Bring your own AI
Spillway speaks MCP, so Claude, ChatGPT and other agents can work on a site with a token you control. Here is what an agent can do today, and the rule that keeps it safe.
Most people who would get value from an AI assistant in their CMS already pay for one. They have Claude, ChatGPT or another assistant open all day. What they lack is a safe way to let that assistant work on the website.
Spillway's answer is to be a good place for those assistants to work, rather than to bundle one of its own and pick a vendor for you.
One endpoint, any assistant
Every Spillway site has a Model Context Protocol server at /mcp. Create an API token in the admin (account menu, API tokens), paste the address and the token into Claude Code, Claude Desktop, ChatGPT or any MCP client, and the assistant can start working. The connection guide in the docs has the exact steps for each.
Once connected, an assistant can:
- read the content model, with each field's AI hints;
- list, read and search content, drafts included;
- create drafts and save new revisions;
- draft a whole page from a brief, built only from the site's own blocks;
- run the pre-publish checks and fix what they find;
- leave comments for editors and submit work for review.
Agents draft, people publish
That is the one rule, and it is enforced by the server rather than written into a prompt. The default token preset, Drafts only, leaves out content.publish. A token can only hold permissions its owner has, it loses them when the owner does, and every request and tool call is written to the audit log with the token's id.
So an assistant can do a great deal of work on a site, and none of it reaches visitors until a person has looked at it. That makes it reasonable to say yes to far more: a translation pass over a whole section, a campaign landing page from a one-paragraph brief, summaries for every post in a section.
What comes next
Connecting today takes a token and a few lines of configuration. We want it to take one click: choose your assistant in the admin, approve the connection, done. We are also making it easier for assistants to work on the parts of a site that are not pages, like the brand, the theme and the block styles, with the same draft-and-review safety. Expect more on this here as it lands.