Blog

Every post here starts from something we ran against a real installation, or read in a platform's own source code. Where a post makes a claim about a platform, the claim is printed from the software that would have to do the work — so it cannot say more than the software does.

Explainer

What an MCP server is, and what one can do to your website

An MCP server is how an assistant reaches software you already own. What that means for a website, and the table of what each of 11 platforms actually allows.

Last updated 20 October 2026

Explainer

Joomla MCP server: connecting Joomla to ChatGPT and Claude

Joomla connects with an API token, not a password — and two of its own plugins decide whether it works at all. What we found reading Joomla's source.

Last updated 20 October 2026

Explainer

The WordPress REST API, and what an AI can actually do with it

WordPress allows more through its API than any other platform we have built for. Where it is, how something is let in, and the three places it stops.

Last updated 20 October 2026

Comparison

We built against eleven CMS APIs: what each one will and will not let an AI do

14 jobs across 11 content systems, in one table generated from the adapters. Everyone can read and write. After that they diverge sharply.

Last updated 20 October 2026

Comparison

Why a Wix site's blog is the only part an AI can reach

There is no Pages permission in Wix's own catalogue, and nothing behind it. The blog is reachable in depth. This post is the one that costs us sales.

Last updated 20 October 2026

Problem and fix

Concrete CMS has a REST API: what it can and cannot do

The obvious way to connect to Concrete works, then refuses every write. Found by installing 9.5.5 and driving it, not by reading about it.

Last updated 20 October 2026

Explainer

Draft or published? How each CMS decides, and why it matters when an AI writes

"Draft" is not one idea. 11 platforms, 11 vocabularies — and one of them has a state that cannot be undone. The table of who says what.

Last updated 20 October 2026

Explainer

Can an AI publish to your site by accident? What we refuse to build

Publishing is a permission of its own, it starts unticked, and a connected assistant cannot request it. Plus the four things we have decided not to build.

Last updated 20 October 2026

Comparison

API keys, application passwords and OAuth: how each CMS lets something else in

A key, a password made for one application, or a door you approve yourself. What each proves, which platform uses which, and which one is best.

Last updated 20 October 2026

Comparison

Which is the best headless CMS for an AI? Contentful, Sanity and Strapi, tested

Three content stores, compared on what an assistant can reach rather than on their feature pages. One allows noticeably more than the other two.

Last updated 20 October 2026

Explained