@proars/ghost-mcp-server 0.0.0-stage → 2.1.1

package/.env.example

@@ -0,0 +1,2 @@
+GHOST_API_URL=https://your-blog.com
+GHOST_ADMIN_API_KEY=your_ghost_admin_api_key_here

package/CHANGELOG.md

@@ -0,0 +1,30 @@
+# Changelog
+
+All notable changes to this project are listed here. The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and versions follow [Semantic Versioning](https://semver.org/).
+
+## [Unreleased]
+
+## [2.1.1] - 2026-11-01
+
+### Changed
+
+- README: Claude Code install uses `--scope user`, with steps to check and remove the server, a note on updating, and a warning about running `npx` inside a clone of this repository.
+
+## [2.1.0] - 2026-11-01
+
+First release on npm as `@proars/ghost-mcp-server`.
+
+### Added
+
+- `delete_member` tool (`DELETE /members/{id}/`). The server now has 59 tools.
+- `ghost-mcp-server` command (`bin` with a shebang), so the package runs with `npx -y @proars/ghost-mcp-server`.
+- GitHub Actions workflow that runs typecheck, build and tests on Node 20 and 22.
+- README warning that destructive tools are available, and an install section for `npx`.
+
+### Changed
+
+- `npm start` runs the compiled `dist/index.js` instead of `tsx`.
+- Published files are limited to `dist`, `README.md`, `LICENSE` and `.env.example`.
+- `prepublishOnly` builds the project and runs the tests before every publish.
+- Minimum `@modelcontextprotocol/sdk` raised from `^1.0.0` to `^1.32.0`.
+- README rewritten with a quick start, FAQ and access notes.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 proars
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,196 @@
-# Temporary Holding Version
+# Ghost MCP Server: manage Ghost CMS from Claude, Cursor and other AI clients
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+[![CI](https://github.com/proars/ghost-mcp-server/actions/workflows/ci.yml/badge.svg)](https://github.com/proars/ghost-mcp-server/actions/workflows/ci.yml)
+![Node.js 20+](https://img.shields.io/badge/node-%3E%3D20-339933?logo=node.js&logoColor=white)
+![Tools](https://img.shields.io/badge/tools-59-blue)
+![Routes](https://img.shields.io/badge/Admin%20API%20routes-253-orange)
+![License: MIT](https://img.shields.io/badge/license-MIT-green)
+
+Ghost MCP Server is an open-source [Model Context Protocol](https://modelcontextprotocol.io) server for Ghost CMS, written in TypeScript. It connects an MCP client such as Claude Desktop, Claude Code or Cursor to the Ghost Admin API over stdio. With it, an AI assistant can create and edit posts and pages, set SEO metadata, manage tags, members and newsletters, upload images and themes, and export content.
+
+It exposes **59 tools**: 55 dedicated API tools, two shortcuts for SEO and tags, a route search and a generic request tool. The built-in catalog covers **253 Admin API routes** taken from a pinned Ghost source snapshot. What works on your site depends on your credentials, your Ghost version and its feature flags. Routes and sources are listed in [GHOST_API.list](GHOST_API.list).
+
+## Quick start
+
+You need Node.js 20 or newer and a Ghost site with Admin API access.
+
+1. In Ghost Admin, open **Settings → Integrations → Add custom integration** and copy the **Admin API Key** (`id:secret`). Do not use the Content API key.
+2. Add the server to your client configuration. For Claude Desktop or Cursor:
+
+```json
+{
+  "mcpServers": {
+    "ghost": {
+      "command": "npx",
+      "args": ["-y", "@proars/ghost-mcp-server"],
+      "env": {
+        "GHOST_API_URL": "https://your-blog.com",
+        "GHOST_ADMIN_API_KEY": "64f1a2b3c4d5e6f7a8b9c0d1:3e5f7a9b1c2d4e6f8a0b2c4d6e8f0a1b3c5d7e9f1a2b4c6d8e0f2a3b5c7d9e1f"
+      }
+    }
+  }
+}
+```
+
+The key above is a made-up example in the real format: 24 hex characters, a colon, then 64 hex characters. Replace both values with your own.
+
+When you run the server with `npx`, pass the settings through `env` as shown. A `.env` file is read only from a source checkout (see below), or from the path in `GHOST_MCP_ENV_FILE`.
+
+3. Restart the client and ask something like "List my latest posts with their SEO titles."
+
+`GHOST_API_URL` is the canonical Admin domain, including any site subdirectory, without `/ghost/api/admin`. For a local site, use an address such as `http://localhost:2368`.
+
+Config file locations: Claude Desktop on macOS uses `~/Library/Application Support/Claude/claude_desktop_config.json`. Cursor uses `~/.cursor/mcp.json` or `.cursor/mcp.json` in your project.
+
+**Claude Code:**
+
+```bash
+claude mcp add ghost --scope user \
+  -e GHOST_API_URL=https://your-blog.com \
+  -e GHOST_ADMIN_API_KEY=64f1a2b3c4d5e6f7a8b9c0d1:3e5f7a9b1c2d4e6f8a0b2c4d6e8f0a1b3c5d7e9f1a2b4c6d8e0f2a3b5c7d9e1f \
+  -- npx -y @proars/ghost-mcp-server
+```
+
+`--scope user` makes the server available in every folder. Without it, the server is registered only for the folder where you ran the command. Claude Code starts and stops the server itself, so you don't need to keep a terminal open.
+
+Check the connection with `claude mcp get ghost`, which should report `Connected`, or type `/mcp` inside a `claude` session. To remove the server, run `claude mcp remove ghost -s user`.
+
+**Updating:** `npx` keeps a cached copy and may not fetch a new release right away. To update, run `rm -rf ~/.npm/_npx` and restart your client, or use `@proars/ghost-mcp-server@latest` in the command so npx checks the registry on every start. To stay on one version, pin it, for example `@proars/ghost-mcp-server@2.1.0`. See the [changelog](CHANGELOG.md) for what changed in each release.
+
+Don't run `npx` from inside a clone of this repository: npm finds the local `package.json` with the same name and fails with `ghost-mcp-server: command not found`. Run it from any other folder.
+
+Any other stdio MCP client can run the same command, `npx -y @proars/ghost-mcp-server`, with the two environment variables.
+
+## Install from source
+
+Use this if you want to change the code or run an unpublished version.
+
+```bash
+git clone https://github.com/proars/ghost-mcp-server.git
+cd ghost-mcp-server
+npm install
+npm run build
+cp .env.example .env
+```
+
+Fill in `GHOST_API_URL` and `GHOST_ADMIN_API_KEY` in `.env`, then point the client at the build. Keep `--silent`: npm's startup banner would otherwise end up in the MCP protocol stream on stdout.
+
+```json
+{
+  "mcpServers": {
+    "ghost": {
+      "command": "npm",
+      "args": ["--silent", "--prefix", "/ABSOLUTE/PATH/ghost-mcp-server", "start"]
+    }
+  }
+}
+```
+
+The `.env` file in the project root is read regardless of the directory the client starts the server from. Variables that are already set take priority, and if both required variables are set, the file is not read at all. `GHOST_MCP_ENV_FILE` selects a different env file, and `GHOST_MCP_SKIP_DOTENV=1` turns file loading off.
+
+## What can the server do?
+
+| Resource | Tools |
+|---|---|
+| Posts | `get_posts`, `get_post`, `get_post_by_slug`, `create_post`, `update_post`, `delete_post`, `copy_post` |
+| Pages | `get_pages`, `get_page`, `get_page_by_slug`, `create_page`, `update_page`, `delete_page`, `copy_page` |
+| Tags | `get_tags`, `get_tag`, `get_tag_by_slug`, `create_tag`, `update_tag`, `delete_tag` |
+| Tiers | `get_tiers`, `get_tier`, `create_tier`, `update_tier` |
+| Newsletters | `get_newsletters`, `get_newsletter`, `create_newsletter`, `update_newsletter` |
+| Offers | `get_offers`, `get_offer`, `create_offer`, `update_offer` |
+| Members | `get_members`, `get_member`, `create_member`, `update_member`, `delete_member` |
+| Labels | `get_labels`, `create_label`, `update_label`, `delete_label` |
+| Staff | `get_users`, `get_user`, `update_user`, `delete_user`, `get_roles`, `invite_user` |
+| Images and themes | `upload_image`, `upload_theme`, `activate_theme` |
+| Webhooks | `create_webhook`, `update_webhook`, `delete_webhook` |
+| Site | `get_site`, `get_settings` |
+| Shortcuts | `update_post_seo`, `update_post_tags` |
+| Discovery and generic calls | `ghost_list_endpoints`, `ghost_api_request` |
+
+Ghost has no delete endpoint for tiers, newsletters or offers, so those resources have no `delete_*` tool.
+
+> **Warning: this server exposes every supported function, including destructive ones.** `delete_post`, `delete_page`, `delete_tag`, `delete_member`, `delete_user`, `activate_theme`, `upload_theme` and `ghost_api_request` can permanently remove or overwrite content, subscribers and site settings. Deleted records usually cannot be restored. Create a separate integration key for the server, make a backup (Ghost Admin → Settings → Labs → Export) before bulk work, and turn on manual approval for all `update_*`, `delete_*` and generic calls in your client.
+
+### How do I call the tools?
+
+- **Create and update:** put the record fields in `data` and pass the record `id` as a separate argument. Post and page updates need `data.updated_at` from a fresh read. The SEO and tag shortcuts take `updated_at` directly.
+- **Lists:** use `limit`, `page`, `filter`, `order`, `include` and `fields`. Posts and pages come back with compact fields and tags by default. Single-record reads return the full record.
+- **Tags:** setting tags replaces the whole set. Tags that don't exist yet are created, and an empty array removes all tags.
+- **Publishing:** call `update_post` with `data.status="published"`, or with `"scheduled"` and a future `data.published_at`. To send the post by email, add `newsletter` (a slug) and, optionally, `email_segment`.
+- **Images:** `upload_image` takes `file_path`, an optional `purpose` (`image`, `profile_image` or `icon`) and `ref`.
+
+### How do I reach routes that have no dedicated tool?
+
+Use `ghost_list_endpoints` to search by `group`, `method`, `access` or `search`. Set `without_dedicated_tool=true` to list the other 198 routes. Each entry shows access requirements, feature flags and upload fields.
+
+Call any route with `ghost_api_request`. Its `path` is relative to `/ghost/api/admin`, contains real IDs or slugs, and has no query string.
+
+```text
+ghost_api_request method=GET  path=/labels/slug/vip/
+ghost_api_request method=POST path=/members/upload/ files={membersfile: "/Users/me/members.csv"}
+ghost_api_request method=GET  path=/posts/export/   save_to="/Users/me/posts.csv"
+```
+
+Send JSON payloads in `body`, using the structure Ghost expects. Put query parameters in `query`. Send multipart files as `files={formField: "/absolute/path"}`, with optional text `fields`.
+
+For downloads, `save_to` must name a new file in an existing, writable folder. Trailing separators are rejected and existing files are never overwritten. When a POST, PUT or DELETE returns a file, set `save_to` on the first call, because repeating a mutation to get its response can repeat its effect.
+
+## Which Ghost permissions does it need?
+
+| Class | Routes | Requirement |
+|---|---:|---|
+| `I` / `PUBLIC` | 125 | Integration-key allowlist or public access. Handler permissions still apply. |
+| `U` | 116 | A staff user's access token with the required role, or a user session. |
+| `SESSION` | 3 | User cookie session. Integration keys and staff tokens are blocked. |
+| `FLOW` | 9 | Login, recovery and setup flows with their own authentication. |
+
+To use a staff token, put the token from the user's Ghost Admin profile into `GHOST_ADMIN_API_KEY`. Its permissions follow the user's role. Staff tokens cannot call `DELETE /db/`, `PUT /users/owner/` or `POST /authentication/reset/`.
+
+The server does not implement cookie sessions, login or 2FA. Those routes are in the catalog for discovery only.
+
+Requests send `Accept-Version: v5.0`. The catalog is a snapshot of Ghost's `main` branch, so it includes newer or experimental routes that may return 404 on your installation. The public Content API is not included.
+
+## Is it safe to give an AI client access to my site?
+
+Treat it like any account with write access to your blog, and keep a human in the loop.
+
+- Keep keys in your client's environment or in `.env`, and never commit them. Turn on manual approval for destructive tools: all `update_*` and `delete_*` tools, `activate_theme`, `upload_theme` and `ghost_api_request`.
+- If a mutation fails after it was sent, check Ghost before retrying, because it may have gone through. Use the read tools to inspect the result of a truncated response.
+- Redirects are never followed. Configure the canonical Admin URL, and after a mutation receives a redirect, check the result before sending another request.
+- Local file paths must be absolute. Hidden path components are refused, both as written and after symlink resolution. Uploads require regular files, and downloads are reserved before the request with owner-only permissions.
+- The file checks are not a sandbox. They don't protect sensitive files that have visible names, and they don't stop a local process from rewriting directories during a call. Treat site content as untrusted and review upload requests.
+- Uploads and downloads are buffered in memory. HTTP requests time out after 120 seconds, and tool responses longer than 100,000 characters are truncated.
+
+## Development
+
+```bash
+npm run typecheck   # tsc --noEmit
+npm test            # regression tests with synthetic credentials and a local fake Ghost server
+npm run catalog     # regenerate src/catalog.ts from GHOST_API.list
+npm run build       # compile to dist/
+npm start           # run the build over stdio (requires configuration)
+```
+
+The route list lives in `GHOST_API.list`. `scripts/generate-catalog.mjs` turns it into `src/catalog.ts`, which you should never edit by hand. To change routes, edit the list, run `npm run catalog`, then run the tests. Logs go to stderr, because stdout is reserved for MCP messages.
+
+GitHub Actions runs typecheck, build and tests on Node 20 and 22 for every push to `main` and every pull request.
+
+The tests check catalog and tool consistency, request construction, file safety, redirects, retry guidance and configuration isolation. They don't prove compatibility with a live Ghost instance.
+
+## FAQ
+
+**Does it work with self-hosted Ghost and Ghost(Pro)?**
+Yes, as long as you can reach the Admin API and have a key. Use the Admin domain of your site as `GHOST_API_URL`.
+
+**Which clients does it support?**
+Any MCP client that can start a stdio server, including Claude Desktop, Claude Code and Cursor.
+
+**Can it read my public content without an Admin key?**
+No. It uses the Admin API only. The public Content API is not covered.
+
+**Can it delete my content?**
+Yes, `delete_post`, `delete_page` and similar tools are permanent. Require manual approval for them in your client.
+
+## License
+
+[MIT](LICENSE).

package/dist/catalog.js

@@ -0,0 +1,261 @@
+// Generated from GHOST_API.list (TryGhost/Ghost commit 45498ed2eca0585e3542c852e57b275581a78d63).
+// Do not edit by hand: change GHOST_API.list, run "npm run catalog", then run "npm test".
+/**
+ * access: I = passes the integration-token allowlist, U = needs a staff user token or session,
+ * SESSION = needs a user cookie session, FLOW = login/recovery/setup flow, PUBLIC = no authentication.
+ */
+export const CATALOG = [
+    ["GET", "/site/", "site.read", "PUBLIC", "SITE", "doc", "get site title, description, logo, URL, and version"],
+    ["GET", "/config/", "config.read", "I", "CONFIG", "src", "get record"],
+    ["GET", "/config/featurebase/", "config.featurebase", "I", "CONFIG", "src", "get Featurebase configuration"],
+    ["GET", "/posts/", "posts.browse", "I", "POSTS", "doc", "list records"],
+    ["GET", "/posts/export/", "posts.exportCSV", "I", "POSTS", "src", "export CSV"],
+    ["POST", "/posts/", "posts.add", "I", "POSTS", "doc", "create record"],
+    ["DELETE", "/posts/", "posts.bulkDestroy", "I", "POSTS", "src", "bulk delete records"],
+    ["PUT", "/posts/bulk/", "posts.bulkEdit", "I", "POSTS", "src", "bulk update records"],
+    ["POST", "/posts/upload/", "posts.importCSV", "I", "POSTS", "src", "import CSV", { flag: "csvContentImporter", upload: ["postsfile"] }],
+    ["GET", "/posts/{id}/", "posts.read", "I", "POSTS", "doc", "get record"],
+    ["GET", "/posts/slug/{slug}/", "posts.read", "I", "POSTS", "doc", "get record"],
+    ["PUT", "/posts/{id}/", "posts.edit", "I", "POSTS", "doc", "update record"],
+    ["DELETE", "/posts/{id}/", "posts.destroy", "I", "POSTS", "doc", "delete record"],
+    ["POST", "/posts/{id}/copy/", "posts.copy", "I", "POSTS", "src", "copy record"],
+    ["GET", "/posts/{id}/gift_links/", "giftLinks.browse", "I", "POSTS", "src", "list records"],
+    ["PUT", "/posts/{id}/gift_links/", "giftLinks.ensure", "I", "POSTS", "src", "ensure a gift link exists"],
+    ["POST", "/posts/{id}/gift_links/", "giftLinks.create", "I", "POSTS", "src", "create gift link"],
+    ["GET", "/mentions/", "mentions.browse", "U", "MENTIONS", "src", "list records"],
+    ["GET", "/comments/", "comments.browseAll", "I", "COMMENTS", "src", "get all comments"],
+    ["GET", "/comments/{id}/", "commentReplies.read", "I", "COMMENTS", "src", "get comment thread"],
+    ["GET", "/comments/{id}/replies/", "commentReplies.browse", "I", "COMMENTS", "src", "list records"],
+    ["GET", "/comments/{id}/reports/", "commentReports.browse", "I", "COMMENTS", "src", "list records"],
+    ["GET", "/comments/{id}/likes/", "commentLikes.browse", "I", "COMMENTS", "src", "list records"],
+    ["GET", "/comments/{id}/dislikes/", "commentDislikes.browse", "I", "COMMENTS", "src", "list records"],
+    ["GET", "/comments/post/{post_id}/", "comments.browse", "I", "COMMENTS", "src", "list records"],
+    ["POST", "/comments/", "comments.add", "I", "COMMENTS", "src", "create record"],
+    ["PUT", "/comments/{id}/", "comments.edit", "I", "COMMENTS", "src", "update record"],
+    ["GET", "/pages/", "pages.browse", "I", "PAGES", "doc", "list records"],
+    ["DELETE", "/pages/", "pages.bulkDestroy", "I", "PAGES", "src", "bulk delete records"],
+    ["PUT", "/pages/bulk/", "pages.bulkEdit", "I", "PAGES", "src", "bulk update records"],
+    ["POST", "/pages/", "pages.add", "I", "PAGES", "doc", "create record"],
+    ["GET", "/pages/{id}/", "pages.read", "I", "PAGES", "doc", "get record"],
+    ["GET", "/pages/slug/{slug}/", "pages.read", "I", "PAGES", "doc", "get record"],
+    ["PUT", "/pages/{id}/", "pages.edit", "I", "PAGES", "doc", "update record"],
+    ["DELETE", "/pages/{id}/", "pages.destroy", "I", "PAGES", "doc", "delete record"],
+    ["POST", "/pages/{id}/copy/", "pages.copy", "I", "PAGES", "doc", "copy record"],
+    ["GET", "/pages/{id}/gift_links/", "giftLinks.browse", "I", "PAGES", "src", "list records"],
+    ["PUT", "/pages/{id}/gift_links/", "giftLinks.ensure", "I", "PAGES", "src", "ensure a gift link exists"],
+    ["POST", "/pages/{id}/gift_links/", "giftLinks.create", "I", "PAGES", "src", "create gift link"],
+    ["PUT", "/gift_links/remove_all/", "giftLinks.removeAll", "U", "GIFT LINKS", "src", "revoke all gift links"],
+    ["GET", "/integrations/", "integrations.browse", "U", "INTEGRATIONS", "src", "list records"],
+    ["GET", "/integrations/{id}/", "integrations.read", "U", "INTEGRATIONS", "src", "get record"],
+    ["POST", "/integrations/", "integrations.add", "U", "INTEGRATIONS", "src", "create record"],
+    ["POST", "/integrations/{id}/api_key/{keyid}/refresh/", "integrations.edit", "U", "INTEGRATIONS", "src", "refresh integration key"],
+    ["PUT", "/integrations/{id}/", "integrations.edit", "U", "INTEGRATIONS", "src", "update record"],
+    ["DELETE", "/integrations/{id}/", "integrations.destroy", "U", "INTEGRATIONS", "src", "delete record"],
+    ["PUT", "/schedules/{resource}/{id}/", "schedules.publish", "I", "SCHEDULES", "src", "execute scheduled publication", { tokenUrl: true }],
+    ["PUT", "/gifts/flush_reminders/", "gifts.flushReminders", "I", "GIFTS", "src", "process pending gift reminders", { tokenUrl: true }],
+    ["PUT", "/gifts/flush_deliveries/", "gifts.flushDeliveries", "I", "GIFTS", "src", "process pending gift deliveries", { tokenUrl: true }],
+    ["GET", "/settings/routes/yaml/", "settings.download", "I", "SETTINGS", "src", "download file"],
+    ["POST", "/settings/routes/yaml/", "settings.upload", "U", "SETTINGS", "src", "upload file", { upload: ["routes"] }],
+    ["GET", "/settings/", "settings.browse", "I", "SETTINGS", "src", "list records"],
+    ["PUT", "/settings/", "settings.edit", "U", "SETTINGS", "src", "update record"],
+    ["POST", "/settings/access_code/regenerate/", "settings.regenerateAccessCode", "U", "SETTINGS", "src", "regenerate access code"],
+    ["PUT", "/settings/verifications/", "settings.verifyKeyUpdate", "U", "SETTINGS", "src", "confirm settings change"],
+    ["DELETE", "/settings/stripe/connect/", "settings.disconnectStripeConnectIntegration", "U", "SETTINGS", "src", "disconnect Stripe Connect"],
+    ["GET", "/users/", "users.browse", "I", "USERS", "doc", "list records"],
+    ["GET", "/users/{id}/", "users.read", "I", "USERS", "src", "get record"],
+    ["GET", "/users/slug/{slug}/", "users.read", "I", "USERS", "src", "get record"],
+    ["GET", "/users/email/{email}/", "users.read", "I", "USERS", "src", "get record"],
+    ["GET", "/users/{id}/token/", "users.readStaffToken", "I", "USERS", "src", "get staff token"],
+    ["PUT", "/users/password/", "users.changePassword", "U", "USERS", "src", "change password"],
+    ["PUT", "/users/owner/", "users.transferOwnership", "SESSION", "USERS", "src", "transfer site ownership"],
+    ["PUT", "/users/{id}/", "users.edit", "U", "USERS", "doc", "update record"],
+    ["PUT", "/users/{id}/token/", "users.regenerateStaffToken", "U", "USERS", "src", "regenerate staff token"],
+    ["DELETE", "/users/{id}/", "users.destroy", "U", "USERS", "doc", "delete record"],
+    ["GET", "/tags/", "tags.browse", "I", "TAGS", "src", "list records"],
+    ["GET", "/tags/{id}/", "tags.read", "I", "TAGS", "src", "get record"],
+    ["GET", "/tags/slug/{slug}/", "tags.read", "I", "TAGS", "src", "get record"],
+    ["POST", "/tags/", "tags.add", "I", "TAGS", "src", "create record"],
+    ["PUT", "/tags/{id}/", "tags.edit", "I", "TAGS", "src", "update record"],
+    ["DELETE", "/tags/{id}/", "tags.destroy", "I", "TAGS", "src", "delete record"],
+    ["GET", "/tiers/", "tiers.browse", "I", "TIERS", "doc", "list records"],
+    ["POST", "/tiers/", "tiers.add", "I", "TIERS", "doc", "create record"],
+    ["GET", "/tiers/{id}/", "tiers.read", "I", "TIERS", "src", "get record"],
+    ["PUT", "/tiers/{id}/", "tiers.edit", "I", "TIERS", "doc", "update record"],
+    ["GET", "/stripe/checkout/config/", "stripeCheckoutConfig.read", "U", "STRIPE CHECKOUT", "src", "get record", { flag: "stripeCheckoutDesign" }],
+    ["PUT", "/stripe/checkout/config/", "stripeCheckoutConfig.edit", "U", "STRIPE CHECKOUT", "src", "update record", { flag: "stripeCheckoutDesign" }],
+    ["POST", "/stripe/checkout/preview/", "stripeCheckoutPreview.add", "U", "STRIPE CHECKOUT", "src", "create record", { flag: "stripeCheckoutDesign" }],
+    ["GET", "/stripe/checkout/branding/", "stripeCheckoutBranding.read", "U", "STRIPE CHECKOUT", "src", "get record", { flag: "stripeCheckoutDesign" }],
+    ["GET", "/members/", "members.browse", "I", "MEMBERS", "doc", "list records"],
+    ["POST", "/members/", "members.add", "I", "MEMBERS", "doc", "create record"],
+    ["DELETE", "/members/", "members.bulkDestroy", "I", "MEMBERS", "src", "bulk delete records"],
+    ["PUT", "/members/bulk/", "members.bulkEdit", "I", "MEMBERS", "src", "bulk update records"],
+    ["GET", "/members/stats/count/", "members.memberStats", "I", "MEMBERS", "src", "get member count stats"],
+    ["GET", "/members/stats/mrr/", "members.mrrStats", "I", "MEMBERS", "src", "get monthly recurring revenue stats"],
+    ["GET", "/members/events/", "members.activityFeed", "I", "MEMBERS", "src", "get member activity feed"],
+    ["GET", "/members/upload/", "members.exportCSV", "I", "MEMBERS", "src", "export CSV"],
+    ["POST", "/members/upload/", "members.importCSV", "I", "MEMBERS", "src", "import CSV", { upload: ["membersfile"] }],
+    ["GET", "/members/stripe_connect/", "membersStripeConnect.auth", "I", "MEMBERS", "src", "start Stripe Connect authorization"],
+    ["GET", "/members/metafields/{namespace}/", "membersMetafields.browse", "I", "MEMBERS", "src", "list records"],
+    ["GET", "/members/metafields/{namespace}/{key}/", "membersMetafields.read", "I", "MEMBERS", "src", "get record"],
+    ["POST", "/members/metafields/{namespace}/", "membersMetafields.add", "I", "MEMBERS", "src", "create record", { flag: "membersCustomFields" }],
+    ["PUT", "/members/metafields/{namespace}/", "membersMetafields.reorder", "I", "MEMBERS", "src", "reorder field definitions", { flag: "membersCustomFields" }],
+    ["PUT", "/members/metafields/{namespace}/{key}/", "membersMetafields.edit", "I", "MEMBERS", "src", "update record", { flag: "membersCustomFields" }],
+    ["DELETE", "/members/metafields/{namespace}/{key}/", "membersMetafields.destroy", "I", "MEMBERS", "src", "delete record", { flag: "membersCustomFields" }],
+    ["GET", "/members/{id}/", "members.read", "I", "MEMBERS", "src", "get record"],
+    ["PUT", "/members/{id}/", "members.edit", "I", "MEMBERS", "doc", "update record"],
+    ["DELETE", "/members/{id}/", "members.destroy", "I", "MEMBERS", "src", "delete record"],
+    ["DELETE", "/members/{id}/sessions/", "members.logout", "I", "MEMBERS", "src", "end member sessions"],
+    ["DELETE", "/members/{id}/suppression/", "members.deleteEmailSuppression", "I", "MEMBERS", "src", "clear email suppression"],
+    ["POST", "/members/{id}/subscriptions/", "members.createSubscription", "I", "MEMBERS", "src", "create member subscription"],
+    ["PUT", "/members/{id}/subscriptions/{subscription_id}/", "members.editSubscription", "I", "MEMBERS", "src", "update member subscription"],
+    ["GET", "/members/{id}/signin_urls/", "memberSigninUrls.read", "I", "MEMBERS", "src", "get member login links"],
+    ["POST", "/members/{id}/commenting/disable/", "memberCommenting.disable", "I", "MEMBERS", "src", "disable comments"],
+    ["POST", "/members/{id}/commenting/enable/", "memberCommenting.enable", "I", "MEMBERS", "src", "enable comments"],
+    ["GET", "/offers/", "offers.browse", "I", "OFFERS", "doc", "list records"],
+    ["POST", "/offers/", "offers.add", "I", "OFFERS", "doc", "create record"],
+    ["GET", "/offers/{id}/", "offers.read", "I", "OFFERS", "src", "get record"],
+    ["PUT", "/offers/{id}/", "offers.edit", "I", "OFFERS", "doc", "update record"],
+    ["POST", "/apps/installations/preview/", "appInstallationPreviews.add", "U", "APPS", "src", "create record", { flag: "apps" }],
+    ["GET", "/apps/installations/", "appInstallations.browse", "U", "APPS", "src", "list records", { flag: "apps" }],
+    ["POST", "/apps/installations/", "appInstallations.add", "U", "APPS", "src", "create record", { flag: "apps" }],
+    ["GET", "/apps/installations/{id}/", "appInstallations.read", "U", "APPS", "src", "get record", { flag: "apps" }],
+    ["PUT", "/apps/installations/{id}/", "appInstallations.edit", "U", "APPS", "src", "update record", { flag: "apps" }],
+    ["POST", "/apps/installations/{id}/sessions/", "appSessions.start", "U", "APPS", "src", "start app session", { flag: "apps" }],
+    ["DELETE", "/apps/installations/{id}/", "appInstallations.destroy", "U", "APPS", "src", "delete record", { flag: "apps" }],
+    ["GET", "/stats/member_count/", "stats.memberCountHistory", "U", "STATS", "src", "get member-count history"],
+    ["GET", "/stats/mrr/", "stats.mrr", "U", "STATS", "src", "get MRR trends"],
+    ["GET", "/stats/subscriptions/", "stats.subscriptions", "U", "STATS", "src", "get subscription stats"],
+    ["GET", "/stats/referrers/", "stats.referrersHistory", "U", "STATS", "src", "get referral-source history"],
+    ["GET", "/stats/posts/{id}/stats/", "stats.postStats", "U", "STATS", "src", "get post stats"],
+    ["GET", "/stats/top-posts/", "stats.topPosts", "U", "STATS", "src", "get popular posts"],
+    ["GET", "/stats/top-posts-views/", "stats.topPostsViews", "U", "STATS", "src", "get popular posts by views"],
+    ["GET", "/stats/top-content/", "stats.topContent", "U", "STATS", "src", "get popular content"],
+    ["GET", "/stats/newsletter-stats/", "stats.newsletterStats", "U", "STATS", "src", "get newsletter stats"],
+    ["GET", "/stats/newsletter-basic-stats/", "stats.newsletterBasicStats", "U", "STATS", "src", "get newsletter overview metrics"],
+    ["GET", "/stats/newsletter-click-stats/", "stats.newsletterClickStats", "U", "STATS", "src", "get newsletter click stats"],
+    ["GET", "/stats/subscriber-count/", "stats.subscriberCount", "U", "STATS", "src", "get newsletter subscriber count"],
+    ["GET", "/stats/posts/{id}/top-referrers/", "stats.postReferrers", "U", "STATS", "src", "get post referral sources"],
+    ["GET", "/stats/posts/{id}/growth/", "stats.postGrowthStats", "U", "STATS", "src", "get audience growth attributed to a post"],
+    ["GET", "/stats/top-sources-growth/", "stats.topSourcesGrowth", "U", "STATS", "src", "get audience growth sources"],
+    ["POST", "/stats/posts-visitor-counts/", "stats.postsVisitorCounts", "U", "STATS", "src", "get visitor counts for a set of posts"],
+    ["POST", "/stats/posts-member-counts/", "stats.postsMemberCounts", "U", "STATS", "src", "get member counts for a set of posts"],
+    ["GET", "/labels/", "labels.browse", "I", "LABELS", "doc", "list records"],
+    ["GET", "/labels/{id}/", "labels.read", "I", "LABELS", "src", "get record"],
+    ["GET", "/labels/slug/{slug}/", "labels.read", "I", "LABELS", "src", "get record"],
+    ["POST", "/labels/", "labels.add", "I", "LABELS", "doc", "create record"],
+    ["PUT", "/labels/{id}/", "labels.edit", "I", "LABELS", "doc", "update record"],
+    ["DELETE", "/labels/{id}/", "labels.destroy", "I", "LABELS", "doc", "delete record"],
+    ["GET", "/automations/", "automations.browse", "U", "AUTOMATIONS", "src", "list records"],
+    ["GET", "/automations/{automation_id}/actions/{action_id}/links/", "automationActionLinks.browse", "U", "AUTOMATIONS", "src", "list records"],
+    ["GET", "/automations/{id}/", "automations.read", "U", "AUTOMATIONS", "src", "get record"],
+    ["GET", "/automations/{id}/performance-stats/", "automationPerformanceStats.read", "U", "AUTOMATIONS", "src", "get record"],
+    ["GET", "/automations/{id}/runs/", "automationRuns.browse", "U", "AUTOMATIONS", "src", "list records"],
+    ["GET", "/automations/{id}/runs/{run_id}/", "automationRunHistory.read", "U", "AUTOMATIONS", "src", "get record"],
+    ["POST", "/automations/{id}/email_preview/", "automationEmailPreviews.preview", "I", "AUTOMATIONS", "src", "generate preview"],
+    ["POST", "/automations/{id}/email_test/", "automationEmailPreviews.sendTestEmail", "I", "AUTOMATIONS", "src", "send a test email"],
+    ["PUT", "/automations/poll/", "automations.poll", "I", "AUTOMATIONS", "src", "run automation processing", { tokenUrl: true }],
+    ["POST", "/automations/", "automations.add", "I", "AUTOMATIONS", "src", "create record"],
+    ["PUT", "/automations/{id}/", "automations.edit", "I", "AUTOMATIONS", "src", "update record"],
+    ["GET", "/automated_emails/", "automatedEmails.browse", "U", "AUTOMATED EMAILS", "src", "list records"],
+    ["GET", "/automated_emails/design/", "automatedEmailDesign.read", "U", "AUTOMATED EMAILS", "src", "get record"],
+    ["PUT", "/automated_emails/senders/", "automatedEmails.editSenders", "U", "AUTOMATED EMAILS", "src", "update automated email senders"],
+    ["PUT", "/automated_emails/verifications/", "automatedEmails.verifySenderUpdate", "U", "AUTOMATED EMAILS", "src", "confirm sender change"],
+    ["GET", "/automated_emails/{id}/", "automatedEmails.read", "U", "AUTOMATED EMAILS", "src", "get record"],
+    ["POST", "/automated_emails/", "automatedEmails.add", "U", "AUTOMATED EMAILS", "src", "create record"],
+    ["PUT", "/automated_emails/design/", "automatedEmailDesign.edit", "U", "AUTOMATED EMAILS", "src", "update record"],
+    ["PUT", "/automated_emails/{id}/", "automatedEmails.edit", "U", "AUTOMATED EMAILS", "src", "update record"],
+    ["POST", "/automated_emails/{id}/preview/", "automatedEmails.preview", "U", "AUTOMATED EMAILS", "src", "generate preview"],
+    ["POST", "/automated_emails/{id}/test/", "automatedEmails.sendTestEmail", "U", "AUTOMATED EMAILS", "src", "send a test email"],
+    ["GET", "/roles/", "roles.browse", "I", "ROLES", "doc", "list records"],
+    ["GET", "/slugs/{type}/{name}/", "slugs.generate", "U", "SLUGS", "src", "generate a unique slug"],
+    ["GET", "/slugs/{type}/{name}/{id}/", "slugs.generate", "U", "SLUGS", "src", "generate a unique slug"],
+    ["GET", "/themes/", "themes.browse", "U", "THEMES", "src", "list records"],
+    ["GET", "/themes/{name}/download/", "themes.download", "U", "THEMES", "src", "download file"],
+    ["GET", "/themes/active/", "themes.readActive", "U", "THEMES", "src", "get active theme"],
+    ["POST", "/themes/upload/", "themes.upload", "I", "THEMES", "doc", "upload file", { upload: ["file"] }],
+    ["POST", "/themes/install/", "themes.install", "I", "THEMES", "src", "install theme"],
+    ["PUT", "/themes/{name}/activate/", "themes.activate", "I", "THEMES", "doc", "activate theme"],
+    ["DELETE", "/themes/{name}/", "themes.destroy", "U", "THEMES", "src", "delete record"],
+    ["GET", "/notifications/", "notifications.browse", "U", "NOTIFICATIONS", "src", "list records"],
+    ["POST", "/notifications/", "notifications.add", "U", "NOTIFICATIONS", "src", "create record"],
+    ["DELETE", "/notifications/{notification_id}/", "notifications.destroy", "U", "NOTIFICATIONS", "src", "delete record"],
+    ["GET", "/db/", "db.exportContent", "I", "DB", "src", "export content"],
+    ["POST", "/db/", "db.importContent", "I", "DB", "src", "import content", { upload: ["importfile"] }],
+    ["DELETE", "/db/", "db.deleteAllContent", "SESSION", "DB", "src", "DELETE ALL CONTENT"],
+    ["POST", "/db/backup/", "db.backupContent", "I", "DB", "src", "create content backup"],
+    ["POST", "/db/media/inline/", "db.inlineMedia", "I", "DB", "src", "process inline media"],
+    ["GET", "/exports/download/", "exports.download", "U", "EXPORTS", "src", "download file"],
+    ["POST", "/exports/", "exports.add", "U", "EXPORTS", "src", "create export job"],
+    ["POST", "/slack/test/", "slack.sendTest", "U", "SLACK", "src", "send a Slack test"],
+    ["POST", "/support_requests/", "supportRequests.add", "U", "SUPPORT REQUESTS", "src", "create record"],
+    ["GET", "/tinybird/token/", "tinybird.token", "U", "TINYBIRD", "src", "get service token"],
+    ["GET", "/featurebase/token/", "featurebase.token", "U", "FEATUREBASE", "src", "get service token"],
+    ["POST", "/session/", "session.add", "FLOW", "SESSION", "doc", "create user session"],
+    ["DELETE", "/session/", "session.delete", "U", "SESSION", "src", "end session"],
+    ["POST", "/session/verify/", "session.sendVerification", "FLOW", "SESSION", "doc", "resend verification code"],
+    ["PUT", "/session/verify/", "session.verify", "FLOW", "SESSION", "doc", "verify session with code"],
+    ["GET", "/identities/", "identities.read", "U", "IDENTITIES", "src", "get record"],
+    ["POST", "/authentication/password_reset/", "authentication.generateResetToken", "FLOW", "AUTHENTICATION", "src", "request a password reset"],
+    ["PUT", "/authentication/password_reset/", "authentication.resetPassword", "FLOW", "AUTHENTICATION", "src", "set password using reset token"],
+    ["POST", "/authentication/invitation/", "authentication.acceptInvitation", "FLOW", "AUTHENTICATION", "src", "accept invitation"],
+    ["GET", "/authentication/invitation/", "authentication.isInvitation", "FLOW", "AUTHENTICATION", "src", "check invitation"],
+    ["POST", "/authentication/setup/", "authentication.setup", "FLOW", "AUTHENTICATION", "src", "perform initial setup"],
+    ["PUT", "/authentication/setup/", "authentication.updateSetup", "U", "AUTHENTICATION", "src", "update settings data"],
+    ["GET", "/authentication/setup/", "authentication.isSetup", "FLOW", "AUTHENTICATION", "src", "check setup status"],
+    ["POST", "/authentication/reset/", "authentication.reset", "SESSION", "AUTHENTICATION", "src", "reset authentication"],
+    ["POST", "/images/upload/", "images.upload", "I", "IMAGES", "doc", "upload file", { upload: ["file"] }],
+    ["POST", "/media/upload/", "media.upload", "I", "MEDIA", "src", "upload file", { upload: ["file", "thumbnail"] }],
+    ["PUT", "/media/thumbnail/upload/", "media.uploadThumbnail", "U", "MEDIA", "src", "upload media thumbnail", { upload: ["file"] }],
+    ["POST", "/files/upload/", "files.upload", "I", "FILES", "src", "upload file", { upload: ["file"] }],
+    ["GET", "/invites/", "invites.browse", "U", "INVITES", "src", "list records"],
+    ["GET", "/invites/{id}/", "invites.read", "U", "INVITES", "src", "get record"],
+    ["POST", "/invites/", "invites.add", "I", "INVITES", "doc", "create record"],
+    ["DELETE", "/invites/{id}/", "invites.destroy", "U", "INVITES", "src", "delete record"],
+    ["GET", "/redirects/download/", "redirects.download", "U", "REDIRECTS", "src", "download file"],
+    ["POST", "/redirects/upload/", "redirects.upload", "U", "REDIRECTS", "src", "upload file", { upload: ["redirects"] }],
+    ["GET", "/upgrades/", "upgrades.browse", "U", "UPGRADES", "src", "get available hosting updates"],
+    ["POST", "/upgrades/", "upgrades.add", "U", "UPGRADES", "src", "request a hosting update"],
+    ["GET", "/upgrades/{id}/", "upgrades.read", "U", "UPGRADES", "src", "get update status"],
+    ["POST", "/webhooks/", "webhooks.add", "I", "WEBHOOKS", "doc", "create record"],
+    ["PUT", "/webhooks/{id}/", "webhooks.edit", "I", "WEBHOOKS", "doc", "update record"],
+    ["DELETE", "/webhooks/{id}/", "webhooks.destroy", "I", "WEBHOOKS", "doc", "delete record"],
+    ["GET", "/oembed/", "oembed.read", "I", "OEMBED", "src", "get record"],
+    ["GET", "/actions/", "actions.browse", "I", "ACTIONS", "src", "list records"],
+    ["GET", "/email_previews/posts/{id}/", "email_previews.read", "U", "EMAIL PREVIEWS", "src", "get record"],
+    ["POST", "/email_previews/posts/{id}/", "email_previews.sendTestEmail", "U", "EMAIL PREVIEWS", "src", "send a test email"],
+    ["GET", "/emails/", "emails.browse", "U", "EMAILS", "src", "list records"],
+    ["GET", "/emails/{id}/", "emails.read", "U", "EMAILS", "src", "get record"],
+    ["GET", "/emails/{id}/status/", "emails.sendingStatus", "U", "EMAILS", "src", "get sending status"],
+    ["PUT", "/emails/{id}/retry/", "emails.retry", "U", "EMAILS", "src", "retry email delivery"],
+    ["GET", "/emails/{id}/batches/", "emails.browseBatches", "U", "EMAILS", "src", "get delivery batches"],
+    ["GET", "/emails/{id}/recipient-failures/", "emails.browseFailures", "U", "EMAILS", "src", "get recipient delivery failures"],
+    ["GET", "/emails/{id}/analytics/", "emails.analyticsStatus", "U", "EMAILS", "src", "get analytics collection status"],
+    ["PUT", "/emails/{id}/analytics/", "emails.scheduleAnalytics", "U", "EMAILS", "src", "schedule analytics collection"],
+    ["DELETE", "/emails/analytics/", "emails.cancelScheduledAnalytics", "U", "EMAILS", "src", "cancel scheduled analytics collection"],
+    ["GET", "/snippets/", "snippets.browse", "U", "SNIPPETS", "src", "list records"],
+    ["GET", "/snippets/{id}/", "snippets.read", "U", "SNIPPETS", "src", "get record"],
+    ["POST", "/snippets/", "snippets.add", "U", "SNIPPETS", "src", "create record"],
+    ["PUT", "/snippets/{id}/", "snippets.edit", "U", "SNIPPETS", "src", "update record"],
+    ["DELETE", "/snippets/{id}/", "snippets.destroy", "U", "SNIPPETS", "src", "delete record"],
+    ["GET", "/custom_theme_settings/", "customThemeSettings.browse", "U", "CUSTOM THEME SETTINGS", "src", "list records"],
+    ["PUT", "/custom_theme_settings/", "customThemeSettings.edit", "U", "CUSTOM THEME SETTINGS", "src", "update record"],
+    ["GET", "/newsletters/", "newsletters.browse", "I", "NEWSLETTERS", "doc", "list records"],
+    ["GET", "/newsletters/{id}/", "newsletters.read", "I", "NEWSLETTERS", "src", "get record"],
+    ["POST", "/newsletters/", "newsletters.add", "I", "NEWSLETTERS", "doc", "create record"],
+    ["PUT", "/newsletters/verifications/", "newsletters.verifyPropertyUpdate", "I", "NEWSLETTERS", "src", "confirm newsletter property change"],
+    ["PUT", "/newsletters/{id}/", "newsletters.edit", "I", "NEWSLETTERS", "doc", "update record"],
+    ["GET", "/links/", "links.browse", "U", "LINKS", "src", "list records"],
+    ["PUT", "/links/bulk/", "links.bulkEdit", "U", "LINKS", "src", "bulk update records"],
+    ["GET", "/recommendations/", "recommendations.browse", "U", "RECOMMENDATIONS", "src", "list records"],
+    ["GET", "/recommendations/{id}/", "recommendations.read", "U", "RECOMMENDATIONS", "src", "get record"],
+    ["POST", "/recommendations/", "recommendations.add", "U", "RECOMMENDATIONS", "src", "create record"],
+    ["POST", "/recommendations/check/", "recommendations.check", "U", "RECOMMENDATIONS", "src", "check recommended publication"],
+    ["PUT", "/recommendations/{id}/", "recommendations.edit", "U", "RECOMMENDATIONS", "src", "update record"],
+    ["DELETE", "/recommendations/{id}/", "recommendations.destroy", "U", "RECOMMENDATIONS", "src", "delete record"],
+    ["GET", "/incoming_recommendations/", "incomingRecommendations.browse", "U", "INCOMING RECOMMENDATIONS", "src", "list records"],
+    ["GET", "/feedback/{id}/", "feedbackMembers.browse", "U", "FEEDBACK", "src", "list records"],
+    ["GET", "/search-index/posts/", "searchIndex.fetchPosts", "I", "SEARCH INDEX", "src", "get post stats"],
+    ["GET", "/search-index/pages/", "searchIndex.fetchPages", "I", "SEARCH INDEX", "src", "get page stats"],
+    ["GET", "/search-index/tags/", "searchIndex.fetchTags", "I", "SEARCH INDEX", "src", "get tag stats"],
+    ["GET", "/search-index/users/", "searchIndex.fetchUsers", "I", "SEARCH INDEX", "src", "get author stats"],
+];