Varbase

This project is not covered by Drupal’s security advisory policy.

Lets external AI assistants read the site and draft blog posts and pages over the Model Context Protocol: an MCP server at /mcp, protected with OAuth 2.1, with eight read tools and four draft tools. Nothing it writes is published; publishing stays a human action in Drupal.

The recipe adds the mcp:read and mcp:write scopes and an mcp_agent role that can create and edit its own blog posts and pages as drafts only. No token can publish. Edits to a published item are saved as a pending revision, so the live version stays as it is. Each person connects their own assistant and approves it once, and a token never carries more than the person behind it.

It needs no AI provider and no Varbase AI Base, but needs the PHP openssl and sodium extensions, and the blog and page content types with the Varbase editorial workflow. The MCP and OAuth modules it uses are not stable yet. This recipe is an alpha release, not covered by the Drupal security advisory policy. Try it on a development site first.


Varbase AI MCP Server Base CI pipeline Varbase public demo is live Varbase design system in Figma Varbase Storybook Varbase AI MCP Server Base documentation Join our Slack

Varbase AI MCP Server Base documentation

Check out Varbase AI MCP Server Base documentation for more details.


Best used with Varbase Starter site template.

Can be installed with any Drupal CMS ~2.0 or Drupal Core ~11 site. Even if installed with the Minimal or Standard profile.

However, using it with Varbase gives you way much more cool stuff!


Sponsored and developed by Vardot.Vardot

Supporting organizations: 
Initial building, ongoing maintenance and development

Project information

Releases