# BCMS

> BCMS is an open-source headless CMS for developers and content teams. Humans manage structured content in a normal CMS interface; agents work with the same content through MCP, Agent Skills, and a content CLI. Use BCMS when a project needs structured content (templates, entries, media, multiple languages) that both people and agents can edit safely with scoped permissions.

## Start here

Recommended path:

1. Install the bcms skill
2. Create a scoped key in the BCMS dashboard
3. Connect the MCP server in your client
4. Ask the agent to inspect available templates

- [Agent onboarding hub](https://thebcms.com/agents.md)
- [Pricing](https://thebcms.com/pricing.md)
- [Documentation index (Markdown)](https://thebcms.com/docs/llms.txt)

## MCP

The BCMS MCP server exposes templates, entries, groups, widgets, media, languages, statuses, entry history, and schema operations as tools. Transport: Streamable HTTP. Endpoint: `https://app.thebcms.com/api/v3/mcp?mcpKey=YOUR_MCP_KEY_HERE` (authenticate with the `mcpKey` query parameter, a three-part key created in the BCMS dashboard; send the `mcp-session-id` header after initialize). Access is limited to the permissions attached to the key.

- [MCP setup, tools, and security](https://thebcms.com/mcp.md)
- [MCP docs](https://thebcms.com/docs/getting-started/mcp.md)

## Agent Skills

Two skills, installable in Cursor, Claude Code, Codex, and OpenClaw. `bcms` (v1.4.0) teaches BCMS concepts, content modeling, SDK usage, framework integrations, and MCP tool usage. `bcms-content` (v1.1.0) adds a deterministic content CLI for terminals and CI.

- Install bcms: `npx skills add bcms/ai --skill bcms`
- Install bcms-content: `npx skills add bcms/ai --skill bcms-content`
- OpenClaw: `openclaw skills install @bcms/bcms`
- [Skills, versions, and clients](https://thebcms.com/agent-skills.md)
- [bcms on skills.sh](https://www.skills.sh/bcms/ai/bcms)
- [bcms-content on skills.sh](https://www.skills.sh/bcms/ai/bcms-content)
- [Source repository](https://github.com/bcms/ai)

## Documentation

Product, SDK, integration, content-modeling, and deployment documentation.

- [Documentation index (Markdown URLs)](https://thebcms.com/docs/llms.txt)
- [Full documentation content](https://thebcms.com/docs/llms-full.txt)
- [Documentation home](https://thebcms.com/docs.md)

## Pricing

Free tier, cloud plans with a 14-day trial, and Enterprise contracts.

- [Pricing (plans, limits, billing)](https://thebcms.com/pricing.md)

## SDK and API

The official JavaScript and TypeScript client for fetching and mutating BCMS content from application code.

- [@thebcms/client on npm](https://www.npmjs.com/package/@thebcms/client)
- [Getting started](https://thebcms.com/docs/getting-started/create-project.md)

## Framework integrations

- [Integrations overview](https://thebcms.com/docs/integrations.md)
- [Next.js](https://thebcms.com/docs/integrations/next-js.md)
- [Nuxt](https://thebcms.com/docs/integrations/nuxt-js.md)
- [Astro](https://thebcms.com/docs/integrations/astro.md)
- [Svelte](https://thebcms.com/docs/integrations/svelte.md)
- [Gatsby](https://thebcms.com/docs/integrations/gatsby-js.md)

## Security

- Create separate credentials per person, per client, and per environment.
- Scope keys to the templates the agent needs (least privilege), including media-level permissions.
- Never put MCP keys or BCMS_API_KEY in frontend code, public repos, or shared screenshots.
- Rotate keys regularly and revoke any key immediately if it is exposed.
- Review entry history to audit what an agent changed.
- For destructive operations, list and confirm entry ids first and use scoped delete permissions.

- [Security and permissions docs](https://thebcms.com/docs/getting-started/mcp.md)

## Support

- [Discord community](https://discord.com/invite/SYBY89ccaR)
- Email: support@thebcms.com
- [GitHub](https://github.com/bcms)