// SCAN REPORT

Ghost MCP Server

39 tools. 22 can modify or destroy data without limits.

6 destructive tools with no built-in limits. Policy required.

Last updated: 12 Jun 2026

22 can modify or destroy data

17 read-only

39 tools total

Community server · catalogue entry verified 12/06/2026

How to control Ghost MCP Server ↓

TOOL MAP

What Ghost MCP Server exposes to your agents

Read (17) Write / Execute (16) Destructive / Financial (6)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Ghost MCP Server tools

Destructive · High ghost_delete_member This tool irreversibly removes member records from the CMS database. Destructive · High ghost_delete_newsletter This tool irreversibly removes data (a newsletter) from the CMS with no undo capability. Destructive · High ghost_delete_page This tool irreversibly removes content from a Ghost CMS instance. Destructive · High ghost_delete_post This tool irreversibly removes data (a blog post) from the CMS with no undo capability.

22 of Ghost MCP Server's 39 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Ghost MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Ghost MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "ghost_delete_member": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "ghost_create_member": {
    "limits": [
      {
        "counter": "ghost_create_member_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "ghost_get_member": {
    "limits": [
      {
        "counter": "ghost_get_member_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Ghost MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON GHOST →

Free to start. No card required.

FULL CATALOGUE

All 39 Ghost MCP Server tools

DESTRUCTIVE 6 tools

Destructive ghost_delete_member Deletes a member from Ghost CMS by ID. This operation is permanent and cannot be undone. Destructive ghost_delete_newsletter Deletes a newsletter from Ghost CMS by ID. This operation is permanent and cannot be undone. Destructive ghost_delete_page Deletes a page from Ghost CMS by ID. This operation is permanent and cannot be undone. Destructive ghost_delete_post Deletes a post from Ghost CMS by ID. This operation is permanent and cannot be undone. Destructive ghost_delete_tag Deletes a tag from Ghost CMS by ID. This operation is permanent and cannot be undone. Destructive ghost_delete_tier Deletes a tier (membership level) from Ghost CMS by ID. This operation is permanent and cannot be undone.

EXECUTE 2 tools

Execute ghost_batch_operations Execute multiple Ghost operations in a single request Execute ghost_cache_management Manage resource cache

WRITE 14 tools

Write ghost_create_member Creates a new member (subscriber) in Ghost CMS. Write ghost_create_newsletter Creates a new newsletter in Ghost CMS with customizable sender settings and display options. Write ghost_create_page Creates a new page in Ghost CMS. Note: Pages do NOT typically use tags (unlike posts). Write ghost_create_post Creates a new post in Ghost CMS. Write ghost_create_tag Creates a new tag in Ghost CMS. Write ghost_create_tier Creates a new tier (membership level) in Ghost CMS with pricing and benefits. Write ghost_set_feature_image Uploads an image and assigns it as the feature image of a post or page (with optional alt text and caption) in Write ghost_update_member Updates an existing member in Ghost CMS. All fields except id are optional. Write ghost_update_newsletter Updates an existing newsletter in Ghost CMS. Can update name, description, sender settings, and display option Write ghost_update_page Updates an existing page in Ghost CMS. Can update title, content, status, images, and SEO fields. Only the pro Write ghost_update_post Updates an existing post in Ghost CMS. Can update title, content, status, tags, images, and SEO fields. Only t Write ghost_update_tag Updates an existing tag in Ghost CMS. Write ghost_update_tier Updates an existing tier (membership level) in Ghost CMS. Can update pricing, benefits, and other tier propert Write ghost_upload_image Uploads an image to Ghost CMS. Accepts a remote URL, a local file path (when GHOST_MCP_IMAGE_ROOT is configure

READ 17 tools

Read ghost_get_member Retrieves a single member from Ghost CMS by ID or email. Provide either id OR email. Read ghost_get_members Retrieves a list of members (subscribers) from Ghost CMS with optional filtering, pagination, and includes. Read ghost_get_newsletter Retrieves a single newsletter from Ghost CMS by ID. Read ghost_get_newsletters Retrieves a list of newsletters from Ghost CMS with optional filtering. Read ghost_get_page Retrieves a single page from Ghost CMS by ID or slug. Read ghost_get_pages Retrieves a list of pages from Ghost CMS with pagination, filtering, and sorting options. Read ghost_get_post Retrieves a single post from Ghost CMS by ID or slug. Read ghost_get_posts Retrieves a list of posts from Ghost CMS with pagination, filtering, and sorting options. Read ghost_get_tag Retrieves a single tag from Ghost CMS by ID or slug. Read ghost_get_tags Retrieves a list of tags from Ghost CMS with pagination, filtering, sorting, and relation inclusion. Supports Read ghost_get_tier Retrieves a single tier (membership level) from Ghost CMS by ID. Read ghost_get_tiers Retrieves a list of tiers (membership levels) from Ghost CMS with optional filtering by type (free/paid). Read ghost_search_members Searches for members by name or email in Ghost CMS. Read ghost_search_pages Search for pages in Ghost CMS by query string with optional status filtering. Read ghost_search_posts Search for posts in Ghost CMS by query string with optional status filtering. Read ghost_search_resources Search for Ghost resources with advanced filtering Read ghost_subscribe Subscribe to resource changes

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Ghost MCP Server

Can an AI agent delete data through the Ghost MCP Server MCP server? +

Yes. The Ghost MCP Server server exposes 6 destructive tools including ghost_delete_member, ghost_delete_newsletter, ghost_delete_page. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Ghost MCP Server? +

The Ghost MCP Server server has 14 write tools including ghost_create_member, ghost_create_newsletter, ghost_create_page. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Ghost MCP Server.

How many tools does the Ghost MCP Server MCP server expose? +

39 tools across 4 categories: Destructive, Execute, Read, Write. 17 are read-only. 22 can modify, create, or delete data.

How do I enforce a policy on Ghost MCP Server? +

Register the Ghost MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Ghost MCP Server tool call.

Deterministic rules across all 39 Ghost MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON GHOST →

Free to start. No card required.

39 Ghost MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.