 2024" ], "agentNotes": [ "Keep the MCP URL out of logs and shared config, since the key is inside it", "Call get-all-templates first and mutate only once you have template and entry ids", "Ask for a key scoped to the templates the task needs, without schema permission unless it changes the model", "List and confirm entry ids with the user before calling delete-entries", "Use the bcms-content CLI for scripted runs that need JSON output and exit codes" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "low", "grade": "F", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 33.5 } ], "editorialScores": { "ergonomics": 36, "maintenance": 16, "payments": 30, "reliability": 15, "schema": 50, "security": 39, "transparency": 48 }, "provenanceScore": 56, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npm install @thebcms/client", "claudeCode": "claude mcp add --transport http bcms \"https://app.thebcms.com/api/v3/mcp?mcpKey=YOUR_MCP_KEY_HERE\"", "config": { "mcpServers": { "bcms": { "url": "https://app.thebcms.com/api/v3/mcp?mcpKey=YOUR_MCP_KEY_HERE" } } } }, "letme": { "capability": "https://letme.dev/cms.content", "tool": "https://letme.dev/bcms" }, "area": "business", "unitPrices": [ { "item": "Hobby plan", "unit": "month", "usd": 5, "note": "$4 a month billed yearly; 2 seats, 100 entries" }, { "item": "Pro plan", "unit": "month", "usd": 50, "note": "$33 a month billed yearly; 5 seats" }, { "item": "Extra Pro seat", "unit": "seat-month", "usd": 15, "note": "$120 a year on yearly billing" } ], "provenance": { "legalEntity": "Becomes tech, LLC", "domain": "thebcms.com", "domainRegistered": "", "endpointOnVendorDomain": true, "terms": "https://www.thebcms.com/terms-of-use/", "privacy": "https://www.thebcms.com/privacy-policy/", "statusPage": "", "changelog": "", "securityTxt": "none", "checked": "2026-11-06", "notes": [ "The terms and privacy policy, both effective 30 July 2026, name Becomes tech, LLC, a Delaware LLC. The terms forbid scraping or crawling that burdens or abuses the services, except through the documented APIs within rate limits.", "www.thebcms.com/robots.txt allows all. app.thebcms.com/robots.txt disallows all paths.", "www.thebcms.com/.well-known/security.txt returned 404 and no status page was found.", "RDAP gave no registration date for thebcms.com through rdap.org." ], "score": 56 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/bcms.json", "live": { "slug": "bcms", "probe": { "target": "https://app.thebcms.com/api/v3/mcp", "method": "get", "lastAt": "2026-11-07T22:55:47.927021814Z", "lastOk": true, "lastStatus": 400, "lastMs": 129, "authRequired": false, "uptime24h": 99.18, "uptime30d": 99.19, "p50ms24h": 148, "p95ms24h": 390, "samples24h": 244, "samples30d": 246, "days": [ { "date": "2026-11-06", "probes": 13, "ok": 13 }, { "date": "2026-11-07", "probes": 233, "ok": 231 } ] }, "versions": [ { "registry": "npm", "name": "@thebcms/client", "version": "2.0.3", "seenAt": "2026-11-06T23:10:32.023184196Z" } ], "npmWeekly": 396, "securityTxt": { "url": "https://thebcms.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:00:49.817334601Z" }, "llmsTxt": { "url": "https://www.thebcms.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:31:42.21650798Z" }, "pages": [ { "url": "https://www.thebcms.com/privacy-policy/", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:35:35.490295236Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "abae80fa615e" }, { "url": "https://www.thebcms.com/terms-of-use/", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:35:37.777884178Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "58d8ef9074aa" } ], "mcpTools": { "url": "https://app.thebcms.com/api/v3/mcp?mcpKey=YOUR_MCP_KEY_HERE", "checkedAt": "2026-11-07T01:42:42.874889438Z", "status": "error", "note": "initialize: no JSON-RPC answer", "changedAt": "2026-11-07T01:42:42.874889438Z" }, "updatedAt": "2026-11-07T22:55:47.927021814Z" } }, "answer": "Prismic scores 56 (C) on agent readiness against BCMS's 33.5 (F), and leads in every scored category.", "b": { "slug": "prismic", "name": "Prismic", "vendor": "Prismic.io Inc.", "vendorUrl": "https://prismic.io", "kind": "http-api", "category": "cms", "summary": "Prismic is a hosted headless CMS and page builder. Agents write to it through the official hosted MCP server (16 tools that stage changes in releases) or the Migration, Asset and Types APIs with a write token.", "url": "https://www.anchorterminal.com/tools/prismic", "markdownUrl": "https://www.anchorterminal.com/tools/prismic.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/prismic.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/prismic.json", "dns": "prismic.grade.anchorterminal.com", "repo": "https://github.com/prismicio/prismic-client", "license": "Proprietary service under Prismic's Master Services Agreement. The JavaScript clients, the CLI and the agent skill on GitHub are Apache-2.0", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://mcp.prismic.io/mcp", "packages": [ { "registry": "npm", "name": "@prismicio/client" }, { "registry": "npm", "name": "@prismicio/migrate" }, { "registry": "npm", "name": "prismic" } ], "auth": "mixed", "authNotes": "Self-serve. The MCP server signs a person in through browser OAuth (authorisation code with PKCE and dynamic client registration) and works with that person's repository role. A repository Administrator or Owner must activate Prismic MCP first. Sign-ins expire after 90 days. The Migration, Asset and Types APIs take a repository write token as a Bearer header with a `repository` header. A person creates the token in Settings, API \u0026 Security, Write APIs, or with `npx prismic token create --write`. No scopes or expiry for write tokens were found in the reviewed documentation. No app review or sales approval is needed.", "pricing": "freemium", "pricingNotes": "Free is $0 per repository and includes the Migration API, 1 user, 2 locales and 4 million API calls a month, with no card on file needed. Starter is $10, Small $25, Medium $150 and Platinum $675 a month per repository, billed annually. Enterprise is sold through sales. The launch note says Prismic MCP is currently free on every plan (https://prismic.io/pricing, checked 2026-10-09).", "priceSummary": "$10 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the MCP docs, the write API references or the pricing page (checked 2026-10-09).", "endpoints": [] }, "toolCount": 16, "popularity": { "githubStars": 177, "npmWeekly": 236949, "pypiWeekly": null, "asOf": "2026-10-09" }, "docsUrl": "https://prismic.io/docs/mcp", "llmsTxt": "https://prismic.io/docs/llms.txt", "capabilities": [ "cms.content", "cms.publish", "cms.assets", "cms.localisation", "cms.schema" ], "tags": [ "official", "hosted", "mcp", "oauth", "closed-source", "no-card", "free-tier", "llms-txt", "webhooks", "typescript", "cli", "graphql", "status-page" ], "lastRelease": "2026-10-27", "graded": true, "anchor": { "graded": true, "score": 56, "grade": "C", "agentReady": false, "rank": 848, "ranked": true, "rankOf": 1510, "categoryRank": 13, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 63, "maintenance": 79, "payments": 35, "reliability": 73, "schema": 60, "security": 50, "transparency": 73 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-02" }, "negative": -5, "negativeNotes": [ "15 September 2026 (`prismic` CLI 1.18.0, a 1.x minor tagged 16 September). The CLI began refusing any command from a detected AI agent unless it passes `--analytics-task-id` (a UUID) and `--analytics-intent`, and `prismic repo create` began requiring a supported framework. The changelog lists both under `Features`, and no earlier notice was found. 1.17.0 (10 September) had made the two options optional (https://github.com/prismicio/cli/blob/main/CHANGELOG.md)", "Since 10 March 2026 (`prismic` CLI 1.0.0 and every release after it). The CLI sends usage events to Segment, tied to a stored user ID once signed in, and errors to Sentry, on by default, and since 1.18.0 (15 September 2026) the commands of a detected agent carry the user's request in one sentence. The CLI README, the CLI docs page and the privacy policy don't mention it. The opt-out is documented only in the prismicio/skills README since 14 October 2026, which the day before said the CLI connects only to Prismic. Undisclosed telemetry with an opt-out, the low end, -2, as qwenpaw and kimi-code-cli took for their telemetry lapses (https://github.com/prismicio/cli/blob/main/src/tracking.ts)" ], "verdict": "The hosted MCP server stages every write as a draft in a release, cannot delete, and publishes only when a user with the Publisher role asks. Write tokens for the Migration, Asset and Types APIs have no scopes, no OpenAPI file was found, writes are limited to one request a second, and the acceptable use policy forbids access by scripts.", "bestFor": "Teams already on Prismic who want an agent to bulk-edit, localise or migrate pages into releases for human review.", "strengths": [ "Official hosted MCP server at `https://mcp.prismic.io/mcp` with 16 tools, free on every plan per the 8 June 2026 launch note", "MCP writes land as drafts in a release, the server has no delete tool, and `publish_release` needs the Publisher role", "OAuth on the MCP server with PKCE S256, dynamic client registration, refresh tokens and a revocation endpoint", "Free plan at $0 with the Migration API, 4 million API calls a month and unlimited documents, types and assets", "Root and docs `llms.txt`, and every docs page served as Markdown at the same URL plus `.md`" ], "weaknesses": [ "No OpenAPI file for the Migration, Asset or Types APIs in the reviewed documentation. The Types API links a Postman collection", "Write tokens cover the whole repository with no scopes or expiry in the reviewed documentation, and the docs say they carry many privileges", "The Migration and Asset APIs each take one item a request at one request a second, with no idempotency keys", "The acceptable use policy forbids accessing the Solution by bots, programs or scripts, and the terms bar benchmarking without written consent", "Writer and Publisher roles start on the Medium plan ($150 a month). On Starter and Small every user is an Administrator", "Since CLI 1.18.0 (15 September 2026) the `prismic` CLI exits with an error for a detected agent that omits a task ID and a one-sentence account of the user's request, which go to its usage analytics" ], "agentNotes": [ "Ask a repository Administrator to activate Prismic MCP in Settings first. Activation can take several minutes, and each environment has its own setting", "Call `list_repositories`, then `get_custom_type` or `get_shared_slice` for the empty content template before `create_document`", "Create a release with `create_release` and write into it. Call `publish_release` only on an explicit request, because a publish cannot be undone through MCP", "For the Migration API send `Authorization: Bearer \u003cwrite token\u003e` and a `repository` header, one page a request, one request a second, and keep each returned `id` for later PUT calls", "Upload media first (`upload_asset` or POST to `https://asset-api.prismic.io/assets`) and reference the asset `id` in image and media link fields", "Running the `prismic` CLI as an agent, call `npx prismic task-id` once, then pass `--task-id` and `--user-intent` on every command or it exits. `PRISMIC_TELEMETRY_ENABLED=false` stops the Segment and Sentry reporting" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 4, "avgRating": 3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 56 } ], "editorialScores": { "ergonomics": 63, "maintenance": 79, "payments": 35, "reliability": 73, "schema": 60, "security": 50, "transparency": 59 }, "provenanceScore": 86, "checked": { "categories": { "ergonomics": "2026-11-02", "maintenance": "2026-11-02", "payments": "2026-11-02", "reliability": "2026-11-02", "schema": "2026-11-02", "security": "2026-11-02", "transparency": "2026-11-02" }, "last": "2026-11-02", "lastMoved": "2026-11-02", "oldest": "2026-11-02", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npm install @prismicio/client @prismicio/migrate", "http": "curl --location --request GET 'https://customtypes.prismic.io/customtypes' \\\n --header 'repository: your-repo-name' \\\n --header 'Authorization: Bearer \u003ctoken\u003e'", "config": { "mcpServers": { "Prismic": { "url": "https://mcp.prismic.io/mcp" } } } }, "letme": { "capability": "https://letme.dev/cms.content", "tool": "https://letme.dev/prismic" }, "area": "business", "unitPrices": [ { "item": "Starter", "unit": "month", "usd": 10, "note": "per repository, billed annually, 3 users and 3 locales" }, { "item": "Small", "unit": "month", "usd": 25, "note": "per repository, billed annually, 7 users and 4 locales" }, { "item": "Medium", "unit": "month", "usd": 150, "note": "per repository, billed annually, 25 users, 5 million API calls, user roles" }, { "item": "Platinum", "unit": "month", "usd": 675, "note": "per repository, billed annually, unlimited users, 10 million API calls" }, { "item": "CDN bandwidth overage", "unit": "gb", "usd": 0.3, "note": "Starter, Small and Medium. $0.25 on Platinum" } ], "provenance": { "legalEntity": "Prismic.io Inc.", "domain": "prismic.io", "domainRegistered": "2013-06-05", "endpointOnVendorDomain": true, "terms": "https://prismic.io/legal/terms-of-service", "privacy": "https://prismic.io/legal/privacy", "statusPage": "https://status.prismic.io", "changelog": "https://prismic.io/updates", "securityTxt": "none", "checked": "2026-10-09", "notes": [ "The terms page is a Master Services Agreement, last updated 1 December 2025, between the customer and Prismic.io Inc., with notices to 185 Alewife Brook Parkway, Suite 210, Cambridge, Massachusetts 02138, USA. The legal page gives 9 rue de la Pierre Levée, 75011 Paris, France.", "The privacy policy, last updated 8 April 2026, covers the website and the Prismic Services, has a section on Prismic MCP, and links a self-service DPA and a sub-processor list, both PDFs we did not read.", "The AI Terms of Service (4 February 2026) name Prismic, Inc. and apply to AI functions.", "The MCP server answers at mcp.prismic.io and the write APIs at migration.prismic.io, asset-api.prismic.io and customtypes.prismic.io. The MCP docs name prismic-auth.eu.auth0.com as the sign-in server.", "prismic.io/.well-known/security.txt and prismic.io/security.txt return 404. The security page gives security@prismic.io.", "RDAP for prismic.io gives a registration date of 2013-06-05.", "robots.txt on prismic.io carries Content-Signal ai-train=no, search=yes, ai-input=yes." ], "score": 86 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/prismic.json", "live": { "slug": "prismic", "probe": { "target": "https://mcp.prismic.io/mcp", "method": "get", "lastAt": "2026-11-07T22:56:15.942754212Z", "lastOk": true, "lastStatus": 405, "lastMs": 407, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 365, "p95ms24h": 478, "samples24h": 244, "samples30d": 7335, "days": [ { "date": "2026-10-09", "probes": 169, "ok": 169 }, { "date": "2026-10-10", "probes": 247, "ok": 247 }, { "date": "2026-10-11", "probes": 247, "ok": 247 }, { "date": "2026-10-12", "probes": 247, "ok": 247 }, { "date": "2026-10-13", "probes": 248, "ok": 248 }, { "date": "2026-10-14", "probes": 249, "ok": 249 }, { "date": "2026-10-15", "probes": 253, "ok": 253 }, { "date": "2026-10-16", "probes": 252, "ok": 252 }, { "date": "2026-10-17", "probes": 253, "ok": 253 }, { "date": "2026-10-18", "probes": 256, "ok": 256 }, { "date": "2026-10-19", "probes": 255, "ok": 255 }, { "date": "2026-10-20", "probes": 252, "ok": 252 }, { "date": "2026-10-21", "probes": 253, "ok": 253 }, { "date": "2026-10-22", "probes": 253, "ok": 253 }, { "date": "2026-10-23", "probes": 248, "ok": 248 }, { "date": "2026-10-24", "probes": 251, "ok": 251 }, { "date": "2026-10-25", "probes": 250, "ok": 250 }, { "date": "2026-10-26", "probes": 252, "ok": 252 }, { "date": "2026-10-27", "probes": 249, "ok": 249 }, { "date": "2026-10-28", "probes": 250, "ok": 250 }, { "date": "2026-10-29", "probes": 249, "ok": 249 }, { "date": "2026-10-30", "probes": 249, "ok": 249 }, { "date": "2026-10-31", "probes": 251, "ok": 251 }, { "date": "2026-11-01", "probes": 249, "ok": 249 }, { "date": "2026-11-02", "probes": 250, "ok": 250 }, { "date": "2026-11-03", "probes": 248, "ok": 248 }, { "date": "2026-11-04", "probes": 246, "ok": 246 }, { "date": "2026-11-05", "probes": 185, "ok": 185 }, { "date": "2026-11-06", "probes": 241, "ok": 241 }, { "date": "2026-11-07", "probes": 233, "ok": 233 } ] }, "vendorStatus": { "page": "https://status.prismic.io", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-07T22:57:41.6617379Z" }, "versions": [ { "registry": "github", "name": "prismicio/prismic-client", "version": "v7.23.0", "released": "2026-10-27", "seenAt": "2026-11-06T23:58:38.364187328Z" }, { "registry": "npm", "name": "@prismicio/client", "version": "7.23.0", "seenAt": "2026-11-06T23:58:34.146358679Z" }, { "registry": "npm", "name": "@prismicio/migrate", "version": "0.0.2", "seenAt": "2026-11-06T23:58:34.913480559Z" }, { "registry": "npm", "name": "prismic", "version": "1.27.0", "seenAt": "2026-11-06T23:58:36.354389462Z" } ], "githubStars": 177, "npmWeekly": 278089, "securityTxt": { "url": "https://prismic.io/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:01:06.181836896Z" }, "llmsTxt": { "url": "https://prismic.io/docs/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:33:41.730105793Z" }, "domain": { "domain": "prismic.io", "checkedAt": "2026-11-01T14:25:26.888744024Z" }, "pages": [ { "url": "https://prismic.io/updates", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:17:25.160556521Z", "changedAt": "2026-11-07T14:17:25.160556521Z", "fingerprint": "e19cb473bcb6" }, { "url": "https://prismic.io/pricing", "kind": "pricing", "status": 200, "checkedAt": "2026-11-07T14:17:23.127406869Z", "changedAt": "2026-11-05T13:02:00.256457296Z", "fingerprint": "3c9c96eaf314" }, { "url": "https://prismic.io/legal/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:17:18.784920726Z", "changedAt": "2026-11-05T13:01:55.756894121Z", "fingerprint": "ee5d4d66ddbe" }, { "url": "https://prismic.io/legal/terms-of-service", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:17:21.168851854Z", "changedAt": "2026-11-05T13:01:58.079913029Z", "fingerprint": "aa722e1c9ef9" } ], "mcpTools": { "url": "https://mcp.prismic.io/mcp", "checkedAt": "2026-11-07T01:46:55.213194872Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-11-07T01:46:55.213194872Z" }, "github": { "repo": "prismicio/prismic-client", "checkedAt": "2026-11-02T09:18:42.087734872Z", "stars": 177, "archived": false, "issuesEnabled": true, "pushedAt": "2026-10-30T17:15:57Z", "openIssues": 2, "openPRs": 0, "issuesOpened90d": 2, "issuesClosed90d": 1, "prsMerged90d": 34, "ci": { "branch": "master", "runs": 50, "success": 48, "failure": 2, "other": 0, "latest": "success", "latestAt": "2026-10-30T17:16:59Z" }, "replies": { "sampled": 25, "unanswered": 1, "medianDays": 0.9 } }, "updatedAt": "2026-11-07T22:57:41.6617379Z" } }, "edges": [ { "by": 63, "category": "maintenance", "leads": "prismic", "name": "Maintenance \u0026 community", "reasons": { "a": "@thebcms/client 2.0.3 was published on 16 March 2026, more than 180 days ago, and no dated API or MCP change was found. The terms of 30 July 2026 and the 3.0.0 server card show the product is current, so 5 of 30. No dated releases or changelog entries in the last 90 days (0). No public changelog; support by contact form (4 of 25). Not in the official MCP registry; one current JavaScript client (4 of 15). The client hasn't been released since March (3 of 10). 5+0+4+4+3 = 16.", "b": "`@prismicio/client` 7.23.0 was tagged on 27 October 2026 and CLI 1.24.0 on 15 October 2026 (30). Five client tags and 11 CLI tags from 4 August, and dated updates posts on 11 August and 15 October 2026 (20). A public updates page, a community forum and a help centre. The client repository shows 2 open issues. We did not sample reply times (11 of 15). Current official JavaScript SDKs and CLI, and listings in the Claude and ChatGPT directories. No entry in the official MCP registry (11). The client and CLI repositories have validate and publish workflows. We did not check that CI passes (7)." }, "scores": { "a": 16, "b": 79 } }, { "by": 58, "category": "reliability", "leads": "prismic", "name": "Reliability", "reasons": { "a": "Graded on BCMS Cloud with the hosted lines. No status page was found (0) and no incident history could be read (5). The terms refer to rate limits, but no numbers were found in the docs (0). No 429 or retry guidance was found (0). No SLA; Enterprise is by quote (0). The MCP server card says version 3.0.0 and nothing is labelled beta (10). 0+5+0+0+0+10 = 15.", "b": "Graded on the hosted MCP server and the Migration, Asset and Types APIs. Public status page at status.prismic.io with nine components, the Migration API among them and no MCP component (18 of 20). The feed lists one incident in the 90 days from 4 August, on 14 September 2026, labelled a full outage of the Content API and Editor. Its write-up gives 18 minutes (09:02 to 09:20 UTC) in which a majority of requests to the Content Delivery API's document search and GraphQL endpoints returned server errors. One product and a share of its requests, with the Migration API untouched, so it reads as partial and minor (20 of 30). Limits published for the Migration API and Asset API (one request a second) and the Content API (200 a second uncached). No MCP limit found (13). The docs say `@prismicio/client` retries rate-limited queries, and its source reads `retry-after` on 429. The write API references give no 429 guidance and no idempotency keys (7). The pricing page lists support and uptime SLAs on Enterprise with no figures (5). The Migration API went generally available on 4 August 2025 and the MCP docs carry no beta label (10)." }, "scores": { "a": 15, "b": 73 } }, { "by": 27, "category": "ergonomics", "leads": "prismic", "name": "Agent ergonomics", "reasons": { "a": "45 MCP tools, more than 30 (5). We added 3 because keys without schema permission hide the schema tools (8 of 25). No pagination or filter parameters were found in the docs read (6 of 20). Error guidance covers 403 and permission errors only (8 of 20). Annotations weren't readable; entry history and trash give a way back, and the docs say to list and confirm ids before deletes (6 of 20). One JavaScript client and a CLI (8 of 15). 8+6+8+6+8 = 36.", "b": "16 MCP tools (15), plus 4 because `search_documents` returns metadata only and `get_custom_type` returns an empty template to fill in (19 of 25). `limit`, `cursor` and `keyword` on the Asset API, and type, locale, status and tag filters on `search_documents` (16). Migration API errors return a list naming the property, the value and the fault. Status codes are not listed (12). No idempotency keys. Updates are PUT by `id`, MCP writes stay as drafts in a release, and we could not read the tool annotations (8). `create_document` fills missing fields with model defaults. The official SDK is JavaScript only (8)." }, "scores": { "a": 36, "b": 63 } }, { "by": 21, "category": "transparency", "leads": "prismic", "name": "Transparency \u0026 trust", "reasons": { "a": "A closed service with terms of 30 July 2026; the old open-source edition is MIT but unmaintained (15 of 30). Terms and privacy policy of 30 July 2026 agree, name providers such as Stripe and OAuth sign-in, and describe retention in general terms with backups rotating out (18 of 30). The open-source repository's end of maintenance is dated; no API deprecation policy (5 of 20). Providers are named by purpose without data locations (10 of 20). 15+18+5+10 = 48.", "b": "Closed service with a published Master Services Agreement, and Apache-2.0 clients (17). Privacy policy of 8 April 2026 with an MCP section, a self-service DPA and deletion of customer data 60 days after termination. The security page of 11 June 2026 still says a DPA is not yet online, the privacy policy still cites Privacy Shield, and the AI terms allow use of AI feature data for training (18 of 30). No written deprecation policy. Notices are dated but brief, such as the old MCP server and Slice Machine, and the terms promise an effort at 7 days' notice of updates (8). A sub-processor list published as a PDF and hosting stated as AWS us-east-1 (16)." }, "scores": { "a": 52, "b": 73 } }, { "by": 11, "category": "security", "leads": "prismic", "name": "Security \u0026 auth", "reasons": { "a": "Keys are scoped per template and media and can be revoked and rotated (25), less 10 because the MCP key is accepted only as `?mcpKey=` in the URL and REST examples pass `apiKey` the same way (15 of 30). Scoped keys, schema tools gated by key, and scoped delete permission; no approval step (12 of 20). Entries hold text written by people and no prompt-injection guidance was found (3 of 15). Entry history and log history (2 days on Hobby, 30 on Pro) let the operator see what an agent changed (9 of 15). No security.txt, disclosure policy or certification was found (0). 15+12+3+9+0 = 39.", "b": "The MCP server uses OAuth with PKCE S256, dynamic client registration, refresh tokens and revocation, with no scopes, and works with the signed-in person's role. Write tokens are revocable, repository-wide and unscoped (20 of 30). MCP has no delete tool, stages writes as drafts and publishes only for a Publisher on request, and an Administrator can switch it off per repository. Writer and Publisher roles need the Medium plan, and write tokens have no read-only form (13). The docs recommend human review before publishing. No guidance on treating stored content as untrusted was found, and `upload_asset` fetches a URL the agent supplies (5). Revision history on every plan and a version list in MCP. No audit log for API or MCP calls found (6). A security page with yearly penetration tests, external audits and a contact address. No security.txt, bug bounty, SOC 2 or ISO 27001 report for Prismic found (6)." }, "scores": { "a": 39, "b": 50 } }, { "by": 10, "category": "schema", "leads": "prismic", "name": "Schema \u0026 documentation", "reasons": { "a": "The docs link an OpenAPI reference at app.thebcms.com/open-api-docs, but that host's robots.txt disallows every path, so it wasn't read. The MCP tool schemas need a session (10 of 25). llms.txt, docs llms.txt, llms-full.txt, Markdown pages and a public SKILL.md (10). llms.txt says when to use BCMS and when not to, and the MCP page gives each tool group's purpose (12 of 20). Input typing couldn't be checked (5 of 15). Curl and JavaScript examples, and troubleshooting for 403 and permission errors (7 of 15). API v3 paths and a 3.0.0 server card, with no changelog found (6 of 15). 10+10+12+5+7+6 = 50.", "b": "No OpenAPI file was found for the Migration, Asset or Types APIs. The Types API links a Postman collection, the client ships TypeScript types, and the MCP tool schemas need a signed-in session we did not have (10 of 25). A root llms.txt, a docs llms.txt and a Markdown copy of every docs page at the same URL plus `.md` (10). The MCP page gives each tool's purpose and says which to call first, and the docs say when to prefer the packages or an agent over raw HTTP (14). The Migration API reference types every field with formats and allowed values, while `data` follows the repository's own types and Types API models are free-form JSON (9). One full request body, two error examples and Types API status codes. The Asset API page promises error handling and documents none (9). No version in the write API paths. A dated updates page, the latest post 15 October 2026, plus changelogs for the client and CLI (8)." }, "scores": { "a": 50, "b": 60 } } ], "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Becomes tech, LLC", "b": "Prismic.io Inc.", "name": "Vendor" }, { "a": "https://app.thebcms.com/api/v3/mcp", "b": "https://mcp.prismic.io/mcp", "name": "Hosted endpoint" }, { "a": "HTTP, Streamable HTTP", "b": "HTTP, Streamable HTTP", "name": "Transports" }, { "a": "API key", "b": "OAuth or key", "name": "Auth" }, { "a": "Paid", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "none", "b": "Proprietary service under Prismic's Master Services Agreement. The JavaScript clients, the CLI and the agent skill on GitHub are Apache-2.0", "name": "Licence" }, { "a": "45", "b": "16", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-03-16", "b": "2026-10-27", "name": "Last release" }, { "a": "2026-07-30", "b": "2025-12-01", "name": "Terms last updated" }, { "a": "2026-07-30", "b": "2026-04-08", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "yes", "b": "yes", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "yes", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "396 npm/wk", "b": "177 stars, 237k npm/wk", "name": "Popularity" }, { "a": "none", "b": "3/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "Prismic scores 56 (C) on agent readiness against BCMS's 33.5 (F), and leads in every scored category.", "question": "Which is better for AI agents, BCMS or Prismic?" }, { "answer": "BCMS needs an API key. Prismic takes an API key or an OAuth sign-in.", "question": "Do BCMS and Prismic need an API key?" }, { "answer": "Yes. BCMS has a hosted endpoint at https://app.thebcms.com/api/v3/mcp and Prismic at https://mcp.prismic.io/mcp.", "question": "Can an agent call BCMS and Prismic without installing anything?" } ], "goodFor": [ { "aheadOn": null, "also": [ "No incidents deducted, where Prismic loses 5 points for them" ], "goodFor": "Small sites and agencies that want a cheap hosted CMS an agent can edit.", "slug": "bcms", "watchFor": "The MCP key is accepted only as a URL query parameter" }, { "aheadOn": [ "Reliability, 73 against 15", "Schema \u0026 documentation, 60 against 50", "Agent ergonomics, 63 against 36", "Security \u0026 auth, 50 against 39", "Payments \u0026 pricing, 35 against 30", "Maintenance \u0026 community, 79 against 16", "Transparency \u0026 trust, 73 against 52" ], "also": null, "goodFor": "Teams already on Prismic who want an agent to bulk-edit, localise or migrate pages into releases for human review.", "slug": "prismic", "watchFor": "No OpenAPI file for the Migration, Asset or Types APIs in the reviewed documentation. The Types API links a Postman collection" } ], "history": { "bcms": null, "prismic": [ { "causes": [ "evidence", "correction" ], "date": "2026-11-02", "delta": -6, "from": 62, "fromGrade": "B", "to": 56, "toGrade": "C" }, { "causes": [ "method" ], "date": "2026-10-27", "delta": 0.1, "from": 61.9, "fromGrade": "C", "to": 62, "toGrade": "B" } ] }, "job": { "capability": "cms.content", "name": "Content management" }, "others": [ { "json": "https://www.anchorterminal.com/compare/bcms-vs-buttercms.json", "title": "BCMS vs ButterCMS", "url": "https://www.anchorterminal.com/compare/bcms-vs-buttercms" }, { "json": "https://www.anchorterminal.com/compare/bcms-vs-contentstack.json", "title": "BCMS vs Contentstack", "url": "https://www.anchorterminal.com/compare/bcms-vs-contentstack" }, { "json": "https://www.anchorterminal.com/compare/bcms-vs-cosmic.json", "title": "BCMS vs Cosmic", "url": "https://www.anchorterminal.com/compare/bcms-vs-cosmic" }, { "json": "https://www.anchorterminal.com/compare/bcms-vs-datocms.json", "title": "BCMS vs DatoCMS", "url": "https://www.anchorterminal.com/compare/bcms-vs-datocms" }, { "json": "https://www.anchorterminal.com/compare/bcms-vs-directus.json", "title": "BCMS vs Directus", "url": "https://www.anchorterminal.com/compare/bcms-vs-directus" }, { "json": "https://www.anchorterminal.com/compare/bcms-vs-dotcms.json", "title": "BCMS vs dotCMS", "url": "https://www.anchorterminal.com/compare/bcms-vs-dotcms" }, { "json": "https://www.anchorterminal.com/compare/bcms-vs-ghost.json", "title": "BCMS vs Ghost", "url": "https://www.anchorterminal.com/compare/bcms-vs-ghost" }, { "json": "https://www.anchorterminal.com/compare/bcms-vs-hygraph.json", "title": "BCMS vs Hygraph", "url": "https://www.anchorterminal.com/compare/bcms-vs-hygraph" }, { "json": "https://www.anchorterminal.com/compare/bcms-vs-kontent-ai.json", "title": "BCMS vs Kontent.ai", "url": "https://www.anchorterminal.com/compare/bcms-vs-kontent-ai" }, { "json": "https://www.anchorterminal.com/compare/bcms-vs-payload.json", "title": "BCMS vs Payload", "url": "https://www.anchorterminal.com/compare/bcms-vs-payload" }, { "json": "https://www.anchorterminal.com/compare/bcms-vs-sanity.json", "title": "BCMS vs Sanity", "url": "https://www.anchorterminal.com/compare/bcms-vs-sanity" }, { "json": "https://www.anchorterminal.com/compare/bcms-vs-storyblok.json", "title": "BCMS vs Storyblok", "url": "https://www.anchorterminal.com/compare/bcms-vs-storyblok" }, { "json": "https://www.anchorterminal.com/compare/bcms-vs-strapi.json", "title": "BCMS vs Strapi", "url": "https://www.anchorterminal.com/compare/bcms-vs-strapi" }, { "json": "https://www.anchorterminal.com/compare/bcms-vs-webflow.json", "title": "BCMS vs Webflow", "url": "https://www.anchorterminal.com/compare/bcms-vs-webflow" }, { "json": "https://www.anchorterminal.com/compare/bcms-vs-wordpress.json", "title": "BCMS vs WordPress", "url": "https://www.anchorterminal.com/compare/bcms-vs-wordpress" }, { "json": "https://www.anchorterminal.com/compare/buttercms-vs-prismic.json", "title": "ButterCMS vs Prismic", "url": "https://www.anchorterminal.com/compare/buttercms-vs-prismic" }, { "json": "https://www.anchorterminal.com/compare/contentstack-vs-prismic.json", "title": "Contentstack vs Prismic", "url": "https://www.anchorterminal.com/compare/contentstack-vs-prismic" }, { "json": "https://www.anchorterminal.com/compare/cosmic-vs-prismic.json", "title": "Cosmic vs Prismic", "url": "https://www.anchorterminal.com/compare/cosmic-vs-prismic" }, { "json": "https://www.anchorterminal.com/compare/datocms-vs-prismic.json", "title": "DatoCMS vs Prismic", "url": "https://www.anchorterminal.com/compare/datocms-vs-prismic" }, { "json": "https://www.anchorterminal.com/compare/directus-vs-prismic.json", "title": "Directus vs Prismic", "url": "https://www.anchorterminal.com/compare/directus-vs-prismic" }, { "json": "https://www.anchorterminal.com/compare/dotcms-vs-prismic.json", "title": "dotCMS vs Prismic", "url": "https://www.anchorterminal.com/compare/dotcms-vs-prismic" }, { "json": "https://www.anchorterminal.com/compare/ghost-vs-prismic.json", "title": "Ghost vs Prismic", "url": "https://www.anchorterminal.com/compare/ghost-vs-prismic" }, { "json": "https://www.anchorterminal.com/compare/hygraph-vs-prismic.json", "title": "Hygraph vs Prismic", "url": "https://www.anchorterminal.com/compare/hygraph-vs-prismic" }, { "json": "https://www.anchorterminal.com/compare/kontent-ai-vs-prismic.json", "title": "Kontent.ai vs Prismic", "url": "https://www.anchorterminal.com/compare/kontent-ai-vs-prismic" }, { "json": "https://www.anchorterminal.com/compare/payload-vs-prismic.json", "title": "Payload vs Prismic", "url": "https://www.anchorterminal.com/compare/payload-vs-prismic" }, { "json": "https://www.anchorterminal.com/compare/prismic-vs-sanity.json", "title": "Prismic vs Sanity", "url": "https://www.anchorterminal.com/compare/prismic-vs-sanity" }, { "json": "https://www.anchorterminal.com/compare/prismic-vs-storyblok.json", "title": "Prismic vs Storyblok", "url": "https://www.anchorterminal.com/compare/prismic-vs-storyblok" }, { "json": "https://www.anchorterminal.com/compare/prismic-vs-strapi.json", "title": "Prismic vs Strapi", "url": "https://www.anchorterminal.com/compare/prismic-vs-strapi" }, { "json": "https://www.anchorterminal.com/compare/prismic-vs-webflow.json", "title": "Prismic vs Webflow", "url": "https://www.anchorterminal.com/compare/prismic-vs-webflow" }, { "json": "https://www.anchorterminal.com/compare/prismic-vs-wordpress.json", "title": "Prismic vs WordPress", "url": "https://www.anchorterminal.com/compare/prismic-vs-wordpress" } ], "panel": null, "scores": [ { "bcms": 15, "by": 58, "edge": "prismic", "key": "reliability", "name": "Reliability", "prismic": 73, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "bcms": 50, "by": 10, "edge": "prismic", "key": "schema", "name": "Schema \u0026 documentation", "prismic": 60, "weight": 13 }, { "bcms": 36, "by": 27, "edge": "prismic", "key": "ergonomics", "name": "Agent ergonomics", "prismic": 63, "weight": 13 }, { "bcms": 39, "by": 11, "edge": "prismic", "key": "security", "name": "Security \u0026 auth", "prismic": 50, "weight": 14 }, { "bcms": 30, "by": 5, "edge": "prismic", "key": "payments", "name": "Payments \u0026 pricing", "prismic": 35, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "bcms": 16, "by": 63, "edge": "prismic", "key": "maintenance", "name": "Maintenance \u0026 community", "prismic": 79, "weight": 7 }, { "bcms": 52, "by": 21, "edge": "prismic", "key": "transparency", "name": "Transparency \u0026 trust", "prismic": 73, "weight": 7 } ], "summary": "Prismic scores 56 (C) on agent readiness against BCMS's 33.5 (F), and leads in every scored category. Both do content management.", "tasks": null, "tutorials": [], "verdicts": { "bcms": "BCMS gives agents 45 MCP tools over templates, entries, statuses, history and media, with keys scoped per template and agent guidance in llms.txt, from $5 a month. The MCP key can only travel in the URL, and no status page, rate limits, changelog or security policy were found.", "prismic": "The hosted MCP server stages every write as a draft in a release, cannot delete, and publishes only when a user with the Publisher role asks. Write tokens for the Migration, Asset and Types APIs have no scopes, no OpenAPI file was found, writes are limited to one request a second, and the acceptable use policy forbids access by scripts." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/bcms-vs-prismic", "json": "https://www.anchorterminal.com/compare/bcms-vs-prismic.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/bcms-vs-prismic.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/bcms-vs-prismic.min.md" }, "markdown": "Prismic scores 56 (C) on agent readiness against BCMS's 33.5 (F), and leads in every scored category. Both do content management.\n\n- BCMS: grade F, 33.5/100, rank #1405 of 1510. Markdown https://www.anchorterminal.com/tools/bcms.md · JSON https://www.anchorterminal.com/api/v1/tools/bcms.json\n- Prismic: grade C, 56/100, rank #848 of 1510. Markdown https://www.anchorterminal.com/tools/prismic.md · JSON https://www.anchorterminal.com/api/v1/tools/prismic.json\n- Best headless CMS and website publishing for AI agents: https://www.anchorterminal.com/best/cms/index.md\n- All 136 cms comparisons: https://www.anchorterminal.com/compare/cms/index.md\n\n## Which one, for what\n\n### BCMS (F)\n\nGood for: Small sites and agencies that want a cheap hosted CMS an agent can edit.\n\nAlso in its favour:\n- No incidents deducted, where Prismic loses 5 points for them\n\nWatch for: The MCP key is accepted only as a URL query parameter\n\n### Prismic (C)\n\nGood for: Teams already on Prismic who want an agent to bulk-edit, localise or migrate pages into releases for human review.\n\nAhead on:\n- Reliability, 73 against 15\n- Schema \u0026 documentation, 60 against 50\n- Agent ergonomics, 63 against 36\n- Security \u0026 auth, 50 against 39\n- Payments \u0026 pricing, 35 against 30\n- Maintenance \u0026 community, 79 against 16\n- Transparency \u0026 trust, 73 against 52\n\nWatch for: No OpenAPI file for the Migration, Asset or Types APIs in the reviewed documentation. The Types API links a Postman collection\n\n\n## Why the edge\n\n### Maintenance \u0026 community: Prismic +63\n\n- BCMS (16): @thebcms/client 2.0.3 was published on 16 March 2026, more than 180 days ago, and no dated API or MCP change was found. The terms of 30 July 2026 and the 3.0.0 server card show the product is current, so 5 of 30. No dated releases or changelog entries in the last 90 days (0). No public changelog; support by contact form (4 of 25). Not in the official MCP registry; one current JavaScript client (4 of 15). The client hasn't been released since March (3 of 10). 5+0+4+4+3 = 16.\n- Prismic (79): `@prismicio/client` 7.23.0 was tagged on 27 October 2026 and CLI 1.24.0 on 15 October 2026 (30). Five client tags and 11 CLI tags from 4 August, and dated updates posts on 11 August and 15 October 2026 (20). A public updates page, a community forum and a help centre. The client repository shows 2 open issues. We did not sample reply times (11 of 15). Current official JavaScript SDKs and CLI, and listings in the Claude and ChatGPT directories. No entry in the official MCP registry (11). The client and CLI repositories have validate and publish workflows. We did not check that CI passes (7).\n\n### Reliability: Prismic +58\n\n- BCMS (15): Graded on BCMS Cloud with the hosted lines. No status page was found (0) and no incident history could be read (5). The terms refer to rate limits, but no numbers were found in the docs (0). No 429 or retry guidance was found (0). No SLA; Enterprise is by quote (0). The MCP server card says version 3.0.0 and nothing is labelled beta (10). 0+5+0+0+0+10 = 15.\n- Prismic (73): Graded on the hosted MCP server and the Migration, Asset and Types APIs. Public status page at status.prismic.io with nine components, the Migration API among them and no MCP component (18 of 20). The feed lists one incident in the 90 days from 4 August, on 14 September 2026, labelled a full outage of the Content API and Editor. Its write-up gives 18 minutes (09:02 to 09:20 UTC) in which a majority of requests to the Content Delivery API's document search and GraphQL endpoints returned server errors. One product and a share of its requests, with the Migration API untouched, so it reads as partial and minor (20 of 30). Limits published for the Migration API and Asset API (one request a second) and the Content API (200 a second uncached). No MCP limit found (13). The docs say `@prismicio/client` retries rate-limited queries, and its source reads `retry-after` on 429. The write API references give no 429 guidance and no idempotency keys (7). The pricing page lists support and uptime SLAs on Enterprise with no figures (5). The Migration API went generally available on 4 August 2025 and the MCP docs carry no beta label (10).\n\n### Agent ergonomics: Prismic +27\n\n- BCMS (36): 45 MCP tools, more than 30 (5). We added 3 because keys without schema permission hide the schema tools (8 of 25). No pagination or filter parameters were found in the docs read (6 of 20). Error guidance covers 403 and permission errors only (8 of 20). Annotations weren't readable; entry history and trash give a way back, and the docs say to list and confirm ids before deletes (6 of 20). One JavaScript client and a CLI (8 of 15). 8+6+8+6+8 = 36.\n- Prismic (63): 16 MCP tools (15), plus 4 because `search_documents` returns metadata only and `get_custom_type` returns an empty template to fill in (19 of 25). `limit`, `cursor` and `keyword` on the Asset API, and type, locale, status and tag filters on `search_documents` (16). Migration API errors return a list naming the property, the value and the fault. Status codes are not listed (12). No idempotency keys. Updates are PUT by `id`, MCP writes stay as drafts in a release, and we could not read the tool annotations (8). `create_document` fills missing fields with model defaults. The official SDK is JavaScript only (8).\n\n### Transparency \u0026 trust: Prismic +21\n\n- BCMS (52): A closed service with terms of 30 July 2026; the old open-source edition is MIT but unmaintained (15 of 30). Terms and privacy policy of 30 July 2026 agree, name providers such as Stripe and OAuth sign-in, and describe retention in general terms with backups rotating out (18 of 30). The open-source repository's end of maintenance is dated; no API deprecation policy (5 of 20). Providers are named by purpose without data locations (10 of 20). 15+18+5+10 = 48.\n- Prismic (73): Closed service with a published Master Services Agreement, and Apache-2.0 clients (17). Privacy policy of 8 April 2026 with an MCP section, a self-service DPA and deletion of customer data 60 days after termination. The security page of 11 June 2026 still says a DPA is not yet online, the privacy policy still cites Privacy Shield, and the AI terms allow use of AI feature data for training (18 of 30). No written deprecation policy. Notices are dated but brief, such as the old MCP server and Slice Machine, and the terms promise an effort at 7 days' notice of updates (8). A sub-processor list published as a PDF and hosting stated as AWS us-east-1 (16).\n\n### Security \u0026 auth: Prismic +11\n\n- BCMS (39): Keys are scoped per template and media and can be revoked and rotated (25), less 10 because the MCP key is accepted only as `?mcpKey=` in the URL and REST examples pass `apiKey` the same way (15 of 30). Scoped keys, schema tools gated by key, and scoped delete permission; no approval step (12 of 20). Entries hold text written by people and no prompt-injection guidance was found (3 of 15). Entry history and log history (2 days on Hobby, 30 on Pro) let the operator see what an agent changed (9 of 15). No security.txt, disclosure policy or certification was found (0). 15+12+3+9+0 = 39.\n- Prismic (50): The MCP server uses OAuth with PKCE S256, dynamic client registration, refresh tokens and revocation, with no scopes, and works with the signed-in person's role. Write tokens are revocable, repository-wide and unscoped (20 of 30). MCP has no delete tool, stages writes as drafts and publishes only for a Publisher on request, and an Administrator can switch it off per repository. Writer and Publisher roles need the Medium plan, and write tokens have no read-only form (13). The docs recommend human review before publishing. No guidance on treating stored content as untrusted was found, and `upload_asset` fetches a URL the agent supplies (5). Revision history on every plan and a version list in MCP. No audit log for API or MCP calls found (6). A security page with yearly penetration tests, external audits and a contact address. No security.txt, bug bounty, SOC 2 or ISO 27001 report for Prismic found (6).\n\n### Schema \u0026 documentation: Prismic +10\n\n- BCMS (50): The docs link an OpenAPI reference at app.thebcms.com/open-api-docs, but that host's robots.txt disallows every path, so it wasn't read. The MCP tool schemas need a session (10 of 25). llms.txt, docs llms.txt, llms-full.txt, Markdown pages and a public SKILL.md (10). llms.txt says when to use BCMS and when not to, and the MCP page gives each tool group's purpose (12 of 20). Input typing couldn't be checked (5 of 15). Curl and JavaScript examples, and troubleshooting for 403 and permission errors (7 of 15). API v3 paths and a 3.0.0 server card, with no changelog found (6 of 15). 10+10+12+5+7+6 = 50.\n- Prismic (60): No OpenAPI file was found for the Migration, Asset or Types APIs. The Types API links a Postman collection, the client ships TypeScript types, and the MCP tool schemas need a signed-in session we did not have (10 of 25). A root llms.txt, a docs llms.txt and a Markdown copy of every docs page at the same URL plus `.md` (10). The MCP page gives each tool's purpose and says which to call first, and the docs say when to prefer the packages or an agent over raw HTTP (14). The Migration API reference types every field with formats and allowed values, while `data` follows the repository's own types and Types API models are free-form JSON (9). One full request body, two error examples and Types API status codes. The Asset API page promises error handling and documents none (9). No version in the write API paths. A dated updates page, the latest post 15 October 2026, plus changelogs for the client and CLI (8).\n\n## Score by category\n\n| Category | Weight | BCMS | Prismic | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 15 | 73 | Prismic +58 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 50 | 60 | Prismic +10 |\n| Agent ergonomics | 13% (16.2 this run) | 36 | 63 | Prismic +27 |\n| Security \u0026 auth | 14% (17.5 this run) | 39 | 50 | Prismic +11 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 30 | 35 | Prismic +5 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 16 | 79 | Prismic +63 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 52 | 73 | Prismic +21 |\n| Negative events | ≤15 | 0 | -5 | |\n| **Total** | | **33.5 · F** | **56 · C** | |\n\n## Facts side by side\n\n| Fact | BCMS | Prismic |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Becomes tech, LLC | Prismic.io Inc. |\n| Hosted endpoint | `https://app.thebcms.com/api/v3/mcp` | `https://mcp.prismic.io/mcp` |\n| Transports | HTTP, Streamable HTTP | HTTP, Streamable HTTP |\n| Auth | API key | OAuth or key |\n| Pricing | Paid | Freemium |\n| x402 | no | no |\n| Licence | none | Proprietary service under Prismic's Master Services Agreement. The JavaScript clients, the CLI and the agent skill on GitHub are Apache-2.0 |\n| Tools exposed | 45 | 16 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| Last release | 2026-03-16 | 2026-10-27 |\n| Terms last updated | 2026-07-30 | 2025-12-01 |\n| Privacy policy last updated | 2026-07-30 | 2026-04-08 |\n| Customer content may train models | not found in the text | not found in the text |\n| Terms restrict automated access | yes | yes |\n| Terms restrict benchmarking | not found in the text | yes |\n| Terms or service can change without notice | not found in the text | not found in the text |\n| Arbitration or class-action waiver | not found in the text | not found in the text |\n| Popularity | 396 npm/wk | 177 stars, 237k npm/wk |\n| Agent reviews | none | 3/5 (4) |\n\n## How the scores have moved\n\n### BCMS\n\nNo score change since it was listed.\n\n### Prismic\n\n- -6.0 on 2 November 2026 (B to C): new evidence, correction\n- +0.1 on 27 October 2026 (C to B): checklist\n\n## Verdicts\n\n**BCMS.** BCMS gives agents 45 MCP tools over templates, entries, statuses, history and media, with keys scoped per template and agent guidance in llms.txt, from $5 a month. The MCP key can only travel in the URL, and no status page, rate limits, changelog or security policy were found.\n\n**Prismic.** The hosted MCP server stages every write as a draft in a release, cannot delete, and publishes only when a user with the Publisher role asks. Write tokens for the Migration, Asset and Types APIs have no scopes, no OpenAPI file was found, writes are limited to one request a second, and the acceptable use policy forbids access by scripts.\n\n## Before you call either\n\n### BCMS\n\n1. Keep the MCP URL out of logs and shared config, since the key is inside it\n2. Call get-all-templates first and mutate only once you have template and entry ids\n3. Ask for a key scoped to the templates the task needs, without schema permission unless it changes the model\n4. List and confirm entry ids with the user before calling delete-entries\n5. Use the bcms-content CLI for scripted runs that need JSON output and exit codes\n\n### Prismic\n\n1. Ask a repository Administrator to activate Prismic MCP in Settings first. Activation can take several minutes, and each environment has its own setting\n2. Call `list_repositories`, then `get_custom_type` or `get_shared_slice` for the empty content template before `create_document`\n3. Create a release with `create_release` and write into it. Call `publish_release` only on an explicit request, because a publish cannot be undone through MCP\n4. For the Migration API send `Authorization: Bearer \u003cwrite token\u003e` and a `repository` header, one page a request, one request a second, and keep each returned `id` for later PUT calls\n5. Upload media first (`upload_asset` or POST to `https://asset-api.prismic.io/assets`) and reference the asset `id` in image and media link fields\n6. Running the `prismic` CLI as an agent, call `npx prismic task-id` once, then pass `--task-id` and `--user-intent` on every command or it exits. `PRISMIC_TELEMETRY_ENABLED=false` stops the Segment and Sentry reporting\n\n## Questions\n\n### Which is better for AI agents, BCMS or Prismic?\n\nPrismic scores 56 (C) on agent readiness against BCMS's 33.5 (F), and leads in every scored category.\n\n### Do BCMS and Prismic need an API key?\n\nBCMS needs an API key. Prismic takes an API key or an OAuth sign-in.\n\n### Can an agent call BCMS and Prismic without installing anything?\n\nYes. BCMS has a hosted endpoint at https://app.thebcms.com/api/v3/mcp and Prismic at https://mcp.prismic.io/mcp.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/bcms-vs-prismic.json, and with the fewest tokens: https://www.anchorterminal.com/compare/bcms-vs-prismic.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"bcms\", \"b\": \"prismic\"}`. From a terminal: `anchor compare bcms prismic`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/bcms.json and https://www.anchorterminal.com/api/v1/tools/prismic.json\n\n## Other comparisons with BCMS or Prismic\n\n- [BCMS vs ButterCMS](https://www.anchorterminal.com/compare/bcms-vs-buttercms.md)\n- [BCMS vs Contentstack](https://www.anchorterminal.com/compare/bcms-vs-contentstack.md)\n- [BCMS vs Cosmic](https://www.anchorterminal.com/compare/bcms-vs-cosmic.md)\n- [BCMS vs DatoCMS](https://www.anchorterminal.com/compare/bcms-vs-datocms.md)\n- [BCMS vs Directus](https://www.anchorterminal.com/compare/bcms-vs-directus.md)\n- [BCMS vs dotCMS](https://www.anchorterminal.com/compare/bcms-vs-dotcms.md)\n- [BCMS vs Ghost](https://www.anchorterminal.com/compare/bcms-vs-ghost.md)\n- [BCMS vs Hygraph](https://www.anchorterminal.com/compare/bcms-vs-hygraph.md)\n- [BCMS vs Kontent.ai](https://www.anchorterminal.com/compare/bcms-vs-kontent-ai.md)\n- [BCMS vs Payload](https://www.anchorterminal.com/compare/bcms-vs-payload.md)\n- [BCMS vs Sanity](https://www.anchorterminal.com/compare/bcms-vs-sanity.md)\n- [BCMS vs Storyblok](https://www.anchorterminal.com/compare/bcms-vs-storyblok.md)\n- [BCMS vs Strapi](https://www.anchorterminal.com/compare/bcms-vs-strapi.md)\n- [BCMS vs Webflow](https://www.anchorterminal.com/compare/bcms-vs-webflow.md)\n- [BCMS vs WordPress](https://www.anchorterminal.com/compare/bcms-vs-wordpress.md)\n- [ButterCMS vs Prismic](https://www.anchorterminal.com/compare/buttercms-vs-prismic.md)\n- [Contentstack vs Prismic](https://www.anchorterminal.com/compare/contentstack-vs-prismic.md)\n- [Cosmic vs Prismic](https://www.anchorterminal.com/compare/cosmic-vs-prismic.md)\n- [DatoCMS vs Prismic](https://www.anchorterminal.com/compare/datocms-vs-prismic.md)\n- [Directus vs Prismic](https://www.anchorterminal.com/compare/directus-vs-prismic.md)\n- [dotCMS vs Prismic](https://www.anchorterminal.com/compare/dotcms-vs-prismic.md)\n- [Ghost vs Prismic](https://www.anchorterminal.com/compare/ghost-vs-prismic.md)\n- [Hygraph vs Prismic](https://www.anchorterminal.com/compare/hygraph-vs-prismic.md)\n- [Kontent.ai vs Prismic](https://www.anchorterminal.com/compare/kontent-ai-vs-prismic.md)\n- [Payload vs Prismic](https://www.anchorterminal.com/compare/payload-vs-prismic.md)\n- [Prismic vs Sanity](https://www.anchorterminal.com/compare/prismic-vs-sanity.md)\n- [Prismic vs Storyblok](https://www.anchorterminal.com/compare/prismic-vs-storyblok.md)\n- [Prismic vs Strapi](https://www.anchorterminal.com/compare/prismic-vs-strapi.md)\n- [Prismic vs Webflow](https://www.anchorterminal.com/compare/prismic-vs-webflow.md)\n- [Prismic vs WordPress](https://www.anchorterminal.com/compare/prismic-vs-wordpress.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "BCMS vs Prismic", "url": "" } ], "description": "Prismic scores 56 (C) to BCMS's 33.5 (F) for content management. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "BCMS F 33.5", "Prismic C 56", "scores" ], "h1": "BCMS vs Prismic", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/bcms-vs-prismic", "published": "2026-10-01", "section": "tools", "title": "BCMS vs Prismic for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/bcms-vs-prismic" }, "tokens": { "markdown": 4550, "slim": 2630 }, "version": 1 }