Public, host-neutral distribution of the BJD CMS Content skill and its local stdio MCP server. It works with MCP-capable Agent hosts such as Codex, Claude Desktop, OpenCode, and other standard stdio MCP clients.

Current stable release: 0.6.1

MCP server: 0.6.1
Bundled fallback client: 1.8.0
Python: 3.10+
Tools: 23
Runtime dependency: Python standard library only

Download immutable release assets from the Releases page. Do not install the floating main branch.

One prompt to install

Copy the complete prompt below into your Agent:

请从公共仓库 https://git.justconn.top/gitea-admin/bjd-cms-content 安装 BJD CMS Content 的最新稳定 Release。先完整阅读仓库根目录的 AGENT_INSTALL.md，并严格按它执行：检测当前操作系统、Python 版本和 Agent 宿主；只下载最新非预发布 Release 的固定版本资产及 SHA256SUMS，不从浮动 main 安装；校验 SHA-256 后运行随包的 POSIX 或 Windows 版本化安装器；保留现有 Agent 配置中的其他内容，只新增或更新 bjd-cms-content 的本地 stdio MCP 注册，并注册完整 skill 目录；运行相邻 client.py 的 native-smoke，确认其结果与 RELEASE.json 中的 server/client 版本、tool_count 一致且 bundled_pair_verified=true。然后用 skill 自带 helper 执行 configure 和脱敏的 doctor。如果 AI_CONTENT_API_TOKEN 尚未配置，只告诉我私有配置文件的准确路径并暂停，让我在本机填写；绝不要要求我把 Token 发到聊天、命令、MCP 配置或日志里。等我确认已保存后，只执行 GET /api/ai/content/schema/news 作为连接验收，不创建测试内容、不调用写工具。任何下载、校验、版本、宿主配置或验收不一致都停止并报告，不绕过检查。

This prompt installs the software and host registration. Production CMS credentials are intentionally provisioned separately; an Agent must never download or invent a credential.

Manual installation

Download the .tar.gz archive on Linux/macOS/WSL or .zip on Windows, together with SHA256SUMS.
Verify the selected archive against SHA256SUMS before extraction.

Extract the archive and run:

Linux, macOS, or WSL:

sh install/install.sh

Windows PowerShell:

powershell -ExecutionPolicy RemoteSigned -File install/install.ps1

Read install/generic-mcp.md and the adapter document for your host.

Run the credential-free acceptance check:

python3 plugin/bjd-cms-content/scripts/client.py native-smoke

Configure the CMS origin from the installed skill directory:

python3 skill/bjd-cms-content/scripts/cms_api.py configure
python3 skill/bjd-cms-content/scripts/cms_api.py doctor

After an administrator independently provisions your private CMS Token and you save it in the helper's private configuration file, run only:
```
python3 skill/bjd-cms-content/scripts/cms_api.py GET /api/ai/content/schema/news
```

Do not create dummy production content as an installation test.

Standard MCP process

Every supported host starts the same local process:

{
  "command": "python3",
  "args": ["/absolute/version/path/plugin/bjd-cms-content/scripts/server.py"],
  "cwd": "/absolute/version/path/plugin/bjd-cms-content",
  "env": {
    "BJD_CMS_SKILL_ROOT": "/absolute/version/path/skill/bjd-cms-content"
  }
}

Never place AI_CONTENT_API_TOKEN in this shareable MCP configuration. The complete skill must be installed together with the plugin.

Security boundaries

This repository contains no website source, database, production dump, private key, or CMS credential.
Gitea download access and CMS API authorization are separate boundaries.
Each user or Agent receives an independently expiring and revocable CMS Token with server-enforced site and operation scopes.
Publishing, live updates, rollback, and cache operations retain their explicit confirmation and verification requirements on every Agent host.
Software rollback never rolls back CMS content; use the documented site-scoped audit workflow for eligible corrections.

See AGENT_INSTALL.md for the normative automated install procedure and install/ for host-specific configuration notes.