← Back to search

ghost-blog-mcp

GitHub Actions Scanned 5d ago

MCP server for the Ghost Admin API

npm
B
77 / 100

Versions

0.1.4latest
Jul 3, 2026
0.1.3
Jul 3, 2026
0.1.2
Jun 19, 2026
0.1.1
Jun 19, 2026
0.1.0
Jun 19, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 7

ghost_site_info
annotations: none low

Read the connected Ghost site's title, url and version. Use first to confirm credentials work.

ghost_post_list
annotations: none low

Browse posts or pages with an NQL filter, order, and limit. Use to find a post by slug, list drafts, or pull a corpus.

limit union order string fields string filter string
ghost_post_get
annotations: none low

Read a single post or page by id or slug, including its html and lexical. Use for pull-guard before updating.

id string slug string
ghost_tag_list
annotations: none low

Browse tags. Use to find a tag's canonical slug before attaching it to a post.

limit union filter string
ghost_post_create
annotations: none low

Create a post or page from Markdown (built into card-split lexical) or HTML. Returns the public and editor URLs.

id string
ghost_post_update
annotations: none low

Update a post or page in place by id or slug. Read-then-edit (handles updated_at) and syncs title/tags/excerpt/meta, not just the body.

id string
ghost_image_upload
annotations: none low

Upload a local image file to Ghost storage and return its CDN url (e.g. for a feature image).

path string

Permissions 3

filesystem low
Server uses filesystem capabilities via: open(), os, pathlib, shutil
shell high
Server uses shell capabilities via: subprocess
env_vars low
Server uses env_vars capabilities via: os.environ, process.env

Scan Findings 27

low
Tool 'ghost_site_info' has no annotations annotation_checker · 100%
low
Tool 'ghost_post_list' has no annotations annotation_checker · 100%
low
Tool 'ghost_post_get' has no annotations annotation_checker · 100%
low
Tool 'ghost_tag_list' has no annotations annotation_checker · 100%
low
Tool 'ghost_post_create' has no annotations annotation_checker · 100%
low
Tool 'ghost_post_update' has no annotations annotation_checker · 100%
low
Tool 'ghost_image_upload' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.0.0 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@2.1.0 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@2.1.0 (GHSA-9crc-q9x8-hgqq) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: ghost_site_info manifest_parser · 85%
info
Tool: ghost_post_list manifest_parser · 85%
info
Tool: ghost_post_get manifest_parser · 85%
info
Tool: ghost_tag_list manifest_parser · 85%
info
Tool: ghost_post_create manifest_parser · 85%
info
Tool: ghost_post_update manifest_parser · 85%
info
Tool: ghost_image_upload manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (1) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 239 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%