BCMS

by Becomes tech, LLC HTTP API in CMS & website publishing

Hosted

Becomes tech, LLC · thebcms.com · who's behind it

BCMS is a hosted headless CMS from Becomes tech, LLC. People edit structured content in a dashboard, and agents work with templates, entries, media and languages through a REST API, a JavaScript client, a CLI and a remote MCP server.

Best for Small sites and agencies that want a cheap hosted CMS an agent can edit.

Viewed under 500 times in the last 30 days · Claim it, free, to see who finds it

Claim this listing

Is this your product? Claim it to see how agents find it: lookups through the API, MCP and letme, the comparisons it's in, and what people search for in CMS. Free, and it never changes the grade. Or verify it, or log in if it's already claimed.

Assessment. BCMS gives agents 45 MCP tools over templates, entries, statuses, history and media, with keys scoped per template and agent guidance in llms.txt, from $5 a month. The MCP key can only travel in the URL, and no status page, rate limits, changelog or security policy were found.

Facts

Access how an agent reaches and pays for it
Transport
HTTP, Streamable HTTP
Endpoint
https://app.thebcms.com/api/v3/mcp
Auth
API key
Pricing
Paid · $5 / mo
x402
No
Licence
not stated
Tools exposed
45
Where it lives packages, source, docs and releases
Packages
npm @thebcms/client
llms.txt
published
Last release
npm / week
396
From our research 6 facts checked against the vendor's pages
Surface listed
BCMS Cloud's REST API v3 and remote MCP server at app.thebcms.com, read from www.thebcms.com (llms.txt, docs llms.txt and llms-full.txt, mcp.md, pricing.md, the MCP server card, terms, privacy and about pages) and the bcms GitHub organisation on 6 November 2026. app.thebcms.com/robots.txt disallows all paths, so the API reference there wasn't read. No account was made and no tool was called
MCP tools
Templates (5), entries (5), entry statuses (5), entry history (4), groups (5), widgets (5), languages (6), media (5), pointer links (2) and trash (3)
Drafts and history
Entry statuses such as draft, in review and published; entry history readable through MCP; log history of 2 days on Hobby and 30 on Pro
Agent material
llms.txt with when to use and when not to use BCMS, a public SKILL.md, an agent skills index and a bcms-content CLI for scripts
Open-source edition
github.com/bcms/cms is MIT and marked unmaintained since October 2024; the current product is closed
Legal entity
Becomes tech, LLC, a Delaware limited liability company, 1111b South Governors Avenue, Dover, per the terms and privacy policy

Facts verified 6 November 2026 from vendor docs, repositories and package registries. JSON · Markdown

Strengths

  • Remote MCP server covering templates, entries, statuses, entry history, media, languages and trash
  • Keys scoped to the templates and media an agent needs, with schema tools gated separately
  • llms.txt that says when to use BCMS and when not to, plus a public SKILL.md
  • Entry history and trash readable through MCP, so an agent can trace and recover changes
  • 14-day trial with no card, then plans from $5 a month

Weaknesses

  • The MCP key is accepted only as a URL query parameter
  • No status page, documented rate limits, SLA or changelog found
  • No security.txt, disclosure policy or certification found
  • The JavaScript client hasn't been released since March 2026
  • No self-hosted edition; the open-source repository has been unmaintained since October 2024

Before you call it notes for agents

  1. Keep the MCP URL out of logs and shared config, since the key is inside it
  2. Call get-all-templates first and mutate only once you have template and entry ids
  3. Ask for a key scoped to the templates the task needs, without schema permission unless it changes the model
  4. List and confirm entry ids with the user before calling delete-entries
  5. Use the bcms-content CLI for scripted runs that need JSON output and exit codes

Who's behind it provenance 56/100

  • Legal entity namedBecomes tech, LLC20/20
  • Domain agethebcms.com, no registry record we could read0/15
  • Endpoint on the vendor's domainapp.thebcms.com15/15
  • Terms of serviceread, states 6 of the 7 things a reader expects, and has 1 clause that costs points7.1/10
  • Privacy policyread, states 8 of the 8 things a reader expects10/10
  • Status pagenot found0/10
  • Changelognot found0/10
  • security.txtnot found0/10
  • People named2 named with their role, none with a public profile7/10
  • Support routehelp pages, a community5/5

Terms and privacy, as read

Terms of service dated 2026-07-30, states 6 of 7, 1 to know

TL;DR Dated 2026-07-30. States 6 of the 7 things a reader expects, and we didn't find a service level. To know before relying on it, limits on automated access.

Restricts automated accesscosts points
Scrape, crawl, or harvest the Services in a way that burdens or abuses them, except through our documented APIs within rate limits

A rule against bots, scrapers or automated means can cover an agent, depending on how the vendor reads it.

Gives the date it was last updated Last updated 2026-07-30
Last updated: July 30, 2026

Without a date nobody can tell which version they agreed to.

Names the governing law or courts The law of the State of Delaware
These Terms are governed by the laws of the State of Delaware, USA, without regard to conflict-of-law rules.

Says where a dispute would be heard and under whose law.

States a limit on its liability Capped at the fees paid in the 12 months before the claim
TO THE MAXIMUM EXTENT PERMITTED BY LAW, OUR TOTAL LIABILITY FOR ALL CLAIMS RELATING TO THE SERVICES WILL NOT EXCEED THE GREATER OF (A) THE AMOUNTS YOU PAID TO BECOMES FOR THE SERVICES IN THE TWELVE (12) MONTHS BEFORE THE CLAIM, OR (B) ONE HUNDRED U.S.

Says the most the vendor would owe if the service causes a loss.

Says how the agreement or account can be ended
We may suspend or terminate accounts that are inaccurate, abusive, unpaid, inactive after trial expiry, or otherwise in violation of these Terms.

Says when the vendor can cut off access and what notice it gives.

Says how changes to the terms are announced Changes are posted, with no other notice named
We will post the updated Terms on this page and update the "Last updated" date.

Says whether a customer hears about a change before it binds them.

Lists what users may not do
You may not assign these Terms without our consent.

The acceptable-use rules an agent acting for a user has to stay inside.

Refers to a service level or uptime commitment

Not found in the text.

Says whether availability is promised and where the promise is written.

The document · read 2026-11-06 · 1,793 words

Privacy policy dated 2026-07-30, states 8 of 8

TL;DR Dated 2026-07-30. States all 8 things a reader expects. The rules found no clause to flag.

Gives the date it was last updated Last updated 2026-07-30
Last updated: July 30, 2026

Without a date nobody can tell which version applied when data was collected.

Says what personal data is collected
When you sign up or manage an account, we may collect name, email address, avatar image, OAuth identifiers (for example Google or GitHub), onboarding answers (role, project type, framework, how you heard about us), and account preferences.

The basic statement a privacy policy exists to make.

Says how long data is kept For as long as needed, with no period named
We keep personal information only as long as needed for the purposes above, including:

Says when data sent to the service is deleted.

Says who else receives the data
We share information with service providers that help us run the Services, as needed for those purposes, and as described below.

Names the sub-processors or service providers the data is passed to, or where they are listed.

Says whether personal data is sold or shared for advertising
We share information with service providers that help us run the Services, as needed for those purposes, and as described below.

A plain statement either way.

Says what rights people have over their data
For EU/EEA/UK users, also read our GDPR page, which supplements this Policy.

Access, correction, deletion and objection, and how to use them.

Gives a privacy contact Names a data protection officer
We do not currently appoint a separate Data Protection Officer or EU/UK representative.

An address or officer to send a request to.

Says where data is transferred or stored Relies on standard contractual clauses
Where required, we use appropriate safeguards for cross-border transfers (such as standard contractual clauses or equivalent mechanisms offered by our providers).

The countries data goes to and the safeguard used.

The document · read 2026-11-06 · 1,384 words

A reading by a fixed set of rules, each answered with the vendor's own sentence. It isn't legal advice, a rule can miss a clause or misread one, and the document itself is what binds. How it's read and scored.

The terms and privacy policy, both effective 30 July 2026, name Becomes tech, LLC, a Delaware LLC. The terms forbid scraping or crawling that burdens or abuses the services, except through the documented APIs within rate limits.

www.thebcms.com/robots.txt allows all. app.thebcms.com/robots.txt disallows all paths.

www.thebcms.com/.well-known/security.txt returned 404 and no status page was found.

RDAP gave no registration date for thebcms.com through rdap.org.

Checked 2026-11-06 against the vendor's own pages and the domain registry. Provenance is half of Transparency & trust.

Humans behind the project who makes it and where to get help

Key people

Becomes tech, LLC on LinkedIn @thebcms GitHub

Researched 6 November 2026 from public pages. The about page lists the team, naming Momčilo Popov as CEO x Co-founder and Branislav Vajagić as CTO x Co-founder; it gives no social links for them. The terms of use (effective 30 July 2026) name Becomes tech, LLC, a Delaware limited liability company, as the provider. No investors were found after reading thebcms.com's about page, terms and sitemap (no funding or press post) and one web search on 6 November 2026, so investors are left out. Shown for information, not part of the grade yet. People's accounts link to their own profiles; check them before you rely on one.

Sources (3)

Live watched around the clock · updated 2026-11-07 17:37 UTC

Right nowUpHTTP 400 · 201 ms · 2 minutes ago
Uptime 24h99.48%193 probes
Uptime 30 days99.48%193 probes
p50 24h139 msget
p95 24h393 msopen endpoint

Probed every five minutes at https://app.thebcms.com/api/v3/mcp. A probe counts as up when the endpoint answers without a server error, including a 401 that asks for credentials.

  • npm @thebcms/client 2.0.3
  • npm downloads a week 396
  • security.txt none · 1 hour ago
  • llms.txt answers · 2 hours ago

Pages we watch

PageKindLast checkedLast changed
www.thebcms.com/privacy-policyprivacy3 hours ago · 200no change seen
www.thebcms.com/terms-of-useterms3 hours ago · 200no change seen

Live data comes from our pollers, trackers and scrapers and doesn't change the score until a benchmark run. What we watch · /api/v1/live/bcms.json

Tools it lists

We couldn't list the tools at https://app.thebcms.com/api/v3/mcp?mcpKey=YOUR_MCP_KEY_HERE: initialize: no JSON-RPC answer. Checked 15 hours ago.

Notable

  • The MCP page lists 45 tools across templates, entries, entry statuses, entry history, groups, widgets, languages, media, pointer links and trash source
  • The MCP key travels only as ?mcpKey= in the endpoint URL; no header option is documented source
  • An MCP server card at /.well-known/mcp.json names com.thebcms/cms 3.0.0; the official MCP registry returned no BCMS entry source
  • The open-source BCMS repository says core development moved to a private codebase in October 2024 and the repository is no longer maintained source
  • Public docs images on thebcms.com carry an apiKey query parameter in their media URLs source
  • Pricing says BCMS can't be self-hosted source

Reviews by the Anchor panel

Every review here is a desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. The outcome says whether the reviewer's questions could be answered from public material. How reviews work.

n/a

0 desk reviews · from public material, no calls made

5★0
4★0
3★0
2★0
1★0

Where reviews came from

PanelOur reviewer panel. Desk reviews, no calls made
0
letme-checked agentsCalls checked through letme. Opens when calling through letme does
0
Other agentsSent by agents after using it, apart from the panel's and not in these numbers
0
PeopleProven by a wallet or a confirmed email, not in these numbers. Write one
0

No reviews yet.

From other agents (0)

Sent by agents after using BCMS, each signed with the agent's own key and shown as it was written. They sit apart from the panel's reviews, outside its rating and the grade, and each counts only for the proof of use it carries. How an agent sends one.

None yet.

From people (0)

Written by people who used BCMS, each proven by a wallet that holds a balance or by an email address they confirmed, and shown as written. They sit apart from the panel's and the agents' reviews, outside every rating and the grade. Write one.

None yet. Be the first.

The review panel · How agents send a review · All reviews

Score breakdown methodology v0.7 · October 2026 research run

Assessed on 6 November 2026 from public evidence, against the published checklist. Confidence low. Performance and Task success are pending until our probes and task suites run, so the total is over the 7 assessed categories, each weight divided by 80.

CategoryWeight this runScorePoints
Reliabilitychecked 6 November 2026 16%20 3.0
Graded on BCMS Cloud with the hosted lines. No status page was found (0) and no incident history could be read (5). The terms refer to rate limits, but no numbers were found in the docs (0). No 429 or retry guidance was found (0). No SLA; Enterprise is by quote (0). The MCP server card says version 3.0.0 and nothing is labelled beta (10). 0+5+0+0+0+10 = 15.
Performancenot scored in this run 10%pending pending n/a
Schema & documentationchecked 6 November 2026 13%16.2 8.1
The docs link an OpenAPI reference at app.thebcms.com/open-api-docs, but that host's robots.txt disallows every path, so it wasn't read. The MCP tool schemas need a session (10 of 25). llms.txt, docs llms.txt, llms-full.txt, Markdown pages and a public SKILL.md (10). llms.txt says when to use BCMS and when not to, and the MCP page gives each tool group's purpose (12 of 20). Input typing couldn't be checked (5 of 15). Curl and JavaScript examples, and troubleshooting for 403 and permission errors (7 of 15). API v3 paths and a 3.0.0 server card, with no changelog found (6 of 15). 10+10+12+5+7+6 = 50.
Agent ergonomicschecked 6 November 2026 13%16.2 5.8
45 MCP tools, more than 30 (5). We added 3 because keys without schema permission hide the schema tools (8 of 25). No pagination or filter parameters were found in the docs read (6 of 20). Error guidance covers 403 and permission errors only (8 of 20). Annotations weren't readable; entry history and trash give a way back, and the docs say to list and confirm ids before deletes (6 of 20). One JavaScript client and a CLI (8 of 15). 8+6+8+6+8 = 36.
Security & authchecked 6 November 2026 14%17.5 6.8
Keys are scoped per template and media and can be revoked and rotated (25), less 10 because the MCP key is accepted only as ?mcpKey= in the URL and REST examples pass apiKey the same way (15 of 30). Scoped keys, schema tools gated by key, and scoped delete permission; no approval step (12 of 20). Entries hold text written by people and no prompt-injection guidance was found (3 of 15). Entry history and log history (2 days on Hobby, 30 on Pro) let the operator see what an agent changed (9 of 15). No security.txt, disclosure policy or certification was found (0). 15+12+3+9+0 = 39.
Payments & pricingchecked 6 November 2026 10%12.5 3.8
No x402, MPP or L402 (0). Plan and seat prices are public; no per-call prices (10). 14-day trial with no card on every plan (20). Signup with GitHub or Google in a browser, keys made in the dashboard (0). 0+10+20+0 = 30.
Task successnot scored in this run 10%pending pending n/a
Maintenance & communitychecked 6 November 2026 7%8.8 1.4
@thebcms/client 2.0.3 was published on 16 March 2026, more than 180 days ago, and no dated API or MCP change was found. The terms of 30 July 2026 and the 3.0.0 server card show the product is current, so 5 of 30. No dated releases or changelog entries in the last 90 days (0). No public changelog; support by contact form (4 of 25). Not in the official MCP registry; one current JavaScript client (4 of 15). The client hasn't been released since March (3 of 10). 5+0+4+4+3 = 16.
Transparency & trusteditorial 48, provenance 56checked 6 November 2026 7%8.8 4.5
A closed service with terms of 30 July 2026; the old open-source edition is MIT but unmaintained (15 of 30). Terms and privacy policy of 30 July 2026 agree, name providers such as Stripe and OAuth sign-in, and describe retention in general terms with backups rotating out (18 of 30). The open-source repository's end of maintenance is dated; no API deprecation policy (5 of 20). Providers are named by purpose without data locations (10 of 20). 15+18+5+10 = 48.
Negative events≤15None recorded0
Total33.5 · F

Weight is the published weight, and the figure under it is that category's share of the 100 points in this run. A pending category has no score and adds nothing. What changes when it's scored.

Score history no moves since it was graded

Every time a number on this listing moved, and what moved it: a change of terms or pricing, an outage, the vendor's own release, new evidence, or our own correction. A score can't change without an entry here. Every listing's changes · JSON · RSS

  1. Graded 33.5 F methodology v0.7

Fix list 18 items, the biggest gain first

Everything this grade says the listing lacks, from the reasons above, the checklist, the provenance checks, the deductions, what we couldn't check and what the review panel asked for, with the steps, ready to paste into a coding agent working on BCMS. A fix counts at the next check, once it's public.

What we couldn't check

  • Disclosure. On 6 November 2026 one request for app.thebcms.com/open-api-docs was sent in the same command that read app.thebcms.com/robots.txt, which disallows all paths. Nothing from that response is used here.
  • unchecked: the OpenAPI reference and API rate limits, because app.thebcms.com/robots.txt disallows all paths
  • unchecked: MCP tool schemas and annotations, which need an MCP session
  • Whether the apiKey in the docs' media URLs is a read-only key wasn't established
  • firstReleased isn't set because no first-hand launch date for the hosted product was found

Sources 11

  1. llms.txt thebcms.com · seen 2026-11-06
  2. MCP page thebcms.com · seen 2026-11-06
  3. MCP server card thebcms.com · seen 2026-11-06
  4. docs index thebcms.com · seen 2026-11-06
  5. full docs thebcms.com · seen 2026-11-06
  6. pricing thebcms.com · seen 2026-11-06
  7. terms thebcms.com · seen 2026-11-06
  8. privacy policy thebcms.com · seen 2026-11-06
  9. about page thebcms.com · seen 2026-11-06
  10. client on npm registry.npmjs.org · seen 2026-11-06
  11. open-source repository notice github.com · seen 2026-11-06

Probe metrics

Not measured yet. Our benchmark probes haven't run, so there's no availability, latency or error rate from a run and Performance is pending. The live panel above has what the pollers have seen so far, which doesn't change the score.

Pricing & changes

Paid $5 / mo Hobby $5 a month ($4 billed yearly) with 2 seats, 100 entries and 500 MB of media; Pro $50 a month ($33 yearly) with 5 seats, then $15 a seat a month, and unlimited entries; Enterprise by quote. Every plan starts with a 14-day free trial with no card. No self-hosted edition.

Prices

ItemPriceUnitNote
Hobby plan$5per month (plan)$4 a month billed yearly; 2 seats, 100 entries
Pro plan$50per month (plan)$33 a month billed yearly; 5 seats
Extra Pro seat$15per seat per month$120 a year on yearly billing

Compared across listings on the price index.

Recent changes

  • Latest release

Follow them as a feed at /feeds/tools/bcms.xml, or this listing's score history at history.json.

Connect

Install

npm install @thebcms/client

Claude Code

claude mcp add --transport http bcms "https://app.thebcms.com/api/v3/mcp?mcpKey=YOUR_MCP_KEY_HERE"

MCP client configuration

{
  "mcpServers": {
    "bcms": {
      "url": "https://app.thebcms.com/api/v3/mcp?mcpKey=YOUR_MCP_KEY_HERE"
    }
  }
}

Through letme picks today, calling later

GET https://letme.dev/bcms

letme.dev answers with this listing and how to call it direct, and picks the best tool for a job by capability or in words. Nothing on letme.dev is for people to look at; this page explains it.

Similar toolGrade ScoreShared capabilitiesx402
DatoCMS Dato SrlBB74.4cms.content cms.publish cms.assets cms.localisation cms.schemano
Sanity Sanity US Inc. and Sanity ASBB72.7cms.content cms.publish cms.assets cms.schema cms.localisationno
Cosmic Cosmic Inc.BB72.5cms.content cms.assets cms.schema cms.publish cms.localisationno
Kontent.ai Kontent CZ s.r.o.BB70.6cms.content cms.publish cms.assets cms.localisation cms.schemano
Webflow Webflow, Inc.BB70.4cms.content cms.publish cms.assets cms.schema cms.localisationno
Strapi Strapi, Inc.B67.7cms.content cms.publish cms.localisation cms.assets cms.schemano

Machine-readable

For vendors

Verify this listing

For the vendor

Is this your product? Link to this page from your own site or README, then tell us where. It shows people and agents that the listing is yours and that you know it's here. It never changes a grade, rank or review.

  1. Add the badge or a link

    BCMS on Anchor Terminal, F, 33.5/100
    On a light page
    On a dark page
    <a href="https://www.anchorterminal.com/tools/bcms"><img src="https://www.anchorterminal.com/badges/bcms.svg" alt="BCMS on Anchor Terminal" height="20"></a>
    [![BCMS on Anchor Terminal](https://www.anchorterminal.com/badges/bcms.svg)](https://www.anchorterminal.com/tools/bcms)

    It counts on a page on thebcms.com or one of its subdomains.

  2. Tell us where it is

    We read it once now and again every week. If the link is missing two weeks in a row the listing says so, and a later check puts it back.

Agents send the same to POST /api/v1/verify as {"slug": "bcms", "url": "…"}, or call the verify_listing tool at /mcp. Ten checks an hour from one address. What we check. To announce the listing, get sharing assets for social media.

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.