{ "data": { "a": { "slug": "contentstack", "name": "Contentstack", "vendor": "Contentstack Inc.", "vendorUrl": "https://www.contentstack.com", "kind": "http-api", "category": "cms", "summary": "Contentstack is a hosted headless CMS. Its Content Management API reads and writes entries, assets, content types, locales, releases and publishing across seven regional endpoints, and an official local MCP server wraps the same API for agents.", "url": "https://www.anchorterminal.com/tools/contentstack", "markdownUrl": "https://www.anchorterminal.com/tools/contentstack.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/contentstack.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/contentstack.json", "repo": "https://github.com/contentstack/contentstack-openapi", "license": "Proprietary service under Contentstack's Master Agreement and Terms of Service. The OpenAPI files, the management SDKs, the CLI and the @contentstack/mcp package are MIT", "transports": [ "http", "stdio" ], "remoteUrl": "https://api.contentstack.io", "packages": [ { "registry": "npm", "name": "@contentstack/mcp" }, { "registry": "npm", "name": "@contentstack/management" }, { "registry": "pypi", "name": "contentstack-management" } ], "auth": "mixed", "authNotes": "Access is self-serve. Sign up, create a stack, then create a management token in the stack's settings (stack Owner or Admin only) and send it in the `authorization` header with the stack's `api_key`. Management tokens can be read-only or read-write, limited to branches, and given an expiry date. OAuth 2.0 apps are created in Developer Hub, with authorisation code and client credentials grants, scopes per module and action, 60-minute tokens and a refresh grant. A user authtoken from the login endpoint also works. The MCP server uses OAuth through `npx @contentstack/mcp --auth`, or a management token for content tools.", "pricing": "freemium", "pricingNotes": "Free plan at $0 a month with no card and no expiry (one stack, three users, 100,000 API calls a month, 1,000 entries), so an agent's owner can start without a contract. Build is $29 a month and Growth $299 a month with extra users at $25 each. Enterprise is priced by quote. Build mentions pay-as-you-go overages, and no overage rate is shown on the pricing page (https://www.contentstack.com/pricing, checked 2026-10-07).", "priceSummary": "$29 / mo", "where": "both", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the API docs, the OpenAPI file, the MCP package or the pricing page (checked 2026-10-07).", "endpoints": [] }, "toolCount": 206, "popularity": { "githubStars": null, "npmWeekly": 43992, "pypiWeekly": 1504, "asOf": "2026-10-07" }, "docsUrl": "https://www.contentstack.com/docs/developers/apis/content-management-api", "llmsTxt": "https://www.contentstack.com/llms.txt", "openapi": "https://github.com/contentstack/contentstack-openapi", "capabilities": [ "cms.content", "cms.publish", "cms.assets", "cms.localisation", "cms.schema" ], "tags": [ "hosted", "official", "mcp", "openapi", "llms-txt", "oauth", "free-tier", "no-card", "closed-source", "webhooks", "typescript", "python", "java", "dotnet", "status-page", "soc2", "sla" ], "lastRelease": "2026-09-22", "graded": true, "anchor": { "graded": true, "score": 64, "grade": "B", "agentReady": false, "rank": 264, "ranked": true, "rankOf": 629, "categoryRank": 6, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 67, "maintenance": 82, "payments": 30, "reliability": 71, "schema": 77, "security": 69, "transparency": 73 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-07" }, "negative": -3, "negativeNotes": [ "11 September 2026. The `limit` query parameter on delivery and management requests changed behaviour inside v3. `limit=0` used to return every matching record and now returns the default 100, so an integration relying on it gets a truncated result with a 200 status. The changelog entry is dated the same day and gives a migration path, and no earlier notice was found in the changelog feed. Deducted 3, the low end, because it was documented (https://www.contentstack.com/docs/changelog)." ], "verdict": "The Content Management API has a public OpenAPI file, OAuth scopes that separate read, write and publish, read-only management tokens and a stack audit log. A free plan needs no card. The MCP server loads 78 tools by default with no annotations or read-only switch, and the `limit=0` behaviour changed on 11 September 2026 without advance notice.", "bestFor": "Teams already on Contentstack, or starting on its free plan, who want an agent to draft, localise, release and publish structured content with scoped credentials and an audit trail.", "strengths": [ "OAuth 2.0 scopes separate read, write, publish and unpublish for entries and assets, with 60-minute tokens and a refresh grant", "Management tokens can be read-only, limited to named branches, given an expiry date and given their own per-second rate limits", "Free plan at $0 with no card and no expiry (one stack, three users, 100,000 API calls a month), launched 16 September 2026", "Public OpenAPI 3.0.0 file for the Content Management API (138 paths, 221 operations) and public JSON Schema for all 206 MCP tools at mcp.contentstack.com", "Stack audit log readable through /v3/audit-logs, and entry and asset version history through the API", "Uptime commitment of 99.50 or 99.95 per cent by plan, with service credits, published in the Services Description" ], "weaknesses": [ "The MCP server's default group loads 78 tools, including nine deletes, with no readOnlyHint or destructiveHint annotations and no read-only switch", "On 11 September 2026 `limit=0` stopped returning every record and now returns the default 100. The changelog entry is dated the same day", "The OpenAPI file documents only 200 responses and has no enums or component schemas. Request bodies are shown as examples", "No idempotency keys and no Retry-After header were found. The docs name only X-RateLimit-Limit and X-RateLimit-Remaining", "No security.txt and no bug bounty were found, and no deprecation policy with a notice period", "Nine incidents with customer impact on status.contentstack.com between 9 July and 7 October 2026, each in one or two regions" ], "agentNotes": [ "Pick the base URL for the stack's region first. North America on AWS is https://api.contentstack.io, and the other six regions use contentstack.com hosts", "Send `api_key` and `authorization` headers on every Content Management API call. Ask for a read-only management token when the task only reads", "Page with `limit` (100 at most), `skip` and `include_count=true`. `limit=0` no longer returns everything", "Stay under 10 reads and 10 writes a second per organisation, and one bulk request a second. Watch `X-RateLimit-Remaining` and back off on 429", "Start the MCP server with `--groups cma` only, and add `cma-extended` when the task needs audit logs or version history. Publishing and deleting need no confirmation" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 64 } ], "editorialScores": { "ergonomics": 67, "maintenance": 82, "payments": 30, "reliability": 71, "schema": 77, "security": 69, "transparency": 59 }, "provenanceScore": 87 }, "connect": { "install": "npx -y @contentstack/mcp", "http": "curl \"https://api.contentstack.io/v3/content_types\" \\\n -H \"api_key: $CONTENTSTACK_API_KEY\" -H \"authorization: $CONTENTSTACK_MANAGEMENT_TOKEN\"", "config": { "mcpServers": { "contentstack": { "args": [ "-y", "@contentstack/mcp" ], "command": "npx", "env": { "CONTENTSTACK_API_KEY": "\u003cYOUR_STACK_API_KEY\u003e", "GROUPS": "cma" } } } } }, "letme": { "capability": "https://letme.dev/cms.content", "tool": "https://letme.dev/contentstack" }, "area": "business", "unitPrices": [ { "item": "Build", "unit": "month", "usd": 29, "note": "3 users, 250,000 API calls a month" }, { "item": "Growth", "unit": "month", "usd": 299, "note": "10 users, 1M API calls a month" }, { "item": "Growth, each extra user", "unit": "seat-month", "usd": 25, "note": "beyond the 10 included" } ], "provenance": { "legalEntity": "Contentstack Inc.", "domain": "contentstack.com", "domainRegistered": "2011-10-29", "domainNote": "The AWS North America API is on api.contentstack.io. The other six regions and the MCP tool definitions are on contentstack.com hosts.", "endpointOnVendorDomain": true, "terms": "https://www.contentstack.com/legal/terms-of-service", "privacy": "https://www.contentstack.com/legal/privacy", "statusPage": "https://status.contentstack.com", "changelog": "https://www.contentstack.com/docs/changelog", "securityTxt": "none", "checked": "2026-10-07", "notes": [ "The Master Agreement (last updated 17 July 2026) names Contentstack Inc., a Delaware corporation at 1023 Springdale Rd., Bldg. 14A, Austin, TX 78721. The privacy policy is dated 30 June 2026.", "The online Terms of Service carry an effective date of August 2022. Paid subscriptions are governed by the Master Agreement and the Services Description (last updated 28 July 2026).", "www.contentstack.com/.well-known/security.txt and /security.txt both return 404. SECURITY.md in Contentstack's GitHub repositories sends reports to security@contentstack.com.", "RDAP for contentstack.com gives a registration date of 2011-10-29.", "The npm package @contentstack/mcp names github.com/contentstack/mcp as its repository. That repository asked for credentials when we tried to clone it, so it isn't public." ], "score": 87 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/contentstack.json", "live": { "slug": "contentstack", "probe": { "target": "https://api.contentstack.io", "method": "get", "lastAt": "2026-10-08T19:08:44.104830955Z", "lastOk": true, "lastStatus": 404, "lastMs": 575, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 540, "p95ms24h": 611, "samples24h": 42, "samples30d": 42, "days": [ { "date": "2026-10-08", "probes": 42, "ok": 42 } ] }, "vendorStatus": { "page": "https://status.contentstack.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-08T19:06:32.569528883Z" }, "versions": [ { "registry": "npm", "name": "@contentstack/management", "version": "1.31.2", "seenAt": "2026-10-08T16:06:51.377892172Z" }, { "registry": "npm", "name": "@contentstack/mcp", "version": "0.9.0", "seenAt": "2026-10-08T16:06:47.529272792Z" }, { "registry": "pypi", "name": "contentstack-management", "version": "1.11.2", "released": "2026-08-12", "seenAt": "2026-10-08T16:06:51.588548545Z" } ], "githubStars": 8, "npmWeekly": 380, "pypiWeekly": 1518, "securityTxt": { "url": "https://contentstack.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-08T15:38:44.745635489Z" }, "pages": [ { "url": "https://www.contentstack.com/docs/changelog", "kind": "changelog", "status": 404, "checkedAt": "2026-10-08T18:27:09.968657878Z", "changedAt": "0001-01-01T00:00:00Z" }, { "url": "https://www.contentstack.com/pricing", "kind": "pricing", "status": 200, "checkedAt": "2026-10-08T18:27:17.384677543Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "5dd89e546041" }, { "url": "https://www.contentstack.com/legal/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-08T18:27:12.602685857Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "999e1b8c6308" }, { "url": "https://www.contentstack.com/legal/terms-of-service", "kind": "terms", "status": 200, "checkedAt": "2026-10-08T18:27:16.022719984Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "a9cc98c875af" } ], "updatedAt": "2026-10-08T19:08:44.104830955Z" } }, "answer": "Webflow scores 69.4 (B) on agent readiness against Contentstack's 64 (B), and leads in 5 of 7 scored categories.", "b": { "slug": "webflow", "name": "Webflow", "vendor": "Webflow, Inc.", "vendorUrl": "https://webflow.com", "kind": "http-api", "category": "cms", "summary": "Webflow is a hosted website builder with a built-in CMS. Agents reach it through the Data API v2 (collections, items, assets, pages, locales, publishing) or the official hosted MCP server, which wraps that API in 34 tools.", "url": "https://www.anchorterminal.com/tools/webflow", "markdownUrl": "https://www.anchorterminal.com/tools/webflow.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/webflow.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/webflow.json", "repo": "https://github.com/webflow/openapi-spec", "license": "Proprietary service under Webflow's Terms of Service. The OpenAPI spec, the JavaScript and Python SDKs and the open-source MCP server on GitHub are MIT", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://api.webflow.com/v2", "packages": [ { "registry": "npm", "name": "webflow-api" }, { "registry": "pypi", "name": "webflow" }, { "registry": "npm", "name": "webflow-mcp-server" } ], "auth": "mixed", "authNotes": "Self-serve. The Data API takes a Bearer token, either a site token or an OAuth access token. A site administrator creates a site token under Apps \u0026 integrations and picks read and write scopes. Each site allows 5 tokens and a token expires after 365 days without use. An OAuth app is registered in a workspace with its scopes, and only apps listed on the Marketplace go through review. The MCP server uses browser OAuth with PKCE and dynamic client registration, where a site owner or admin picks the sites or the workspace. Custom code endpoints and workspace activity logs aren't open to site tokens.", "pricing": "freemium", "pricingNotes": "The Starter site plan is free and includes the CMS APIs at 60 requests a minute, 50 CMS items and the MCP server, so an agent can start without a contract. Basic is $15 a month billed yearly and has no CMS. Premium is $25 a month billed yearly with 20,000 CMS items and 120 requests a minute. Team is $2,500 a month on an annual contract and Enterprise is sold through sales. Prices are per site (https://webflow.com/pricing, checked 2026-10-08).", "priceSummary": "$15 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the Data API docs, the MCP server docs or the pricing page (checked 2026-10-08).", "endpoints": [] }, "toolCount": 34, "popularity": { "githubStars": null, "npmWeekly": 85160, "pypiWeekly": 121246, "asOf": "2026-10-08" }, "docsUrl": "https://developers.webflow.com/data/docs", "llmsTxt": "https://developers.webflow.com/llms.txt", "openapi": "https://raw.githubusercontent.com/webflow/openapi-spec/main/openapi/v2.yml", "registryName": "com.webflow/mcp", "capabilities": [ "cms.content", "cms.publish", "cms.assets", "cms.schema", "cms.localisation" ], "tags": [ "official", "hosted", "mcp", "oauth", "openapi", "llms-txt", "closed-source", "free-tier", "webhooks", "typescript", "python", "status-page", "soc2", "iso27001" ], "lastRelease": "2026-10-07", "graded": true, "anchor": { "graded": true, "score": 69.4, "grade": "B", "agentReady": false, "rank": 150, "ranked": true, "rankOf": 629, "categoryRank": 2, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 72, "maintenance": 80, "payments": 30, "reliability": 79, "schema": 87, "security": 74, "transparency": 81 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-08" }, "negative": -3, "negativeNotes": [ "7 October 2026. The Get Site Plan endpoint changed the `id` and `displayName` it returns for Starter sites and renamed some plans, in place. The changelog entry of the same date calls it a breaking change and no earlier notice was found. It is documented, so the deduction is small (https://developers.webflow.com/home/changelog/2026/10/7)." ], "verdict": "The Data API has a public OpenAPI 3.1 spec with 140 operations, scoped OAuth and site tokens, and CMS items that stay drafts until a separate publish call. The MCP server loads 34 multi-action tools and can't create new localised CMS items. The free plan holds 50 CMS items, and the activity log needs the $2,500 Team plan.", "bestFor": "Teams whose website already runs on Webflow and who want an agent to draft, update and publish CMS items, fix metadata or manage assets.", "strengths": [ "Public OpenAPI 3.1 spec for Data API v2 with 140 operations, MIT, last synced on 2 September 2026, plus llms.txt and a Markdown copy of every docs page", "OAuth and site tokens take read and write scope pairs per resource (cms, assets, pages, sites and others), and each site allows at most 5 tokens", "CMS items are created and updated as drafts. Publishing an item or the whole site is a separate call", "429 responses carry Retry-After, every response carries X-RateLimit-Remaining, and the JavaScript and Python SDKs back off automatically", "Hosted MCP server at mcp.webflow.com/mcp is listed in the official MCP registry as com.webflow/mcp and has its own component on the status page" ], "weaknesses": [ "The MCP server documents 34 tools (27 data, 3 Designer session, 4 utility), each with several actions, and a granted tool grants all its actions", "No idempotency keys on Data API writes in the reviewed documentation. Site publish is limited to one successful call a minute", "The MCP server can't create new localised CMS items. It reads and updates existing items in secondary locales", "The Starter plan allows 50 CMS items and 60 requests a minute. The site activity log that records agent changes is listed on Team ($2,500 a month) and Enterprise", "On 7 October 2026 Get Site Plan changed its `id` and `displayName` values in place, marked as breaking in the changelog entry of the same day" ], "agentNotes": [ "Send the token as `Authorization: Bearer` to https://api.webflow.com/v2. Ask for `cms:read` and `cms:write` only, plus `sites:write` if the task publishes", "Create or update items first, then call Publish Items or Publish Site. An item with `isDraft` true and a `lastPublished` date is live with unpublished changes", "Stay under 60 requests a minute on Starter and Basic and 120 on Premium, read X-RateLimit-Remaining, and wait for Retry-After on 429", "Page item lists with `limit` (maximum 100) and `offset`, and filter with `filter[\u003cfieldSlug\u003e][\u003coperator\u003e]`, up to 10 terms", "Upload an asset in two steps (create the asset with a file hash, then POST the bytes to the presigned URL). Write localised content with the item's `cmsLocaleId`" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 69.4 } ], "editorialScores": { "ergonomics": 72, "maintenance": 80, "payments": 30, "reliability": 79, "schema": 87, "security": 74, "transparency": 65 }, "provenanceScore": 97 }, "connect": { "install": "npm install webflow-api", "http": "curl --request GET \\\n --url https://api.webflow.com/v2/sites \\\n --header 'accept: application/json' \\\n --header 'authorization: Bearer YOUR_API_TOKEN'", "claudeCode": "claude mcp add --transport http webflow https://mcp.webflow.com/mcp" }, "letme": { "capability": "https://letme.dev/cms.content", "tool": "https://letme.dev/webflow" }, "area": "business", "unitPrices": [ { "item": "Basic site plan", "unit": "month", "usd": 15, "note": "billed yearly, per site, no CMS" }, { "item": "Premium site plan", "unit": "month", "usd": 25, "note": "billed yearly, per site, 20,000 CMS items and 120 requests a minute" }, { "item": "Team platform plan", "unit": "month", "usd": 2500, "note": "annual contract, 5 full and 5 limited seats included" } ], "provenance": { "legalEntity": "Webflow, Inc.", "domain": "webflow.com", "domainRegistered": "2003-03-31", "endpointOnVendorDomain": true, "terms": "https://webflow.com/legal/terms", "privacy": "https://webflow.com/legal/privacy", "statusPage": "https://status.webflow.com", "changelog": "https://developers.webflow.com/home/changelog", "securityTxt": "valid", "checked": "2026-10-08", "notes": [ "The Terms of Service name Webflow, Inc., a Delaware corporation at 398 11th Street, Floor 2, San Francisco, CA 94103, and are governed by California law.", "The Terms of Service (effective 15 November 2023) govern the platform and incorporate the Developer Terms of Service at https://webflow.com/legal/developer-terms-of-service, which cover API use and rate limits.", "The privacy policy is effective 17 March 2025. The DPA is effective 15 November 2023 and the sub-processor list was updated on 9 July 2026.", "The Data API answers at api.webflow.com and the MCP server at mcp.webflow.com.", "webflow.com/.well-known/security.txt points to a Bugcrowd disclosure programme and expires on 31 December 2026.", "RDAP for webflow.com gives a registration date of 2003-03-31.", "status.webflow.com runs on Statuspage with components for the Data API and the MCP server." ], "score": 97 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/webflow.json", "live": { "slug": "webflow", "probe": { "target": "https://api.webflow.com/v2", "method": "get", "lastAt": "2026-10-08T19:09:02.226742748Z", "lastOk": true, "lastStatus": 404, "lastMs": 324, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 268, "p95ms24h": 617, "samples24h": 19, "samples30d": 19, "days": [ { "date": "2026-10-08", "probes": 19, "ok": 19 } ] }, "vendorStatus": { "page": "https://status.webflow.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-08T19:07:04.499232802Z" }, "pages": [ { "url": "https://developers.webflow.com/home/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-10-08T18:18:03.444775017Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "26398a0d385c" }, { "url": "https://webflow.com/pricing", "kind": "pricing", "status": 200, "checkedAt": "2026-10-08T18:25:48.086194416Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "1895a791460c" }, { "url": "https://webflow.com/legal/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-08T18:25:43.849393456Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "1dc949e66fd3" }, { "url": "https://webflow.com/legal/terms", "kind": "terms", "status": 200, "checkedAt": "2026-10-08T18:25:46.083572378Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "fab4ea21138a" } ], "updatedAt": "2026-10-08T19:09:02.226742748Z" } }, "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Contentstack Inc.", "b": "Webflow, Inc.", "name": "Vendor" }, { "a": "https://api.contentstack.io", "b": "https://api.webflow.com/v2", "name": "Hosted endpoint" }, { "a": "HTTP, stdio", "b": "HTTP, Streamable HTTP", "name": "Transports" }, { "a": "OAuth or key", "b": "OAuth or key", "name": "Auth" }, { "a": "Freemium", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Proprietary service under Contentstack's Master Agreement and Terms of Service. The OpenAPI files, the management SDKs, the CLI and the @contentstack/mcp package are MIT", "b": "Proprietary service under Webflow's Terms of Service. The OpenAPI spec, the JavaScript and Python SDKs and the open-source MCP server on GitHub are MIT", "name": "Licence" }, { "a": "206", "b": "34", "name": "Tools exposed" }, { "a": "yes", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "not listed", "b": "com.webflow/mcp", "name": "MCP registry" }, { "a": "2026-09-22", "b": "2026-10-07", "name": "Last release" }, { "a": "2022-08-01", "b": "2023-11-15", "name": "Terms last updated" }, { "a": "2026-06-30", "b": "2025-03-17", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "yes", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "yes", "name": "Terms or service can change without notice" }, { "a": "yes", "b": "yes", "name": "Arbitration or class-action waiver" }, { "a": "44k npm/wk, 1.5k PyPI/wk", "b": "85k npm/wk, 121k PyPI/wk", "name": "Popularity" } ], "faq": [ { "answer": "Webflow scores 69.4 (B) on agent readiness against Contentstack's 64 (B), and leads in 5 of 7 scored categories.", "question": "Which is better for AI agents, Contentstack or Webflow?" }, { "answer": "Both take an API key or an OAuth sign-in.", "question": "Do Contentstack and Webflow need an API key?" }, { "answer": "Yes. Contentstack has a hosted endpoint at https://api.contentstack.io and Webflow at https://api.webflow.com/v2.", "question": "Can an agent call Contentstack and Webflow without installing anything?" } ], "goodFor": [ { "aheadOn": null, "also": [ "Runs on your own machine", "Free to start without a card" ], "goodFor": "Teams already on Contentstack, or starting on its free plan, who want an agent to draft, localise, release and publish structured content with scoped credentials and an audit trail.", "slug": "contentstack", "watchFor": "The MCP server's default group loads 78 tools, including nine deletes, with no readOnlyHint or destructiveHint annotations and no read-only switch" }, { "aheadOn": [ "Reliability, 79 against 71", "Schema \u0026 documentation, 87 against 77", "Agent ergonomics, 72 against 67", "Security \u0026 auth, 74 against 69", "Transparency \u0026 trust, 81 against 73" ], "also": null, "goodFor": "Teams whose website already runs on Webflow and who want an agent to draft, update and publish CMS items, fix metadata or manage assets.", "slug": "webflow", "watchFor": "The MCP server documents 34 tools (27 data, 3 Designer session, 4 utility), each with several actions, and a granted tool grants all its actions" } ], "job": { "capability": "cms.content", "name": "Cms content" }, "others": [ { "json": "https://www.anchorterminal.com/compare/contentstack-vs-ghost.json", "title": "Contentstack vs Ghost", "url": "https://www.anchorterminal.com/compare/contentstack-vs-ghost" }, { "json": "https://www.anchorterminal.com/compare/contentstack-vs-sanity.json", "title": "Contentstack vs Sanity", "url": "https://www.anchorterminal.com/compare/contentstack-vs-sanity" }, { "json": "https://www.anchorterminal.com/compare/contentstack-vs-storyblok.json", "title": "Contentstack vs Storyblok", "url": "https://www.anchorterminal.com/compare/contentstack-vs-storyblok" }, { "json": "https://www.anchorterminal.com/compare/contentstack-vs-strapi.json", "title": "Contentstack vs Strapi", "url": "https://www.anchorterminal.com/compare/contentstack-vs-strapi" }, { "json": "https://www.anchorterminal.com/compare/contentstack-vs-wordpress.json", "title": "Contentstack vs WordPress", "url": "https://www.anchorterminal.com/compare/contentstack-vs-wordpress" }, { "json": "https://www.anchorterminal.com/compare/ghost-vs-webflow.json", "title": "Ghost vs Webflow", "url": "https://www.anchorterminal.com/compare/ghost-vs-webflow" }, { "json": "https://www.anchorterminal.com/compare/sanity-vs-webflow.json", "title": "Sanity vs Webflow", "url": "https://www.anchorterminal.com/compare/sanity-vs-webflow" }, { "json": "https://www.anchorterminal.com/compare/storyblok-vs-webflow.json", "title": "Storyblok vs Webflow", "url": "https://www.anchorterminal.com/compare/storyblok-vs-webflow" }, { "json": "https://www.anchorterminal.com/compare/strapi-vs-webflow.json", "title": "Strapi vs Webflow", "url": "https://www.anchorterminal.com/compare/strapi-vs-webflow" }, { "json": "https://www.anchorterminal.com/compare/webflow-vs-wordpress.json", "title": "Webflow vs WordPress", "url": "https://www.anchorterminal.com/compare/webflow-vs-wordpress" } ], "scores": [ { "by": 8, "contentstack": 71, "edge": "webflow", "key": "reliability", "name": "Reliability", "webflow": 79, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 10, "contentstack": 77, "edge": "webflow", "key": "schema", "name": "Schema \u0026 documentation", "webflow": 87, "weight": 13 }, { "by": 5, "contentstack": 67, "edge": "webflow", "key": "ergonomics", "name": "Agent ergonomics", "webflow": 72, "weight": 13 }, { "by": 5, "contentstack": 69, "edge": "webflow", "key": "security", "name": "Security \u0026 auth", "webflow": 74, "weight": 14 }, { "by": 0, "contentstack": 30, "edge": "", "key": "payments", "name": "Payments \u0026 pricing", "webflow": 30, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 2, "contentstack": 82, "edge": "contentstack", "key": "maintenance", "name": "Maintenance \u0026 community", "webflow": 80, "weight": 7 }, { "by": 8, "contentstack": 73, "edge": "webflow", "key": "transparency", "name": "Transparency \u0026 trust", "webflow": 81, "weight": 7 } ], "summary": "Webflow scores 69.4 (B) on agent readiness against Contentstack's 64 (B), and leads in 5 of 7 scored categories. Both do cms content.", "verdicts": { "contentstack": "The Content Management API has a public OpenAPI file, OAuth scopes that separate read, write and publish, read-only management tokens and a stack audit log. A free plan needs no card. The MCP server loads 78 tools by default with no annotations or read-only switch, and the `limit=0` behaviour changed on 11 September 2026 without advance notice.", "webflow": "The Data API has a public OpenAPI 3.1 spec with 140 operations, scoped OAuth and site tokens, and CMS items that stay drafts until a separate publish call. The MCP server loads 34 multi-action tools and can't create new localised CMS items. The free plan holds 50 CMS items, and the activity log needs the $2,500 Team plan." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/contentstack-vs-webflow", "json": "https://www.anchorterminal.com/compare/contentstack-vs-webflow.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/contentstack-vs-webflow.md", "slim": "https://www.anchorterminal.com/compare/contentstack-vs-webflow.min.md" }, "markdown": "Webflow scores 69.4 (B) on agent readiness against Contentstack's 64 (B), and leads in 5 of 7 scored categories. Both do cms content.\n\n- Contentstack: grade B, 64/100, rank #264 of 629. Markdown https://www.anchorterminal.com/tools/contentstack.md · JSON https://www.anchorterminal.com/api/v1/tools/contentstack.json\n- Webflow: grade B, 69.4/100, rank #150 of 629. Markdown https://www.anchorterminal.com/tools/webflow.md · JSON https://www.anchorterminal.com/api/v1/tools/webflow.json\n\n## Which one, for what\n\n### Contentstack (B)\n\nGood for: Teams already on Contentstack, or starting on its free plan, who want an agent to draft, localise, release and publish structured content with scoped credentials and an audit trail.\n\nAlso in its favour:\n- Runs on your own machine\n- Free to start without a card\n\nWatch for: The MCP server's default group loads 78 tools, including nine deletes, with no readOnlyHint or destructiveHint annotations and no read-only switch\n\n### Webflow (B)\n\nGood for: Teams whose website already runs on Webflow and who want an agent to draft, update and publish CMS items, fix metadata or manage assets.\n\nAhead on:\n- Reliability, 79 against 71\n- Schema \u0026 documentation, 87 against 77\n- Agent ergonomics, 72 against 67\n- Security \u0026 auth, 74 against 69\n- Transparency \u0026 trust, 81 against 73\n\nWatch for: The MCP server documents 34 tools (27 data, 3 Designer session, 4 utility), each with several actions, and a granted tool grants all its actions\n\n\n## Score by category\n\n| Category | Weight | Contentstack | Webflow | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 71 | 79 | Webflow +8 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 77 | 87 | Webflow +10 |\n| Agent ergonomics | 13% (16.2 this run) | 67 | 72 | Webflow +5 |\n| Security \u0026 auth | 14% (17.5 this run) | 69 | 74 | Webflow +5 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 30 | 30 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 82 | 80 | Contentstack +2 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 73 | 81 | Webflow +8 |\n| Negative events | ≤15 | -3 | -3 | |\n| **Total** | | **64 · B** | **69.4 · B** | |\n\n## Facts side by side\n\n| Fact | Contentstack | Webflow |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Contentstack Inc. | Webflow, Inc. |\n| Hosted endpoint | `https://api.contentstack.io` | `https://api.webflow.com/v2` |\n| Transports | HTTP, stdio | HTTP, Streamable HTTP |\n| Auth | OAuth or key | OAuth or key |\n| Pricing | Freemium | Freemium |\n| x402 | no | no |\n| Licence | Proprietary service under Contentstack's Master Agreement and Terms of Service. The OpenAPI files, the management SDKs, the CLI and the @contentstack/mcp package are MIT | Proprietary service under Webflow's Terms of Service. The OpenAPI spec, the JavaScript and Python SDKs and the open-source MCP server on GitHub are MIT |\n| Tools exposed | 206 | 34 |\n| Read-only variant documented | yes | no |\n| llms.txt | yes | yes |\n| MCP registry | not listed | `com.webflow/mcp` |\n| Last release | 2026-09-22 | 2026-10-07 |\n| Terms last updated | 2022-08-01 | 2023-11-15 |\n| Privacy policy last updated | 2026-06-30 | 2025-03-17 |\n| Customer content may train models | not found in the text | not found in the text |\n| Terms restrict automated access | not found in the text | not found in the text |\n| Terms restrict benchmarking | yes | not found in the text |\n| Terms or service can change without notice | not found in the text | yes |\n| Arbitration or class-action waiver | yes | yes |\n| Popularity | 44k npm/wk, 1.5k PyPI/wk | 85k npm/wk, 121k PyPI/wk |\n\n## Verdicts\n\n**Contentstack.** The Content Management API has a public OpenAPI file, OAuth scopes that separate read, write and publish, read-only management tokens and a stack audit log. A free plan needs no card. The MCP server loads 78 tools by default with no annotations or read-only switch, and the `limit=0` behaviour changed on 11 September 2026 without advance notice.\n\n**Webflow.** The Data API has a public OpenAPI 3.1 spec with 140 operations, scoped OAuth and site tokens, and CMS items that stay drafts until a separate publish call. The MCP server loads 34 multi-action tools and can't create new localised CMS items. The free plan holds 50 CMS items, and the activity log needs the $2,500 Team plan.\n\n## Before you call either\n\n### Contentstack\n\n1. Pick the base URL for the stack's region first. North America on AWS is https://api.contentstack.io, and the other six regions use contentstack.com hosts\n2. Send `api_key` and `authorization` headers on every Content Management API call. Ask for a read-only management token when the task only reads\n3. Page with `limit` (100 at most), `skip` and `include_count=true`. `limit=0` no longer returns everything\n4. Stay under 10 reads and 10 writes a second per organisation, and one bulk request a second. Watch `X-RateLimit-Remaining` and back off on 429\n5. Start the MCP server with `--groups cma` only, and add `cma-extended` when the task needs audit logs or version history. Publishing and deleting need no confirmation\n\n### Webflow\n\n1. Send the token as `Authorization: Bearer` to https://api.webflow.com/v2. Ask for `cms:read` and `cms:write` only, plus `sites:write` if the task publishes\n2. Create or update items first, then call Publish Items or Publish Site. An item with `isDraft` true and a `lastPublished` date is live with unpublished changes\n3. Stay under 60 requests a minute on Starter and Basic and 120 on Premium, read X-RateLimit-Remaining, and wait for Retry-After on 429\n4. Page item lists with `limit` (maximum 100) and `offset`, and filter with `filter[\u003cfieldSlug\u003e][\u003coperator\u003e]`, up to 10 terms\n5. Upload an asset in two steps (create the asset with a file hash, then POST the bytes to the presigned URL). Write localised content with the item's `cmsLocaleId`\n\n## Questions\n\n### Which is better for AI agents, Contentstack or Webflow?\n\nWebflow scores 69.4 (B) on agent readiness against Contentstack's 64 (B), and leads in 5 of 7 scored categories.\n\n### Do Contentstack and Webflow need an API key?\n\nBoth take an API key or an OAuth sign-in.\n\n### Can an agent call Contentstack and Webflow without installing anything?\n\nYes. Contentstack has a hosted endpoint at https://api.contentstack.io and Webflow at https://api.webflow.com/v2.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/contentstack-vs-webflow.json, and with the fewest tokens: https://www.anchorterminal.com/compare/contentstack-vs-webflow.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"contentstack\", \"b\": \"webflow\"}`. From a terminal: `anchor compare contentstack webflow`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/contentstack.json and https://www.anchorterminal.com/api/v1/tools/webflow.json\n\n## Other comparisons with Contentstack or Webflow\n\n- [Contentstack vs Ghost](https://www.anchorterminal.com/compare/contentstack-vs-ghost.md)\n- [Contentstack vs Sanity](https://www.anchorterminal.com/compare/contentstack-vs-sanity.md)\n- [Contentstack vs Storyblok](https://www.anchorterminal.com/compare/contentstack-vs-storyblok.md)\n- [Contentstack vs Strapi](https://www.anchorterminal.com/compare/contentstack-vs-strapi.md)\n- [Contentstack vs WordPress](https://www.anchorterminal.com/compare/contentstack-vs-wordpress.md)\n- [Ghost vs Webflow](https://www.anchorterminal.com/compare/ghost-vs-webflow.md)\n- [Sanity vs Webflow](https://www.anchorterminal.com/compare/sanity-vs-webflow.md)\n- [Storyblok vs Webflow](https://www.anchorterminal.com/compare/storyblok-vs-webflow.md)\n- [Strapi vs Webflow](https://www.anchorterminal.com/compare/strapi-vs-webflow.md)\n- [Webflow vs WordPress](https://www.anchorterminal.com/compare/webflow-vs-wordpress.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-08", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Contentstack vs Webflow", "url": "" } ], "description": "Webflow scores 69.4 (B) on agent readiness against Contentstack's 64 (B), and leads in 5 of 7 scored categories. Both do cms content. Category scores, facts, verdicts and agent notes side by side.", "facts": [ "Contentstack B 64", "Webflow B 69.4", "scores" ], "h1": "Contentstack vs Webflow", "image": "https://www.anchorterminal.com/assets/og/compare-contentstack-vs-webflow.png", "path": "/compare/contentstack-vs-webflow", "published": "2026-10-01", "section": "tools", "title": "Contentstack vs Webflow for AI agents, B 64 vs B 69.4", "toc": null, "updated": "2026-10-08", "url": "https://www.anchorterminal.com/compare/contentstack-vs-webflow" }, "tokens": { "markdown": 2150, "slim": 730 }, "version": 1 }