Agent control plane

Let agents do the work without handing over your publishing keys.

Connect Codex, ChatGPT, and other MCP-compatible clients to a site-scoped content work layer with useful authority and hard boundaries.

View on GitHub Self-host BlogFactory

Streamable HTTP · OAuth · Site-scoped · Draft-only

Agent scope map

Illustrative product schematic

BlogFactory · Editorial control schematics

Useful authority without credential access.

01 · Remote client

Codex / ChatGPT

Streamable HTTP

Authorized boundarySite 01

IdentityUser scopedVerified

ToolsDiscovered liveAllowed

SecretsNever returnedBlocked

DeliveryCMS draftApproval

content:readdrafts:writepublish:draft

Why BlogFactory

Useful agent authority, with hard boundaries.

Connect compatible clients

Use one hosted Streamable HTTP MCP endpoint.

Scope every connection

OAuth and personal tokens carry explicit scopes for one site.

Keep credentials private

CMS and provider credentials never return through agent tools.

Inspect operations

Authenticated calls write sanitized lifecycle events without prompts, bodies, tokens, or keys.

Connection proof

One authorization path from client setup to reviewed CMS draft.

Operators can see the endpoint, connection state, selected site, and working sequence in the same control surface.

Site-scoped OAuth
Tool catalog discovered live
Draft-only delivery

BlogFactory MCP Connections showing site-scoped authorization and agent workflow — Product capture · August 23, 2026. Catalog count is shown at capture time; clients discover the current catalog live.

How it works

Connect an agent in three controlled steps.

Choose a site

Create a connection for the workspace the agent may operate.

Grant scopes

Allow content reads, draft writes, or approved CMS draft delivery—nothing broader.

Review the work

Use the web control plane or MCP Review Card before destination handoff.

Capabilities and boundaries

Built for controlled content operations.

Agent work

The current catalog covers discovery, drafts, review, search evidence, and draft delivery.

Discover tools through tools/list
Create, import, generate, and update drafts
Workspace digest and action queue
Search Console evidence

Authority boundary

Connections cannot cross the product’s highest-authority line.

No live publish or delete
No credential access
No account administration
Explicit destination and approval

FAQ

Before you connect.

Does BlogFactory keep sites separate?

Yes. Content, sources, permissions, provider access, search properties, and destinations remain scoped to the authorized site.

Can an MCP agent publish live or delete content?

No. Agent authority stops at approved CMS draft creation. Live publishing, deletion, credentials, and account administration stay outside MCP.

Can I self-host BlogFactory now?

Yes. The public repository is available for self-hosting as a release candidate. BlogFactory Cloud is not available yet.

Run BlogFactory where your content operation lives.

Inspect the public source, then follow the source-build Docker Compose guide for the open-source release candidate.