Agents draft, people publish
An AI agent that can write to your CMS is useful. An agent that can publish to your CMS is a liability.
Formscaler's MCP server authenticates as a real user, returns only the collections and fields that user may read, and requires the current lock version for any update. In v1 publishing is not exposed to agents at all: they create drafts and people sign off.
Why it matters
Every route goes through the same services as the admin, so there is no second set of rules to keep in sync. Denied calls are written to the audit log, so you can see what an agent tried.
Use the CMS that your data actually needs.
Self-host the free core, or start a Team trial. No credit card required.