modxmcp

Exposes your MODX site over the Model Context Protocol so AI agents and MCP clients can administer it the way a person would through the Manager. Every write goes through MODX processors, so SeoSuite, Collections, cache invalidation and lifecycle events all fire. Token auth with scopes, a full audit log, opt-in uploads and object access. PHP 8.1+, MODX 3.0+, zero dependencies.

• Every tool now enforces the bound MODX user's own Manager permissions and per-object access policies, not just the token scope. A restricted token that previously over-read is now refused by name.
  • The optional standalone endpoint (mcp.php) ships disabled behind a new system setting; enable it only if you use it.
  • Tool arguments are validated against each tool's schema: unknown keys and wrong-typed values are refused instead of silently coerced.
  • The token/settings/audit Manager processors now enforce their permission.
  • seo_redirect stores the correct HTTP status line; the install validator refuses PHP older than 8.2.