--- title: "Sanity hosted MCP: review, setup & limitations · Undominated.ai" canonical: https://undominated.ai/mcp-servers/sanity/ description: "Query schemas and content, stage document changes and publish through Sanity-hosted MCP using an authenticated account." --- # Sanity hosted MCP: review, setup & limitations · Undominated.ai > Query schemas and content, stage document changes and publish through Sanity-hosted MCP using an authenticated account. [← Explore all mcp servers](/mcp-servers/) CONTENT MANAGEMENT / Sanity # Sanity hosted MCP Query schemas and content, stage document changes and publish through Sanity-hosted MCP using an authenticated account. [See setup guidance ↓](#setup)[Original source ↗](https://www.sanity.io/docs/ai/mcp-server) SOURCE REVIEW Reviewed 2026-10-14 Evidence 1 linked sources Publisher Sanity Licence Not established [Read what was—and wasn’t—checked ↓](#review) “Sanity MCP server” [Sanity · upstream description ↗](https://www.sanity.io/docs/ai/mcp-server) Our analysis follows below. 01 / THE REASONING ## Why this made the selection. - Connects content operations with deployed schemas and explicit draft/publish tools. - Documents release-version and asynchronous asset workflows. - Sanity documents a remote MCP server at https://mcp.sanity.io that uses OAuth by default and can instead take an API token in a header. - With that header, the page says the server will not use OAuth, and tool calls stay inside the token’s role and permissions. ### A good fit for - Inspect a schema and draft a bounded content correction for review. - Create a release version before editing the release-specific document. - Editing a Sanity project from an MCP client that can complete OAuth or present a scoped API token - A client that cannot speak remote MCP only if a proxy is added, which the page says may work ### Weigh up before choosing - Publishing, dataset changes and CORS administration are available within account permissions. - Creating a release does not schedule or publish it; those actions use Studio or the Actions API. - GROQ results are not truncated: use projections and slices. Image generation and transformation consume AI credits. - A configured Authorization header means the server will not use OAuth for that connection. - The page does not promise that every local-only client can connect; it says a proxy may be usable. - No licence was stated on this page, and none was inferred. - This review did not execute the resource. - The server was not called. - Retrying blindly after a status error can duplicate media; token-based authorization uses that token's role and bypasses OAuth. 02 / THE REVIEW RECORD ## What we actually inspected. Source review has boundaries. A clear record is more useful than a “safe” badge. ### Material inspected - https://www.sanity.io/docs/ai/mcp-server - Round 2 reread of acquired publisher setup and permission evidence; see immutable wave review. ### Our findings - The publisher distinguishes draft changes, release versions and explicit publishing. - OAuth and CLI-generated token setup are separate authentication paths. - The Sanity page documents the remote server at https://mcp.sanity.io and says it uses OAuth by default to act on the user’s behalf. - If an API token is placed in the Authorization header, the server will not use OAuth, and tool calls use that token’s role and permissions. - A client that does not support remote MCP servers is not given a native connection. The page says a proxy may be an option. - Asset uploads are asynchronous; the status tool returns a polling interval, and a lookup error does not establish that the upload failed. ### Not established by this review - Server startup, authentication, live tool execution and security isolation were not tested. - Published package/container parity with a source revision and hosted implementation internals were not tested. - The resource was not executed and its tools were not called. - The server was not called. A source review is not a runtime or security certification. The review applies to the material and revision named here. A newer upstream release can change its behavior. 03 / PUT IT TO WORK ## Connect a server deliberately. [Upstream setup instructions ↗](https://www.sanity.io/docs/ai/mcp-server) - Add the HTTP endpoint and complete OAuth with the intended Sanity account. - Confirm project, dataset and deployed schema before querying or editing. - Create the release version before patching a release; review drafts before invoking publishing tools. - Retain operationIds, honor pollAfterMs and Retry-After, and inspect the destination before repeating an upload whose outcome is unknown. ### Before you start - A Sanity account with the needed project/dataset permissions and a remote MCP client. ### Documented configuration example Use the client and authentication context described in the setup guidance. Configuration formats vary between hosts. { "mcpServers": { "sanity": { "type": "http", "url": "https://mcp.sanity.io" } } } Copy configuration ↗ ### Compatibility A Sanity account with the needed project/dataset permissions and a remote MCP client. ### Transports Streamable HTTP ### Content management - Can read, draft, publish and administer accessible Sanity resources. - Draft document patches do not themselves publish; other tools have immediate effects. ### Cost model Normal Sanity service quotas apply; the documented image-generation tools consume AI credits. 04 / FOLLOW THE EVIDENCE ## The source trail. Our notes are separate from the original resource. Check upstream before adopting a new version. - [Publisher setup, capabilities and operating boundaries ↗](https://www.sanity.io/docs/ai/mcp-server) Checked 2026-10-14 https://www.sanity.io/docs/ai/mcp-server Supports: summary, install, configExample, access, limitations, bestFor, review, compatibility, transports KEEP COMPARING ## Other approaches to consider. Related by category or shared topics. These are alternatives to inspect, not a measured quality order. [### Contentstack MCP ↗ Expose selected Contentstack API groups to a local stdio client with service-specific credentials.](/mcp-servers/contentstack/)[### Contentful MCP ↗ Read and manage Contentful entries, assets, content types and environments through its local MCP server.](/mcp-servers/contentful/)[### Sanity Hosted MCP Server ↗ Hosted Sanity endpoint where an assistant runs GROQ queries, patches documents, manages releases and explores schema with OAuth or token auth.](/mcp-servers/sanity-hosted/) [AI Tools ↗](/tools/)[Skills ↗](/skills/)[Agents ↗](/agents/)[MCP Servers ↗](/mcp-servers/)[Workflows ↗](/workflows/) ## Continue your investigation - [Inspect resource evidence](/tools/) - [Choose a host](/agents/) - [Inspect reusable workflows](/skills/) - [Use Undominated data](/api/)