# Strapi

> Self-hosted CMS content and schema editing from an agent — 20 tools including content-type creation.

[Canonical HTML page](https://top-mcps.com/mcp/strapi) · [server.json](https://top-mcps.com/mcp/strapi.json) · [methodology](https://top-mcps.com/about/methodology)

## Install

### Claude Desktop — `claude_desktop_config.json`

Paste under mcpServers. Fully quit and reopen Claude after editing.

```json
{
  "mcpServers": {
    "strapi": {
      "command": "npx",
      "args": [
        "-y",
        "strapi-mcp@latest"
      ],
      "env": {
        "STRAPI_URL": "${STRAPI_URL}",
        "STRAPI_ADMIN_EMAIL": "${STRAPI_ADMIN_EMAIL}",
        "STRAPI_ADMIN_PASSWORD": "${STRAPI_ADMIN_PASSWORD}"
      }
    }
  }
}
```

### Claude Code — `CLI or .mcp.json`

Run from your repo. Commit .mcp.json to share with your team.

```shell
# export STRAPI_URL=http://localhost:1337
# export STRAPI_ADMIN_EMAIL=admin@example.com
# export STRAPI_ADMIN_PASSWORD=your_admin_password
claude mcp add strapi -- npx -y strapi-mcp@latest
```

### Cursor — `.cursor/mcp.json`

Global path: ~/.cursor/mcp.json. Reload window after editing.

```json
{
  "mcpServers": {
    "strapi": {
      "command": "npx",
      "args": [
        "-y",
        "strapi-mcp@latest"
      ],
      "env": {
        "STRAPI_URL": "${STRAPI_URL}",
        "STRAPI_ADMIN_EMAIL": "${STRAPI_ADMIN_EMAIL}",
        "STRAPI_ADMIN_PASSWORD": "${STRAPI_ADMIN_PASSWORD}"
      }
    }
  }
}
```

### VS Code — `.vscode/mcp.json`

VS Code uses the "servers" key (not "mcpServers").

```jsonc
{
  "servers": {
    "strapi": {
      "command": "npx",
      "args": [
        "-y",
        "strapi-mcp@latest"
      ],
      "env": {
        "STRAPI_URL": "${STRAPI_URL}",
        "STRAPI_ADMIN_EMAIL": "${STRAPI_ADMIN_EMAIL}",
        "STRAPI_ADMIN_PASSWORD": "${STRAPI_ADMIN_PASSWORD}"
      }
    }
  }
}
```

### Windsurf — `~/.codeium/windsurf/mcp_config.json`

Open via Cascade → hammer icon → Configure.

```json
{
  "mcpServers": {
    "strapi": {
      "command": "npx",
      "args": [
        "-y",
        "strapi-mcp@latest"
      ],
      "env": {
        "STRAPI_URL": "${STRAPI_URL}",
        "STRAPI_ADMIN_EMAIL": "${STRAPI_ADMIN_EMAIL}",
        "STRAPI_ADMIN_PASSWORD": "${STRAPI_ADMIN_PASSWORD}"
      }
    }
  }
}
```

### Cline — `cline_mcp_settings.json`

Open via the Cline sidebar → MCP Servers → Edit.

```json
{
  "mcpServers": {
    "strapi": {
      "command": "npx",
      "args": [
        "-y",
        "strapi-mcp@latest"
      ],
      "env": {
        "STRAPI_URL": "${STRAPI_URL}",
        "STRAPI_ADMIN_EMAIL": "${STRAPI_ADMIN_EMAIL}",
        "STRAPI_ADMIN_PASSWORD": "${STRAPI_ADMIN_PASSWORD}"
      }
    }
  }
}
```

### Continue — `~/.continue/config.json`

Continue uses modelContextProtocolServers with a transport block.

```json
{
  "experimental": {
    "modelContextProtocolServers": [
      {
        "transport": {
          "type": "stdio",
          "command": "npx",
          "args": [
            "-y",
            "strapi-mcp@latest"
          ],
          "env": {
            "STRAPI_URL": "${STRAPI_URL}",
            "STRAPI_ADMIN_EMAIL": "${STRAPI_ADMIN_EMAIL}",
            "STRAPI_ADMIN_PASSWORD": "${STRAPI_ADMIN_PASSWORD}"
          }
        }
      }
    ]
  }
}
```

### Codex CLI — `~/.codex/config.toml`

Codex uses TOML. Each server is a [mcp_servers.<name>] subtable.

```shell
# ~/.codex/config.toml
[mcp_servers.strapi]
command = "npx"
args = [
  "-y",
  "strapi-mcp@latest",
]
env = { STRAPI_URL = "${STRAPI_URL}", STRAPI_ADMIN_EMAIL = "${STRAPI_ADMIN_EMAIL}", STRAPI_ADMIN_PASSWORD = "${STRAPI_ADMIN_PASSWORD}" }
```

### Zed — `~/.config/zed/settings.json`

Zed calls them "context_servers". Settings live-reload on save.

```jsonc
{
  "context_servers": {
    "strapi": {
      "command": {
        "path": "npx",
        "args": [
          "-y",
          "strapi-mcp@latest"
        ]
      },
      "env": {
        "STRAPI_URL": "${STRAPI_URL}",
        "STRAPI_ADMIN_EMAIL": "${STRAPI_ADMIN_EMAIL}",
        "STRAPI_ADMIN_PASSWORD": "${STRAPI_ADMIN_PASSWORD}"
      }
    }
  }
}
```

### ChatGPT — `ChatGPT → Apps directory`

Strapi doesn't ship a hosted HTTPS endpoint today. ChatGPT supports remote MCP servers only — to use this server in ChatGPT you'll need to deploy it to a public HTTPS URL first (e.g. via Cloudflare Workers or Vercel) or wait for an official remote build.

```none

```

## At a glance

- **Maintainer:** Community (l33tdawg)
- **Transport:** stdio
- **Auth model:** API key
- **Required secrets:** STRAPI_URL, STRAPI_ADMIN_EMAIL, STRAPI_ADMIN_PASSWORD
- **Supported clients:** Claude, Cursor, VS Code, Windsurf, Any MCP-compatible client, Strapi v4/v5 instances
- **License:** MIT
- **Language:** TypeScript
- **Latest version:** latest
- **Last verified:** 2026-09-17
- **GitHub stars:** 25 (fetched 2026-10-15T10:09:13.500Z)
- **Score:** 50/100 (rubric 2026-09 — see https://top-mcps.com/about/methodology)
- **Source:** https://github.com/l33tdawg/strapi-mcp
- **Homepage:** https://docs.strapi.io/

## Tools & permissions

Showing 12 of 20 tools the server reported on `tools/list`. The rest exist and are not listed here.

| Tool | Description | Args | Side effects |
|------|-------------|------|--------------|
| `list_content_types` | List every content type in the Strapi instance. | `—` | read |
| `get_content_type_schema` | Return fields, types and relations for one content type. | `—` | read |
| `get_entries` | List entries with filtering, pagination, sorting and relation population. | `—` | read |
| `create_entry` | Create an entry for a content type. | `—` | write |
| `update_entry` | Update an existing entry by ID. | `—` | write |
| `delete_entry` | Delete a specific entry. | `—` | write |
| `publish_entry` | Publish an entry. | `—` | write |
| `unpublish_entry` | Unpublish an entry. | `—` | write |
| `upload_media_from_path` | Upload media from a local path, up to 10MB, avoiding base64 bloat. | `—` | write |
| `connect_relation` | Connect related entries to a relation field. | `—` | write |
| `create_content_type` | Create a content type. Requires admin privileges. | `—` | write |
| `delete_content_type` | Delete a content type. Requires admin privileges. | `—` | write |

## Security & scope

- **Access scope:** read-write
- **Sandbox:** No sandbox. Run it against a local or staging Strapi instance before pointing it at production.
- **Gotchas:**
  - The schema tools need Strapi admin credentials — email and password, not a scoped API token. That is a full admin grant sitting in an MCP config.
  - `delete_content_type` drops the type and, with it, the entries modelled on it. There is no confirmation step.
  - The API-token fallback works but has limited permissions; schema access in particular will fail, which reads as a missing tool rather than a permission error.

## Quick answer

**What it does.** Wraps a Strapi instance's REST and admin APIs: `list_content_types`, `get_entries` with filtering and population, `create_entry` / `update_entry` / `delete_entry`, `publish_entry` / `unpublish_entry`, `upload_media` and `upload_media_from_path`, `connect_relation` / `disconnect_relation`, and the `*_content_type` and `*_component` families.

**Best for:**
- Bulk entry creation and updates
- Creating content types and components from a description
- Relation wiring between entries
- Media uploads from a local path
- Self-hosted or data-residency-bound content

**Not for:**
- Hosted-CMS convenience (use Contentful or Sanity)
- Setups where admin credentials cannot be issued
- Teams needing vendor support on the MCP itself

## Description

A community MCP for Strapi, the self-hosted headless CMS teams pick when the content store has to run on their own infrastructure. Twenty tools cover the content lifecycle — list types, read, create, update and delete entries, publish and unpublish, upload media, connect and disconnect relations — plus admin-level schema work: create, update and delete content types and components.

## Why it matters

Strapi is the CMS in this category that runs on your own server, which makes it the one an agent can be given a real staging copy of. And because the schema tools are exposed, an agent can scaffold a content type and immediately populate it — the two halves usually split across a developer and an editor.

## Key features

- 20 tools verified by probe on v0.2
- Schema editing, not only entries
- `upload_media_from_path` avoids base64 context blowup
- Admin credentials or a fallback API token
- MIT

## FAQ

### Is this Strapi's official MCP?

No. Strapi does not publish a first-party MCP server; this is a community wrapper with about 1.4k weekly npm downloads. Contentful and Sanity are the vendor-published options in this category.

### Admin password or API token?

Both work, but they are not equivalent. The API token cannot reach the schema endpoints, so the content-type and component tools silently stop working. Admin credentials unlock the full set — at the cost of putting admin credentials in a config file.

### Does it work with Strapi v5?

It targets the documented REST and admin APIs, which v5 kept. Run it against a staging instance first and check `list_content_types` returns your types before trusting the rest.

## Changelog

- **2026-09-17** — Refreshed install snippets and fact sheet; verified for 2026.