Craft CMS AI Connector
Connecting an AI assistant to your website means giving something a way in, and you should know exactly what that is before you do it. On Craft CMS it is one credential, it belongs to you, and you can take it back at any moment without touching anything else on the site.
What Craft CMS asks for
A token issued against a GraphQL schema. The schema, not the token, decides what can be seen and changed, so access is shaped in the control panel rather than guessed at here.
Taking it back
Revoking is immediate and it is yours to do: the credential is removed on your own Craft CMS site, not requested from us. The next action the assistant attempts fails, the connection reports itself as broken, and nothing else on your website changes. There is no notice period and nothing to cancel first.
What the assistant can and cannot see
The assistant never receives your credential. It asks this connector for an action; the connector checks the action against what you authorised and then uses the credential itself. The credential is encrypted at rest and tied to the single website it was given for, so a copy of it taken from anywhere else is of no use.
What the platform does not allow
Craft only accepts an unpublished state on a mutation if the schema allows it. The schema is inspected before anything is created, and creation is refused outright rather than risk publishing to a live site by accident.
Everything above describes what Craft CMS’s interface offers. None of it is marked verified yet, which in this product means exercised against a live installation with the date recorded.
Common questions
Do I give an AI company my Craft CMS password?
No, and not to us either in the usual sense. Craft CMS issues a separate credential for this, you create it yourself, and it is encrypted the moment it reaches us. Your login password is not involved and is never asked for.
What happens if I revoke it?
The connection stops working and nothing else does. Content already created stays exactly as it is — it is ordinary Craft CMS content, not something held by us. You can issue a new credential later and carry on.
Can one credential reach more than one website?
No. Each credential is bound to the one website it was created for, so a licence for one Craft CMS site cannot quietly be used on another — and a credential that leaked could not be either.
Getting started with Craft CMS AI Agent
Craft CMS AI Agent is not on sale yet. The product page tracks where it stands, and nothing is advertised before it works.