// SCAN REPORT

Ghost

17 tools. 9 can modify or destroy data without limits.

2 destructive tools with no built-in limits. Policy required.

Last updated: 30 Jun 2026

9 can modify or destroy data

8 read-only

17 tools total

Community server · catalogue entry verified 30/06/2026

How to control Ghost ↓

TOOL MAP

What Ghost exposes to your agents

Read (8) Write / Execute (7) Destructive / Financial (2)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Ghost tools

Destructive · High ghost_delete_post This tool permanently deletes blog posts, which is an irreversible action that cannot be undone. Destructive · High ghost_delete_tag This tool permanently removes a tag from a Ghost blog, which cannot be undone. Write · Medium ghost_create_post This tool creates/adds new data (blog posts) to a Ghost blog, which is a reversible modification. Write · Medium ghost_create_tag This tool creates new metadata (tags) within a Ghost blog.

9 of Ghost's 17 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Ghost

PolicyLayer is an MCP gateway — it sits between your AI agents and Ghost, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "ghost_delete_post": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "ghost_create_post": {
    "limits": [
      {
        "counter": "ghost_create_post_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "ghost_analyze_tags": {
    "limits": [
      {
        "counter": "ghost_analyze_tags_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Ghost — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON GHOST →

Instant setup, no code required.

FULL CATALOGUE

All 17 Ghost tools

DESTRUCTIVE 2 tools

Destructive ghost_delete_post Delete a Ghost post permanently Destructive ghost_delete_tag Delete a Ghost tag

WRITE 7 tools

Write ghost_create_post Create a new Ghost post from markdown content Write ghost_create_tag Create a new Ghost tag Write ghost_push_local Push a local markdown file to Ghost as a draft. Parses blog format, creates or updates the post. Returns exist Write ghost_update_page Update a Ghost page (supports raw lexical or mobiledoc) Write ghost_update_post Update an existing Ghost post (fetches updated_at automatically for optimistic locking) Write ghost_update_tag Update an existing Ghost tag (name, slug, description, and/or visibility), identified by ID or current slug Write ghost_upload_image Upload a local image file to Ghost and return the hosted URL

READ 8 tools

Read ghost_analyze_tags Analyze tag usage patterns — find unused, low-use, and similar tags Read ghost_get_page Get a single Ghost page by ID or slug Read ghost_get_post Get a single Ghost post by ID or slug Read ghost_list_newsletters List available Ghost newsletters (use slug for ghost_update_post newsletter parameter) Read ghost_list_pages List Ghost pages with optional filters Read ghost_list_posts List Ghost blog posts with optional filters Read ghost_list_tags List all Ghost tags with post counts Read ghost_sync_status Compare local blog-drafts files with Ghost posts to show sync status

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Ghost

Can an AI agent delete data through the Ghost MCP server? +

Yes. The Ghost server exposes 2 destructive tools including ghost_delete_post, ghost_delete_tag. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Ghost? +

The Ghost server has 7 write tools including ghost_create_post, ghost_create_tag, ghost_push_local. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Ghost.

How many tools does the Ghost MCP server expose? +

17 tools across 3 categories: Destructive, Read, Write. 8 are read-only. 9 can modify, create, or delete data.

How do I enforce a policy on Ghost? +

Register the Ghost MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Ghost tool call.

Deterministic rules across all 17 Ghost tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON GHOST →

Instant setup, no code required.

17 Ghost tools catalogued and risk-classified — across an index of 43,000+ MCP servers.