DevHub
DevHub CMS MCP is a Model Context Protocol server that enables Large Language Models to manage content in DevHub CMS systems. It provides programmatic tools for managing business locations, blog content, media assets, and hours of operation through a standardized MCP interface.
Score Breakdown
⚙ Agent Friendliness
🔒 Security
HTTPS enforced via Smithery registry. API credentials stored in environment variables which is standard practice but vulnerable to process inspection. No scope granularity - API key grants full access. Dependencies are minimal and reasonable (mcp>=1.4.1, requests-oauthlib>=2.0.0) but requests-oauthlib suggests OAuth patterns that may not be used. Secret handling relies on user discipline to keep env vars protected.
⚡ Reliability
Best When
You need LLM agents to manage DevHub CMS content without building custom API integrations. Works well with Claude Desktop, Cursor, or Claude Code where the MCP protocol is natively supported.
Avoid When
You need lower-level API control, webhook integration, or GraphQL capabilities. Also avoid if your LLM client doesn't support MCP (requires Claude, Cursor, or Claude Code).
Use Cases
- • Automated blog content management through LLM agents
- • Location and hours management for multi-location businesses
- • Image uploads and media gallery management via LLM
- • Geographic location lookups and nearest-location discovery
- • Content updates triggered by AI workflows
Not For
- • Direct REST API integration (MCP is the interface)
- • Real-time content publishing without LLM mediation
- • Systems requiring fine-grained permission scopes
- • Applications needing webhook notifications
Interface
Authentication
Uses environment variable-based authentication (DEVHUB_API_KEY and DEVHUB_API_SECRET). No fine-grained scopes available. Credentials passed directly to MCP server, not a best practice for security.
Pricing
MCP server is open-source and free. Requires active DevHub CMS subscription to be useful.
Agent Metadata
Known Gotchas
- ⚠ No error message documentation makes debugging agent failures difficult
- ⚠ API credentials in environment variables could leak in error logs or session info
- ⚠ HTML content for blog posts must not include H1 tags (implicit constraint not validated by tool)
- ⚠ No documented rate limits
- ⚠ Base64 image encoding requirement adds complexity for image handling
- ⚠ No idempotency guarantees on write operations
Alternatives
Full Evaluation Report
Comprehensive deep-dive: security analysis, reliability audit, agent experience review, cost modeling, competitive positioning, and improvement roadmap for DevHub.
AI-powered analysis · PDF + markdown · Delivered within 30 minutes
Package Brief
Quick verdict, integration guide, cost projections, gotchas with workarounds, and alternatives comparison.
Delivered within 10 minutes
Score Monitoring
Get alerted when this package's AF, security, or reliability scores change significantly. Stay ahead of regressions.
Continuous monitoring
Scores are editorial opinions as of 2026-04-04.