Included because Webflow MCP 2.0 lets agents build and manage site structure, design primitives, CMS content, assets, forms, analytics, custom code, and indexing while retaining workspace permissions and audit logs.
Concrete capability record
A field-by-field summary of what the reviewed first-party references actually support. Publisher update dates and BYO-UI review dates are shown separately below.
Workspaces, sites, pages, element trees, components and variants, styles, variables and modes, CMS collections and items, locales, assets, forms and submissions, custom fonts and code, sitemap settings, Analyze metrics, and agent instructions.
Read site structure and design primitives, CMS and page data, assets and fonts, form schemas and submissions, sitemap state, custom code, agent instructions, and available Analyze traffic and engagement metrics.
Create and edit pages and element trees; manage components, styles, variables, CMS content, assets, submissions, uploaded fonts, sitemap inclusion, custom code, and site-specific agent instructions. Most of these operations now run headlessly through the Data API.
The remote server uses Webflow OAuth with automatic token refresh. Each authorization selects one workspace, and every agent action inherits that workspace's standard and custom roles and permissions.
Webflow applies workspace roles, including custom roles, to MCP actions and records agent changes in the site audit log. Bind each connector to the intended workspace and use staging publication to verify autonomous edits before production.
Element snapshots, selection, canvas navigation, breakpoint reads, and page-folder creation still need a live Designer Bridge session. Interactions are unsupported, and each OAuth authorization covers one workspace.
Agent access
Support: Official MCP server
Read scope: Read site design and content objects, form submissions, sitemap state, custom code and instructions, and licensed Webflow Analyze traffic and engagement data.
Write scope: Headlessly build and modify pages, elements, components, styles, variables, content, assets, uploaded fonts, custom code, sitemap settings, submissions, and agent instructions; live Designer tools cover the remaining session-bound canvas actions.
Authentication: Webflow-hosted OAuth authorizes the remote MCP server for one selected workspace and refreshes tokens automatically; local API keys are not required.
Approval boundary: Preview the target workspace, site, page or collection, locale, and proposed diff before deleting content, rewriting custom code, changing sitemap inclusion, or publishing beyond a staging domain.
Confirm the current tool catalog, plan, region, scopes, rate limits, terms, and write behavior before implementation.
Editorial assessment
A comparative architecture lens—not a quality score, market ranking, or buying recommendation. Scale: 1–5.
Proposed customer-shaped experiences
The output could be an export, report, graph, artifact, application, agent, workflow, or downstream feed. These proposals are derived from documented access—not claims that Webflow ships them.
Evidence and dates
“Publisher updated” is shown only when the page exposes an update date. “BYO-UI reviewed” records when this research checked the reference. A missing publisher date is reported as missing—not replaced with the review date.
Official Webflow docs confirm the server translates intents into OAuth-authenticated API calls. Some Designer capabilities require a live Bridge App session, and separately documented beta features/testing-partner…
Targeted first-party MCP/agent-role review; broader API inventory retained
First-party API reference or API overview recorded for this platform.
Full-profile first-party re-verification on 2026-07-12; see the private audit ledger.
First-party developer documentation or platform overview.
Inventory source: structurally normalized; content was not individually reopened in this pass.
First-party product homepage used to confirm product identity and current positioning.
Inventory source: structurally normalized; content was not individually reopened in this pass.
First-party MCP documentation or product announcement recorded for this platform.
Inventory source: structurally normalized; content was not individually reopened in this pass.
First-party webhook, event, SDK, embedded-app, or extension documentation.
Inventory source: structurally normalized; content was not individually reopened in this pass.
Tied to cited first-party evidence reviewed for this profile.
Official links recorded for deeper research but not necessarily reopened endpoint by endpoint.
System role, maturity interpretation, and architectural boundary.
Interface patterns and compositions—not vendor product claims.
