{ "data": { "a": { "slug": "ghost", "name": "Ghost", "vendor": "Ghost Foundation", "vendorUrl": "https://ghost.org", "kind": "http-api", "category": "cms", "summary": "Ghost is an open-source publishing platform for websites, newsletters and paid memberships, self-hosted or run by the Ghost Foundation as Ghost(Pro). Agents create, edit and publish posts and pages and upload images through its Admin API.", "url": "https://www.anchorterminal.com/tools/ghost", "markdownUrl": "https://www.anchorterminal.com/tools/ghost.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/ghost.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/ghost.json", "repo": "https://github.com/TryGhost/Ghost", "license": "MIT, copyright Ghost Foundation. Ghost(Pro) is a paid hosting service under the Ghost Foundation's terms", "transports": [ "http" ], "packages": [ { "registry": "npm", "name": "ghost" }, { "registry": "npm", "name": "@tryghost/admin-api" }, { "registry": "npm", "name": "ghost-cli" } ], "auth": "api-key", "authNotes": "Self-serve, with no app review or partner approval. An owner or administrator creates a custom integration in Ghost Admin and copies its Admin API key, an id and a hex secret joined by a colon. The client signs an HS256 JSON Web Token with the secret (`kid` the id, `aud` `/admin/`, expiry at most 5 minutes) and sends it as `Authorization: Ghost \u003ctoken\u003e`. Integrations hold one fixed permission set with no scopes. A staff access token from a user's profile works the same way and carries that user's role. Session login with email and password is meant for clients where the user is present. On Ghost(Pro) the Admin API and custom integrations need the Publisher plan or above.", "pricing": "freemium", "pricingNotes": "The software is free under MIT to self-host, so an agent's owner can start without a contract or a card. Ghost(Pro) lists Starter at $18, Publisher at $29 and Business at $199 a month billed yearly for up to 1,000 members, rising with audience size, and Custom through sales. The Admin API isn't included in Starter. Plans show a free trial, and we couldn't read whether it needs a card (checked 2026-10-08).", "priceSummary": "$18 / mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the documentation index, the pricing page or the repository's file list (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 55500, "npmWeekly": 23628, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://docs.ghost.org/admin-api", "llmsTxt": "https://docs.ghost.org/llms.txt", "capabilities": [ "cms.content", "cms.publish", "cms.assets" ], "tags": [ "open-source", "self-hosted", "hosted", "rest", "llms-txt", "webhooks", "newsletter", "memberships", "nodejs", "status-page" ], "lastRelease": "2026-10-07", "graded": true, "anchor": { "graded": true, "score": 58.3, "grade": "C", "agentReady": false, "rank": 455, "ranked": true, "rankOf": 722, "categoryRank": 9, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 69, "maintenance": 85, "payments": 50, "reliability": 80, "schema": 51, "security": 56, "transparency": 72 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-08" }, "negative": -7, "negativeNotes": [ "3 September to 1 October 2026. Ghost published 20 security advisories in five weeks, one critical, ten high, eight moderate and one low. They include GHSA-q734-xjgc-vpj9 (critical, suspended staff could reactivate accounts through password reset), GHSA-788w-68h3-cvxp (high, CVSS 8.8, remote code execution through bookmark card images in 6.56.0 to 6.65.0, fixed in 6.67.0) and GHSA-jj74-hc2q-xrvm (high, remote code execution through theme translation files). Several could be triggered by any staff user, Contributors included. All were published by the vendor with a fixed version, and we found no report of exploitation in the advisories we read, so we deduct 7 of a possible 15. https://github.com/TryGhost/Ghost/security/advisories ; https://github.com/TryGhost/Ghost/security/advisories/GHSA-788w-68h3-cvxp" ], "verdict": "A create needs only a title, updates are checked against `updated_at` so a stale write is refused, and a Contributor's staff token can draft without being able to publish. The Admin API has no OpenAPI file and one fixed permission set per integration, and 20 security advisories were published between 3 September and 1 October 2026.", "bestFor": "A publication, blog or newsletter where an agent drafts posts and a person or a higher role publishes.", "strengths": [ "Admin API keys sign JSON Web Tokens that last at most 5 minutes and travel in the Authorization header, so the key itself is never sent", "A staff access token carries its user's role, and a Contributor can add and edit drafts but can't change a post's status", "Every PUT must send the post's current `updated_at`, which Ghost uses for collision detection", "19 versions reached npm between 10 July and 8 October 2026, with 6.69.0 on 7 October", "MIT licence, with llms.txt, llms-full.txt and a Markdown copy of every docs page" ], "weaknesses": [ "No OpenAPI or other machine-readable description of the Admin API was found in the docs or the repository", "A custom integration has one fixed permission set covering posts, members, settings, themes and users, with no scopes and no read-only Admin key", "20 advisories were published from 3 September to 1 October 2026, one critical and ten high, including remote code execution through bookmark card images", "No content locales or custom content types, and the Admin API has no documented route for restoring a post revision", "On Ghost(Pro) the Admin API and custom integrations start at the Publisher plan, not Starter" ], "agentNotes": [ "Sign a fresh HS256 token for each batch of calls. Decode the hex secret to bytes, set `kid` to the key id, `aud` to `/admin/` and `exp` at most 5 minutes ahead", "Set `status` to `draft` on every create unless told to publish, and publish later with a PUT that sets `status` to `published`", "GET the post before each PUT and send its `updated_at` back. Tags and authors in a PUT replace the existing lists", "Send content as a Lexical JSON string, or add `?source=html` and send `html`. The HTML conversion is lossy unless wrapped in an HTML card", "Page through lists with `limit` up to 100 and `page`. Since Ghost 6.0 `limit=all` returns 100 items without an error" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 58.3 } ], "editorialScores": { "ergonomics": 69, "maintenance": 85, "payments": 50, "reliability": 80, "schema": 51, "security": 56, "transparency": 76 }, "provenanceScore": 68 }, "connect": { "install": "npm install @tryghost/admin-api", "http": "curl -H \"Authorization: Ghost $token\" -H \"Accept-Version: $version\" https://{admin_domain}/ghost/api/admin/{resource}/" }, "letme": { "capability": "https://letme.dev/cms.content", "tool": "https://letme.dev/ghost" }, "area": "business", "unitPrices": [ { "item": "Self-hosted Ghost", "unit": "month", "usd": 0, "note": "MIT, you pay for your own hosting and email delivery" }, { "item": "Ghost(Pro) Starter", "unit": "month", "usd": 18, "note": "billed yearly, up to 1,000 members, no Admin API" }, { "item": "Ghost(Pro) Publisher", "unit": "month", "usd": 29, "note": "billed yearly, up to 1,000 members, 3 staff users, Admin API included" }, { "item": "Ghost(Pro) Business", "unit": "month", "usd": 199, "note": "billed yearly, up to 1,000 members, 15 staff users" } ], "provenance": { "legalEntity": "Ghost Foundation Ltd", "domain": "ghost.org", "domainRegistered": "2005-06-25", "endpointOnVendorDomain": false, "terms": "https://ghost.org/terms/", "privacy": "https://ghost.org/privacy/", "statusPage": "https://ghoststatus.org", "changelog": "https://github.com/TryGhost/Ghost/releases", "securityTxt": "none", "checked": "2026-10-08", "notes": [ "The terms govern the Ghost.org website, the Ghost software and the hosted service, and name the Ghost Foundation as owner and operator under the law of England and Wales. The privacy policy names Ghost Foundation Ltd. Neither page showed a dated revision that we could read.", "The privacy policy covers Ghost Foundation's own website and services. Content on a self-hosted site stays on its owner's server and isn't covered by it.", "A self-hosted install answers on its owner's domain. Ghost(Pro) sites use a `*.ghost.io` admin domain.", "https://ghost.org/.well-known/security.txt returned 404 on 8 October 2026. SECURITY.md in the repository and https://docs.ghost.org/security give security@ghost.org and a disclosure policy.", "RDAP for ghost.org gives a registration date of 2005-06-25 and a transfer on 2013-09-12.", "status.ghost.org redirects to ghoststatus.org, an incident.io page for Ghost(Pro), not for self-hosted installs. It listed three minor incidents between 10 July and 8 October 2026." ], "score": 68 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/ghost.json", "live": { "slug": "ghost", "vendorStatus": { "page": "https://ghoststatus.org", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-08T19:50:43.208632006Z" }, "pages": [ { "url": "https://ghost.org/privacy/", "kind": "privacy", "status": 200, "checkedAt": "2026-10-08T18:20:39.9398284Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "6de86a225cdd" }, { "url": "https://ghost.org/terms/", "kind": "terms", "status": 200, "checkedAt": "2026-10-08T18:20:42.180060747Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "673039b71aa4" } ], "updatedAt": "2026-10-08T19:50:43.208632006Z" } }, "answer": "Sanity scores 73.7 (BB) on agent readiness against Ghost's 58.3 (C), and leads in 5 of 7 scored categories. Ghost leads on payments \u0026 pricing.", "b": { "slug": "sanity", "name": "Sanity", "vendor": "Sanity US Inc. and Sanity AS", "vendorUrl": "https://www.sanity.io", "kind": "http-api", "category": "cms", "summary": "Sanity is a hosted headless CMS. Content is stored as JSON documents in the Content Lake, queried with GROQ and edited in the open-source Sanity Studio. Agents reach it through the HTTP API or the hosted MCP server at mcp.sanity.io.", "url": "https://www.anchorterminal.com/tools/sanity", "markdownUrl": "https://www.anchorterminal.com/tools/sanity.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/sanity.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/sanity.json", "repo": "https://github.com/sanity-io/sanity", "license": "Proprietary hosted service under Sanity's terms of service. Sanity Studio, the CLI, `@sanity/client` and the agent toolkit on GitHub are MIT", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://api.sanity.io", "packages": [ { "registry": "npm", "name": "@sanity/client" }, { "registry": "npm", "name": "sanity" }, { "registry": "packagist", "name": "sanity/sanity-php" } ], "auth": "mixed", "authNotes": "Self-serve. The HTTP API takes a Bearer token. Robot tokens are created in sanity.io/manage, with the CLI or through the Access API, carry a role (Viewer and Editor tokens on every plan), last until deleted unless given an expiry, and are shown once. Personal tokens last a year and act as the user. The MCP server at mcp.sanity.io uses OAuth with PKCE and dynamic client registration by default, with one scope named `global` and sessions of about 7 days, or accepts a token in the `Authorization` header. Custom roles that limit a token to a dataset or document type are Enterprise only. No app review or sales approval is needed.", "pricing": "freemium", "pricingNotes": "Free plan at $0 with no card, 20 seats, 10,000 documents, 250,000 API requests and 1 million API CDN requests a month, and hard caps that answer 402 when reached. Growth is $15 a seat a month with overage billed per unit. Enterprise is priced by sales. New projects get a Growth trial with Free plan quotas. An agent can start on the Free plan once a person has created the account (checked 2026-10-07).", "priceSummary": "$15 / seat-mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the documentation (llms-full.txt) or on the pricing page (checked 2026-10-07).", "endpoints": [] }, "toolCount": 53, "popularity": { "githubStars": 6352, "npmWeekly": 4069926, "pypiWeekly": null, "asOf": "2026-10-07" }, "docsUrl": "https://www.sanity.io/docs", "llmsTxt": "https://www.sanity.io/docs/llms.txt", "openapi": "https://www.sanity.io/docs/api/openapi", "registryName": "io.sanity.www/mcp", "capabilities": [ "cms.content", "cms.publish", "cms.assets", "cms.schema", "cms.localisation" ], "tags": [ "hosted", "headless-cms", "mcp", "oauth", "openapi", "llms-txt", "groq", "graphql", "javascript", "php", "free-tier", "status-page", "soc2", "open-source-studio" ], "lastRelease": "2026-10-02", "graded": true, "anchor": { "graded": true, "score": 73.7, "grade": "BB", "agentReady": true, "rank": 73, "ranked": true, "rankOf": 722, "categoryRank": 2, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 74, "maintenance": 89, "payments": 40, "reliability": 77, "schema": 87, "security": 67, "transparency": 87 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-07" }, "negative": 0, "verdict": "Sanity publishes 26 OpenAPI specs covering 225 operations, and its hosted MCP server saves edits to drafts or release versions, with publishing as a separate call. The Content Lake does not run schema validation on API writes, and custom roles that limit a token to one dataset or document type are sold only on Enterprise plans.", "bestFor": "Teams that model content as structured documents and want an agent to draft, patch and stage changes in releases for a person to publish.", "strengths": [ "26 public OpenAPI specs covering 225 operations at www.sanity.io/docs/api/openapi, plus llms.txt and a Markdown copy of every documentation page", "MCP `patch_documents` saves to a draft or release version, never to published content, and `publish_documents` is a separate tool", "Mutations and actions accept `dryRun`, a caller-set `transactionId` and `ifRevisionID` for optimistic locking", "Free plan with 10,000 documents and 250,000 API requests a month, with Growth overage rates published per unit", "MCP server listed in the official MCP registry as io.sanity.www/mcp, with 30 versions published there between 15 July and 2 October 2026" ], "weaknesses": [ "Schema validation rules run only in Sanity Studio. The HTTP mutation API accepts a document without checking them", "Custom roles scoped to a dataset or document type are an Enterprise feature. Robot tokens on other plans take a built-in role across the project", "The MCP OAuth server lists one scope, `global`, and the server documents 53 tools with no toolset or read-only mode", "A status incident on 22 July 2026, marked major on api.sanity.io, stayed open for 6 hours 20 minutes with two recurrences", "The vulnerability disclosure page says the bug bounty pilot has closed and no rewards are paid" ], "agentNotes": [ "Pin a static dated version in every URL, such as `v2025-02-19`. Omitting `apiVersion` in `@sanity/client` falls back to `v1`.", "Validate documents against the schema yourself before an HTTP write, or run `sanity documents validate` afterwards. The Content Lake does not enforce schema rules.", "Back off on 429 for mutations yourself. `@sanity/client` retries queries five times but never retries mutations. The limit is 25 mutations a second per IP.", "Over MCP, call `create_version` before `patch_documents` when editing inside a release, then patch the returned version ID with the same `releaseId`.", "Use GROQ projections and slices to size results. MCP query responses are limited to 64 KiB, and a blocked Free project answers 402 with `plan_limit_reached`." ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 73.7 } ], "editorialScores": { "ergonomics": 74, "maintenance": 89, "payments": 40, "reliability": 77, "schema": 87, "security": 67, "transparency": 79 }, "provenanceScore": 95 }, "connect": { "install": "npx sanity@latest mcp configure", "http": "curl -H \"Authorization: Bearer \u003ctoken\u003e\" \"https://\u003cproject\u003e.api.sanity.io/v2021-06-07/data/query/production?query=*\"", "claudeCode": "claude mcp add Sanity -t http https://mcp.sanity.io --scope user", "config": { "mcpServers": { "Sanity": { "type": "http", "url": "https://mcp.sanity.io" } } } }, "letme": { "capability": "https://letme.dev/cms.content", "tool": "https://letme.dev/sanity" }, "area": "business", "unitPrices": [ { "item": "Growth", "unit": "seat-month", "usd": 15, "note": "up to 50 seats" }, { "item": "API requests over quota (Growth)", "unit": "1k-requests", "usd": 0.04, "note": "$1 per 25,000, after 250,000 a month included" }, { "item": "API CDN requests over quota (Growth)", "unit": "1k-requests", "usd": 0.004, "note": "$1 per 250,000, after 1 million a month included" }, { "item": "Bandwidth over quota (Growth)", "unit": "gb", "usd": 0.3, "note": "after 100 GB a month included" }, { "item": "Increased quota add-on (Growth)", "unit": "month", "usd": 299, "note": "50,000 documents, 1 million API requests, 5 million API CDN requests" }, { "item": "Extra dataset (Growth)", "unit": "month", "usd": 999, "note": "per dataset" } ], "provenance": { "legalEntity": "Sanity US Inc. (with Sanity AS)", "domain": "sanity.io", "domainRegistered": "2015-01-07", "endpointOnVendorDomain": true, "terms": "https://www.sanity.io/legal/tos", "privacy": "https://www.sanity.io/legal/privacy", "statusPage": "https://www.sanity-status.com", "changelog": "https://www.sanity.io/docs/changelog", "securityTxt": "valid", "checked": "2026-10-07", "notes": [ "The terms of service dated 12 August 2026 are entered into with Sanity US Inc. The privacy policy dated 4 May 2026 is that of Sanity AS and Sanity US Inc. Growth has its own terms at sanity.io/legal/tos-growth, dated 26 March 2026.", "The API answers at https://\u003cprojectId\u003e.api.sanity.io and https://api.sanity.io, and the MCP server at https://mcp.sanity.io.", "www.sanity.io/.well-known/security.txt names security@sanity.io and the disclosure policy at sanity.io/responsible-disclosure, and has no Expires field.", "status.sanity.io answers with the same Statuspage as www.sanity-status.com.", "RDAP for sanity.io gives a registration date of 2015-01-07." ], "score": 95 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/sanity.json", "live": { "slug": "sanity", "probe": { "target": "https://api.sanity.io", "method": "get", "lastAt": "2026-10-08T19:53:01.249148677Z", "lastOk": true, "lastStatus": 200, "lastMs": 31, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 36, "p95ms24h": 81, "samples24h": 50, "samples30d": 50, "days": [ { "date": "2026-10-08", "probes": 50, "ok": 50 } ] }, "vendorStatus": { "page": "https://www.sanity-status.com", "indicator": "minor", "summary": "Partially Degraded Service", "checkedAt": "2026-10-08T19:51:02.418930816Z" }, "versions": [ { "registry": "github", "name": "sanity-io/sanity", "version": "v6.18.0", "released": "2026-10-06", "seenAt": "2026-10-08T16:28:11.279439468Z" }, { "registry": "npm", "name": "@sanity/client", "version": "8.9.0", "seenAt": "2026-10-08T16:28:08.05519452Z" }, { "registry": "npm", "name": "sanity", "version": "6.18.0", "seenAt": "2026-10-08T16:28:09.308419229Z" } ], "githubStars": 6352, "npmWeekly": 4069926, "securityTxt": { "url": "https://sanity.io/.well-known/security.txt", "state": "valid", "checkedAt": "2026-10-08T15:38:50.777207368Z" }, "pages": [ { "url": "https://www.sanity.io/docs/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-10-08T18:30:11.065534137Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "906020038702" }, { "url": "https://www.sanity.io/legal/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-08T18:30:14.320679574Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "f0a780309f28" }, { "url": "https://www.sanity.io/legal/tos", "kind": "terms", "status": 200, "checkedAt": "2026-10-08T18:30:15.452818667Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "68f22ec5d44d" } ], "updatedAt": "2026-10-08T19:53:01.249148677Z" } }, "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Ghost Foundation", "b": "Sanity US Inc. and Sanity AS", "name": "Vendor" }, { "a": "no (local only)", "b": "https://api.sanity.io", "name": "Hosted endpoint" }, { "a": "HTTP", "b": "HTTP, Streamable HTTP", "name": "Transports" }, { "a": "API key", "b": "OAuth or key", "name": "Auth" }, { "a": "Freemium", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT, copyright Ghost Foundation. Ghost(Pro) is a paid hosting service under the Ghost Foundation's terms", "b": "Proprietary hosted service under Sanity's terms of service. Sanity Studio, the CLI, `@sanity/client` and the agent toolkit on GitHub are MIT", "name": "Licence" }, { "a": "none", "b": "53", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "not listed", "b": "io.sanity.www/mcp", "name": "MCP registry" }, { "a": "2026-10-07", "b": "2026-10-02", "name": "Last release" }, { "a": "no date given", "b": "no date given", "name": "Terms last updated" }, { "a": "no date given", "b": "no date given", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "yes", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "yes", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "56k stars, 24k npm/wk", "b": "6.4k stars, 4.1M npm/wk", "name": "Popularity" } ], "faq": [ { "answer": "Sanity scores 73.7 (BB) on agent readiness against Ghost's 58.3 (C), and leads in 5 of 7 scored categories. Ghost leads on payments \u0026 pricing.", "question": "Which is better for AI agents, Ghost or Sanity?" }, { "answer": "Ghost needs an API key. Sanity takes an API key or an OAuth sign-in.", "question": "Do Ghost and Sanity need an API key?" }, { "answer": "No hosted endpoint is listed for Ghost. Sanity has a hosted endpoint at https://api.sanity.io.", "question": "Can an agent call Ghost and Sanity without installing anything?" }, { "answer": "Ghost is open source (MIT, copyright Ghost Foundation. Ghost(Pro) is a paid hosting service under the Ghost Foundation's terms). No open-source release is listed for Sanity.", "question": "Are Ghost and Sanity open source?" } ], "goodFor": [ { "aheadOn": [ "Payments \u0026 pricing, 50 against 40" ], "also": [ "Open source" ], "goodFor": "A publication, blog or newsletter where an agent drafts posts and a person or a higher role publishes.", "slug": "ghost", "watchFor": "No OpenAPI or other machine-readable description of the Admin API was found in the docs or the repository" }, { "aheadOn": [ "Schema \u0026 documentation, 87 against 51", "Agent ergonomics, 74 against 69", "Security \u0026 auth, 67 against 56", "Transparency \u0026 trust, 87 against 72" ], "also": [ "Agent-ready, a grade of BB or better", "A hosted endpoint, with nothing to install", "No incidents deducted, where Ghost loses 7 points for them" ], "goodFor": "Teams that model content as structured documents and want an agent to draft, patch and stage changes in releases for a person to publish.", "slug": "sanity", "watchFor": "Schema validation rules run only in Sanity Studio. The HTTP mutation API accepts a document without checking them" } ], "job": { "capability": "cms.content", "name": "Cms content" }, "others": [ { "json": "https://www.anchorterminal.com/compare/contentstack-vs-ghost.json", "title": "Contentstack vs Ghost", "url": "https://www.anchorterminal.com/compare/contentstack-vs-ghost" }, { "json": "https://www.anchorterminal.com/compare/contentstack-vs-sanity.json", "title": "Contentstack vs Sanity", "url": "https://www.anchorterminal.com/compare/contentstack-vs-sanity" }, { "json": "https://www.anchorterminal.com/compare/datocms-vs-ghost.json", "title": "DatoCMS vs Ghost", "url": "https://www.anchorterminal.com/compare/datocms-vs-ghost" }, { "json": "https://www.anchorterminal.com/compare/datocms-vs-sanity.json", "title": "DatoCMS vs Sanity", "url": "https://www.anchorterminal.com/compare/datocms-vs-sanity" }, { "json": "https://www.anchorterminal.com/compare/directus-vs-ghost.json", "title": "Directus vs Ghost", "url": "https://www.anchorterminal.com/compare/directus-vs-ghost" }, { "json": "https://www.anchorterminal.com/compare/directus-vs-sanity.json", "title": "Directus vs Sanity", "url": "https://www.anchorterminal.com/compare/directus-vs-sanity" }, { "json": "https://www.anchorterminal.com/compare/ghost-vs-payload.json", "title": "Ghost vs Payload", "url": "https://www.anchorterminal.com/compare/ghost-vs-payload" }, { "json": "https://www.anchorterminal.com/compare/ghost-vs-storyblok.json", "title": "Ghost vs Storyblok", "url": "https://www.anchorterminal.com/compare/ghost-vs-storyblok" }, { "json": "https://www.anchorterminal.com/compare/ghost-vs-strapi.json", "title": "Ghost vs Strapi", "url": "https://www.anchorterminal.com/compare/ghost-vs-strapi" }, { "json": "https://www.anchorterminal.com/compare/ghost-vs-webflow.json", "title": "Ghost vs Webflow", "url": "https://www.anchorterminal.com/compare/ghost-vs-webflow" }, { "json": "https://www.anchorterminal.com/compare/ghost-vs-wordpress.json", "title": "Ghost vs WordPress", "url": "https://www.anchorterminal.com/compare/ghost-vs-wordpress" }, { "json": "https://www.anchorterminal.com/compare/payload-vs-sanity.json", "title": "Payload vs Sanity", "url": "https://www.anchorterminal.com/compare/payload-vs-sanity" }, { "json": "https://www.anchorterminal.com/compare/sanity-vs-storyblok.json", "title": "Sanity vs Storyblok", "url": "https://www.anchorterminal.com/compare/sanity-vs-storyblok" }, { "json": "https://www.anchorterminal.com/compare/sanity-vs-strapi.json", "title": "Sanity vs Strapi", "url": "https://www.anchorterminal.com/compare/sanity-vs-strapi" }, { "json": "https://www.anchorterminal.com/compare/sanity-vs-webflow.json", "title": "Sanity vs Webflow", "url": "https://www.anchorterminal.com/compare/sanity-vs-webflow" }, { "json": "https://www.anchorterminal.com/compare/sanity-vs-wordpress.json", "title": "Sanity vs WordPress", "url": "https://www.anchorterminal.com/compare/sanity-vs-wordpress" } ], "scores": [ { "by": 3, "edge": "ghost", "ghost": 80, "key": "reliability", "name": "Reliability", "sanity": 77, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 36, "edge": "sanity", "ghost": 51, "key": "schema", "name": "Schema \u0026 documentation", "sanity": 87, "weight": 13 }, { "by": 5, "edge": "sanity", "ghost": 69, "key": "ergonomics", "name": "Agent ergonomics", "sanity": 74, "weight": 13 }, { "by": 11, "edge": "sanity", "ghost": 56, "key": "security", "name": "Security \u0026 auth", "sanity": 67, "weight": 14 }, { "by": 10, "edge": "ghost", "ghost": 50, "key": "payments", "name": "Payments \u0026 pricing", "sanity": 40, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 4, "edge": "sanity", "ghost": 85, "key": "maintenance", "name": "Maintenance \u0026 community", "sanity": 89, "weight": 7 }, { "by": 15, "edge": "sanity", "ghost": 72, "key": "transparency", "name": "Transparency \u0026 trust", "sanity": 87, "weight": 7 } ], "summary": "Sanity scores 73.7 (BB) on agent readiness against Ghost's 58.3 (C), and leads in 5 of 7 scored categories. Ghost leads on payments \u0026 pricing. Both do cms content.", "verdicts": { "ghost": "A create needs only a title, updates are checked against `updated_at` so a stale write is refused, and a Contributor's staff token can draft without being able to publish. The Admin API has no OpenAPI file and one fixed permission set per integration, and 20 security advisories were published between 3 September and 1 October 2026.", "sanity": "Sanity publishes 26 OpenAPI specs covering 225 operations, and its hosted MCP server saves edits to drafts or release versions, with publishing as a separate call. The Content Lake does not run schema validation on API writes, and custom roles that limit a token to one dataset or document type are sold only on Enterprise plans." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/ghost-vs-sanity", "json": "https://www.anchorterminal.com/compare/ghost-vs-sanity.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/ghost-vs-sanity.md", "slim": "https://www.anchorterminal.com/compare/ghost-vs-sanity.min.md" }, "markdown": "Sanity scores 73.7 (BB) on agent readiness against Ghost's 58.3 (C), and leads in 5 of 7 scored categories. Ghost leads on payments \u0026 pricing. Both do cms content.\n\n- Ghost: grade C, 58.3/100, rank #455 of 722. Markdown https://www.anchorterminal.com/tools/ghost.md · JSON https://www.anchorterminal.com/api/v1/tools/ghost.json\n- Sanity: grade BB, 73.7/100, rank #73 of 722. Markdown https://www.anchorterminal.com/tools/sanity.md · JSON https://www.anchorterminal.com/api/v1/tools/sanity.json\n\n## Which one, for what\n\n### Ghost (C)\n\nGood for: A publication, blog or newsletter where an agent drafts posts and a person or a higher role publishes.\n\nAhead on:\n- Payments \u0026 pricing, 50 against 40\n\nAlso in its favour:\n- Open source\n\nWatch for: No OpenAPI or other machine-readable description of the Admin API was found in the docs or the repository\n\n### Sanity (BB)\n\nGood for: Teams that model content as structured documents and want an agent to draft, patch and stage changes in releases for a person to publish.\n\nAhead on:\n- Schema \u0026 documentation, 87 against 51\n- Agent ergonomics, 74 against 69\n- Security \u0026 auth, 67 against 56\n- Transparency \u0026 trust, 87 against 72\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n- A hosted endpoint, with nothing to install\n- No incidents deducted, where Ghost loses 7 points for them\n\nWatch for: Schema validation rules run only in Sanity Studio. The HTTP mutation API accepts a document without checking them\n\n\n## Score by category\n\n| Category | Weight | Ghost | Sanity | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 80 | 77 | Ghost +3 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 51 | 87 | Sanity +36 |\n| Agent ergonomics | 13% (16.2 this run) | 69 | 74 | Sanity +5 |\n| Security \u0026 auth | 14% (17.5 this run) | 56 | 67 | Sanity +11 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 50 | 40 | Ghost +10 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 85 | 89 | Sanity +4 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 72 | 87 | Sanity +15 |\n| Negative events | ≤15 | -7 | 0 | |\n| **Total** | | **58.3 · C** | **73.7 · BB** | |\n\n## Facts side by side\n\n| Fact | Ghost | Sanity |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Ghost Foundation | Sanity US Inc. and Sanity AS |\n| Hosted endpoint | no (local only) | `https://api.sanity.io` |\n| Transports | HTTP | HTTP, Streamable HTTP |\n| Auth | API key | OAuth or key |\n| Pricing | Freemium | Freemium |\n| x402 | no | no |\n| Licence | MIT, copyright Ghost Foundation. Ghost(Pro) is a paid hosting service under the Ghost Foundation's terms | Proprietary hosted service under Sanity's terms of service. Sanity Studio, the CLI, `@sanity/client` and the agent toolkit on GitHub are MIT |\n| Tools exposed | none | 53 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| MCP registry | not listed | `io.sanity.www/mcp` |\n| Last release | 2026-10-07 | 2026-10-02 |\n| Terms last updated | no date given | no date given |\n| Privacy policy last updated | no date given | no date given |\n| Customer content may train models | not found in the text | not found in the text |\n| Terms restrict automated access | yes | not found in the text |\n| Terms restrict benchmarking | not found in the text | yes |\n| Terms or service can change without notice | not found in the text | not found in the text |\n| Arbitration or class-action waiver | not found in the text | not found in the text |\n| Popularity | 56k stars, 24k npm/wk | 6.4k stars, 4.1M npm/wk |\n\n## Verdicts\n\n**Ghost.** A create needs only a title, updates are checked against `updated_at` so a stale write is refused, and a Contributor's staff token can draft without being able to publish. The Admin API has no OpenAPI file and one fixed permission set per integration, and 20 security advisories were published between 3 September and 1 October 2026.\n\n**Sanity.** Sanity publishes 26 OpenAPI specs covering 225 operations, and its hosted MCP server saves edits to drafts or release versions, with publishing as a separate call. The Content Lake does not run schema validation on API writes, and custom roles that limit a token to one dataset or document type are sold only on Enterprise plans.\n\n## Before you call either\n\n### Ghost\n\n1. Sign a fresh HS256 token for each batch of calls. Decode the hex secret to bytes, set `kid` to the key id, `aud` to `/admin/` and `exp` at most 5 minutes ahead\n2. Set `status` to `draft` on every create unless told to publish, and publish later with a PUT that sets `status` to `published`\n3. GET the post before each PUT and send its `updated_at` back. Tags and authors in a PUT replace the existing lists\n4. Send content as a Lexical JSON string, or add `?source=html` and send `html`. The HTML conversion is lossy unless wrapped in an HTML card\n5. Page through lists with `limit` up to 100 and `page`. Since Ghost 6.0 `limit=all` returns 100 items without an error\n\n### Sanity\n\n1. Pin a static dated version in every URL, such as `v2025-02-19`. Omitting `apiVersion` in `@sanity/client` falls back to `v1`.\n2. Validate documents against the schema yourself before an HTTP write, or run `sanity documents validate` afterwards. The Content Lake does not enforce schema rules.\n3. Back off on 429 for mutations yourself. `@sanity/client` retries queries five times but never retries mutations. The limit is 25 mutations a second per IP.\n4. Over MCP, call `create_version` before `patch_documents` when editing inside a release, then patch the returned version ID with the same `releaseId`.\n5. Use GROQ projections and slices to size results. MCP query responses are limited to 64 KiB, and a blocked Free project answers 402 with `plan_limit_reached`.\n\n## Questions\n\n### Which is better for AI agents, Ghost or Sanity?\n\nSanity scores 73.7 (BB) on agent readiness against Ghost's 58.3 (C), and leads in 5 of 7 scored categories. Ghost leads on payments \u0026 pricing.\n\n### Do Ghost and Sanity need an API key?\n\nGhost needs an API key. Sanity takes an API key or an OAuth sign-in.\n\n### Can an agent call Ghost and Sanity without installing anything?\n\nNo hosted endpoint is listed for Ghost. Sanity has a hosted endpoint at https://api.sanity.io.\n\n### Are Ghost and Sanity open source?\n\nGhost is open source (MIT, copyright Ghost Foundation. Ghost(Pro) is a paid hosting service under the Ghost Foundation's terms). No open-source release is listed for Sanity.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/ghost-vs-sanity.json, and with the fewest tokens: https://www.anchorterminal.com/compare/ghost-vs-sanity.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"ghost\", \"b\": \"sanity\"}`. From a terminal: `anchor compare ghost sanity`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/ghost.json and https://www.anchorterminal.com/api/v1/tools/sanity.json\n\n## Other comparisons with Ghost or Sanity\n\n- [Contentstack vs Ghost](https://www.anchorterminal.com/compare/contentstack-vs-ghost.md)\n- [Contentstack vs Sanity](https://www.anchorterminal.com/compare/contentstack-vs-sanity.md)\n- [DatoCMS vs Ghost](https://www.anchorterminal.com/compare/datocms-vs-ghost.md)\n- [DatoCMS vs Sanity](https://www.anchorterminal.com/compare/datocms-vs-sanity.md)\n- [Directus vs Ghost](https://www.anchorterminal.com/compare/directus-vs-ghost.md)\n- [Directus vs Sanity](https://www.anchorterminal.com/compare/directus-vs-sanity.md)\n- [Ghost vs Payload](https://www.anchorterminal.com/compare/ghost-vs-payload.md)\n- [Ghost vs Storyblok](https://www.anchorterminal.com/compare/ghost-vs-storyblok.md)\n- [Ghost vs Strapi](https://www.anchorterminal.com/compare/ghost-vs-strapi.md)\n- [Ghost vs Webflow](https://www.anchorterminal.com/compare/ghost-vs-webflow.md)\n- [Ghost vs WordPress](https://www.anchorterminal.com/compare/ghost-vs-wordpress.md)\n- [Payload vs Sanity](https://www.anchorterminal.com/compare/payload-vs-sanity.md)\n- [Sanity vs Storyblok](https://www.anchorterminal.com/compare/sanity-vs-storyblok.md)\n- [Sanity vs Strapi](https://www.anchorterminal.com/compare/sanity-vs-strapi.md)\n- [Sanity vs Webflow](https://www.anchorterminal.com/compare/sanity-vs-webflow.md)\n- [Sanity vs WordPress](https://www.anchorterminal.com/compare/sanity-vs-wordpress.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-08", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Ghost vs Sanity", "url": "" } ], "description": "Sanity scores 73.7 (BB) on agent readiness against Ghost's 58.3 (C), and leads in 5 of 7 scored categories. Ghost leads on payments \u0026 pricing. Both do cms content. Category scores, facts, verdicts and agent notes side by side.", "facts": [ "Ghost C 58.3", "Sanity BB 73.7", "scores" ], "h1": "Ghost vs Sanity", "image": "https://www.anchorterminal.com/assets/og/compare-ghost-vs-sanity.png", "path": "/compare/ghost-vs-sanity", "published": "2026-10-01", "section": "tools", "title": "Ghost vs Sanity for AI agents, C 58.3 vs BB 73.7 | Anchor Terminal", "toc": null, "updated": "2026-10-08", "url": "https://www.anchorterminal.com/compare/ghost-vs-sanity" }, "tokens": { "markdown": 2300, "slim": 680 }, "version": 1 }