{ "data": { "a": { "slug": "sanity", "name": "Sanity", "vendor": "Sanity US Inc. and Sanity AS", "vendorUrl": "https://www.sanity.io", "kind": "http-api", "category": "cms", "summary": "Sanity is a hosted headless CMS. Content is stored as JSON documents in the Content Lake, queried with GROQ and edited in the open-source Sanity Studio. Agents reach it through the HTTP API or the hosted MCP server at mcp.sanity.io.", "url": "https://www.anchorterminal.com/tools/sanity", "markdownUrl": "https://www.anchorterminal.com/tools/sanity.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/sanity.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/sanity.json", "repo": "https://github.com/sanity-io/sanity", "license": "Proprietary hosted service under Sanity's terms of service. Sanity Studio, the CLI, `@sanity/client` and the agent toolkit on GitHub are MIT", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://api.sanity.io", "packages": [ { "registry": "npm", "name": "@sanity/client" }, { "registry": "npm", "name": "sanity" }, { "registry": "packagist", "name": "sanity/sanity-php" } ], "auth": "mixed", "authNotes": "Self-serve. The HTTP API takes a Bearer token. Robot tokens are created in sanity.io/manage, with the CLI or through the Access API, carry a role (Viewer and Editor tokens on every plan), last until deleted unless given an expiry, and are shown once. Personal tokens last a year and act as the user. The MCP server at mcp.sanity.io uses OAuth with PKCE and dynamic client registration by default, with one scope named `global` and sessions of about 7 days, or accepts a token in the `Authorization` header. Custom roles that limit a token to a dataset or document type are Enterprise only. No app review or sales approval is needed.", "pricing": "freemium", "pricingNotes": "Free plan at $0 with no card, 20 seats, 10,000 documents, 250,000 API requests and 1 million API CDN requests a month, and hard caps that answer 402 when reached. Growth is $15 a seat a month with overage billed per unit. Enterprise is priced by sales. New projects get a Growth trial with Free plan quotas. An agent can start on the Free plan once a person has created the account (checked 2026-10-07).", "priceSummary": "$15 / seat-mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the documentation (llms-full.txt) or on the pricing page (checked 2026-10-07).", "endpoints": [] }, "toolCount": 53, "popularity": { "githubStars": 6352, "npmWeekly": 4069926, "pypiWeekly": null, "asOf": "2026-10-07" }, "docsUrl": "https://www.sanity.io/docs", "llmsTxt": "https://www.sanity.io/docs/llms.txt", "openapi": "https://www.sanity.io/docs/api/openapi", "registryName": "io.sanity.www/mcp", "capabilities": [ "cms.content", "cms.publish", "cms.assets", "cms.schema", "cms.localisation" ], "tags": [ "hosted", "headless-cms", "mcp", "oauth", "openapi", "llms-txt", "groq", "graphql", "javascript", "php", "free-tier", "status-page", "soc2", "open-source-studio" ], "lastRelease": "2026-10-02", "graded": true, "anchor": { "graded": true, "score": 73.7, "grade": "BB", "agentReady": true, "rank": 69, "ranked": true, "rankOf": 629, "categoryRank": 1, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 74, "maintenance": 89, "payments": 40, "reliability": 77, "schema": 87, "security": 67, "transparency": 87 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-07" }, "negative": 0, "verdict": "Sanity publishes 26 OpenAPI specs covering 225 operations, and its hosted MCP server saves edits to drafts or release versions, with publishing as a separate call. The Content Lake does not run schema validation on API writes, and custom roles that limit a token to one dataset or document type are sold only on Enterprise plans.", "bestFor": "Teams that model content as structured documents and want an agent to draft, patch and stage changes in releases for a person to publish.", "strengths": [ "26 public OpenAPI specs covering 225 operations at www.sanity.io/docs/api/openapi, plus llms.txt and a Markdown copy of every documentation page", "MCP `patch_documents` saves to a draft or release version, never to published content, and `publish_documents` is a separate tool", "Mutations and actions accept `dryRun`, a caller-set `transactionId` and `ifRevisionID` for optimistic locking", "Free plan with 10,000 documents and 250,000 API requests a month, with Growth overage rates published per unit", "MCP server listed in the official MCP registry as io.sanity.www/mcp, with 30 versions published there between 15 July and 2 October 2026" ], "weaknesses": [ "Schema validation rules run only in Sanity Studio. The HTTP mutation API accepts a document without checking them", "Custom roles scoped to a dataset or document type are an Enterprise feature. Robot tokens on other plans take a built-in role across the project", "The MCP OAuth server lists one scope, `global`, and the server documents 53 tools with no toolset or read-only mode", "A status incident on 22 July 2026, marked major on api.sanity.io, stayed open for 6 hours 20 minutes with two recurrences", "The vulnerability disclosure page says the bug bounty pilot has closed and no rewards are paid" ], "agentNotes": [ "Pin a static dated version in every URL, such as `v2025-02-19`. Omitting `apiVersion` in `@sanity/client` falls back to `v1`.", "Validate documents against the schema yourself before an HTTP write, or run `sanity documents validate` afterwards. The Content Lake does not enforce schema rules.", "Back off on 429 for mutations yourself. `@sanity/client` retries queries five times but never retries mutations. The limit is 25 mutations a second per IP.", "Over MCP, call `create_version` before `patch_documents` when editing inside a release, then patch the returned version ID with the same `releaseId`.", "Use GROQ projections and slices to size results. MCP query responses are limited to 64 KiB, and a blocked Free project answers 402 with `plan_limit_reached`." ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 73.7 } ], "editorialScores": { "ergonomics": 74, "maintenance": 89, "payments": 40, "reliability": 77, "schema": 87, "security": 67, "transparency": 79 }, "provenanceScore": 95 }, "connect": { "install": "npx sanity@latest mcp configure", "http": "curl -H \"Authorization: Bearer \u003ctoken\u003e\" \"https://\u003cproject\u003e.api.sanity.io/v2021-06-07/data/query/production?query=*\"", "claudeCode": "claude mcp add Sanity -t http https://mcp.sanity.io --scope user", "config": { "mcpServers": { "Sanity": { "type": "http", "url": "https://mcp.sanity.io" } } } }, "letme": { "capability": "https://letme.dev/cms.content", "tool": "https://letme.dev/sanity" }, "area": "business", "unitPrices": [ { "item": "Growth", "unit": "seat-month", "usd": 15, "note": "up to 50 seats" }, { "item": "API requests over quota (Growth)", "unit": "1k-requests", "usd": 0.04, "note": "$1 per 25,000, after 250,000 a month included" }, { "item": "API CDN requests over quota (Growth)", "unit": "1k-requests", "usd": 0.004, "note": "$1 per 250,000, after 1 million a month included" }, { "item": "Bandwidth over quota (Growth)", "unit": "gb", "usd": 0.3, "note": "after 100 GB a month included" }, { "item": "Increased quota add-on (Growth)", "unit": "month", "usd": 299, "note": "50,000 documents, 1 million API requests, 5 million API CDN requests" }, { "item": "Extra dataset (Growth)", "unit": "month", "usd": 999, "note": "per dataset" } ], "provenance": { "legalEntity": "Sanity US Inc. (with Sanity AS)", "domain": "sanity.io", "domainRegistered": "2015-01-07", "endpointOnVendorDomain": true, "terms": "https://www.sanity.io/legal/tos", "privacy": "https://www.sanity.io/legal/privacy", "statusPage": "https://www.sanity-status.com", "changelog": "https://www.sanity.io/docs/changelog", "securityTxt": "valid", "checked": "2026-10-07", "notes": [ "The terms of service dated 12 August 2026 are entered into with Sanity US Inc. The privacy policy dated 4 May 2026 is that of Sanity AS and Sanity US Inc. Growth has its own terms at sanity.io/legal/tos-growth, dated 26 March 2026.", "The API answers at https://\u003cprojectId\u003e.api.sanity.io and https://api.sanity.io, and the MCP server at https://mcp.sanity.io.", "www.sanity.io/.well-known/security.txt names security@sanity.io and the disclosure policy at sanity.io/responsible-disclosure, and has no Expires field.", "status.sanity.io answers with the same Statuspage as www.sanity-status.com.", "RDAP for sanity.io gives a registration date of 2015-01-07." ], "score": 95 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/sanity.json", "live": { "slug": "sanity", "probe": { "target": "https://api.sanity.io", "method": "get", "lastAt": "2026-10-08T18:20:39.63009082Z", "lastOk": true, "lastStatus": 200, "lastMs": 32, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 36, "p95ms24h": 82, "samples24h": 33, "samples30d": 33, "days": [ { "date": "2026-10-08", "probes": 33, "ok": 33 } ] }, "vendorStatus": { "page": "https://www.sanity-status.com", "indicator": "minor", "summary": "Partially Degraded Service", "checkedAt": "2026-10-08T18:22:18.769126143Z" }, "versions": [ { "registry": "github", "name": "sanity-io/sanity", "version": "v6.18.0", "released": "2026-10-06", "seenAt": "2026-10-08T16:28:11.279439468Z" }, { "registry": "npm", "name": "@sanity/client", "version": "8.9.0", "seenAt": "2026-10-08T16:28:08.05519452Z" }, { "registry": "npm", "name": "sanity", "version": "6.18.0", "seenAt": "2026-10-08T16:28:09.308419229Z" } ], "githubStars": 6352, "npmWeekly": 4069926, "securityTxt": { "url": "https://sanity.io/.well-known/security.txt", "state": "valid", "checkedAt": "2026-10-08T15:38:50.777207368Z" }, "updatedAt": "2026-10-08T18:22:18.769126143Z" } }, "answer": "Sanity scores 73.7 (BB) on agent readiness against Strapi's 65.7 (B), and leads in 5 of 7 scored categories. Strapi leads on reliability and payments \u0026 pricing.", "b": { "slug": "strapi", "name": "Strapi", "vendor": "Strapi, Inc.", "vendorUrl": "https://strapi.io", "kind": "http-api", "category": "cms", "summary": "Strapi is an open-source headless CMS for Node.js that its owner hosts, with a paid cloud. Agents create, localise and publish entries through generated REST and GraphQL APIs or a built-in MCP server.", "url": "https://www.anchorterminal.com/tools/strapi", "markdownUrl": "https://www.anchorterminal.com/tools/strapi.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/strapi.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/strapi.json", "repo": "https://github.com/strapi/strapi", "license": "MIT for the Community Edition. Code under ee/ directories is under Strapi's Enterprise Edition licence, and Strapi Cloud is a paid service under its own terms", "transports": [ "http", "streamable-http" ], "packages": [ { "registry": "npm", "name": "@strapi/strapi" }, { "registry": "npm", "name": "@strapi/client" } ], "auth": "api-key", "authNotes": "Self-serve tokens created in the admin panel of your own instance, with no app review or partner approval. API tokens authenticate the Content API under /api and are read-only, full access or custom per content type and action. Admin tokens authenticate admin routes and the MCP server at /mcp and hold a chosen subset of their owner's permissions, down to field and locale. Each kind is rejected on the other's routes. Both expire after 7, 30 or 90 days or never, can be regenerated, and travel as `Authorization: Bearer`. An Admin token is shown once.", "pricing": "freemium", "pricingNotes": "The Community Edition is free to self-host with unlimited seats, so an agent can start without a contract or a card. Growth is $45 a month for 3 seats ($15 per extra seat) with a 30-day trial and no card, and Enterprise is priced by sales. Strapi Cloud is $35, $90 or $450 a project a month, needs a card at project creation, and charges $1.50 per 25,000 API requests over the plan (checked 2026-10-07).", "priceSummary": "$45 / mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the documentation index, the pricing pages or the repository's MCP code (checked 2026-10-07).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 73289, "npmWeekly": 258813, "pypiWeekly": null, "asOf": "2026-10-07" }, "docsUrl": "https://docs.strapi.io", "llmsTxt": "https://docs.strapi.io/llms.txt", "capabilities": [ "cms.content", "cms.publish", "cms.localisation", "cms.assets", "cms.schema" ], "tags": [ "open-source", "self-hosted", "hosted", "mcp", "llms-txt", "webhooks", "graphql", "typescript", "status-page", "soc2" ], "lastRelease": "2026-10-07", "graded": true, "anchor": { "graded": true, "score": 65.7, "grade": "B", "agentReady": false, "rank": 231, "ranked": true, "rankOf": 629, "categoryRank": 4, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 65, "maintenance": 87, "payments": 50, "reliability": 82, "schema": 80, "security": 66, "transparency": 72 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-07" }, "negative": -6, "negativeNotes": [ "13 May 2026. Strapi published two critical advisories. GHSA-rjg2-95x7-8qmx (CVE-2026-27886) leaked sensitive data through relation filters in versions 4.0.0 to 5.36.1, and GHSA-3xcq-8mjw-h6mx (CVE-2026-22599) was SQL injection in the Content-Type Builder up to 5.33.1 and 4.26.0. Both were fixed in earlier releases (5.37.0, 5.33.2 and 4.26.1) and published by the vendor, and we found no report of exploitation, so we deduct 6 of a possible 15. https://github.com/strapi/strapi/security/advisories/GHSA-rjg2-95x7-8qmx ; https://github.com/strapi/strapi/security/advisories/GHSA-3xcq-8mjw-h6mx" ], "verdict": "The built-in MCP server shows an agent only the tools, fields and locales its Admin token permits, and content tools create drafts by default. Rollback is the limit. Content History is a paid feature and records admin panel edits only, so API and MCP writes leave no version to restore, and the MCP server can't upload files.", "bestFor": "Teams that want to own their CMS and let an agent draft, localise and publish entries under a narrow token.", "strengths": [ "Admin tokens carry a chosen subset of the owner's permissions, down to content type, action, field and locale, with 7, 30 or 90 day expiry", "The MCP server lists only the tools a token may use and narrows each input and output schema to permitted fields", "Media delete tools preview by default through `dryRun` and name what would be removed before anything is deleted", "Weekly releases, 13 tagged versions between 15 July and 7 October 2026, with release notes per version", "MIT Community Edition, free to self-host with unlimited seats, plus llms.txt, llms-full.txt and Markdown copies of every docs page" ], "weaknesses": [ "Content History keeps no version for REST, GraphQL or MCP writes, and exists only on Growth and Enterprise plans", "Audit Logs and Review Workflows are Enterprise only, so the free edition has no record of what an agent changed", "A REST POST or PUT publishes immediately unless the request passes `status=draft`", "The MCP server can't upload files, describes dynamic zones as untyped arrays and sets no read-only or destructive annotations", "Two critical advisories were published on 13 May 2026, a data leak through relation filters and SQL injection in the Content-Type Builder, both fixed earlier" ], "agentNotes": [ "Pass `status=draft` on every REST POST and PUT. Without it the Content API publishes the entry at once", "Use an Admin token for `/mcp` and admin routes and an API token for `/api`. Each kind is rejected on the other's routes", "Upload files with multipart POST to `/api/upload` first, then reference the returned file id in the entry. MCP tools can't upload", "Call `media_delete_assets` and `media_delete_folder` without `dryRun` first to preview, and take asset ids only from `media_list_assets`", "Keep your own copy of an entry before updating it. API and MCP writes create no Content History version" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 65.7 } ], "editorialScores": { "ergonomics": 65, "maintenance": 87, "payments": 50, "reliability": 82, "schema": 80, "security": 66, "transparency": 75 }, "provenanceScore": 68 }, "connect": { "install": "npx create-strapi@latest", "http": "curl 'http://localhost:1337/api/restaurants?status=draft' \\\n -H \"Authorization: Bearer $STRAPI_API_TOKEN\"", "claudeCode": "claude mcp add strapi-mcp --transport http http://localhost:1337/mcp -H \"Authorization: Bearer YOUR_ADMIN_TOKEN\"", "config": { "mcpServers": { "strapi-mcp": { "headers": { "Authorization": "Bearer YOUR_ADMIN_TOKEN" }, "type": "streamable-http", "url": "http://localhost:1337/mcp" } } } }, "letme": { "capability": "https://letme.dev/cms.content", "tool": "https://letme.dev/strapi" }, "area": "business", "unitPrices": [ { "item": "Community Edition, self-hosted", "unit": "month", "usd": 0, "note": "MIT, unlimited seats, you pay for your own hosting" }, { "item": "Growth, self-hosted", "unit": "month", "usd": 45, "note": "3 seats included, $15 per extra seat" }, { "item": "Strapi Cloud Starter", "unit": "month", "usd": 35, "note": "per project, 100,000 API requests" }, { "item": "Strapi Cloud Pro", "unit": "month", "usd": 90, "note": "per project, 1 million API requests" }, { "item": "Strapi Cloud Business", "unit": "month", "usd": 450, "note": "per project, 10 million API requests" }, { "item": "Strapi Cloud API requests over the plan", "unit": "1k-requests", "usd": 0.06, "note": "$1.50 per 25,000" } ], "provenance": { "legalEntity": "Strapi, Inc.", "domain": "strapi.io", "domainRegistered": "2015-09-21", "endpointOnVendorDomain": false, "terms": "https://strapi.io/cloud-legal", "privacy": "https://strapi.io/privacy", "statusPage": "https://status.strapi.io", "changelog": "https://github.com/strapi/strapi/releases", "securityTxt": "none", "checked": "2026-10-07", "notes": [ "The Strapi Cloud terms (effective 7 October 2026) name Strapi, Inc., 548 Market St, PMB 60577, San Francisco, California 94104. The repository's copyright line names Strapi Solutions SAS, and the privacy policy gives Strapi Solutions, 128 rue de la Boétie, 75008 Paris.", "A self-hosted install answers on its owner's domain. Strapi Cloud projects answer at https://\u003cproject\u003e.strapiapp.com.", "https://strapi.io/.well-known/security.txt returned 404 to our reader on 7 October 2026. The repository holds a .well-known/security.txt with an Expires of 20 May 2027 and a Canonical line pointing at that URL.", "RDAP for strapi.io gives a registration date of 2015-09-21.", "The status page runs on Better Stack and covers Strapi Cloud, the website and the docs, not self-hosted installs." ], "score": 68 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/strapi.json", "live": { "slug": "strapi", "vendorStatus": { "page": "https://status.strapi.io", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-10-08T17:51:13.949868717Z" }, "versions": [ { "registry": "github", "name": "strapi/strapi", "version": "v5.57.0", "released": "2026-10-07", "seenAt": "2026-10-08T16:30:39.413193839Z" }, { "registry": "npm", "name": "@strapi/client", "version": "1.6.2", "seenAt": "2026-10-08T16:30:37.897146773Z" }, { "registry": "npm", "name": "@strapi/strapi", "version": "5.57.0", "seenAt": "2026-10-08T16:30:37.072939352Z" } ], "githubStars": 73292, "npmWeekly": 258813, "securityTxt": { "url": "https://strapi.io/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-08T15:39:07.890617672Z" }, "pages": [ { "url": "https://strapi.io/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-08T18:24:54.221268289Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "9a83a678305b" }, { "url": "https://strapi.io/cloud-legal", "kind": "terms", "status": 200, "checkedAt": "2026-10-08T18:24:51.925906428Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "e789fbc0c6c8" } ], "updatedAt": "2026-10-08T18:24:54.221268289Z" } }, "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Sanity US Inc. and Sanity AS", "b": "Strapi, Inc.", "name": "Vendor" }, { "a": "https://api.sanity.io", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "HTTP, Streamable HTTP", "b": "HTTP, Streamable HTTP", "name": "Transports" }, { "a": "OAuth or key", "b": "API key", "name": "Auth" }, { "a": "Freemium", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Proprietary hosted service under Sanity's terms of service. Sanity Studio, the CLI, `@sanity/client` and the agent toolkit on GitHub are MIT", "b": "MIT for the Community Edition. Code under ee/ directories is under Strapi's Enterprise Edition licence, and Strapi Cloud is a paid service under its own terms", "name": "Licence" }, { "a": "53", "b": "none", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "io.sanity.www/mcp", "b": "not listed", "name": "MCP registry" }, { "a": "2026-10-02", "b": "2026-10-07", "name": "Last release" }, { "a": "no date given", "b": "2026-10-07", "name": "Terms last updated" }, { "a": "no date given", "b": "2023-03-01", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "yes", "name": "Terms restrict automated access" }, { "a": "yes", "b": "yes", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "yes", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "yes", "name": "Arbitration or class-action waiver" }, { "a": "6.4k stars, 4.1M npm/wk", "b": "73k stars, 259k npm/wk", "name": "Popularity" } ], "faq": [ { "answer": "Sanity scores 73.7 (BB) on agent readiness against Strapi's 65.7 (B), and leads in 5 of 7 scored categories. Strapi leads on reliability and payments \u0026 pricing.", "question": "Which is better for AI agents, Sanity or Strapi?" }, { "answer": "Sanity takes an API key or an OAuth sign-in. Strapi needs an API key.", "question": "Do Sanity and Strapi need an API key?" }, { "answer": "Sanity has a hosted endpoint at https://api.sanity.io. No hosted endpoint is listed for Strapi.", "question": "Can an agent call Sanity and Strapi without installing anything?" }, { "answer": "No open-source release is listed for Sanity. Strapi is open source (MIT for the Community Edition. Code under ee/ directories is under Strapi's Enterprise Edition licence, and Strapi Cloud is a paid service under its own terms).", "question": "Are Sanity and Strapi open source?" } ], "goodFor": [ { "aheadOn": [ "Schema \u0026 documentation, 87 against 80", "Agent ergonomics, 74 against 65", "Transparency \u0026 trust, 87 against 72" ], "also": [ "Agent-ready, a grade of BB or better", "A hosted endpoint, with nothing to install", "No incidents deducted, where Strapi loses 6 points for them" ], "goodFor": "Teams that model content as structured documents and want an agent to draft, patch and stage changes in releases for a person to publish.", "slug": "sanity", "watchFor": "Schema validation rules run only in Sanity Studio. The HTTP mutation API accepts a document without checking them" }, { "aheadOn": [ "Reliability, 82 against 77", "Payments \u0026 pricing, 50 against 40" ], "also": [ "Open source" ], "goodFor": "Teams that want to own their CMS and let an agent draft, localise and publish entries under a narrow token.", "slug": "strapi", "watchFor": "Content History keeps no version for REST, GraphQL or MCP writes, and exists only on Growth and Enterprise plans" } ], "job": { "capability": "cms.content", "name": "Cms content" }, "others": [ { "json": "https://www.anchorterminal.com/compare/contentstack-vs-sanity.json", "title": "Contentstack vs Sanity", "url": "https://www.anchorterminal.com/compare/contentstack-vs-sanity" }, { "json": "https://www.anchorterminal.com/compare/contentstack-vs-strapi.json", "title": "Contentstack vs Strapi", "url": "https://www.anchorterminal.com/compare/contentstack-vs-strapi" }, { "json": "https://www.anchorterminal.com/compare/ghost-vs-sanity.json", "title": "Ghost vs Sanity", "url": "https://www.anchorterminal.com/compare/ghost-vs-sanity" }, { "json": "https://www.anchorterminal.com/compare/ghost-vs-strapi.json", "title": "Ghost vs Strapi", "url": "https://www.anchorterminal.com/compare/ghost-vs-strapi" }, { "json": "https://www.anchorterminal.com/compare/sanity-vs-storyblok.json", "title": "Sanity vs Storyblok", "url": "https://www.anchorterminal.com/compare/sanity-vs-storyblok" }, { "json": "https://www.anchorterminal.com/compare/sanity-vs-webflow.json", "title": "Sanity vs Webflow", "url": "https://www.anchorterminal.com/compare/sanity-vs-webflow" }, { "json": "https://www.anchorterminal.com/compare/sanity-vs-wordpress.json", "title": "Sanity vs WordPress", "url": "https://www.anchorterminal.com/compare/sanity-vs-wordpress" }, { "json": "https://www.anchorterminal.com/compare/storyblok-vs-strapi.json", "title": "Storyblok vs Strapi", "url": "https://www.anchorterminal.com/compare/storyblok-vs-strapi" }, { "json": "https://www.anchorterminal.com/compare/strapi-vs-webflow.json", "title": "Strapi vs Webflow", "url": "https://www.anchorterminal.com/compare/strapi-vs-webflow" }, { "json": "https://www.anchorterminal.com/compare/strapi-vs-wordpress.json", "title": "Strapi vs WordPress", "url": "https://www.anchorterminal.com/compare/strapi-vs-wordpress" } ], "scores": [ { "by": 5, "edge": "strapi", "key": "reliability", "name": "Reliability", "sanity": 77, "strapi": 82, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 7, "edge": "sanity", "key": "schema", "name": "Schema \u0026 documentation", "sanity": 87, "strapi": 80, "weight": 13 }, { "by": 9, "edge": "sanity", "key": "ergonomics", "name": "Agent ergonomics", "sanity": 74, "strapi": 65, "weight": 13 }, { "by": 1, "edge": "sanity", "key": "security", "name": "Security \u0026 auth", "sanity": 67, "strapi": 66, "weight": 14 }, { "by": 10, "edge": "strapi", "key": "payments", "name": "Payments \u0026 pricing", "sanity": 40, "strapi": 50, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 2, "edge": "sanity", "key": "maintenance", "name": "Maintenance \u0026 community", "sanity": 89, "strapi": 87, "weight": 7 }, { "by": 15, "edge": "sanity", "key": "transparency", "name": "Transparency \u0026 trust", "sanity": 87, "strapi": 72, "weight": 7 } ], "summary": "Sanity scores 73.7 (BB) on agent readiness against Strapi's 65.7 (B), and leads in 5 of 7 scored categories. Strapi leads on reliability and payments \u0026 pricing. Both do cms content.", "verdicts": { "sanity": "Sanity publishes 26 OpenAPI specs covering 225 operations, and its hosted MCP server saves edits to drafts or release versions, with publishing as a separate call. The Content Lake does not run schema validation on API writes, and custom roles that limit a token to one dataset or document type are sold only on Enterprise plans.", "strapi": "The built-in MCP server shows an agent only the tools, fields and locales its Admin token permits, and content tools create drafts by default. Rollback is the limit. Content History is a paid feature and records admin panel edits only, so API and MCP writes leave no version to restore, and the MCP server can't upload files." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/sanity-vs-strapi", "json": "https://www.anchorterminal.com/compare/sanity-vs-strapi.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/sanity-vs-strapi.md", "slim": "https://www.anchorterminal.com/compare/sanity-vs-strapi.min.md" }, "markdown": "Sanity scores 73.7 (BB) on agent readiness against Strapi's 65.7 (B), and leads in 5 of 7 scored categories. Strapi leads on reliability and payments \u0026 pricing. Both do cms content.\n\n- Sanity: grade BB, 73.7/100, rank #69 of 629. Markdown https://www.anchorterminal.com/tools/sanity.md · JSON https://www.anchorterminal.com/api/v1/tools/sanity.json\n- Strapi: grade B, 65.7/100, rank #231 of 629. Markdown https://www.anchorterminal.com/tools/strapi.md · JSON https://www.anchorterminal.com/api/v1/tools/strapi.json\n\n## Which one, for what\n\n### Sanity (BB)\n\nGood for: Teams that model content as structured documents and want an agent to draft, patch and stage changes in releases for a person to publish.\n\nAhead on:\n- Schema \u0026 documentation, 87 against 80\n- Agent ergonomics, 74 against 65\n- Transparency \u0026 trust, 87 against 72\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n- A hosted endpoint, with nothing to install\n- No incidents deducted, where Strapi loses 6 points for them\n\nWatch for: Schema validation rules run only in Sanity Studio. The HTTP mutation API accepts a document without checking them\n\n### Strapi (B)\n\nGood for: Teams that want to own their CMS and let an agent draft, localise and publish entries under a narrow token.\n\nAhead on:\n- Reliability, 82 against 77\n- Payments \u0026 pricing, 50 against 40\n\nAlso in its favour:\n- Open source\n\nWatch for: Content History keeps no version for REST, GraphQL or MCP writes, and exists only on Growth and Enterprise plans\n\n\n## Score by category\n\n| Category | Weight | Sanity | Strapi | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 77 | 82 | Strapi +5 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 87 | 80 | Sanity +7 |\n| Agent ergonomics | 13% (16.2 this run) | 74 | 65 | Sanity +9 |\n| Security \u0026 auth | 14% (17.5 this run) | 67 | 66 | Sanity +1 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 40 | 50 | Strapi +10 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 89 | 87 | Sanity +2 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 87 | 72 | Sanity +15 |\n| Negative events | ≤15 | 0 | -6 | |\n| **Total** | | **73.7 · BB** | **65.7 · B** | |\n\n## Facts side by side\n\n| Fact | Sanity | Strapi |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Sanity US Inc. and Sanity AS | Strapi, Inc. |\n| Hosted endpoint | `https://api.sanity.io` | no (local only) |\n| Transports | HTTP, Streamable HTTP | HTTP, Streamable HTTP |\n| Auth | OAuth or key | API key |\n| Pricing | Freemium | Freemium |\n| x402 | no | no |\n| Licence | Proprietary hosted service under Sanity's terms of service. Sanity Studio, the CLI, `@sanity/client` and the agent toolkit on GitHub are MIT | MIT for the Community Edition. Code under ee/ directories is under Strapi's Enterprise Edition licence, and Strapi Cloud is a paid service under its own terms |\n| Tools exposed | 53 | none |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| MCP registry | `io.sanity.www/mcp` | not listed |\n| Last release | 2026-10-02 | 2026-10-07 |\n| Terms last updated | no date given | 2026-10-07 |\n| Privacy policy last updated | no date given | 2023-03-01 |\n| Customer content may train models | not found in the text | not found in the text |\n| Terms restrict automated access | not found in the text | yes |\n| Terms restrict benchmarking | yes | yes |\n| Terms or service can change without notice | not found in the text | yes |\n| Arbitration or class-action waiver | not found in the text | yes |\n| Popularity | 6.4k stars, 4.1M npm/wk | 73k stars, 259k npm/wk |\n\n## Verdicts\n\n**Sanity.** Sanity publishes 26 OpenAPI specs covering 225 operations, and its hosted MCP server saves edits to drafts or release versions, with publishing as a separate call. The Content Lake does not run schema validation on API writes, and custom roles that limit a token to one dataset or document type are sold only on Enterprise plans.\n\n**Strapi.** The built-in MCP server shows an agent only the tools, fields and locales its Admin token permits, and content tools create drafts by default. Rollback is the limit. Content History is a paid feature and records admin panel edits only, so API and MCP writes leave no version to restore, and the MCP server can't upload files.\n\n## Before you call either\n\n### Sanity\n\n1. Pin a static dated version in every URL, such as `v2025-02-19`. Omitting `apiVersion` in `@sanity/client` falls back to `v1`.\n2. Validate documents against the schema yourself before an HTTP write, or run `sanity documents validate` afterwards. The Content Lake does not enforce schema rules.\n3. Back off on 429 for mutations yourself. `@sanity/client` retries queries five times but never retries mutations. The limit is 25 mutations a second per IP.\n4. Over MCP, call `create_version` before `patch_documents` when editing inside a release, then patch the returned version ID with the same `releaseId`.\n5. Use GROQ projections and slices to size results. MCP query responses are limited to 64 KiB, and a blocked Free project answers 402 with `plan_limit_reached`.\n\n### Strapi\n\n1. Pass `status=draft` on every REST POST and PUT. Without it the Content API publishes the entry at once\n2. Use an Admin token for `/mcp` and admin routes and an API token for `/api`. Each kind is rejected on the other's routes\n3. Upload files with multipart POST to `/api/upload` first, then reference the returned file id in the entry. MCP tools can't upload\n4. Call `media_delete_assets` and `media_delete_folder` without `dryRun` first to preview, and take asset ids only from `media_list_assets`\n5. Keep your own copy of an entry before updating it. API and MCP writes create no Content History version\n\n## Questions\n\n### Which is better for AI agents, Sanity or Strapi?\n\nSanity scores 73.7 (BB) on agent readiness against Strapi's 65.7 (B), and leads in 5 of 7 scored categories. Strapi leads on reliability and payments \u0026 pricing.\n\n### Do Sanity and Strapi need an API key?\n\nSanity takes an API key or an OAuth sign-in. Strapi needs an API key.\n\n### Can an agent call Sanity and Strapi without installing anything?\n\nSanity has a hosted endpoint at https://api.sanity.io. No hosted endpoint is listed for Strapi.\n\n### Are Sanity and Strapi open source?\n\nNo open-source release is listed for Sanity. Strapi is open source (MIT for the Community Edition. Code under ee/ directories is under Strapi's Enterprise Edition licence, and Strapi Cloud is a paid service under its own terms).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/sanity-vs-strapi.json, and with the fewest tokens: https://www.anchorterminal.com/compare/sanity-vs-strapi.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"sanity\", \"b\": \"strapi\"}`. From a terminal: `anchor compare sanity strapi`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/sanity.json and https://www.anchorterminal.com/api/v1/tools/strapi.json\n\n## Other comparisons with Sanity or Strapi\n\n- [Contentstack vs Sanity](https://www.anchorterminal.com/compare/contentstack-vs-sanity.md)\n- [Contentstack vs Strapi](https://www.anchorterminal.com/compare/contentstack-vs-strapi.md)\n- [Ghost vs Sanity](https://www.anchorterminal.com/compare/ghost-vs-sanity.md)\n- [Ghost vs Strapi](https://www.anchorterminal.com/compare/ghost-vs-strapi.md)\n- [Sanity vs Storyblok](https://www.anchorterminal.com/compare/sanity-vs-storyblok.md)\n- [Sanity vs Webflow](https://www.anchorterminal.com/compare/sanity-vs-webflow.md)\n- [Sanity vs WordPress](https://www.anchorterminal.com/compare/sanity-vs-wordpress.md)\n- [Storyblok vs Strapi](https://www.anchorterminal.com/compare/storyblok-vs-strapi.md)\n- [Strapi vs Webflow](https://www.anchorterminal.com/compare/strapi-vs-webflow.md)\n- [Strapi vs WordPress](https://www.anchorterminal.com/compare/strapi-vs-wordpress.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-08", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Sanity vs Strapi", "url": "" } ], "description": "Sanity scores 73.7 (BB) on agent readiness against Strapi's 65.7 (B), and leads in 5 of 7 scored categories. Strapi leads on reliability and payments \u0026 pricing. Both do cms content. Category scores, facts, verdicts and agent notes side by side.", "facts": [ "Sanity BB 73.7", "Strapi B 65.7", "scores" ], "h1": "Sanity vs Strapi", "image": "https://www.anchorterminal.com/assets/og/compare-sanity-vs-strapi.png", "path": "/compare/sanity-vs-strapi", "published": "2026-10-01", "section": "tools", "title": "Sanity vs Strapi for AI agents, BB 73.7 vs B 65.7 | Anchor Terminal", "toc": null, "updated": "2026-10-08", "url": "https://www.anchorterminal.com/compare/sanity-vs-strapi" }, "tokens": { "markdown": 2200, "slim": 730 }, "version": 1 }