Codex / ChatGPT
Streamable HTTP
Let agents do the work without handing over your publishing keys.
Connect Codex, ChatGPT, and other MCP-compatible clients to a site-scoped content work layer with useful authority and hard boundaries.
Agent scope map
Illustrative product schematicBlogFactory · Editorial control schematics
Useful authority without credential access.
content:readdrafts:writepublish:draft
Useful agent authority, with hard boundaries.
Connect compatible clients
Use one hosted Streamable HTTP MCP endpoint.
Scope every connection
OAuth and personal tokens carry explicit scopes for one site.
Keep credentials private
CMS and provider credentials never return through agent tools.
Inspect operations
Authenticated calls write sanitized lifecycle events without prompts, bodies, tokens, or keys.
One authorization path from client setup to reviewed CMS draft.
Operators can see the endpoint, connection state, selected site, and working sequence in the same control surface.
- Site-scoped OAuth
- Tool catalog discovered live
- Draft-only delivery
Connect an agent in three controlled steps.
Choose a site
Create a connection for the workspace the agent may operate.
Grant scopes
Allow content reads, draft writes, or approved CMS draft delivery—nothing broader.
Review the work
Use the web control plane or MCP Review Card before destination handoff.
Built for controlled content operations.
Agent work
The current catalog covers discovery, drafts, review, search evidence, and draft delivery.
- Discover tools through tools/list
- Create, import, generate, and update drafts
- Workspace digest and action queue
- Search Console evidence
Authority boundary
Connections cannot cross the product’s highest-authority line.
- No live publish or delete
- No credential access
- No account administration
- Explicit destination and approval
Before you connect.
Does BlogFactory keep sites separate?
Yes. Content, sources, permissions, provider access, search properties, and destinations remain scoped to the authorized site.
Can an MCP agent publish live or delete content?
No. Agent authority stops at approved CMS draft creation. Live publishing, deletion, credentials, and account administration stay outside MCP.
How can I use BlogFactory?
Self-host the AGPL-3.0-only release candidate for free, or create a managed BlogFactory Cloud account from $5 per month. Both editions keep CMS delivery draft-only.
Run BlogFactory where your content operation lives.
Inspect the public source, then follow the source-build Compose guide — or let Cloud run it from $5 a month. The boundary is identical in both.