Get an audit

Head to head · Cms content · October 2026 research run

Hygraph vs Storyblok

Hygraph scores 69.3 (B) on agent readiness against Storyblok's 67.7 (B), and leads in 2 of 7 scored categories. Storyblok leads on agent ergonomics, security & auth, maintenance & community and transparency & trust. Both do cms content.

HygraphHygraph GmbH · HTTP API B69.3/100#182 of 841 StoryblokStoryblok GmbH · HTTP API B67.7/100#226 of 841

Which one, for what

Hygraph B

Good for Teams on Hygraph who want an agent to create, localise and publish entries, upload assets or change schema, with delete and unpublish kept out of reach on MCP.

Ahead on

  • Reliability, 89 against 79
  • Schema & documentation, 78 against 68

Also in its favour

  • No incidents deducted, where Storyblok loses 3 points for them

Watch for

GraphQL error bodies carry a message and a requestId with no machine-readable code, and only asset transformation 429 responses are documented with Retry-After

Storyblok B

Good for Teams already on Storyblok who want an agent to draft, translate and publish stories or change component schemas under scoped, per-space permissions.

Ahead on

  • Agent ergonomics, 78 against 72
  • Security & auth, 73 against 63
  • Maintenance & community, 80 against 74
  • Transparency & trust, 80 against 60

Watch for

The Management API's OpenAPI spec sits in a private repository. Only the Content Delivery API has a public spec (OpenAPI 3.1, 14 operations)

Score by category

CategoryWeight this runHygraphStoryblokEdge
Reliability16%208979Hygraph +10
Performance10%pendingpendingpendingnot scored in this run
Schema & documentation13%16.27868Hygraph +10
Agent ergonomics13%16.27278Storyblok +6
Security & auth14%17.56373Storyblok +10
Payments & pricing10%12.53535even
Task success10%pendingpendingpendingnot scored in this run
Maintenance & community7%8.87480Storyblok +6
Transparency & trust7%8.86080Storyblok +20
Negative events≤150-3
Total69.3 · B67.7 · B

Facts side by side

FactHygraphStoryblok
KindHTTP APIHTTP API
VendorHygraph GmbHStoryblok GmbH
Hosted endpointhttps://mcp.hygraph.com/mcphttps://mapi.storyblok.com/v1
TransportsHTTP, Streamable HTTPHTTP, Streamable HTTP
AuthOAuth or keyOAuth or key
PricingFreemiumFreemium
x402nono
LicenceProprietary service under Hygraph GmbH's Terms of Service. The @hygraph/management-sdk package is MITProprietary service under Storyblok's terms. The SDKs, API clients and CLI in storyblok/monoblok are MIT
Tools exposed177
Read-only variant documentednono
llms.txtyesyes
Last release2026-09-302026-10-02
Terms last updatedno date givencouldn't be read
Privacy policy last updatedno date given2025-10-06
Customer content may train modelsnot found in the textcouldn't be read
Terms restrict automated accessnot found in the textcouldn't be read
Terms restrict benchmarkingyescouldn't be read
Terms or service can change without noticeyescouldn't be read
Arbitration or class-action waivernot found in the textcouldn't be read
Popularity52 stars, 8.6k npm/wk68 stars, 433k npm/wk

Verdicts

Hygraph

Tokens are limited by model, stage, locale and action, the GraphQL schema is typed and introspectable, and a hosted MCP server rejects delete and unpublish operations. Error bodies carry a message without a machine code, there are no idempotency keys, audit logs are Enterprise only, and no data processing agreement, sub-processor list or security.txt was found.

Storyblok

The hosted MCP server covers the whole Management API with seven tools, OAuth scopes split into read, write and publish per space, and a confirmation step on deletes. The Management API has no public OpenAPI spec, no idempotency keys and no monitor on the public status page, and publishing is a GET request.

Before you call either

Hygraph

  1. Send the Permanent Auth Token as Authorization: Bearer <token> to https://<region>.hygraph.com/v2/<projectId>/<environment>. Read the schema by introspection first, because every type is generated from the project's models
  2. Mutations write to DRAFT. Call publish<Model> with to: [PUBLISHED] as a separate mutation, and pass locales to write or publish a localisation
  3. Stay under the plan's limit for uncached requests (5 a second on Hobby, 25 on Growth) and its concurrent mutations (5 and 10). Back off exponentially on 429
  4. Upload an asset with createAsset, then POST the file to the returned pre-signed URL, or pass uploadUrl for a remote file. The asset stays ASSET_CREATE_PENDING until processed
  5. Schema changes go to the Management API through @hygraph/management-sdk or the MCP tool submit_batch_migration. Version restore has no documented mutation, so read <model>Version and write the old values back

Storyblok

  1. Pick the base URL by the space's region (mapi.storyblok.com for the EU, api-us, api-ca or api-ap otherwise). A token sent to the wrong region fails
  2. Create stories without publish to keep them as drafts, then call the publish endpoint. It is a GET, so never prefetch or blindly retry it
  3. Write translations as field__i18n__<code> keys inside the same content object, and set the component field to translatable first
  4. Upload an asset in three steps (signed response, POST to S3, finish upload). Through MCP the S3 step needs shell access for curl
  5. Stay under 3 calls a second on Starter and 6 on paid plans, and back off exponentially on 429. Saves that break a field's max_length return 422

Questions

Which is better for AI agents, Hygraph or Storyblok?

Hygraph scores 69.3 (B) on agent readiness against Storyblok's 67.7 (B), and leads in 2 of 7 scored categories. Storyblok leads on agent ergonomics, security & auth, maintenance & community and transparency & trust.

Do Hygraph and Storyblok need an API key?

Both take an API key or an OAuth sign-in.

Can an agent call Hygraph and Storyblok without installing anything?

Yes. Hygraph has a hosted endpoint at https://mcp.hygraph.com/mcp and Storyblok at https://mapi.storyblok.com/v1.

Other comparisons with Hygraph or Storyblok

Machine-readable

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.

Get an auditSee a sample report