{ "data": { "a": { "slug": "ghost", "name": "Ghost", "vendor": "Ghost Foundation", "vendorUrl": "https://ghost.org", "kind": "http-api", "category": "cms", "summary": "Ghost is an open-source publishing platform for websites, newsletters and paid memberships, self-hosted or run by the Ghost Foundation as Ghost(Pro). Agents create, edit and publish posts and pages and upload images through its Admin API.", "url": "https://www.anchorterminal.com/tools/ghost", "markdownUrl": "https://www.anchorterminal.com/tools/ghost.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/ghost.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/ghost.json", "repo": "https://github.com/TryGhost/Ghost", "license": "MIT, copyright Ghost Foundation. Ghost(Pro) is a paid hosting service under the Ghost Foundation's terms", "transports": [ "http" ], "packages": [ { "registry": "npm", "name": "ghost" }, { "registry": "npm", "name": "@tryghost/admin-api" }, { "registry": "npm", "name": "ghost-cli" } ], "auth": "api-key", "authNotes": "Self-serve, with no app review or partner approval. An owner or administrator creates a custom integration in Ghost Admin and copies its Admin API key, an id and a hex secret joined by a colon. The client signs an HS256 JSON Web Token with the secret (`kid` the id, `aud` `/admin/`, expiry at most 5 minutes) and sends it as `Authorization: Ghost \u003ctoken\u003e`. Integrations hold one fixed permission set with no scopes. A staff access token from a user's profile works the same way and carries that user's role. Session login with email and password is meant for clients where the user is present. On Ghost(Pro) the Admin API and custom integrations need the Publisher plan or above.", "pricing": "freemium", "pricingNotes": "The software is free under MIT to self-host, so an agent's owner can start without a contract or a card. Ghost(Pro) lists Starter at $18, Publisher at $29 and Business at $199 a month billed yearly for up to 1,000 members, rising with audience size, and Custom through sales. The Admin API isn't included in Starter. Plans show a free trial, and we couldn't read whether it needs a card (checked 2026-10-08).", "priceSummary": "$18 / mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the documentation index, the pricing page or the repository's file list (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 55500, "npmWeekly": 23628, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://docs.ghost.org/admin-api", "llmsTxt": "https://docs.ghost.org/llms.txt", "capabilities": [ "cms.content", "cms.publish", "cms.assets" ], "tags": [ "open-source", "self-hosted", "hosted", "rest", "llms-txt", "webhooks", "newsletter", "memberships", "nodejs", "status-page" ], "lastRelease": "2026-10-07", "graded": true, "anchor": { "graded": true, "score": 58.3, "grade": "C", "agentReady": false, "rank": 583, "ranked": true, "rankOf": 950, "categoryRank": 12, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 69, "maintenance": 85, "payments": 50, "reliability": 80, "schema": 51, "security": 56, "transparency": 72 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-08" }, "negative": -7, "negativeNotes": [ "3 September to 1 October 2026. Ghost published 20 security advisories in five weeks, one critical, ten high, eight moderate and one low. They include GHSA-q734-xjgc-vpj9 (critical, suspended staff could reactivate accounts through password reset), GHSA-788w-68h3-cvxp (high, CVSS 8.8, remote code execution through bookmark card images in 6.56.0 to 6.65.0, fixed in 6.67.0) and GHSA-jj74-hc2q-xrvm (high, remote code execution through theme translation files). Several could be triggered by any staff user, Contributors included. All were published by the vendor with a fixed version, and we found no report of exploitation in the advisories we read, so we deduct 7 of a possible 15. https://github.com/TryGhost/Ghost/security/advisories ; https://github.com/TryGhost/Ghost/security/advisories/GHSA-788w-68h3-cvxp" ], "verdict": "A create needs only a title, updates are checked against `updated_at` so a stale write is refused, and a Contributor's staff token can draft without being able to publish. The Admin API has no OpenAPI file and one fixed permission set per integration, and 20 security advisories were published between 3 September and 1 October 2026.", "bestFor": "A publication, blog or newsletter where an agent drafts posts and a person or a higher role publishes.", "strengths": [ "Admin API keys sign JSON Web Tokens that last at most 5 minutes and travel in the Authorization header, so the key itself is never sent", "A staff access token carries its user's role, and a Contributor can add and edit drafts but can't change a post's status", "Every PUT must send the post's current `updated_at`, which Ghost uses for collision detection", "19 versions reached npm between 10 July and 8 October 2026, with 6.69.0 on 7 October", "MIT licence, with llms.txt, llms-full.txt and a Markdown copy of every docs page" ], "weaknesses": [ "No OpenAPI or other machine-readable description of the Admin API was found in the docs or the repository", "A custom integration has one fixed permission set covering posts, members, settings, themes and users, with no scopes and no read-only Admin key", "20 advisories were published from 3 September to 1 October 2026, one critical and ten high, including remote code execution through bookmark card images", "No content locales or custom content types, and the Admin API has no documented route for restoring a post revision", "On Ghost(Pro) the Admin API and custom integrations start at the Publisher plan, not Starter" ], "agentNotes": [ "Sign a fresh HS256 token for each batch of calls. Decode the hex secret to bytes, set `kid` to the key id, `aud` to `/admin/` and `exp` at most 5 minutes ahead", "Set `status` to `draft` on every create unless told to publish, and publish later with a PUT that sets `status` to `published`", "GET the post before each PUT and send its `updated_at` back. Tags and authors in a PUT replace the existing lists", "Send content as a Lexical JSON string, or add `?source=html` and send `html`. The HTML conversion is lossy unless wrapped in an HTML card", "Page through lists with `limit` up to 100 and `page`. Since Ghost 6.0 `limit=all` returns 100 items without an error" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 58.3 } ], "editorialScores": { "ergonomics": 69, "maintenance": 85, "payments": 50, "reliability": 80, "schema": 51, "security": 56, "transparency": 76 }, "provenanceScore": 68 }, "connect": { "install": "npm install @tryghost/admin-api", "http": "curl -H \"Authorization: Ghost $token\" -H \"Accept-Version: $version\" https://{admin_domain}/ghost/api/admin/{resource}/" }, "letme": { "capability": "https://letme.dev/cms.content", "tool": "https://letme.dev/ghost" }, "area": "business", "unitPrices": [ { "item": "Self-hosted Ghost", "unit": "month", "usd": 0, "note": "MIT, you pay for your own hosting and email delivery" }, { "item": "Ghost(Pro) Starter", "unit": "month", "usd": 18, "note": "billed yearly, up to 1,000 members, no Admin API" }, { "item": "Ghost(Pro) Publisher", "unit": "month", "usd": 29, "note": "billed yearly, up to 1,000 members, 3 staff users, Admin API included" }, { "item": "Ghost(Pro) Business", "unit": "month", "usd": 199, "note": "billed yearly, up to 1,000 members, 15 staff users" } ], "provenance": { "legalEntity": "Ghost Foundation Ltd", "domain": "ghost.org", "domainRegistered": "2005-06-25", "endpointOnVendorDomain": false, "terms": "https://ghost.org/terms/", "privacy": "https://ghost.org/privacy/", "statusPage": "https://ghoststatus.org", "changelog": "https://github.com/TryGhost/Ghost/releases", "securityTxt": "none", "checked": "2026-10-08", "notes": [ "The terms govern the Ghost.org website, the Ghost software and the hosted service, and name the Ghost Foundation as owner and operator under the law of England and Wales. The privacy policy names Ghost Foundation Ltd. Neither page showed a dated revision that we could read.", "The privacy policy covers Ghost Foundation's own website and services. Content on a self-hosted site stays on its owner's server and isn't covered by it.", "A self-hosted install answers on its owner's domain. Ghost(Pro) sites use a `*.ghost.io` admin domain.", "https://ghost.org/.well-known/security.txt returned 404 on 8 October 2026. SECURITY.md in the repository and https://docs.ghost.org/security give security@ghost.org and a disclosure policy.", "RDAP for ghost.org gives a registration date of 2005-06-25 and a transfer on 2013-09-12.", "status.ghost.org redirects to ghoststatus.org, an incident.io page for Ghost(Pro), not for self-hosted installs. It listed three minor incidents between 10 July and 8 October 2026." ], "score": 68 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/ghost.json", "live": { "slug": "ghost", "vendorStatus": { "page": "https://ghoststatus.org", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-10T04:41:04.235006288Z" }, "versions": [ { "registry": "github", "name": "TryGhost/Ghost", "version": "v6.69.0", "released": "2026-10-07", "seenAt": "2026-10-09T16:54:40.126951986Z" }, { "registry": "npm", "name": "@tryghost/admin-api", "version": "1.14.13", "seenAt": "2026-10-09T16:54:36.682438933Z" }, { "registry": "npm", "name": "ghost", "version": "6.69.0", "seenAt": "2026-10-09T16:54:35.888891821Z" }, { "registry": "npm", "name": "ghost-cli", "version": "1.33.2", "seenAt": "2026-10-09T16:54:38.723084309Z" } ], "githubStars": 55504, "npmWeekly": 23235, "securityTxt": { "url": "https://ghost.org/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-09T15:39:23.887357941Z" }, "llmsTxt": { "url": "https://docs.ghost.org/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-09T14:02:00.197327074Z" }, "pages": [ { "url": "https://ghost.org/privacy/", "kind": "privacy", "status": 200, "checkedAt": "2026-10-09T18:39:50.602918013Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "6de86a225cdd" }, { "url": "https://ghost.org/terms/", "kind": "terms", "status": 200, "checkedAt": "2026-10-09T18:39:52.769807306Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "673039b71aa4" } ], "updatedAt": "2026-10-10T04:41:04.235006288Z" } }, "answer": "Kontent.ai scores 70.5 (BB) on agent readiness against Ghost's 58.3 (C), and leads in 5 of 7 scored categories. Ghost leads on payments \u0026 pricing.", "b": { "slug": "kontent-ai", "name": "Kontent.ai", "vendor": "Kontent CZ s.r.o.", "vendorUrl": "https://kontent.ai", "kind": "http-api", "category": "cms", "summary": "Kontent.ai is a hosted headless CMS from Kontent CZ s.r.o. in Brno. Its Management API v2 reads and writes content items, language variants, assets, content models and workflow steps, and an open-source MCP server wraps it.", "url": "https://www.anchorterminal.com/tools/kontent-ai", "markdownUrl": "https://www.anchorterminal.com/tools/kontent-ai.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/kontent-ai.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/kontent-ai.json", "repo": "https://github.com/kontent-ai/mcp-server", "license": "Proprietary service under the Kontent.ai Terms of Service. The management SDKs for JavaScript and .NET and the MCP server on GitHub are MIT", "transports": [ "http", "stdio", "streamable-http" ], "remoteUrl": "https://manage.kontent.ai/v2", "packages": [ { "registry": "npm", "name": "@kontent-ai/management-sdk" }, { "registry": "npm", "name": "@kontent-ai/mcp-server" } ], "auth": "api-key", "authNotes": "A Bearer API key in the `Authorization` header. A project manager creates a Management API key in the web app under Project settings, API keys, and picks its permissions (read content, edit content, read assets, edit assets, content model, environment settings), the environments it reaches and its expiry (1 minute to 2 years, 6 months by default). A Personal API key inherits its owner's role instead. Regenerating a key revokes the old one after a few minutes. No OAuth flow and no API for creating keys was found. The Management API has to be enabled per environment.", "pricing": "paid", "pricingNotes": "No public price. The pricing page shows sliders for user seats, content types and content items and a form that requests a calculation, and the terms put the price, limits and overage unit prices in an order form. A 30-day trial needs no card and includes API access. The terms mention a Developer Plan, which the pricing page does not show (checked 2026-10-09).", "priceSummary": "Paid", "where": "both", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the Management API docs, the MCP server README or the pricing page (checked 2026-10-09).", "endpoints": [] }, "toolCount": 54, "popularity": { "githubStars": null, "npmWeekly": 8381, "pypiWeekly": null, "asOf": "2026-10-09" }, "docsUrl": "https://kontent.ai/learn/docs/apis/management-api-v2", "llmsTxt": "https://kontent.ai/llms.txt", "registryName": "io.github.kontent-ai/mcp-server", "capabilities": [ "cms.content", "cms.publish", "cms.assets", "cms.localisation", "cms.schema" ], "tags": [ "official", "hosted", "closed-source", "api-key", "mcp", "free-trial", "no-card", "sales-led", "llms-txt", "typescript", "dotnet", "webhooks", "graphql", "status-page", "soc2", "iso27001", "audit-log" ], "lastRelease": "2026-10-02", "graded": true, "anchor": { "graded": true, "score": 70.5, "grade": "BB", "agentReady": true, "rank": 153, "ranked": true, "rankOf": 950, "categoryRank": 3, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 71, "maintenance": 83, "payments": 20, "reliability": 82, "schema": 74, "security": 81, "transparency": 75 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-09" }, "negative": 0, "verdict": "Management API keys take per-area permissions, environment limits and an expiry from one minute to two years, and changes made with a key are named in the audit log. Rate limits and Retry-After are documented. No price is published, and no OpenAPI file was found. Access starts with a 30-day trial that a person opens in a browser.", "bestFor": "A company already on Kontent.ai, or evaluating it on a trial, that wants an agent to draft, localise, move through workflow and publish structured content with a permission-limited key and an audit trail.", "strengths": [ "Management API keys carry selectable permissions (read content, edit content, assets, content model, environment settings), environment limits and an expiry from 1 minute to 2 years", "Rate limits are published (10 requests a second and 400 a minute per environment), and a 429 carries a Retry-After header", "The audit log keeps 90 days of changes and names the API key that made each one. Content item changes were added on 2 October 2026", "All 54 tools in the MCP server (MIT, version 0.39.0) set readOnlyHint and destructiveHint, and its README has a section on indirect prompt injection", "security.txt is valid to July 2027, with a disclosure policy that pays discretionary rewards, and the trust centre lists SOC 2 Type 2 and ISO 27001, 27017, 27018 and 42001", "The sub-processor page names each vendor, its location and the data sent, and projects can be stored in the US, the Netherlands, Australia or Canada" ], "weaknesses": [ "No price is published. The pricing page shows sliders for seats, content types and items and a form that requests a quote", "No OpenAPI file was found. The docs link a Postman collection, which we did not read", "Access needs a person. The 30-day trial needs no card, but sign-up, the Management API toggle and key creation happen in the web app", "No idempotency keys. The docs advise against parallel requests, saying they may cause inconsistencies in content", "The availability annex covers the administration interface and the Delivery API, not the Management API, and the guaranteed level sits in each order form", "The Terms of Service forbid automated access to the Service unless the procedure is described in the documentation. This matters before any probe is run", "The MCP server loads 54 tools, 22 of them marked destructive, and runs only on the owner's machine. No hosted endpoint was found" ], "agentNotes": [ "Send `Authorization: Bearer \u003ckey\u003e` to `https://manage.kontent.ai/v2/projects/{environment_id}/...`. The Management API must be switched on under Environment settings, General, Enabled APIs first", "Ask for a Management API key with only the permissions the task needs. Read content alone gives a read-only key, and keys expire after six months by default", "Stay under 10 requests a second and 400 a minute per environment, send requests one at a time, and wait the seconds in Retry-After on a 429", "Page lists by passing the `continuation_token` from the response back in the `x-continuation` header", "Create items with an `external_id` and write with the upsert PUT at `/items/external-id/{id}` so a retry after a lost response does not create a duplicate", "With the MCP server, call `get-patch-guide` before any patch tool, and use a client that prompts on destructiveHint" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 70.5 } ], "editorialScores": { "ergonomics": 71, "maintenance": 83, "payments": 20, "reliability": 82, "schema": 74, "security": 81, "transparency": 69 }, "provenanceScore": 80 }, "connect": { "install": "npm i @kontent-ai/management-sdk --save", "http": "curl --request GET \\\n --url https://manage.kontent.ai/v2/projects/KONTENT_AI_ENVIRONMENT_ID/items \\\n --header 'Authorization: Bearer KONTENT_AI_MANAGEMENT_API_KEY' \\\n --header 'Content-type: application/json'", "config": { "kontent-ai-stdio": { "args": [ "@kontent-ai/mcp-server@latest", "stdio" ], "command": "npx", "env": { "KONTENT_API_KEY": "\u003cyour-management-api-key\u003e", "KONTENT_ENVIRONMENT_ID": "\u003cyour-environment-id\u003e" } } } }, "letme": { "capability": "https://letme.dev/cms.content", "tool": "https://letme.dev/kontent-ai" }, "area": "business", "provenance": { "legalEntity": "Kontent CZ s.r.o.", "domain": "kontent.ai", "domainRegistered": "", "endpointOnVendorDomain": true, "terms": "https://kontent.ai/terms-of-service/", "privacy": "https://kontent.ai/privacy/", "statusPage": "https://status.kontent.ai", "changelog": "https://kontent.ai/learn/product-updates", "securityTxt": "valid", "checked": "2026-10-09", "notes": [ "The Terms of Service effective 11 September 2026 name Kontent CZ s.r.o., Nové sady 996/25, 602 00 Brno, Czech Republic, company number 173 00 576, or an affiliate named in the order form. The Data Processing Addendum and the availability and AI annexes are part of the same page.", "The privacy policy effective 2 June 2025 is issued by Kontent s.r.o. at the same address with Kontent CZ s.r.o. and Kontent US, LLC as joint controllers, and has a section for users of the product.", "The Management API answers at manage.kontent.ai, a kontent.ai subdomain.", "kontent.ai/.well-known/security.txt gives security@kontent.ai, a PGP key, the disclosure policy and an Open Bug Bounty page, and expires on 21 July 2027.", "The domain's registration date was not looked up." ], "score": 80 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/kontent-ai.json", "live": { "slug": "kontent-ai", "probe": { "target": "https://manage.kontent.ai/v2", "method": "get", "lastAt": "2026-10-10T04:40:53.397824143Z", "lastOk": true, "lastStatus": 404, "lastMs": 510, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 373, "p95ms24h": 588, "samples24h": 133, "samples30d": 133, "days": [ { "date": "2026-10-09", "probes": 85, "ok": 85 }, { "date": "2026-10-10", "probes": 48, "ok": 48 } ] }, "vendorStatus": { "page": "https://status.kontent.ai", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-10T04:41:09.411800733Z" }, "versions": [ { "registry": "github", "name": "kontent-ai/mcp-server", "version": "0.39.0", "released": "2026-08-31", "seenAt": "2026-10-09T17:00:51.588844437Z" }, { "registry": "mcp-registry", "name": "io.github.kontent-ai/mcp-server", "version": "0.39.0", "seenAt": "2026-10-10T03:11:32.438759038Z" }, { "registry": "npm", "name": "@kontent-ai/management-sdk", "version": "8.5.7", "seenAt": "2026-10-09T17:00:49.298560089Z" }, { "registry": "npm", "name": "@kontent-ai/mcp-server", "version": "0.39.0", "seenAt": "2026-10-09T17:00:50.153755771Z" } ], "githubStars": 9, "npmWeekly": 8381, "pages": [ { "url": "https://kontent.ai/learn/product-updates", "kind": "changelog", "status": 200, "checkedAt": "2026-10-09T18:40:45.195164377Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "3f0ce279378b" }, { "url": "https://kontent.ai/privacy/", "kind": "privacy", "status": 200, "checkedAt": "2026-10-09T18:40:47.371617041Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "47ae43c907ba" }, { "url": "https://kontent.ai/terms-of-service/", "kind": "terms", "status": 200, "checkedAt": "2026-10-09T18:40:49.654963617Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "b1ef49b6e91c" } ], "updatedAt": "2026-10-10T04:40:53.397824143Z" } }, "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Ghost Foundation", "b": "Kontent CZ s.r.o.", "name": "Vendor" }, { "a": "no (local only)", "b": "https://manage.kontent.ai/v2", "name": "Hosted endpoint" }, { "a": "HTTP", "b": "HTTP, stdio, Streamable HTTP", "name": "Transports" }, { "a": "API key", "b": "API key", "name": "Auth" }, { "a": "Freemium", "b": "Paid", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT, copyright Ghost Foundation. Ghost(Pro) is a paid hosting service under the Ghost Foundation's terms", "b": "Proprietary service under the Kontent.ai Terms of Service. The management SDKs for JavaScript and .NET and the MCP server on GitHub are MIT", "name": "Licence" }, { "a": "none", "b": "54", "name": "Tools exposed" }, { "a": "no", "b": "yes", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "not listed", "b": "io.github.kontent-ai/mcp-server", "name": "MCP registry" }, { "a": "2026-10-07", "b": "2026-10-02", "name": "Last release" }, { "a": "no date given", "b": "2026-09-11", "name": "Terms last updated" }, { "a": "no date given", "b": "2025-06-02", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "yes", "b": "yes", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "yes", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "56k stars, 24k npm/wk", "b": "8.4k npm/wk", "name": "Popularity" } ], "faq": [ { "answer": "Kontent.ai scores 70.5 (BB) on agent readiness against Ghost's 58.3 (C), and leads in 5 of 7 scored categories. Ghost leads on payments \u0026 pricing.", "question": "Which is better for AI agents, Ghost or Kontent.ai?" }, { "answer": "Both need an API key.", "question": "Do Ghost and Kontent.ai need an API key?" }, { "answer": "No hosted endpoint is listed for Ghost. Kontent.ai has a hosted endpoint at https://manage.kontent.ai/v2.", "question": "Can an agent call Ghost and Kontent.ai without installing anything?" }, { "answer": "Ghost is open source (MIT, copyright Ghost Foundation. Ghost(Pro) is a paid hosting service under the Ghost Foundation's terms). No open-source release is listed for Kontent.ai.", "question": "Are Ghost and Kontent.ai open source?" } ], "goodFor": [ { "aheadOn": [ "Payments \u0026 pricing, 50 against 20" ], "also": [ "Open source" ], "goodFor": "A publication, blog or newsletter where an agent drafts posts and a person or a higher role publishes.", "slug": "ghost", "watchFor": "No OpenAPI or other machine-readable description of the Admin API was found in the docs or the repository" }, { "aheadOn": [ "Schema \u0026 documentation, 74 against 51", "Security \u0026 auth, 81 against 56" ], "also": [ "Agent-ready, a grade of BB or better", "A hosted endpoint, with nothing to install", "Runs on your own machine", "Free to start without a card", "No incidents deducted, where Ghost loses 7 points for them" ], "goodFor": "A company already on Kontent.ai, or evaluating it on a trial, that wants an agent to draft, localise, move through workflow and publish structured content with a permission-limited key and an audit trail.", "slug": "kontent-ai", "watchFor": "No price is published. The pricing page shows sliders for seats, content types and items and a form that requests a quote" } ], "job": { "capability": "cms.content", "name": "Content management" }, "others": [ { "json": "https://www.anchorterminal.com/compare/buttercms-vs-ghost.json", "title": "ButterCMS vs Ghost", "url": "https://www.anchorterminal.com/compare/buttercms-vs-ghost" }, { "json": "https://www.anchorterminal.com/compare/buttercms-vs-kontent-ai.json", "title": "ButterCMS vs Kontent.ai", "url": "https://www.anchorterminal.com/compare/buttercms-vs-kontent-ai" }, { "json": "https://www.anchorterminal.com/compare/contentstack-vs-ghost.json", "title": "Contentstack vs Ghost", "url": "https://www.anchorterminal.com/compare/contentstack-vs-ghost" }, { "json": "https://www.anchorterminal.com/compare/contentstack-vs-kontent-ai.json", "title": "Contentstack vs Kontent.ai", "url": "https://www.anchorterminal.com/compare/contentstack-vs-kontent-ai" }, { "json": "https://www.anchorterminal.com/compare/datocms-vs-ghost.json", "title": "DatoCMS vs Ghost", "url": "https://www.anchorterminal.com/compare/datocms-vs-ghost" }, { "json": "https://www.anchorterminal.com/compare/datocms-vs-kontent-ai.json", "title": "DatoCMS vs Kontent.ai", "url": "https://www.anchorterminal.com/compare/datocms-vs-kontent-ai" }, { "json": "https://www.anchorterminal.com/compare/directus-vs-ghost.json", "title": "Directus vs Ghost", "url": "https://www.anchorterminal.com/compare/directus-vs-ghost" }, { "json": "https://www.anchorterminal.com/compare/directus-vs-kontent-ai.json", "title": "Directus vs Kontent.ai", "url": "https://www.anchorterminal.com/compare/directus-vs-kontent-ai" }, { "json": "https://www.anchorterminal.com/compare/ghost-vs-hygraph.json", "title": "Ghost vs Hygraph", "url": "https://www.anchorterminal.com/compare/ghost-vs-hygraph" }, { "json": "https://www.anchorterminal.com/compare/ghost-vs-payload.json", "title": "Ghost vs Payload", "url": "https://www.anchorterminal.com/compare/ghost-vs-payload" }, { "json": "https://www.anchorterminal.com/compare/ghost-vs-prismic.json", "title": "Ghost vs Prismic", "url": "https://www.anchorterminal.com/compare/ghost-vs-prismic" }, { "json": "https://www.anchorterminal.com/compare/ghost-vs-sanity.json", "title": "Ghost vs Sanity", "url": "https://www.anchorterminal.com/compare/ghost-vs-sanity" }, { "json": "https://www.anchorterminal.com/compare/ghost-vs-storyblok.json", "title": "Ghost vs Storyblok", "url": "https://www.anchorterminal.com/compare/ghost-vs-storyblok" }, { "json": "https://www.anchorterminal.com/compare/ghost-vs-strapi.json", "title": "Ghost vs Strapi", "url": "https://www.anchorterminal.com/compare/ghost-vs-strapi" }, { "json": "https://www.anchorterminal.com/compare/ghost-vs-webflow.json", "title": "Ghost vs Webflow", "url": "https://www.anchorterminal.com/compare/ghost-vs-webflow" }, { "json": "https://www.anchorterminal.com/compare/ghost-vs-wordpress.json", "title": "Ghost vs WordPress", "url": "https://www.anchorterminal.com/compare/ghost-vs-wordpress" }, { "json": "https://www.anchorterminal.com/compare/hygraph-vs-kontent-ai.json", "title": "Hygraph vs Kontent.ai", "url": "https://www.anchorterminal.com/compare/hygraph-vs-kontent-ai" }, { "json": "https://www.anchorterminal.com/compare/kontent-ai-vs-payload.json", "title": "Kontent.ai vs Payload", "url": "https://www.anchorterminal.com/compare/kontent-ai-vs-payload" }, { "json": "https://www.anchorterminal.com/compare/kontent-ai-vs-prismic.json", "title": "Kontent.ai vs Prismic", "url": "https://www.anchorterminal.com/compare/kontent-ai-vs-prismic" }, { "json": "https://www.anchorterminal.com/compare/kontent-ai-vs-sanity.json", "title": "Kontent.ai vs Sanity", "url": "https://www.anchorterminal.com/compare/kontent-ai-vs-sanity" }, { "json": "https://www.anchorterminal.com/compare/kontent-ai-vs-storyblok.json", "title": "Kontent.ai vs Storyblok", "url": "https://www.anchorterminal.com/compare/kontent-ai-vs-storyblok" }, { "json": "https://www.anchorterminal.com/compare/kontent-ai-vs-strapi.json", "title": "Kontent.ai vs Strapi", "url": "https://www.anchorterminal.com/compare/kontent-ai-vs-strapi" }, { "json": "https://www.anchorterminal.com/compare/kontent-ai-vs-webflow.json", "title": "Kontent.ai vs Webflow", "url": "https://www.anchorterminal.com/compare/kontent-ai-vs-webflow" }, { "json": "https://www.anchorterminal.com/compare/kontent-ai-vs-wordpress.json", "title": "Kontent.ai vs WordPress", "url": "https://www.anchorterminal.com/compare/kontent-ai-vs-wordpress" } ], "scores": [ { "by": 2, "edge": "kontent-ai", "ghost": 80, "key": "reliability", "kontent-ai": 82, "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 23, "edge": "kontent-ai", "ghost": 51, "key": "schema", "kontent-ai": 74, "name": "Schema \u0026 documentation", "weight": 13 }, { "by": 2, "edge": "kontent-ai", "ghost": 69, "key": "ergonomics", "kontent-ai": 71, "name": "Agent ergonomics", "weight": 13 }, { "by": 25, "edge": "kontent-ai", "ghost": 56, "key": "security", "kontent-ai": 81, "name": "Security \u0026 auth", "weight": 14 }, { "by": 30, "edge": "ghost", "ghost": 50, "key": "payments", "kontent-ai": 20, "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 2, "edge": "ghost", "ghost": 85, "key": "maintenance", "kontent-ai": 83, "name": "Maintenance \u0026 community", "weight": 7 }, { "by": 3, "edge": "kontent-ai", "ghost": 72, "key": "transparency", "kontent-ai": 75, "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "Kontent.ai scores 70.5 (BB) on agent readiness against Ghost's 58.3 (C), and leads in 5 of 7 scored categories. Ghost leads on payments \u0026 pricing. Both do content management.", "verdicts": { "ghost": "A create needs only a title, updates are checked against `updated_at` so a stale write is refused, and a Contributor's staff token can draft without being able to publish. The Admin API has no OpenAPI file and one fixed permission set per integration, and 20 security advisories were published between 3 September and 1 October 2026.", "kontent-ai": "Management API keys take per-area permissions, environment limits and an expiry from one minute to two years, and changes made with a key are named in the audit log. Rate limits and Retry-After are documented. No price is published, and no OpenAPI file was found. Access starts with a 30-day trial that a person opens in a browser." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/ghost-vs-kontent-ai", "json": "https://www.anchorterminal.com/compare/ghost-vs-kontent-ai.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/ghost-vs-kontent-ai.md", "slim": "https://www.anchorterminal.com/compare/ghost-vs-kontent-ai.min.md" }, "markdown": "Kontent.ai scores 70.5 (BB) on agent readiness against Ghost's 58.3 (C), and leads in 5 of 7 scored categories. Ghost leads on payments \u0026 pricing. Both do content management.\n\n- Ghost: grade C, 58.3/100, rank #583 of 950. Markdown https://www.anchorterminal.com/tools/ghost.md · JSON https://www.anchorterminal.com/api/v1/tools/ghost.json\n- Kontent.ai: grade BB, 70.5/100, rank #153 of 950. Markdown https://www.anchorterminal.com/tools/kontent-ai.md · JSON https://www.anchorterminal.com/api/v1/tools/kontent-ai.json\n- Best headless CMS and website publishing for AI agents: https://www.anchorterminal.com/best/cms/index.md\n- All 91 cms comparisons: https://www.anchorterminal.com/compare/cms/index.md\n\n## Which one, for what\n\n### Ghost (C)\n\nGood for: A publication, blog or newsletter where an agent drafts posts and a person or a higher role publishes.\n\nAhead on:\n- Payments \u0026 pricing, 50 against 20\n\nAlso in its favour:\n- Open source\n\nWatch for: No OpenAPI or other machine-readable description of the Admin API was found in the docs or the repository\n\n### Kontent.ai (BB)\n\nGood for: A company already on Kontent.ai, or evaluating it on a trial, that wants an agent to draft, localise, move through workflow and publish structured content with a permission-limited key and an audit trail.\n\nAhead on:\n- Schema \u0026 documentation, 74 against 51\n- Security \u0026 auth, 81 against 56\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n- A hosted endpoint, with nothing to install\n- Runs on your own machine\n- Free to start without a card\n- No incidents deducted, where Ghost loses 7 points for them\n\nWatch for: No price is published. The pricing page shows sliders for seats, content types and items and a form that requests a quote\n\n\n## Score by category\n\n| Category | Weight | Ghost | Kontent.ai | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 80 | 82 | Kontent.ai +2 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 51 | 74 | Kontent.ai +23 |\n| Agent ergonomics | 13% (16.2 this run) | 69 | 71 | Kontent.ai +2 |\n| Security \u0026 auth | 14% (17.5 this run) | 56 | 81 | Kontent.ai +25 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 50 | 20 | Ghost +30 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 85 | 83 | Ghost +2 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 72 | 75 | Kontent.ai +3 |\n| Negative events | ≤15 | -7 | 0 | |\n| **Total** | | **58.3 · C** | **70.5 · BB** | |\n\n## Facts side by side\n\n| Fact | Ghost | Kontent.ai |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Ghost Foundation | Kontent CZ s.r.o. |\n| Hosted endpoint | no (local only) | `https://manage.kontent.ai/v2` |\n| Transports | HTTP | HTTP, stdio, Streamable HTTP |\n| Auth | API key | API key |\n| Pricing | Freemium | Paid |\n| x402 | no | no |\n| Licence | MIT, copyright Ghost Foundation. Ghost(Pro) is a paid hosting service under the Ghost Foundation's terms | Proprietary service under the Kontent.ai Terms of Service. The management SDKs for JavaScript and .NET and the MCP server on GitHub are MIT |\n| Tools exposed | none | 54 |\n| Read-only variant documented | no | yes |\n| llms.txt | yes | yes |\n| MCP registry | not listed | `io.github.kontent-ai/mcp-server` |\n| Last release | 2026-10-07 | 2026-10-02 |\n| Terms last updated | no date given | 2026-09-11 |\n| Privacy policy last updated | no date given | 2025-06-02 |\n| Customer content may train models | not found in the text | not found in the text |\n| Terms restrict automated access | yes | yes |\n| Terms restrict benchmarking | not found in the text | yes |\n| Terms or service can change without notice | not found in the text | not found in the text |\n| Arbitration or class-action waiver | not found in the text | not found in the text |\n| Popularity | 56k stars, 24k npm/wk | 8.4k npm/wk |\n\n## Verdicts\n\n**Ghost.** A create needs only a title, updates are checked against `updated_at` so a stale write is refused, and a Contributor's staff token can draft without being able to publish. The Admin API has no OpenAPI file and one fixed permission set per integration, and 20 security advisories were published between 3 September and 1 October 2026.\n\n**Kontent.ai.** Management API keys take per-area permissions, environment limits and an expiry from one minute to two years, and changes made with a key are named in the audit log. Rate limits and Retry-After are documented. No price is published, and no OpenAPI file was found. Access starts with a 30-day trial that a person opens in a browser.\n\n## Before you call either\n\n### Ghost\n\n1. Sign a fresh HS256 token for each batch of calls. Decode the hex secret to bytes, set `kid` to the key id, `aud` to `/admin/` and `exp` at most 5 minutes ahead\n2. Set `status` to `draft` on every create unless told to publish, and publish later with a PUT that sets `status` to `published`\n3. GET the post before each PUT and send its `updated_at` back. Tags and authors in a PUT replace the existing lists\n4. Send content as a Lexical JSON string, or add `?source=html` and send `html`. The HTML conversion is lossy unless wrapped in an HTML card\n5. Page through lists with `limit` up to 100 and `page`. Since Ghost 6.0 `limit=all` returns 100 items without an error\n\n### Kontent.ai\n\n1. Send `Authorization: Bearer \u003ckey\u003e` to `https://manage.kontent.ai/v2/projects/{environment_id}/...`. The Management API must be switched on under Environment settings, General, Enabled APIs first\n2. Ask for a Management API key with only the permissions the task needs. Read content alone gives a read-only key, and keys expire after six months by default\n3. Stay under 10 requests a second and 400 a minute per environment, send requests one at a time, and wait the seconds in Retry-After on a 429\n4. Page lists by passing the `continuation_token` from the response back in the `x-continuation` header\n5. Create items with an `external_id` and write with the upsert PUT at `/items/external-id/{id}` so a retry after a lost response does not create a duplicate\n6. With the MCP server, call `get-patch-guide` before any patch tool, and use a client that prompts on destructiveHint\n\n## Questions\n\n### Which is better for AI agents, Ghost or Kontent.ai?\n\nKontent.ai scores 70.5 (BB) on agent readiness against Ghost's 58.3 (C), and leads in 5 of 7 scored categories. Ghost leads on payments \u0026 pricing.\n\n### Do Ghost and Kontent.ai need an API key?\n\nBoth need an API key.\n\n### Can an agent call Ghost and Kontent.ai without installing anything?\n\nNo hosted endpoint is listed for Ghost. Kontent.ai has a hosted endpoint at https://manage.kontent.ai/v2.\n\n### Are Ghost and Kontent.ai open source?\n\nGhost is open source (MIT, copyright Ghost Foundation. Ghost(Pro) is a paid hosting service under the Ghost Foundation's terms). No open-source release is listed for Kontent.ai.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/ghost-vs-kontent-ai.json, and with the fewest tokens: https://www.anchorterminal.com/compare/ghost-vs-kontent-ai.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"ghost\", \"b\": \"kontent-ai\"}`. From a terminal: `anchor compare ghost kontent-ai`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/ghost.json and https://www.anchorterminal.com/api/v1/tools/kontent-ai.json\n\n## Other comparisons with Ghost or Kontent.ai\n\n- [ButterCMS vs Ghost](https://www.anchorterminal.com/compare/buttercms-vs-ghost.md)\n- [ButterCMS vs Kontent.ai](https://www.anchorterminal.com/compare/buttercms-vs-kontent-ai.md)\n- [Contentstack vs Ghost](https://www.anchorterminal.com/compare/contentstack-vs-ghost.md)\n- [Contentstack vs Kontent.ai](https://www.anchorterminal.com/compare/contentstack-vs-kontent-ai.md)\n- [DatoCMS vs Ghost](https://www.anchorterminal.com/compare/datocms-vs-ghost.md)\n- [DatoCMS vs Kontent.ai](https://www.anchorterminal.com/compare/datocms-vs-kontent-ai.md)\n- [Directus vs Ghost](https://www.anchorterminal.com/compare/directus-vs-ghost.md)\n- [Directus vs Kontent.ai](https://www.anchorterminal.com/compare/directus-vs-kontent-ai.md)\n- [Ghost vs Hygraph](https://www.anchorterminal.com/compare/ghost-vs-hygraph.md)\n- [Ghost vs Payload](https://www.anchorterminal.com/compare/ghost-vs-payload.md)\n- [Ghost vs Prismic](https://www.anchorterminal.com/compare/ghost-vs-prismic.md)\n- [Ghost vs Sanity](https://www.anchorterminal.com/compare/ghost-vs-sanity.md)\n- [Ghost vs Storyblok](https://www.anchorterminal.com/compare/ghost-vs-storyblok.md)\n- [Ghost vs Strapi](https://www.anchorterminal.com/compare/ghost-vs-strapi.md)\n- [Ghost vs Webflow](https://www.anchorterminal.com/compare/ghost-vs-webflow.md)\n- [Ghost vs WordPress](https://www.anchorterminal.com/compare/ghost-vs-wordpress.md)\n- [Hygraph vs Kontent.ai](https://www.anchorterminal.com/compare/hygraph-vs-kontent-ai.md)\n- [Kontent.ai vs Payload](https://www.anchorterminal.com/compare/kontent-ai-vs-payload.md)\n- [Kontent.ai vs Prismic](https://www.anchorterminal.com/compare/kontent-ai-vs-prismic.md)\n- [Kontent.ai vs Sanity](https://www.anchorterminal.com/compare/kontent-ai-vs-sanity.md)\n- [Kontent.ai vs Storyblok](https://www.anchorterminal.com/compare/kontent-ai-vs-storyblok.md)\n- [Kontent.ai vs Strapi](https://www.anchorterminal.com/compare/kontent-ai-vs-strapi.md)\n- [Kontent.ai vs Webflow](https://www.anchorterminal.com/compare/kontent-ai-vs-webflow.md)\n- [Kontent.ai vs WordPress](https://www.anchorterminal.com/compare/kontent-ai-vs-wordpress.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-10", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Ghost vs Kontent.ai", "url": "" } ], "description": "Kontent.ai scores 70.5 (BB) to Ghost's 58.3 (C) for content management. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Ghost C 58.3", "Kontent.ai BB 70.5", "scores" ], "h1": "Ghost vs Kontent.ai", "image": "https://www.anchorterminal.com/assets/og/compare-ghost-vs-kontent-ai.png", "path": "/compare/ghost-vs-kontent-ai", "published": "2026-10-01", "section": "tools", "title": "Ghost vs Kontent.ai for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-09", "url": "https://www.anchorterminal.com/compare/ghost-vs-kontent-ai" }, "tokens": { "markdown": 2600, "slim": 730 }, "version": 1 }