Skip to main content

Announcing StackOne Defender: leading open-source prompt injection guard for your agent Read More

Live 54 Actions

Contentful MCP Server
for AI Agents

StackOne's Contentful MCP server gives AI agents 54 ready-to-use actions for Contentful — with built-in authentication, security, governance, token efficiency, and high tool-calling accuracy.

Contentful logo
Contentful MCP Server
Built by StackOne StackOne
DrataGPLocalyzeFlipMindtoolsScreenloop

Coverage

54 Agent Actions

Create, read, update, and delete across Contentful — and extend your agent's capabilities with custom actions.

Authentication

Agent Tool Authentication

Per-user OAuth in one call. Your Contentful MCP server gets session-scoped tokens with zero credentials stored on your infra.

Agent Auth →

Security

Agent Protection

Every Contentful tool response scanned for prompt injection in milliseconds — 88.7% accuracy, all running on CPU.

Prompt Injection Defense →

Performance

Max Agent Context. Min Cost.

Free up to 96% of your agent's context window to enhance reasoning and reduce cost, on every Contentful call.

Tools Discovery →

What is the Contentful MCP Server?

A Contentful MCP server lets AI agents read and write Contentful data through the Model Context Protocol — Anthropic's open standard for connecting LLMs to external tools. StackOne's Contentful MCP server ships with 54 pre-built actions, fully extensible via the Connector Builder — plus managed authentication, prompt injection defense, and optimized agent context. Connect it from MCP clients like Claude Desktop, Claude Code, Cursor, Goose, and VS Code, or from agent frameworks like OpenAI Agents SDK, LangChain, and Vercel AI SDK.

All Contentful MCP Tools and Actions

Every action from Contentful's API, ready for your agent. Create, read, update, and delete — scoped to exactly what you need.

Organizations

  • List Organizations

    List all organizations the authenticated user has access to.

  • Get Organization

    Get details for a specific organization (admin/owner only).

  • Update Organization

    Update an organization's properties (admin/owner only).

Organization Memberships

  • List Organization Memberships

    List all members of an organization.

  • Get Organization Membership

    Retrieve a single organization membership.

  • Update Organization Membership

    Update an organization member's role.

  • Delete Organization Membership

    Remove a user from the organization.

Personal Access Tokens

  • Create Personal Access Token

    Create a new personal access token for the authenticated user.

  • List Personal Access Tokens

    List the authenticated user's personal access tokens.

  • Get Personal Access Token

    Retrieve metadata for a specific personal access token.

Roles

  • Create Role

    Create a custom role in a space.

  • List Roles

    List all roles in a space.

  • Get Role

    Retrieve a single role by ID.

  • Update Role

    Update an existing role.

  • Delete Role

    Permanently delete a role.

Space Memberships

  • Create Space Membership

    Grant an existing organization member access to a space (cannot invite net-new users).

  • List Space Memberships

    List space-membership records for a space (each item carries the user link, admin flag, and role assignments).

  • Get Space Membership

    Retrieve a single space membership by ID.

  • Update Space Membership

    Update a space membership's roles or admin status.

  • Delete Space Membership

    Remove a user from a space.

Spaces

  • Create Space

    Create a new space in an organization. Requires the organization to have an available space-creation license; otherwise the provider returns 422 LicenseNotFoundError.

  • List Spaces

    List all spaces accessible to the authenticated user.

  • Get Space

    Retrieve a single space by ID.

  • Update Space

    Update a space's name.

  • Delete Space

    Permanently delete a space and all of its resources.

Space Add-ons

  • Get Space Add-ons

    Get add-on allocations for a space. Requires the space add-ons feature on the account's plan; non-eligible accounts return 404 Resource not found.

  • Update Space Add-ons

    Update add-on allocations for a space. Requires the space add-ons feature on the account's plan; non-eligible accounts return 404 Resource not found.

Teams

  • Create Team

    Create a new team in an organization.

  • Get Team

    Retrieve a single team by ID.

  • Update Team

    Update a team's name and description.

  • Delete Team

    Delete a team from an organization.

Team Memberships

  • Create Team Membership

    Add an organization member to a team.

  • Get Team Membership

    Retrieve a single team membership by ID.

  • Delete Team Membership

    Remove a member from a team.

Team Space Memberships

  • Create Team Space Membership

    Grant a team access to a space.

  • Get Team Space Membership

    Retrieve a single team space membership by ID.

  • Update Team Space Membership

    Update a team's access to a space.

  • Delete Team Space Membership

    Revoke a team's access to a space.

Space Users

  • List Space Users

    List User objects (name, email, avatar, activated state) for everyone with access to a Contentful space. If you need role or admin assignments per user, use list_space_memberships instead.

  • Get Space User

    Get a single user with access to a Contentful space.

Organization Users

  • List Organization Users

    List all users in a Contentful organization.

  • Get Organization User

    Get a single user in a Contentful organization.

Other (12)

  • List Organization Periodic Usages

    List organization-wide periodic usage metrics. Requires the organization-usage feature on the account's plan; non-eligible accounts return 404 Resource not found.

  • List Organization Available Licenses

    List available licenses for the organization.

  • List Organization Access Tokens

    List all personal access tokens (PATs) with access to a Contentful organization.

  • Get Space Eligible Licenses

    List license options eligible for a space.

  • List Space Periodic Usages

    List per-space periodic usage metrics for an organization. Requires the per-space-usage feature on the account's plan; non-eligible accounts return 404 Resource not found.

  • List Teams In Space

    List Team objects (name, description, member count) that have access to a space. For per-team admin status or role assignments use list_team_space_memberships_in_space instead.

  • List Organization Teams

    List all teams in an organization.

  • List Team Memberships In Team

    List members of a team.

  • List Organization Team Memberships

    List all team memberships across the organization.

  • List Team Space Memberships In Space

    List team-space membership records for a space (each item carries the team link, admin flag, and role assignments).

  • Get Current User

    Get the currently authenticated Contentful user.

  • Revoke Personal Access Token

    Revoke a personal access token, immediately invalidating it.

Set Up Your Contentful MCP Server in Minutes

One endpoint. Any framework. Your agent is talking to Contentful in under 10 lines of code.

MCP Clients

Agent Frameworks

Claude Desktop
{
  "mcpServers": {
    "stackone": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote@latest",
        "https://api.stackone.com/mcp?x-account-id=<account_id>",
        "--header",
        "Authorization: Basic <YOUR_BASE64_TOKEN>"
      ]
    }
  }
}

More Documents & Knowledge MCP Servers

Contentful MCP Server FAQ

Contentful MCP server vs direct API integration — what's the difference?
A Contentful MCP server and direct API integration serve different use cases. Direct API integration is for software-to-software — backend code calling Contentful. A Contentful MCP server is for AI agents — MCP clients like Claude and Cursor, plus framework agents built with OpenAI, LangChain, or Vercel AI — discovering and calling Contentful at runtime. StackOne provides both.
How does Contentful authentication work for AI agents?
Contentful authentication for AI agents works through a StackOne Connect Session. Create one via the dashboard or the SDK — you get an auth link and ready-to-paste config for Claude Desktop, Cursor, and other MCP clients. Your user authenticates their own Contentful account; StackOne handles token exchange, storage, and refresh. Credentials never reach the LLM, and each user is isolated via origin_owner_id.
Are Contentful MCP tools vulnerable to prompt injection?
Yes — Contentful MCP tools can be vulnerable to indirect prompt injection. Any tool that reads user-written content — documents, messages, tickets, records, or free-text fields — is a potential vector. StackOne Defender scans every tool response before it enters the agent's context — regex patterns in ~1ms, then a MiniLM classifier in ~4ms. 88.7% accuracy, CPU-only.
What is the context bloat of a Contentful agent and how do I avoid it?
Context bloat happens when Contentful tool schemas and API responses eat your Contentful agent's memory, preventing it from reasoning effectively. A single Contentful query can return a massive JSON response, and connecting multiple tools compounds the problem. Tools Discovery and Code Mode reduce context bloat — loading only relevant tools per query and keeping raw responses out of the agent's context.
Can I limit which actions my Contentful agent can access?
Yes — you can limit which actions your Contentful agent can access directly from the StackOne dashboard. Toggle actions on or off, or restrict them to specific accounts, with no code changes to your agent. Session tokens can be scoped to exact actions so if one leaks, exposure stays contained.
Can I create custom agent actions for my Contentful MCP server?
Yes — you can create custom agent actions for your Contentful MCP server using Connector Builder. It's an integration agent your coding assistant (Claude Code, Cursor, or Copilot) can invoke to research Contentful's API, generate production-ready connector YAML, test against the live API, and validate before you ship.
When should I NOT use a Contentful MCP server?
Skip a Contentful MCP server if your integration is purely software-to-software — direct Contentful API integration is simpler when no AI agent is involved. For deterministic, compliance-critical operations (financial transactions, regulatory reporting), direct API gives you predictable behavior without agent-driven decision-making. MCP shines when AI agents need to dynamically discover and call Contentful actions at runtime.
What AI frameworks and AI clients does the StackOne Contentful MCP server support?
The StackOne Contentful MCP server supports both. MCP clients (paste-and-go apps): Claude Desktop, Claude Code, Cursor, VS Code, Goose. Agent frameworks (code SDKs you build with): OpenAI Agents SDK, Anthropic, Vercel AI, Google ADK, CrewAI, Pydantic AI, LangChain, LangGraph, Azure AI Foundry.

Put your AI agents to work

All the tools you need to build and scale AI agent integrations, with best-in-class connectivity, execution, and security.