← Back to search

@jgardner04/ghost-mcp-server

GitHub Actions Scanned 23d ago

A Model Context Protocol (MCP) server for interacting with Ghost CMS via the Admin API

C
74.2 / 100

Versions

1.14.4latest
Jun 4, 2026
1.14.3
May 18, 2026
1.14.2
May 8, 2026
1.14.1
Apr 14, 2026
1.14.0
Apr 14, 2026
+ show 37 moreshow less
1.13.5
Apr 13, 2026
1.13.4
Mar 14, 2026
1.13.3
Mar 3, 2026
1.13.2
Feb 28, 2026
1.13.1
Jan 23, 2026
1.13.0
Dec 21, 2025
1.12.5
Dec 15, 2025
1.12.4
Dec 14, 2025
1.12.3
Dec 13, 2025
1.12.2
Dec 12, 2025
1.12.1
Dec 12, 2025
1.12.0
Dec 12, 2025
1.11.0
Dec 11, 2025
1.10.0
Dec 11, 2025
1.9.0
Dec 11, 2025
1.8.0
Dec 11, 2025
1.7.0
Dec 11, 2025
1.6.0
Dec 11, 2025
1.5.0
Dec 11, 2025
1.4.0
Dec 11, 2025
1.3.0
Dec 11, 2025
1.2.0
Dec 11, 2025
1.1.13
Dec 11, 2025
1.1.12
Dec 10, 2025
1.1.11
Dec 10, 2025
1.1.10
Dec 10, 2025
1.1.9
Dec 10, 2025
1.1.8
Dec 10, 2025
1.1.7
Dec 10, 2025
1.1.6
Dec 10, 2025
1.1.5
Dec 10, 2025
1.1.4
Dec 10, 2025
1.1.3
Dec 10, 2025
1.1.2
Dec 10, 2025
1.1.1
Dec 10, 2025
1.1.0
Dec 10, 2025
1.0.0
Dec 10, 2025
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 35

ghost_update_tier
annotations: none low

Updates an existing tier (membership level) in Ghost CMS. Can update pricing, benefits, and other tier properties.

ghost_delete_tier
annotations: none low

Deletes a tier (membership level) from Ghost CMS by ID. This operation is permanent and cannot be undone.

ghost_get_tags
annotations: none low

Retrieves a list of tags from Ghost CMS with pagination, filtering, sorting, and relation inclusion. Supports filtering by name, slug, visibility, or custom NQL filter expressions.

ghost_create_tag
annotations: none low

Creates a new tag in Ghost CMS.

ghost_get_tag
annotations: none low

Retrieves a single tag from Ghost CMS by ID or slug.

ghost_update_tag
annotations: none low

Updates an existing tag in Ghost CMS.

ghost_delete_tag
annotations: none low

Deletes a tag from Ghost CMS by ID. This operation is permanent and cannot be undone.

ghost_upload_image
annotations: none low

Uploads an image to Ghost CMS. Accepts a remote URL, a local file path (when GHOST_MCP_IMAGE_ROOT is configured), or a base64 payload. Returns the Ghost image URL, alt text, and ref (when Ghost echoes it).

ghost_set_feature_image
annotations: none low

Uploads an image and assigns it as the feature image of a post or page (with optional alt text and caption) in one call. Accepts the same imageUrl/imagePath/imageBase64 input modes as ghost_upload_image. Returns the updated resource. If the update fails after the upload, the error response includes the orphaned image URL.

ghost_create_post
annotations: none low

Creates a new post in Ghost CMS.

ghost_get_posts
annotations: none low

Retrieves a list of posts from Ghost CMS with pagination, filtering, and sorting options.

ghost_get_post
annotations: none low

Retrieves a single post from Ghost CMS by ID or slug.

ghost_search_posts
annotations: none low

Search for posts in Ghost CMS by query string with optional status filtering.

ghost_update_post
annotations: none low

Updates an existing post in Ghost CMS. Can update title, content, status, tags, images, and SEO fields. Only the provided fields are changed; omitted fields remain unchanged. Note: tags and authors arrays are fully replaced, not merged with existing values.

ghost_delete_post
annotations: none low

Deletes a post from Ghost CMS by ID. This operation is permanent and cannot be undone.

ghost_get_pages
annotations: none low

Retrieves a list of pages from Ghost CMS with pagination, filtering, and sorting options.

ghost_get_page
annotations: none low

Retrieves a single page from Ghost CMS by ID or slug.

ghost_create_page
annotations: none low

Creates a new page in Ghost CMS. Note: Pages do NOT typically use tags (unlike posts).

ghost_update_page
annotations: none low

Updates an existing page in Ghost CMS. Can update title, content, status, images, and SEO fields. Only the provided fields are changed; omitted fields remain unchanged.

ghost_delete_page
annotations: none low

Deletes a page from Ghost CMS by ID. This operation is permanent and cannot be undone.

ghost_search_pages
annotations: none low

Search for pages in Ghost CMS by query string with optional status filtering.

ghost_create_member
annotations: none low

Creates a new member (subscriber) in Ghost CMS.

ghost_update_member
annotations: none low

Updates an existing member in Ghost CMS. All fields except id are optional.

ghost_delete_member
annotations: none low

Deletes a member from Ghost CMS by ID. This operation is permanent and cannot be undone.

ghost_get_members
annotations: none low

Retrieves a list of members (subscribers) from Ghost CMS with optional filtering, pagination, and includes.

ghost_get_member
annotations: none low

Retrieves a single member from Ghost CMS by ID or email. Provide either id OR email.

ghost_search_members
annotations: none low

Searches for members by name or email in Ghost CMS.

ghost_get_newsletters
annotations: none low

Retrieves a list of newsletters from Ghost CMS with optional filtering.

ghost_get_newsletter
annotations: none low

Retrieves a single newsletter from Ghost CMS by ID.

ghost_create_newsletter
annotations: none low

Creates a new newsletter in Ghost CMS with customizable sender settings and display options.

ghost_update_newsletter
annotations: none low

Updates an existing newsletter in Ghost CMS. Can update name, description, sender settings, and display options.

ghost_delete_newsletter
annotations: none low

Deletes a newsletter from Ghost CMS by ID. This operation is permanent and cannot be undone.

ghost_get_tiers
annotations: none low

Retrieves a list of tiers (membership levels) from Ghost CMS with optional filtering by type (free/paid).

ghost_get_tier
annotations: none low

Retrieves a single tier (membership level) from Ghost CMS by ID.

ghost_create_tier
annotations: none low

Creates a new tier (membership level) in Ghost CMS with pricing and benefits.

Permissions 2

filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, fs.promises
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 122

low
Tool 'ghost_get_tags' has no annotations annotation_checker · 100%
low
Tool 'ghost_create_tag' has no annotations annotation_checker · 100%
low
Tool 'ghost_get_tag' has no annotations annotation_checker · 100%
low
Tool 'ghost_update_tag' has no annotations annotation_checker · 100%
low
Tool 'ghost_delete_tag' has no annotations annotation_checker · 100%
low
Tool 'ghost_upload_image' has no annotations annotation_checker · 100%
low
Tool 'ghost_set_feature_image' has no annotations annotation_checker · 100%
low
Tool 'ghost_create_post' has no annotations annotation_checker · 100%
low
Tool 'ghost_get_posts' has no annotations annotation_checker · 100%
low
Tool 'ghost_get_post' has no annotations annotation_checker · 100%
low
Tool 'ghost_search_posts' has no annotations annotation_checker · 100%
low
Tool 'ghost_update_post' has no annotations annotation_checker · 100%
low
Tool 'ghost_delete_post' has no annotations annotation_checker · 100%
low
Tool 'ghost_get_pages' has no annotations annotation_checker · 100%
low
Tool 'ghost_get_page' has no annotations annotation_checker · 100%
low
Tool 'ghost_create_page' has no annotations annotation_checker · 100%
low
Tool 'ghost_update_page' has no annotations annotation_checker · 100%
low
Tool 'ghost_delete_page' has no annotations annotation_checker · 100%
low
Tool 'ghost_search_pages' has no annotations annotation_checker · 100%
low
Tool 'ghost_create_member' has no annotations annotation_checker · 100%
low
Tool 'ghost_update_member' has no annotations annotation_checker · 100%
low
Tool 'ghost_delete_member' has no annotations annotation_checker · 100%
low
Tool 'ghost_get_members' has no annotations annotation_checker · 100%
low
Tool 'ghost_get_member' has no annotations annotation_checker · 100%
low
Tool 'ghost_search_members' has no annotations annotation_checker · 100%
low
Tool 'ghost_get_newsletters' has no annotations annotation_checker · 100%
low
Tool 'ghost_get_newsletter' has no annotations annotation_checker · 100%
low
Tool 'ghost_create_newsletter' has no annotations annotation_checker · 100%
low
Tool 'ghost_update_newsletter' has no annotations annotation_checker · 100%
low
Tool 'ghost_delete_newsletter' has no annotations annotation_checker · 100%
low
Tool 'ghost_get_tiers' has no annotations annotation_checker · 100%
low
Tool 'ghost_get_tier' has no annotations annotation_checker · 100%
low
Tool 'ghost_create_tier' has no annotations annotation_checker · 100%
low
Tool 'ghost_update_tier' has no annotations annotation_checker · 100%
low
Tool 'ghost_delete_tier' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Suspicious package name: express-validator dependency_analyzer · 60%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.25.2 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-35jp-ww65-95wh) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-3g43-6gmg-66jw) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-3w6x-2g7m-8v23) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-42h9-826w-cgv3) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-445q-vr5w-6q77) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-5c9x-8gcm-mpgx) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-62hf-57xw-28j9) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-6chq-wfr3-2hj9) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-777c-7fjr-54vf) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-7q8q-rj6j-mhjq) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-898c-q2cr-xwhg) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-f4gw-2p7v-4548) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-hfxv-24rg-xrqf) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-j5f8-grm9-p9fc) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-jqh4-m9w3-8hp9) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-m7pr-hjqh-92cm) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-mmx7-hfxf-jppx) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-mwf2-3pr3-8698) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-p92q-9vqr-4j8v) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-pf86-5x62-jrwf) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-pjwm-pj3p-43mv) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-pmv8-rq9r-6j72) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-pmwg-cvhr-8vh7) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-q8qp-cvcw-x6jj) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-vf2m-468p-8v99) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-w9j2-pvgh-6h63) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-xhjh-pmcv-23jw) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-xx6v-rp6x-q39c) dependency_analyzer · 95%
medium
Vulnerable dependency: express-rate-limit@8.0.1 (GHSA-46wh-pxpv-q5gq) dependency_analyzer · 95%
medium
Vulnerable dependency: joi@18.0.1 (GHSA-q7cg-457f-vx79) dependency_analyzer · 95%
medium
Vulnerable dependency: multer@2.0.2 (GHSA-3p4h-7m6x-2hcm) dependency_analyzer · 95%
medium
Vulnerable dependency: multer@2.0.2 (GHSA-5528-5vmv-3xc2) dependency_analyzer · 95%
medium
Vulnerable dependency: multer@2.0.2 (GHSA-72gw-mp4g-v24j) dependency_analyzer · 95%
medium
Vulnerable dependency: multer@2.0.2 (GHSA-v52c-386h-88mc) dependency_analyzer · 95%
medium
Vulnerable dependency: multer@2.0.2 (GHSA-xf7r-hgr6-v32p) dependency_analyzer · 95%
medium
Vulnerable dependency: sanitize-html@2.17.0 (GHSA-vccv-cmxp-4j9h) dependency_analyzer · 95%
medium
Vulnerable dependency: sharp@0.34.1 (GHSA-f88m-g3jw-g9cj) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@4.0.15 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Buffer.from base64 in jgardner04-Ghost-MCP-Server-39b574d/src/utils/imageInputResolver.js:114 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in jgardner04-Ghost-MCP-Server-39b574d/src/services/__tests__/imageProcessingService.test.js:56 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in jgardner04-Ghost-MCP-Server-39b574d/src/services/__tests__/imageProcessingService.test.js:66 entropy_analyzer · 70%
info
package.json metadata manifest_parser · 100%
info
Tool: ghost_get_tags manifest_parser · 85%
info
Tool: ghost_create_tag manifest_parser · 85%
info
Tool: ghost_get_tag manifest_parser · 85%
info
Tool: ghost_update_tag manifest_parser · 85%
info
Tool: ghost_delete_tag manifest_parser · 85%
info
Tool: ghost_upload_image manifest_parser · 85%
info
Tool: ghost_set_feature_image manifest_parser · 85%
info
Tool: ghost_create_post manifest_parser · 85%
info
Tool: ghost_get_newsletter manifest_parser · 85%
info
Tool: ghost_get_posts manifest_parser · 85%
info
Tool: ghost_get_post manifest_parser · 85%
info
Tool: ghost_search_posts manifest_parser · 85%
info
Tool: ghost_update_post manifest_parser · 85%
info
Tool: ghost_delete_post manifest_parser · 85%
info
Tool: ghost_get_pages manifest_parser · 85%
info
Tool: ghost_get_page manifest_parser · 85%
info
Tool: ghost_create_page manifest_parser · 85%
info
Tool: ghost_update_page manifest_parser · 85%
info
Tool: ghost_delete_page manifest_parser · 85%
info
Tool: ghost_search_pages manifest_parser · 85%
info
Tool: ghost_create_member manifest_parser · 85%
info
Tool: ghost_update_member manifest_parser · 85%
info
Tool: ghost_delete_member manifest_parser · 85%
info
Tool: ghost_get_members manifest_parser · 85%
info
Tool: ghost_get_member manifest_parser · 85%
info
Tool: ghost_search_members manifest_parser · 85%
info
Tool: ghost_get_newsletters manifest_parser · 85%
info
Tool: ghost_create_newsletter manifest_parser · 85%
info
Tool: ghost_update_newsletter manifest_parser · 85%
info
Tool: ghost_delete_newsletter manifest_parser · 85%
info
Tool: ghost_get_tiers manifest_parser · 85%
info
Tool: ghost_get_tier manifest_parser · 85%
info
Tool: ghost_create_tier manifest_parser · 85%
info
Tool: ghost_update_tier manifest_parser · 85%
info
Tool: ghost_delete_tier manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (21) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
low
Permission: filesystem access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 784 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%