AliothPress: a CMS for AI Agents (WebMCP Built In)

· CMS AliothPress
WebMCP settings section in the AliothPress admin panel where site owners enable or disable AI agent access

AliothPress is a self-hosted CMS with native support for AI agents through WebMCP. Any site built on it can let AI agents search its content, describe and submit its forms, and, inside the admin panel, create posts, build pages, and translate content. The feature is off by default and controlled by two switches on the AI Assistant page in the admin panel. AliothPress never enables AI agent access automatically. Site owners explicitly decide whether to expose public tools, admin tools, both, or neither.

What is WebMCP

WebMCP is an emerging web standard that lets websites offer tools to AI agents, the same way robots.txt offers rules to search engines. A site declares what an agent is allowed to do. The agent discovers it automatically.

  • Discovery: every AliothPress site answers at /.well-known/webmcp with a machine-readable manifest
  • In-page registration: tools register via document.modelContext / navigator.modelContext
  • Optional polyfill: a compatibility polyfill adds the API on browsers without native support, switched on with one checkbox on the AI Assistant page; the origin trial token is pasted on the same page

WebMCP support ships in the CMS core, ready to use as installed, and relies on zero plugins or third-party services.

What AI agents can do on your site

With the public surface enabled, an agent visiting any page of your site can:

  • Search your content: search_site queries published posts and pages
  • Read the site overview: auto-generated /llms.txt summarizes the site for AI, grouped by language
  • Understand your forms: describe_form returns fields, types, and requirements
  • Submit forms for the visitor: booking, contact, signup. The visitor asks, the agent fills and submits the form

Example: a visitor tells the AI agent in their browser "book me into the Saturday workshop". The agent finds the form on your page, fills it, and submits it. Your honeypot spam protection and rate limits still apply.

What AI agents can do in your admin

With the admin surface enabled, an agent working inside your authenticated admin session gets 13 tools:

  • Content: generate posts and pages, translate text, optimize SEO metadata
  • Page building: create builder pages and set page blocks from a description
  • Site management: build menus, check slugs, list and search content, navigate admin sections

The agent acts as the signed-in user and reuses the exact routes humans use: same permissions, same validation, same sanitization, same audit log. A separate agent backdoor simply does not exist in the codebase.

WebMCP and the AI Assistant: two different features

AliothPress also ships a built-in AI Assistant in the admin panel. It is a separate feature, and the two are easy to tell apart:

  • AI Assistant: your CMS talks to an AI provider (Anthropic Claude, DeepSeek, or Google Gemini) server-to-server, using your own API key, to generate content, translate, and optimize SEO for you
  • WebMCP: external AI agents, running in a visitor's or editor's browser, use tools your site exposes to them
  • They work together: the WebMCP admin tools for generation, translation, and SEO run through the same AI Assistant engine and the provider you configured

In short: the AI Assistant is AI working for your site. WebMCP is AI working with your site.

Control and privacy

  • Off by default: a fresh install exposes zero agent tools
  • Two independent switches: public site and admin are enabled separately
  • Honest when disabled: the manifest reports enabled: false; admin agent endpoints return 404 as if they do not exist
  • Visitor data stays private: form submissions are excluded from agent endpoints entirely
  • Every action logged: agent-driven changes appear in the audit log like any admin action

How to enable it

  1. Open the AI Assistant page in the admin panel
  2. Turn on Public tools (search + forms), Admin panel, or both
  3. Done: the manifest at /.well-known/webmcp starts announcing your tools

Why this matters now

People increasingly reach websites through AI agents and chat interfaces instead of browsing. A site an agent can read, search, and act on gets recommended, cited, and used. A site an agent cannot parse gets skipped.

AliothPress prepares your site for both sides of that shift:

  • For AI answer engines: /llms.txt, FAQPage schema, Speakable markup, answer-first content structure
  • For AI agents: WebMCP tools for search, forms, and content management

AliothPress ships WebMCP support today, in the core, at no extra cost, on a self-hosted CMS you fully control. If you are choosing a platform for a site built for the AI-first web, this is what it was made for. AliothPress Download free or read the documentation.

Frequently Asked Questions

Do I need to configure anything for agents to find my site?
No. Once a switch is on, discovery is automatic through the standard /.well-known/webmcp address.
Can agents change my site without permission?
No. Public tools are read-only plus form submission. Admin tools work only inside an authenticated admin session and inherit that user's permissions.
Does this replace my SEO?
No. It complements it. Search engines read your sitemap and structured data; AI agents read your manifest and llms.txt. AliothPress generates all of it automatically.
What if I never want AI agents on my site?
Leave both switches off. That is the default. The site behaves as if the feature does not exist.
WebMCP CMS CMS features AI agents