multisite-cms-mcp 1.5.11 → 1.6.0

package/README.md

@@ -77,6 +77,21 @@ These tools require a Fast Mode account. The MCP server will automatically open
 | `create_site` | Create a new Fast Mode project |
 | `deploy_package` | Deploy a website package to Fast Mode |
 | `sync_schema` | Create collections and fields in your project |
+| `generate_sample_items` | Generate placeholder content for collections |
+
+### CMS Item Management Tools
+
+Manage content directly from your AI assistant:
+
+| Tool | Description |
+|------|-------------|
+| `create_cms_item` | Create a new item in a collection (blog post, team member, etc.) |
+| `list_cms_items` | List items in a collection with optional sorting/filtering |
+| `get_cms_item` | Get a single item by its slug |
+| `update_cms_item` | Update an existing item's name, data, or publish status |
+| `delete_cms_item` | Delete an item (requires explicit user confirmation) |
+
+**⚠️ Delete Safety:** The `delete_cms_item` tool requires `confirmDelete: true` and will prompt you to ask the user for permission before deleting anything.
 
 ---
 
@@ -281,6 +296,25 @@ When you validate a template with a project ID, the tool will:
 "Validate my blog_post.html template against my project"
 ```
 
+### Content Management
+
+```
+# List all blog posts
+"Show me all items in my blog collection"
+
+# Get details of a specific post
+"Get the blog post with slug 'my-first-post'"
+
+# Create a new blog post
+"Create a new blog post titled 'AI in 2025' with content about artificial intelligence trends"
+
+# Update an existing post
+"Update the blog post 'my-first-post' to set featured to true"
+
+# Delete a post (AI will ask for confirmation first)
+"Delete the blog post 'old-draft-post'"
+```
+
 ---
 
 ## Authentication
@@ -386,6 +420,11 @@ Use the `get_conversion_guide` tool for detailed instructions.
 
 ## Changelog
 
+### v1.6.0
+- **CMS Item Management** — New tools: `create_cms_item`, `list_cms_items`, `get_cms_item`, `update_cms_item`, `delete_cms_item`
+- **Delete Safety** — `delete_cms_item` requires explicit `confirmDelete: true` and prompts AI to ask user for permission
+- **External API Client** — New helper for calling external API endpoints with tenant context
+
 ### v1.5.5
 - **Removed `get_schema`** — Use `get_tenant_schema` for project-specific schema
 - **Two-Phase Schema Sync** — Collections created first, then all fields (relation fields always work)

package/dist/index.js

@@ -16,6 +16,7 @@ const deploy_package_1 = require("./tools/deploy-package");
 const get_field_types_1 = require("./tools/get-field-types");
 const sync_schema_1 = require("./tools/sync-schema");
 const generate_samples_1 = require("./tools/generate-samples");
+const cms_items_1 = require("./tools/cms-items");
 const server = new index_js_1.Server({
     name: 'multisite-cms',
     version: '1.0.0',
@@ -313,6 +314,153 @@ const TOOLS = [
             required: ['projectId'],
         },
     },
+    {
+        name: 'create_cms_item',
+        description: 'Create a new item in a CMS collection. Use this to add content like blog posts, team members, or any custom collection items. Requires authentication.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                projectId: {
+                    type: 'string',
+                    description: 'Project ID (UUID) or project name.',
+                },
+                collectionSlug: {
+                    type: 'string',
+                    description: 'The collection slug to add the item to (e.g., "blog", "team").',
+                },
+                name: {
+                    type: 'string',
+                    description: 'The name/title of the item.',
+                },
+                slug: {
+                    type: 'string',
+                    description: 'Optional URL slug. Auto-generated from name if not provided.',
+                },
+                data: {
+                    type: 'object',
+                    description: 'The field values for this item. Keys should match the collection field slugs.',
+                },
+                publishedAt: {
+                    type: 'string',
+                    description: 'Optional ISO date string. Defaults to now. Set to null for draft.',
+                },
+            },
+            required: ['projectId', 'collectionSlug', 'name', 'data'],
+        },
+    },
+    {
+        name: 'list_cms_items',
+        description: 'List items in a CMS collection. Use this to see what content exists in a collection. Requires authentication.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                projectId: {
+                    type: 'string',
+                    description: 'Project ID (UUID) or project name.',
+                },
+                collectionSlug: {
+                    type: 'string',
+                    description: 'The collection slug to list items from (e.g., "blog", "team").',
+                },
+                limit: {
+                    type: 'number',
+                    description: 'Optional: Maximum number of items to return.',
+                },
+                sort: {
+                    type: 'string',
+                    description: 'Optional: Field to sort by (e.g., "publishedAt", "name").',
+                },
+                order: {
+                    type: 'string',
+                    enum: ['asc', 'desc'],
+                    description: 'Optional: Sort order. Defaults to desc.',
+                },
+            },
+            required: ['projectId', 'collectionSlug'],
+        },
+    },
+    {
+        name: 'get_cms_item',
+        description: 'Get a single CMS item by its slug. Use this to see the full details of a specific item. Requires authentication.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                projectId: {
+                    type: 'string',
+                    description: 'Project ID (UUID) or project name.',
+                },
+                collectionSlug: {
+                    type: 'string',
+                    description: 'The collection slug (e.g., "blog", "team").',
+                },
+                itemSlug: {
+                    type: 'string',
+                    description: 'The slug of the item to retrieve.',
+                },
+            },
+            required: ['projectId', 'collectionSlug', 'itemSlug'],
+        },
+    },
+    {
+        name: 'update_cms_item',
+        description: 'Update an existing CMS item. Use this to modify content in a collection. Requires authentication.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                projectId: {
+                    type: 'string',
+                    description: 'Project ID (UUID) or project name.',
+                },
+                collectionSlug: {
+                    type: 'string',
+                    description: 'The collection slug (e.g., "blog", "team").',
+                },
+                itemSlug: {
+                    type: 'string',
+                    description: 'The slug of the item to update.',
+                },
+                name: {
+                    type: 'string',
+                    description: 'Optional: New name for the item.',
+                },
+                data: {
+                    type: 'object',
+                    description: 'Optional: Updated field values. Only provided fields will be changed.',
+                },
+                publishedAt: {
+                    type: 'string',
+                    description: 'Optional: New publish date (ISO string), or null to unpublish.',
+                },
+            },
+            required: ['projectId', 'collectionSlug', 'itemSlug'],
+        },
+    },
+    {
+        name: 'delete_cms_item',
+        description: 'Delete a CMS item. IMPORTANT: You MUST get explicit permission from the user before calling this tool. Ask the user to confirm deletion first. Never delete without user confirmation. This action cannot be undone.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                projectId: {
+                    type: 'string',
+                    description: 'Project ID (UUID) or project name.',
+                },
+                collectionSlug: {
+                    type: 'string',
+                    description: 'The collection slug (e.g., "blog", "team").',
+                },
+                itemSlug: {
+                    type: 'string',
+                    description: 'The slug of the item to delete.',
+                },
+                confirmDelete: {
+                    type: 'boolean',
+                    description: 'Must be true. Only set this after the user has explicitly confirmed they want to delete the item.',
+                },
+            },
+            required: ['projectId', 'collectionSlug', 'itemSlug', 'confirmDelete'],
+        },
+    },
 ];
 // Handle list tools request
 server.setRequestHandler(types_js_1.ListToolsRequestSchema, async () => {
@@ -378,6 +526,50 @@ server.setRequestHandler(types_js_1.CallToolRequestSchema, async (request) => {
                     collectionSlugs: params.collectionSlugs,
                 });
                 break;
+            case 'create_cms_item':
+                result = await (0, cms_items_1.createCmsItem)({
+                    projectId: params.projectId,
+                    collectionSlug: params.collectionSlug,
+                    name: params.name,
+                    slug: params.slug,
+                    data: params.data,
+                    publishedAt: params.publishedAt,
+                });
+                break;
+            case 'list_cms_items':
+                result = await (0, cms_items_1.listCmsItems)({
+                    projectId: params.projectId,
+                    collectionSlug: params.collectionSlug,
+                    limit: params.limit,
+                    sort: params.sort,
+                    order: params.order,
+                });
+                break;
+            case 'get_cms_item':
+                result = await (0, cms_items_1.getCmsItem)({
+                    projectId: params.projectId,
+                    collectionSlug: params.collectionSlug,
+                    itemSlug: params.itemSlug,
+                });
+                break;
+            case 'update_cms_item':
+                result = await (0, cms_items_1.updateCmsItem)({
+                    projectId: params.projectId,
+                    collectionSlug: params.collectionSlug,
+                    itemSlug: params.itemSlug,
+                    name: params.name,
+                    data: params.data,
+                    publishedAt: params.publishedAt,
+                });
+                break;
+            case 'delete_cms_item':
+                result = await (0, cms_items_1.deleteCmsItem)({
+                    projectId: params.projectId,
+                    collectionSlug: params.collectionSlug,
+                    itemSlug: params.itemSlug,
+                    confirmDelete: params.confirmDelete,
+                });
+                break;
             default:
                 return {
                     content: [{ type: 'text', text: `Unknown tool: ${name}` }],

package/dist/lib/api-client.d.ts

@@ -62,4 +62,20 @@ export declare function isApiError(response: unknown): response is ApiError;
  * Check if error requires authentication
  */
 export declare function needsAuthError(error: ApiError): boolean;
+/**
+ * Resolve a project identifier to a tenant ID
+ * Accepts either a UUID or a project name
+ */
+export declare function resolveProjectId(projectIdentifier: string): Promise<{
+    tenantId: string;
+} | {
+    error: string;
+}>;
+/**
+ * Make an authenticated external API request
+ * Uses the /external/* endpoints with tenant context
+ */
+export declare function externalApiRequest<T>(tenantId: string, endpoint: string, options?: Omit<ApiRequestOptions, 'tenantId'>): Promise<{
+    data: T;
+} | ApiError>;
 //# sourceMappingURL=api-client.d.ts.map

package/dist/lib/api-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-client.d.ts","sourceRoot":"","sources":["../../src/lib/api-client.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED;;GAEG;AACH,wBAAgB,SAAS,IAAI,MAAM,CAElC;AAED;;GAEG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,SAAS,CAAC,CAgB5D;AAED;;GAEG;AACH,wBAAgB,YAAY,IAAI,SAAS,CAKxC;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,OAAO,CAE1C;AAED;;GAEG;AACH,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,OAAO,CAAC,CAO5D;AAED;;GAEG;AACH,wBAAgB,sBAAsB,IAAI,MAAM,CAS/C;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;IAC3C,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,KAAK,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAAC,CAAC,EAChC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC;IAAE,IAAI,EAAE,CAAC,CAAA;CAAE,GAAG,QAAQ,CAAC,CAoEjC;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,OAAO,GAAG,QAAQ,IAAI,QAAQ,CAOlE;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAEvD"}
+{"version":3,"file":"api-client.d.ts","sourceRoot":"","sources":["../../src/lib/api-client.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED;;GAEG;AACH,wBAAgB,SAAS,IAAI,MAAM,CAElC;AAED;;GAEG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,SAAS,CAAC,CAgB5D;AAED;;GAEG;AACH,wBAAgB,YAAY,IAAI,SAAS,CAKxC;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,OAAO,CAE1C;AAED;;GAEG;AACH,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,OAAO,CAAC,CAO5D;AAED;;GAEG;AACH,wBAAgB,sBAAsB,IAAI,MAAM,CAS/C;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;IAC3C,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,KAAK,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAAC,CAAC,EAChC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC;IAAE,IAAI,EAAE,CAAC,CAAA;CAAE,GAAG,QAAQ,CAAC,CAoEjC;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,OAAO,GAAG,QAAQ,IAAI,QAAQ,CAOlE;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAEvD;AAYD;;;GAGG;AACH,wBAAsB,gBAAgB,CAAC,iBAAiB,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAwCnH;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,CAAC,EACxC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,IAAI,CAAC,iBAAiB,EAAE,UAAU,CAAM,GAChD,OAAO,CAAC;IAAE,IAAI,EAAE,CAAC,CAAA;CAAE,GAAG,QAAQ,CAAC,CAOjC"}

package/dist/lib/api-client.js

@@ -13,6 +13,8 @@ exports.getAuthRequiredMessage = getAuthRequiredMessage;
 exports.apiRequest = apiRequest;
 exports.isApiError = isApiError;
 exports.needsAuthError = needsAuthError;
+exports.resolveProjectId = resolveProjectId;
+exports.externalApiRequest = externalApiRequest;
 const credentials_1 = require("./credentials");
 /**
  * Get API URL from environment or default
@@ -155,3 +157,45 @@ function isApiError(response) {
 function needsAuthError(error) {
     return error.needsAuth === true || error.statusCode === 401;
 }
+/**
+ * Resolve a project identifier to a tenant ID
+ * Accepts either a UUID or a project name
+ */
+async function resolveProjectId(projectIdentifier) {
+    // Check if it looks like a UUID
+    const uuidPattern = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+    if (uuidPattern.test(projectIdentifier)) {
+        return { tenantId: projectIdentifier };
+    }
+    // Look up by name using /api/tenants
+    const response = await apiRequest('/api/tenants');
+    if (isApiError(response)) {
+        return { error: `Failed to look up project: ${response.error}` };
+    }
+    const projects = response.data;
+    // Find by exact name match (case-insensitive)
+    const match = projects.find(p => p.name.toLowerCase() === projectIdentifier.toLowerCase());
+    if (match) {
+        return { tenantId: match.id };
+    }
+    // Try partial match
+    const partialMatch = projects.find(p => p.name.toLowerCase().includes(projectIdentifier.toLowerCase()));
+    if (partialMatch) {
+        return { tenantId: partialMatch.id };
+    }
+    const availableProjects = projects.map(p => `- ${p.name} (${p.id})`).join('\n');
+    return {
+        error: `Project "${projectIdentifier}" not found.\n\nAvailable projects:\n${availableProjects || 'None'}`
+    };
+}
+/**
+ * Make an authenticated external API request
+ * Uses the /external/* endpoints with tenant context
+ */
+async function externalApiRequest(tenantId, endpoint, options = {}) {
+    // External API endpoints are at /external/...
+    const fullEndpoint = endpoint.startsWith('/external')
+        ? endpoint
+        : `/external${endpoint.startsWith('/') ? endpoint : '/' + endpoint}`;
+    return apiRequest(fullEndpoint, { ...options, tenantId });
+}

package/dist/tools/cms-items.d.ts

@@ -0,0 +1,56 @@
+/**
+ * CMS Item Management Tools
+ *
+ * CRUD operations for managing items in CMS collections via the external API.
+ */
+/**
+ * Create a new item in a CMS collection
+ */
+export declare function createCmsItem(params: {
+    projectId: string;
+    collectionSlug: string;
+    name: string;
+    slug?: string;
+    data: Record<string, unknown>;
+    publishedAt?: string;
+}): Promise<string>;
+/**
+ * List items in a CMS collection
+ */
+export declare function listCmsItems(params: {
+    projectId: string;
+    collectionSlug: string;
+    limit?: number;
+    sort?: string;
+    order?: 'asc' | 'desc';
+}): Promise<string>;
+/**
+ * Get a single item by slug
+ */
+export declare function getCmsItem(params: {
+    projectId: string;
+    collectionSlug: string;
+    itemSlug: string;
+}): Promise<string>;
+/**
+ * Update an existing item
+ */
+export declare function updateCmsItem(params: {
+    projectId: string;
+    collectionSlug: string;
+    itemSlug: string;
+    name?: string;
+    data?: Record<string, unknown>;
+    publishedAt?: string | null;
+}): Promise<string>;
+/**
+ * Delete an item from a collection
+ * REQUIRES confirmDelete: true to execute
+ */
+export declare function deleteCmsItem(params: {
+    projectId: string;
+    collectionSlug: string;
+    itemSlug: string;
+    confirmDelete: boolean;
+}): Promise<string>;
+//# sourceMappingURL=cms-items.d.ts.map

package/dist/tools/cms-items.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cms-items.d.ts","sourceRoot":"","sources":["../../src/tools/cms-items.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAkDH;;GAEG;AACH,wBAAsB,aAAa,CAAC,MAAM,EAAE;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GAAG,OAAO,CAAC,MAAM,CAAC,CAiDlB;AAkBD;;GAEG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;CACxB,GAAG,OAAO,CAAC,MAAM,CAAC,CAyClB;AA4CD;;GAEG;AACH,wBAAsB,UAAU,CAAC,MAAM,EAAE;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,OAAO,CAAC,MAAM,CAAC,CAgClB;AAoBD;;GAEG;AACH,wBAAsB,aAAa,CAAC,MAAM,EAAE;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B,GAAG,OAAO,CAAC,MAAM,CAAC,CAmDlB;AAkBD;;;GAGG;AACH,wBAAsB,aAAa,CAAC,MAAM,EAAE;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,OAAO,CAAC;CACxB,GAAG,OAAO,CAAC,MAAM,CAAC,CAqDlB"}

package/dist/tools/cms-items.js

@@ -0,0 +1,298 @@
+"use strict";
+/**
+ * CMS Item Management Tools
+ *
+ * CRUD operations for managing items in CMS collections via the external API.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createCmsItem = createCmsItem;
+exports.listCmsItems = listCmsItems;
+exports.getCmsItem = getCmsItem;
+exports.updateCmsItem = updateCmsItem;
+exports.deleteCmsItem = deleteCmsItem;
+const api_client_1 = require("../lib/api-client");
+const device_flow_1 = require("../lib/device-flow");
+/**
+ * Helper to ensure authentication and resolve project ID
+ */
+async function prepareRequest(projectId) {
+    // Check if we need to authenticate
+    if (await (0, api_client_1.needsAuthentication)()) {
+        const authResult = await (0, device_flow_1.ensureAuthenticated)();
+        if (!authResult.authenticated) {
+            return { success: false, message: authResult.message };
+        }
+    }
+    // Resolve project ID
+    const resolved = await (0, api_client_1.resolveProjectId)(projectId);
+    if ('error' in resolved) {
+        return { success: false, message: `# Project Not Found\n\n${resolved.error}` };
+    }
+    return { success: true, tenantId: resolved.tenantId };
+}
+/**
+ * Create a new item in a CMS collection
+ */
+async function createCmsItem(params) {
+    const prep = await prepareRequest(params.projectId);
+    if (!prep.success)
+        return prep.message;
+    const response = await (0, api_client_1.externalApiRequest)(prep.tenantId, `/collections/${params.collectionSlug}/items`, {
+        method: 'POST',
+        body: {
+            name: params.name,
+            slug: params.slug,
+            data: params.data,
+            publishedAt: params.publishedAt || new Date().toISOString(),
+        },
+    });
+    if ((0, api_client_1.isApiError)(response)) {
+        if ((0, api_client_1.needsAuthError)(response)) {
+            const authResult = await (0, device_flow_1.ensureAuthenticated)();
+            if (!authResult.authenticated)
+                return authResult.message;
+            // Retry
+            const retry = await (0, api_client_1.externalApiRequest)(prep.tenantId, `/collections/${params.collectionSlug}/items`, {
+                method: 'POST',
+                body: {
+                    name: params.name,
+                    slug: params.slug,
+                    data: params.data,
+                    publishedAt: params.publishedAt || new Date().toISOString(),
+                },
+            });
+            if ((0, api_client_1.isApiError)(retry)) {
+                return `# Error Creating Item\n\n${retry.error}\n\n**Status:** ${retry.statusCode}`;
+            }
+            return formatCreatedItem(retry.data, params.collectionSlug);
+        }
+        return `# Error Creating Item\n\n${response.error}\n\n**Status:** ${response.statusCode}`;
+    }
+    return formatCreatedItem(response.data, params.collectionSlug);
+}
+function formatCreatedItem(item, collectionSlug) {
+    return `# Item Created Successfully
+
+**Collection:** ${collectionSlug}
+**Name:** ${item.name}
+**Slug:** ${item.slug || 'N/A'}
+**ID:** ${item.id}
+**Published:** ${item.publishedAt || 'Draft'}
+
+## Item Data
+\`\`\`json
+${JSON.stringify(item.data, null, 2)}
+\`\`\`
+`;
+}
+/**
+ * List items in a CMS collection
+ */
+async function listCmsItems(params) {
+    const prep = await prepareRequest(params.projectId);
+    if (!prep.success)
+        return prep.message;
+    // Build query params
+    const queryParams = new URLSearchParams();
+    if (params.limit)
+        queryParams.set('limit', String(params.limit));
+    if (params.sort)
+        queryParams.set('sort', params.sort);
+    if (params.order)
+        queryParams.set('order', params.order);
+    const queryString = queryParams.toString();
+    const endpoint = `/collections/${params.collectionSlug}/items${queryString ? '?' + queryString : ''}`;
+    const response = await (0, api_client_1.externalApiRequest)(prep.tenantId, endpoint, { method: 'GET' });
+    if ((0, api_client_1.isApiError)(response)) {
+        if ((0, api_client_1.needsAuthError)(response)) {
+            const authResult = await (0, device_flow_1.ensureAuthenticated)();
+            if (!authResult.authenticated)
+                return authResult.message;
+            const retry = await (0, api_client_1.externalApiRequest)(prep.tenantId, endpoint, { method: 'GET' });
+            if ((0, api_client_1.isApiError)(retry)) {
+                return `# Error Listing Items\n\n${retry.error}\n\n**Status:** ${retry.statusCode}`;
+            }
+            return formatItemsList(retry.data, params.collectionSlug);
+        }
+        return `# Error Listing Items\n\n${response.error}\n\n**Status:** ${response.statusCode}`;
+    }
+    return formatItemsList(response.data, params.collectionSlug);
+}
+function formatItemsList(items, collectionSlug) {
+    if (!items || items.length === 0) {
+        return `# No Items Found
+
+Collection **${collectionSlug}** is empty.
+
+Use \`create_cms_item\` to add items to this collection.
+`;
+    }
+    let output = `# Items in ${collectionSlug}
+
+Found ${items.length} item${items.length !== 1 ? 's' : ''}:
+
+| Name | Slug | Published | ID |
+|------|------|-----------|-----|
+`;
+    for (const item of items) {
+        const published = item.publishedAt ? new Date(item.publishedAt).toLocaleDateString() : 'Draft';
+        output += `| ${item.name} | ${item.slug || '-'} | ${published} | \`${item.id.slice(0, 8)}...\` |\n`;
+    }
+    output += `
+---
+
+## Item Details
+
+`;
+    for (const item of items) {
+        output += `### ${item.name}
+- **Slug:** \`${item.slug || 'N/A'}\`
+- **ID:** \`${item.id}\`
+- **Data:** ${Object.keys(item.data).length} fields
+
+`;
+    }
+    return output;
+}
+/**
+ * Get a single item by slug
+ */
+async function getCmsItem(params) {
+    const prep = await prepareRequest(params.projectId);
+    if (!prep.success)
+        return prep.message;
+    const response = await (0, api_client_1.externalApiRequest)(prep.tenantId, `/collections/${params.collectionSlug}/items/${params.itemSlug}`, { method: 'GET' });
+    if ((0, api_client_1.isApiError)(response)) {
+        if ((0, api_client_1.needsAuthError)(response)) {
+            const authResult = await (0, device_flow_1.ensureAuthenticated)();
+            if (!authResult.authenticated)
+                return authResult.message;
+            const retry = await (0, api_client_1.externalApiRequest)(prep.tenantId, `/collections/${params.collectionSlug}/items/${params.itemSlug}`, { method: 'GET' });
+            if ((0, api_client_1.isApiError)(retry)) {
+                return `# Error Fetching Item\n\n${retry.error}\n\n**Status:** ${retry.statusCode}`;
+            }
+            return formatSingleItem(retry.data, params.collectionSlug);
+        }
+        return `# Error Fetching Item\n\n${response.error}\n\n**Status:** ${response.statusCode}`;
+    }
+    return formatSingleItem(response.data, params.collectionSlug);
+}
+function formatSingleItem(item, collectionSlug) {
+    return `# ${item.name}
+
+**Collection:** ${collectionSlug}
+**Slug:** \`${item.slug || 'N/A'}\`
+**ID:** \`${item.id}\`
+**Published:** ${item.publishedAt ? new Date(item.publishedAt).toLocaleString() : 'Draft'}
+**Created:** ${new Date(item.createdAt).toLocaleString()}
+**Updated:** ${new Date(item.updatedAt).toLocaleString()}
+
+## Item Data
+
+\`\`\`json
+${JSON.stringify(item.data, null, 2)}
+\`\`\`
+`;
+}
+/**
+ * Update an existing item
+ */
+async function updateCmsItem(params) {
+    const prep = await prepareRequest(params.projectId);
+    if (!prep.success)
+        return prep.message;
+    // Build the update body with only provided fields
+    const updateBody = {};
+    if (params.name !== undefined)
+        updateBody.name = params.name;
+    if (params.data !== undefined)
+        updateBody.data = params.data;
+    if (params.publishedAt !== undefined)
+        updateBody.publishedAt = params.publishedAt;
+    if (Object.keys(updateBody).length === 0) {
+        return `# No Updates Provided
+
+You must provide at least one of: \`name\`, \`data\`, or \`publishedAt\` to update.
+`;
+    }
+    const response = await (0, api_client_1.externalApiRequest)(prep.tenantId, `/collections/${params.collectionSlug}/items/${params.itemSlug}`, {
+        method: 'PUT',
+        body: updateBody,
+    });
+    if ((0, api_client_1.isApiError)(response)) {
+        if ((0, api_client_1.needsAuthError)(response)) {
+            const authResult = await (0, device_flow_1.ensureAuthenticated)();
+            if (!authResult.authenticated)
+                return authResult.message;
+            const retry = await (0, api_client_1.externalApiRequest)(prep.tenantId, `/collections/${params.collectionSlug}/items/${params.itemSlug}`, {
+                method: 'PUT',
+                body: updateBody,
+            });
+            if ((0, api_client_1.isApiError)(retry)) {
+                return `# Error Updating Item\n\n${retry.error}\n\n**Status:** ${retry.statusCode}`;
+            }
+            return formatUpdatedItem(retry.data, params.collectionSlug);
+        }
+        return `# Error Updating Item\n\n${response.error}\n\n**Status:** ${response.statusCode}`;
+    }
+    return formatUpdatedItem(response.data, params.collectionSlug);
+}
+function formatUpdatedItem(item, collectionSlug) {
+    return `# Item Updated Successfully
+
+**Collection:** ${collectionSlug}
+**Name:** ${item.name}
+**Slug:** ${item.slug || 'N/A'}
+**ID:** ${item.id}
+**Updated:** ${new Date(item.updatedAt).toLocaleString()}
+
+## Updated Data
+\`\`\`json
+${JSON.stringify(item.data, null, 2)}
+\`\`\`
+`;
+}
+/**
+ * Delete an item from a collection
+ * REQUIRES confirmDelete: true to execute
+ */
+async function deleteCmsItem(params) {
+    // Safety check: require explicit confirmation
+    if (params.confirmDelete !== true) {
+        return `# Confirmation Required
+
+**You must get explicit permission from the user before deleting items.**
+
+To delete the item "${params.itemSlug}" from collection "${params.collectionSlug}":
+
+1. Ask the user: "Are you sure you want to delete [item name]? This cannot be undone."
+2. Only after the user confirms, call this tool again with \`confirmDelete: true\`
+
+**Never delete without user confirmation.**
+`;
+    }
+    const prep = await prepareRequest(params.projectId);
+    if (!prep.success)
+        return prep.message;
+    const response = await (0, api_client_1.externalApiRequest)(prep.tenantId, `/collections/${params.collectionSlug}/items/${params.itemSlug}`, { method: 'DELETE' });
+    if ((0, api_client_1.isApiError)(response)) {
+        if ((0, api_client_1.needsAuthError)(response)) {
+            const authResult = await (0, device_flow_1.ensureAuthenticated)();
+            if (!authResult.authenticated)
+                return authResult.message;
+            const retry = await (0, api_client_1.externalApiRequest)(prep.tenantId, `/collections/${params.collectionSlug}/items/${params.itemSlug}`, { method: 'DELETE' });
+            if ((0, api_client_1.isApiError)(retry)) {
+                return `# Error Deleting Item\n\n${retry.error}\n\n**Status:** ${retry.statusCode}`;
+            }
+            return `# Item Deleted
+
+Successfully deleted item "${params.itemSlug}" from collection "${params.collectionSlug}".
+`;
+        }
+        return `# Error Deleting Item\n\n${response.error}\n\n**Status:** ${response.statusCode}`;
+    }
+    return `# Item Deleted
+
+Successfully deleted item "${params.itemSlug}" from collection "${params.collectionSlug}".
+`;
+}

package/dist/tools/get-conversion-guide.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-conversion-guide.d.ts","sourceRoot":"","sources":["../../src/tools/get-conversion-guide.ts"],"names":[],"mappings":"AAAA,KAAK,OAAO,GAAG,MAAM,GAAG,aAAa,GAAG,UAAU,GAAG,WAAW,GAAG,KAAK,GAAG,UAAU,GAAG,WAAW,GAAG,QAAQ,GAAG,OAAO,GAAG,QAAQ,GAAG,WAAW,GAAG,iBAAiB,CAAC;AAooCtK;;GAEG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAgF1E"}
+{"version":3,"file":"get-conversion-guide.d.ts","sourceRoot":"","sources":["../../src/tools/get-conversion-guide.ts"],"names":[],"mappings":"AAAA,KAAK,OAAO,GAAG,MAAM,GAAG,aAAa,GAAG,UAAU,GAAG,WAAW,GAAG,KAAK,GAAG,UAAU,GAAG,WAAW,GAAG,QAAQ,GAAG,OAAO,GAAG,QAAQ,GAAG,WAAW,GAAG,iBAAiB,CAAC;AAooCtK;;GAEG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CA+F1E"}

package/dist/tools/get-conversion-guide.js

@@ -1162,9 +1162,24 @@ async function getConversionGuide(section) {
 | 4. BUILD | Create manifest.json, pages/, templates/, public/ | \`get_example\` |
 | 5. VALIDATE | Check all files before deploying | \`validate_manifest\`, \`validate_template\`, \`validate_package\` |
 | 6. DEPLOY | Upload package to project | \`deploy_package\` |
+| 7. CONTENT | Optionally manage CMS content | \`create_cms_item\`, \`list_cms_items\`, \`update_cms_item\` |
 
 **DO NOT skip steps. You MUST have a projectId before you can deploy.**
 
+## CONTENT MANAGEMENT TOOLS
+
+After deployment, you can manage CMS content directly:
+
+| Tool | Description |
+|------|-------------|
+| \`create_cms_item\` | Create a new item (blog post, team member, etc.) |
+| \`list_cms_items\` | List items in a collection with optional filters |
+| \`get_cms_item\` | Get a single item by slug |
+| \`update_cms_item\` | Update an existing item |
+| \`delete_cms_item\` | Delete an item (**requires user confirmation**) |
+
+**⚠️ DELETE SAFETY:** Never delete without asking the user first. The \`delete_cms_item\` tool requires \`confirmDelete: true\` which you should only set after explicit user permission.
+
 ---
 
 ${SECTIONS.first_steps}

package/dist/tools/get-field-types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-field-types.d.ts","sourceRoot":"","sources":["../../src/tools/get-field-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,2BAA2B,CAAC,EAAE,OAAO,CAAC;CACvC;AAED;;;GAGG;AACH,eAAO,MAAM,qBAAqB,EAAE,SAAS,EAqE5C,CAAC;AAEF;;;GAGG;AACH,wBAAsB,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,CAyCrD"}
+{"version":3,"file":"get-field-types.d.ts","sourceRoot":"","sources":["../../src/tools/get-field-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,2BAA2B,CAAC,EAAE,OAAO,CAAC;CACvC;AAED;;;GAGG;AACH,eAAO,MAAM,qBAAqB,EAAE,SAAS,EAqE5C,CAAC;AAEF;;;GAGG;AACH,wBAAsB,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,CAqDrD"}

package/dist/tools/get-field-types.js

@@ -69,13 +69,13 @@ exports.AVAILABLE_FIELD_TYPES = [
     {
         value: 'select',
         label: 'Select',
-        description: 'Dropdown with predefined options. Requires "options" parameter with comma-separated values.',
+        description: 'Dropdown with predefined options. Requires "options" parameter: comma-separated string like "Option1, Option2, Option3".',
         requiresOptions: true,
     },
     {
         value: 'multiSelect',
         label: 'Multi-Select',
-        description: 'Multiple selections from options. Requires "options" parameter with comma-separated values.',
+        description: 'Multiple selections from options. Requires "options" parameter: comma-separated string like "Tag1, Tag2, Tag3".',
         requiresOptions: true,
     },
     {
@@ -122,11 +122,23 @@ When calling \`sync_schema\` to add fields, specify the \`type\` parameter:
       "fields": [
         { "slug": "heroImage", "name": "Hero Image", "type": "image" },
         { "slug": "featured", "name": "Featured", "type": "boolean" },
-        { "slug": "category", "name": "Category", "type": "select", "options": "Tech,Business,Lifestyle" }
+        { "slug": "category", "name": "Category", "type": "select", "options": "Tech, Business, Lifestyle" },
+        { "slug": "tags", "name": "Tags", "type": "multiSelect", "options": "Featured, Popular, New, Sale" },
+        { "slug": "author", "name": "Author", "type": "relation", "referenceCollection": "authors" }
       ]
     }
   ]
 }
 \`\`\`
+
+## Select/MultiSelect Options Format
+
+For **select** and **multiSelect** fields, provide options as a comma-separated string:
+
+✅ CORRECT: \`"options": "Red, Green, Blue"\`
+✅ CORRECT: \`"options": "Option1,Option2,Option3"\`
+
+❌ WRONG: \`"options": ["Red", "Green", "Blue"]\`  (Don't use JSON array)
+❌ WRONG: \`"options": "\\"Red,Green,Blue\\""\`  (Don't wrap in extra quotes)
 `;
 }

package/dist/tools/sync-schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sync-schema.d.ts","sourceRoot":"","sources":["../../src/tools/sync-schema.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAYH,UAAU,aAAa;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,UAAU,kBAAkB;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC;CAC1B;AAED,UAAU,WAAW;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,EAAE,aAAa,EAAE,CAAC;CACzB;AAED,UAAU,eAAe;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACnC,WAAW,CAAC,EAAE,WAAW,EAAE,CAAC;CAC7B;AAgJD;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CA2VxE"}
+{"version":3,"file":"sync-schema.d.ts","sourceRoot":"","sources":["../../src/tools/sync-schema.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAYH,UAAU,aAAa;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,UAAU,kBAAkB;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC;CAC1B;AAED,UAAU,WAAW;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,EAAE,aAAa,EAAE,CAAC;CACzB;AAED,UAAU,eAAe;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACnC,WAAW,CAAC,EAAE,WAAW,EAAE,CAAC;CAC7B;AA2KD;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CA8VxE"}

package/dist/tools/sync-schema.js

@@ -23,6 +23,32 @@ This tool requires authentication to create collections and fields.
 Use \`list_projects\` to verify your authentication status.
 `;
 // ============ Helper Functions ============
+/**
+ * Normalize select/multiSelect options to array format before sending to API.
+ * Handles comma-separated strings and converts to JSON array.
+ */
+function normalizeOptionsForApi(options, fieldType) {
+    if (!options)
+        return undefined;
+    // Only process select/multiSelect fields
+    if (fieldType !== 'select' && fieldType !== 'multiSelect') {
+        return options;
+    }
+    // If it already looks like a JSON array, validate and return
+    if (options.startsWith('[')) {
+        try {
+            const parsed = JSON.parse(options);
+            if (Array.isArray(parsed))
+                return options;
+        }
+        catch {
+            // Invalid JSON, fall through to comma-separated handling
+        }
+    }
+    // Convert comma-separated string to JSON array
+    const arr = options.split(',').map(s => s.trim()).filter(Boolean);
+    return JSON.stringify(arr);
+}
 /**
  * Validate a field type against available types
  */
@@ -315,6 +341,8 @@ ${resolved.error}
                 skipped.fields++;
                 continue;
             }
+            // Normalize options for select/multiSelect fields before sending
+            const normalizedOptions = normalizeOptionsForApi(job.field.options, job.field.type);
             // Create the field with retry logic
             let fieldRes = await (0, api_client_1.apiRequest)(`/api/collections/${collectionId}/fields`, {
                 tenantId,
@@ -325,7 +353,7 @@ ${resolved.error}
                     type: job.field.type,
                     description: job.field.description,
                     isRequired: job.field.isRequired,
-                    options: job.field.options,
+                    options: normalizedOptions,
                     referenceCollection: job.field.referenceCollection,
                 },
             });
@@ -342,7 +370,7 @@ ${resolved.error}
                         type: job.field.type,
                         description: job.field.description,
                         isRequired: job.field.isRequired,
-                        options: job.field.options,
+                        options: normalizedOptions,
                         referenceCollection: job.field.referenceCollection,
                     },
                 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "multisite-cms-mcp",
-  "version": "1.5.11",
+  "version": "1.6.0",
   "description": "MCP server for Fast Mode CMS. Convert websites, validate packages, and deploy directly to Fast Mode. Includes authentication, project creation, schema sync, and one-click deployment.",
   "main": "dist/index.js",
   "bin": {