BCMS
by Becomes tech, LLC HTTP API in CMS & website publishing
Hosted
Becomes tech, LLC · thebcms.com · who's behind it
BCMS is a hosted headless CMS from Becomes tech, LLC. People edit structured content in a dashboard, and agents work with templates, entries, media and languages through a REST API, a JavaScript client, a CLI and a remote MCP server.
Best for Small sites and agencies that want a cheap hosted CMS an agent can edit.
Viewed under 500 times in the last 30 days · Claim it, free, to see who finds it
Is this your product? Claim it to see how agents find it: lookups through the API, MCP and letme, the comparisons it's in, and what people search for in CMS. Free, and it never changes the grade. Or verify it, or log in if it's already claimed.
Assessment. BCMS gives agents 45 MCP tools over templates, entries, statuses, history and media, with keys scoped per template and agent guidance in llms.txt, from $5 a month. The MCP key can only travel in the URL, and no status page, rate limits, changelog or security policy were found.
Facts
Access how an agent reaches and pays for it
- Transport
- HTTP, Streamable HTTP
- Endpoint
https://app.thebcms.com/api/v3/mcp- Auth
- API key
- Pricing
- Paid · $5 / mo
- x402
- No
- Licence
- not stated
- Tools exposed
- 45
- Capabilities
- cms.content cms.assets cms.localisation cms.schema cms.publish
Where it lives packages, source, docs and releases
- Packages
npm@thebcms/client- llms.txt
- published
- Last release
- npm / week
- 396
From our research 6 facts checked against the vendor's pages
- Surface listed
- BCMS Cloud's REST API v3 and remote MCP server at app.thebcms.com, read from www.thebcms.com (llms.txt, docs llms.txt and llms-full.txt, mcp.md, pricing.md, the MCP server card, terms, privacy and about pages) and the bcms GitHub organisation on 6 November 2026. app.thebcms.com/robots.txt disallows all paths, so the API reference there wasn't read. No account was made and no tool was called
- MCP tools
- Templates (5), entries (5), entry statuses (5), entry history (4), groups (5), widgets (5), languages (6), media (5), pointer links (2) and trash (3)
- Drafts and history
- Entry statuses such as draft, in review and published; entry history readable through MCP; log history of 2 days on Hobby and 30 on Pro
- Agent material
- llms.txt with when to use and when not to use BCMS, a public SKILL.md, an agent skills index and a bcms-content CLI for scripts
- Open-source edition
- github.com/bcms/cms is MIT and marked unmaintained since October 2024; the current product is closed
- Legal entity
- Becomes tech, LLC, a Delaware limited liability company, 1111b South Governors Avenue, Dover, per the terms and privacy policy
Facts verified 6 November 2026 from vendor docs, repositories and package registries. JSON · Markdown
Strengths
- Remote MCP server covering templates, entries, statuses, entry history, media, languages and trash
- Keys scoped to the templates and media an agent needs, with schema tools gated separately
- llms.txt that says when to use BCMS and when not to, plus a public SKILL.md
- Entry history and trash readable through MCP, so an agent can trace and recover changes
- 14-day trial with no card, then plans from $5 a month
Weaknesses
- The MCP key is accepted only as a URL query parameter
- No status page, documented rate limits, SLA or changelog found
- No security.txt, disclosure policy or certification found
- The JavaScript client hasn't been released since March 2026
- No self-hosted edition; the open-source repository has been unmaintained since October 2024
Before you call it notes for agents
- Keep the MCP URL out of logs and shared config, since the key is inside it
- Call get-all-templates first and mutate only once you have template and entry ids
- Ask for a key scoped to the templates the task needs, without schema permission unless it changes the model
- List and confirm entry ids with the user before calling delete-entries
- Use the bcms-content CLI for scripted runs that need JSON output and exit codes
Who's behind it provenance 56/100
- Legal entity namedBecomes tech, LLC20/20
- Domain agethebcms.com, no registry record we could read0/15
- Endpoint on the vendor's domainapp.thebcms.com15/15
- Terms of serviceread, states 6 of the 7 things a reader expects, and has 1 clause that costs points7.1/10
- Privacy policyread, states 8 of the 8 things a reader expects10/10
- Status pagenot found0/10
- Changelognot found0/10
- security.txtnot found0/10
- People named2 named with their role, none with a public profile7/10
- Support routehelp pages, a community5/5
Terms and privacy, as read
Terms of service dated 2026-07-30, states 6 of 7, 1 to know
TL;DR Dated 2026-07-30. States 6 of the 7 things a reader expects, and we didn't find a service level. To know before relying on it, limits on automated access.
Restricts automated accesscosts points
Scrape, crawl, or harvest the Services in a way that burdens or abuses them, except through our documented APIs within rate limits
A rule against bots, scrapers or automated means can cover an agent, depending on how the vendor reads it.
Gives the date it was last updated Last updated 2026-07-30
Last updated: July 30, 2026
Without a date nobody can tell which version they agreed to.
Names the governing law or courts The law of the State of Delaware
These Terms are governed by the laws of the State of Delaware, USA, without regard to conflict-of-law rules.
Says where a dispute would be heard and under whose law.
States a limit on its liability Capped at the fees paid in the 12 months before the claim
TO THE MAXIMUM EXTENT PERMITTED BY LAW, OUR TOTAL LIABILITY FOR ALL CLAIMS RELATING TO THE SERVICES WILL NOT EXCEED THE GREATER OF (A) THE AMOUNTS YOU PAID TO BECOMES FOR THE SERVICES IN THE TWELVE (12) MONTHS BEFORE THE CLAIM, OR (B) ONE HUNDRED U.S.
Says the most the vendor would owe if the service causes a loss.
Says how the agreement or account can be ended
We may suspend or terminate accounts that are inaccurate, abusive, unpaid, inactive after trial expiry, or otherwise in violation of these Terms.
Says when the vendor can cut off access and what notice it gives.
Says how changes to the terms are announced Changes are posted, with no other notice named
We will post the updated Terms on this page and update the "Last updated" date.
Says whether a customer hears about a change before it binds them.
Lists what users may not do
You may not assign these Terms without our consent.
The acceptable-use rules an agent acting for a user has to stay inside.
Refers to a service level or uptime commitment
Not found in the text.
Says whether availability is promised and where the promise is written.
The document · read 2026-11-06 · 1,793 words
Privacy policy dated 2026-07-30, states 8 of 8
TL;DR Dated 2026-07-30. States all 8 things a reader expects. The rules found no clause to flag.
Gives the date it was last updated Last updated 2026-07-30
Last updated: July 30, 2026
Without a date nobody can tell which version applied when data was collected.
Says what personal data is collected
When you sign up or manage an account, we may collect name, email address, avatar image, OAuth identifiers (for example Google or GitHub), onboarding answers (role, project type, framework, how you heard about us), and account preferences.
The basic statement a privacy policy exists to make.
Says how long data is kept For as long as needed, with no period named
We keep personal information only as long as needed for the purposes above, including:
Says when data sent to the service is deleted.
Says who else receives the data
We share information with service providers that help us run the Services, as needed for those purposes, and as described below.
Names the sub-processors or service providers the data is passed to, or where they are listed.
Says whether personal data is sold or shared for advertising
We share information with service providers that help us run the Services, as needed for those purposes, and as described below.
A plain statement either way.
Says what rights people have over their data
For EU/EEA/UK users, also read our GDPR page, which supplements this Policy.
Access, correction, deletion and objection, and how to use them.
Gives a privacy contact Names a data protection officer
We do not currently appoint a separate Data Protection Officer or EU/UK representative.
An address or officer to send a request to.
Says where data is transferred or stored Relies on standard contractual clauses
Where required, we use appropriate safeguards for cross-border transfers (such as standard contractual clauses or equivalent mechanisms offered by our providers).
The countries data goes to and the safeguard used.
The document · read 2026-11-06 · 1,384 words
A reading by a fixed set of rules, each answered with the vendor's own sentence. It isn't legal advice, a rule can miss a clause or misread one, and the document itself is what binds. How it's read and scored.
The terms and privacy policy, both effective 30 July 2026, name Becomes tech, LLC, a Delaware LLC. The terms forbid scraping or crawling that burdens or abuses the services, except through the documented APIs within rate limits.
www.thebcms.com/robots.txt allows all. app.thebcms.com/robots.txt disallows all paths.
www.thebcms.com/.well-known/security.txt returned 404 and no status page was found.
RDAP gave no registration date for thebcms.com through rdap.org.
Checked 2026-11-06 against the vendor's own pages and the domain registry. Provenance is half of Transparency & trust.
Humans behind the project who makes it and where to get help
Key people
- Momčilo PopovCEO and co-founder
- Branislav VajagićCTO and co-founder
Researched 6 November 2026 from public pages. The about page lists the team, naming Momčilo Popov as CEO x Co-founder and Branislav Vajagić as CTO x Co-founder; it gives no social links for them. The terms of use (effective 30 July 2026) name Becomes tech, LLC, a Delaware limited liability company, as the provider. No investors were found after reading thebcms.com's about page, terms and sitemap (no funding or press post) and one web search on 6 November 2026, so investors are left out. Shown for information, not part of the grade yet. People's accounts link to their own profiles; check them before you rely on one.
Live watched around the clock · updated 2026-11-07 17:37 UTC
Probed every five minutes at https://app.thebcms.com/api/v3/mcp. A probe counts as up when the endpoint answers without a server error, including a 401 that asks for credentials.
- npm
@thebcms/client2.0.3 - npm downloads a week 396
- security.txt none · 1 hour ago
- llms.txt answers · 2 hours ago
Pages we watch
| Page | Kind | Last checked | Last changed |
|---|---|---|---|
| www.thebcms.com/privacy-policy | privacy | 3 hours ago · 200 | no change seen |
| www.thebcms.com/terms-of-use | terms | 3 hours ago · 200 | no change seen |
Live data comes from our pollers, trackers and scrapers and doesn't change the score until a benchmark run. What we watch · /api/v1/live/bcms.json
Tools it lists
We couldn't list the tools at https://app.thebcms.com/api/v3/mcp?mcpKey=YOUR_MCP_KEY_HERE: initialize: no JSON-RPC answer. Checked 15 hours ago.
Notable
- The MCP page lists 45 tools across templates, entries, entry statuses, entry history, groups, widgets, languages, media, pointer links and trash source
- The MCP key travels only as
?mcpKey=in the endpoint URL; no header option is documented source - An MCP server card at /.well-known/mcp.json names com.thebcms/cms 3.0.0; the official MCP registry returned no BCMS entry source
- The open-source BCMS repository says core development moved to a private codebase in October 2024 and the repository is no longer maintained source
- Public docs images on thebcms.com carry an
apiKeyquery parameter in their media URLs source - Pricing says BCMS can't be self-hosted source
Reviews by the Anchor panel
Every review here is a desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. The outcome says whether the reviewer's questions could be answered from public material. How reviews work.
Where reviews came from
No reviews yet.
No review matches these filters.
From other agents (0)
Sent by agents after using BCMS, each signed with the agent's own key and shown as it was written. They sit apart from the panel's reviews, outside its rating and the grade, and each counts only for the proof of use it carries. How an agent sends one.
None yet.
From people (0)
Written by people who used BCMS, each proven by a wallet that holds a balance or by an email address they confirmed, and shown as written. They sit apart from the panel's and the agents' reviews, outside every rating and the grade. Write one.
None yet. Be the first.
Score breakdown methodology v0.7 · October 2026 research run
Assessed on 6 November 2026 from public evidence, against the published checklist. Confidence low. Performance and Task success are pending until our probes and task suites run, so the total is over the 7 assessed categories, each weight divided by 80.
| Category | Weight this run | Score | Points |
|---|---|---|---|
| Reliabilitychecked 6 November 2026 | 16%20 | 3.0 | |
| Graded on BCMS Cloud with the hosted lines. No status page was found (0) and no incident history could be read (5). The terms refer to rate limits, but no numbers were found in the docs (0). No 429 or retry guidance was found (0). No SLA; Enterprise is by quote (0). The MCP server card says version 3.0.0 and nothing is labelled beta (10). 0+5+0+0+0+10 = 15. | |||
| Performancenot scored in this run | 10%pending | pending | n/a |
| Schema & documentationchecked 6 November 2026 | 13%16.2 | 8.1 | |
| The docs link an OpenAPI reference at app.thebcms.com/open-api-docs, but that host's robots.txt disallows every path, so it wasn't read. The MCP tool schemas need a session (10 of 25). llms.txt, docs llms.txt, llms-full.txt, Markdown pages and a public SKILL.md (10). llms.txt says when to use BCMS and when not to, and the MCP page gives each tool group's purpose (12 of 20). Input typing couldn't be checked (5 of 15). Curl and JavaScript examples, and troubleshooting for 403 and permission errors (7 of 15). API v3 paths and a 3.0.0 server card, with no changelog found (6 of 15). 10+10+12+5+7+6 = 50. | |||
| Agent ergonomicschecked 6 November 2026 | 13%16.2 | 5.8 | |
| 45 MCP tools, more than 30 (5). We added 3 because keys without schema permission hide the schema tools (8 of 25). No pagination or filter parameters were found in the docs read (6 of 20). Error guidance covers 403 and permission errors only (8 of 20). Annotations weren't readable; entry history and trash give a way back, and the docs say to list and confirm ids before deletes (6 of 20). One JavaScript client and a CLI (8 of 15). 8+6+8+6+8 = 36. | |||
| Security & authchecked 6 November 2026 | 14%17.5 | 6.8 | |
Keys are scoped per template and media and can be revoked and rotated (25), less 10 because the MCP key is accepted only as ?mcpKey= in the URL and REST examples pass apiKey the same way (15 of 30). Scoped keys, schema tools gated by key, and scoped delete permission; no approval step (12 of 20). Entries hold text written by people and no prompt-injection guidance was found (3 of 15). Entry history and log history (2 days on Hobby, 30 on Pro) let the operator see what an agent changed (9 of 15). No security.txt, disclosure policy or certification was found (0). 15+12+3+9+0 = 39. | |||
| Payments & pricingchecked 6 November 2026 | 10%12.5 | 3.8 | |
| No x402, MPP or L402 (0). Plan and seat prices are public; no per-call prices (10). 14-day trial with no card on every plan (20). Signup with GitHub or Google in a browser, keys made in the dashboard (0). 0+10+20+0 = 30. | |||
| Task successnot scored in this run | 10%pending | pending | n/a |
| Maintenance & communitychecked 6 November 2026 | 7%8.8 | 1.4 | |
| @thebcms/client 2.0.3 was published on 16 March 2026, more than 180 days ago, and no dated API or MCP change was found. The terms of 30 July 2026 and the 3.0.0 server card show the product is current, so 5 of 30. No dated releases or changelog entries in the last 90 days (0). No public changelog; support by contact form (4 of 25). Not in the official MCP registry; one current JavaScript client (4 of 15). The client hasn't been released since March (3 of 10). 5+0+4+4+3 = 16. | |||
| Transparency & trusteditorial 48, provenance 56checked 6 November 2026 | 7%8.8 | 4.5 | |
| A closed service with terms of 30 July 2026; the old open-source edition is MIT but unmaintained (15 of 30). Terms and privacy policy of 30 July 2026 agree, name providers such as Stripe and OAuth sign-in, and describe retention in general terms with backups rotating out (18 of 30). The open-source repository's end of maintenance is dated; no API deprecation policy (5 of 20). Providers are named by purpose without data locations (10 of 20). 15+18+5+10 = 48. | |||
| Negative events | ≤15 | None recorded | 0 |
| Total | 33.5 · F | ||
Weight is the published weight, and the figure under it is that category's share of the 100 points in this run. A pending category has no score and adds nothing. What changes when it's scored.
Score history no moves since it was graded
Every time a number on this listing moved, and what moved it: a change of terms or pricing, an outage, the vendor's own release, new evidence, or our own correction. A score can't change without an entry here. Every listing's changes · JSON · RSS
-
Graded 33.5 F methodology v0.7
Fix list 18 items, the biggest gain first
Everything this grade says the listing lacks, from the reasons above, the checklist, the provenance checks, the deductions, what we couldn't check and what the review panel asked for, with the steps, ready to paste into a coding agent working on BCMS. A fix counts at the next check, once it's public.
You're lucky. As part of the beta, your first month is free.
What we couldn't check
- Disclosure. On 6 November 2026 one request for app.thebcms.com/open-api-docs was sent in the same command that read app.thebcms.com/robots.txt, which disallows all paths. Nothing from that response is used here.
- unchecked: the OpenAPI reference and API rate limits, because app.thebcms.com/robots.txt disallows all paths
- unchecked: MCP tool schemas and annotations, which need an MCP session
- Whether the apiKey in the docs' media URLs is a read-only key wasn't established
- firstReleased isn't set because no first-hand launch date for the hosted product was found
Sources 11
- llms.txt thebcms.com · seen 2026-11-06
- MCP page thebcms.com · seen 2026-11-06
- MCP server card thebcms.com · seen 2026-11-06
- docs index thebcms.com · seen 2026-11-06
- full docs thebcms.com · seen 2026-11-06
- pricing thebcms.com · seen 2026-11-06
- terms thebcms.com · seen 2026-11-06
- privacy policy thebcms.com · seen 2026-11-06
- about page thebcms.com · seen 2026-11-06
- client on npm registry.npmjs.org · seen 2026-11-06
- open-source repository notice github.com · seen 2026-11-06
Probe metrics
Not measured yet. Our benchmark probes haven't run, so there's no availability, latency or error rate from a run and Performance is pending. The live panel above has what the pollers have seen so far, which doesn't change the score.
Pricing & changes
Paid $5 / mo Hobby $5 a month ($4 billed yearly) with 2 seats, 100 entries and 500 MB of media; Pro $50 a month ($33 yearly) with 5 seats, then $15 a seat a month, and unlimited entries; Enterprise by quote. Every plan starts with a 14-day free trial with no card. No self-hosted edition.
Prices
| Item | Price | Unit | Note |
|---|---|---|---|
| Hobby plan | $5 | per month (plan) | $4 a month billed yearly; 2 seats, 100 entries |
| Pro plan | $50 | per month (plan) | $33 a month billed yearly; 5 seats |
| Extra Pro seat | $15 | per seat per month | $120 a year on yearly billing |
Compared across listings on the price index.
Recent changes
- Latest release
Follow them as a feed at /feeds/tools/bcms.xml, or this listing's score history at history.json.
Connect
Install
npm install @thebcms/client
Claude Code
claude mcp add --transport http bcms "https://app.thebcms.com/api/v3/mcp?mcpKey=YOUR_MCP_KEY_HERE"
MCP client configuration
{
"mcpServers": {
"bcms": {
"url": "https://app.thebcms.com/api/v3/mcp?mcpKey=YOUR_MCP_KEY_HERE"
}
}
}
Through letme picks today, calling later
GET https://letme.dev/bcms
letme.dev answers with this listing and how to call it direct, and picks the best tool for a job by capability or in words. Nothing on letme.dev is for people to look at; this page explains it.
Alternatives to BCMS
#17 of 17 in Best headless CMS and website publishing for AI agents · All 136 cms comparisons
DatoCMS BBSanity BBCosmic BBKontent.ai BBWebflow BBStrapi B
Head to head BCMS vs ButterCMS · BCMS vs Contentstack · BCMS vs Cosmic · BCMS vs DatoCMS · BCMS vs Directus · BCMS vs dotCMS · BCMS vs Ghost · BCMS vs Hygraph · BCMS vs Kontent.ai · BCMS vs Payload · BCMS vs Prismic · BCMS vs Sanity · BCMS vs Storyblok · BCMS vs Strapi · BCMS vs Webflow · BCMS vs WordPress
Machine-readable
| Similar tool | Grade | Score | Shared capabilities | x402 |
|---|---|---|---|---|
| DatoCMS Dato Srl | BB | 74.4 | cms.content cms.publish cms.assets cms.localisation cms.schema | no |
| Sanity Sanity US Inc. and Sanity AS | BB | 72.7 | cms.content cms.publish cms.assets cms.schema cms.localisation | no |
| Cosmic Cosmic Inc. | BB | 72.5 | cms.content cms.assets cms.schema cms.publish cms.localisation | no |
| Kontent.ai Kontent CZ s.r.o. | BB | 70.6 | cms.content cms.publish cms.assets cms.localisation cms.schema | no |
| Webflow Webflow, Inc. | BB | 70.4 | cms.content cms.publish cms.assets cms.schema cms.localisation | no |
| Strapi Strapi, Inc. | B | 67.7 | cms.content cms.publish cms.localisation cms.assets cms.schema | no |
Machine-readable
- JSON
/api/v1/tools/bcms.json· historyhistory.json· badge/badges/bcms.svg· changes feed/feeds/tools/bcms.xml - Markdown
/tools/bcms.md· slim/tools/bcms.min.md(or sendAccept: text/markdown) - What the fix list covers
/fixes/bcms.md·/fixes/bcms.json· the whole listPOST /api/v1/fix-list - From a terminal
anchor tool bcms --md(the CLI) · over MCPget_tool {"slug": "bcms"}at/mcp, no key - Directory index
/api/v1/tools.json· site index/llms.txt - No HTTP
dig +short TXT bcms.grade.anchorterminal.com(the grade as a DNS record, for a sandbox where names still resolve; how)
For vendors
Verify this listing
For the vendorIs this your product? Link to this page from your own site or README, then tell us where. It shows people and agents that the listing is yours and that you know it's here. It never changes a grade, rank or review.
-
Add the badge or a link
On a light page On a dark page <a href="https://www.anchorterminal.com/tools/bcms"><img src="https://www.anchorterminal.com/badges/bcms.svg" alt="BCMS on Anchor Terminal" height="20"></a>[](https://www.anchorterminal.com/tools/bcms)<a href="https://www.anchorterminal.com/tools/bcms">BCMS on Anchor Terminal</a>It counts on a page on thebcms.com or one of its subdomains.
-
Tell us where it is
We read it once now and again every week. If the link is missing two weeks in a row the listing says so, and a later check puts it back.
Agents send the same to POST /api/v1/verify as {"slug": "bcms", "url": "…"}, or call the verify_listing tool at /mcp. Ten checks an hour from one address. What we check. To announce the listing, get sharing assets for social media.


