This project is not covered by Drupal’s security advisory policy.
Lets external AI assistants read the site and draft blog posts and pages over the Model Context Protocol: an MCP server at /mcp, protected with OAuth 2.1, with eight read tools and four draft tools. Nothing it writes is published; publishing stays a human action in Drupal.
The recipe adds the mcp:read and mcp:write scopes and an mcp_agent role that can create and edit its own blog posts and pages as drafts only. No token can publish. Edits to a published item are saved as a pending revision, so the live version stays as it is. Each person connects their own assistant and approves it once, and a token never carries more than the person behind it.
It needs no AI provider and no Varbase AI Base, but needs the PHP openssl and sodium extensions, and the blog and page content types with the Varbase editorial workflow. The MCP and OAuth modules it uses are not stable yet. This recipe is an alpha release, not covered by the Drupal security advisory policy. Try it on a development site first.
Varbase AI MCP Server Base documentation
Check out Varbase AI MCP Server Base documentation for more details.
Best used with Varbase Starter site template.
Can be installed with any Drupal CMS ~2.0 or Drupal Core ~11 site. Even if installed with the Minimal or Standard profile.
However, using it with Varbase gives you way much more cool stuff!
Sponsored and developed by Vardot.
Project information
- Ecosystem: AI (Artificial Intelligence), Varbase AI, Drupal CMS, Varbase Starter, Varbase - The Ultimate Drupal CMS Starter Kit (Bootstrap Ready)
- By rajab natshah on , updated
This project is not covered by the security advisory policy.
Use at your own risk! It may have publicly disclosed vulnerabilities.
Releases
Development version: 1.0.x-dev updated 8 Nov 2026 at 15:20 UTC





