{"id":132,"date":"2026-07-28T03:43:13","date_gmt":"2026-07-28T03:43:13","guid":{"rendered":"https:\/\/www.serbeld.space\/en\/?p=132"},"modified":"2026-07-28T11:46:21","modified_gmt":"2026-07-28T11:46:21","slug":"contentful-remote-mcp-server-governed-ai-access","status":"publish","type":"post","link":"https:\/\/www.serbeld.space\/en\/2026\/07\/28\/contentful-remote-mcp-server-governed-ai-access\/","title":{"rendered":"Contentful&#8217;s Remote MCP Server: Governed AI Access to Your Content Layer"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\"><strong>From Answering Questions to Taking Action<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">For the last couple of years, the interesting question about AI assistants was how good their answers were. That question is settling. The one replacing it is more operational: how does an assistant reach the systems where the work actually lives, without someone hand-rolling an integration for every tool and every user?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The Model Context Protocol is the current answer, and Contentful shipped its <strong>Remote MCP server<\/strong> to general availability in July 2026. It is a cloud-hosted, OAuth-secured endpoint that lets an MCP-aware client read and write entries, manage content models, handle assets, and invoke AI Actions across your spaces. No local process, no personal access token pasted into a config file.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">I connected it to my own workflow this week. Here is what is actually worth knowing before you do the same.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>How a Call Actually Travels<\/strong><\/h2>\n\n\n\n<svg viewBox='0 0 960 470' xmlns='http:\/\/www.w3.org\/2000\/svg' role='img' aria-label='Diagram showing an MCP client reaching a Contentful space through the remote MCP server and the MCP app allow-list' style='width:100%;height:auto;max-width:960px;font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif'><defs><marker id='ctfah' viewBox='0 0 10 10' refX='9' refY='5' markerWidth='7' markerHeight='7' orient='auto-start-reverse'><path d='M 0 0 L 10 5 L 0 10 z' fill='#94a3b8'\/><\/marker><\/defs><rect x='0' y='0' width='960' height='470' rx='16' fill='#0f172a'\/><text x='30' y='50' fill='#e2e8f0' font-size='22' font-weight='600'>How a request reaches your Contentful space<\/text><text x='30' y='78' fill='#64748b' font-size='14'>Remote MCP server, OAuth 2.1, and a per-environment allow-list<\/text><rect x='30' y='170' width='180' height='110' rx='10' fill='#1e293b' stroke='#334155'\/><text x='120' y='205' fill='#f1f5f9' font-size='15' font-weight='600' text-anchor='middle'>MCP Client<\/text><text x='120' y='230' fill='#94a3b8' font-size='11.5' text-anchor='middle'>Claude \u00b7 Cursor<\/text><text x='120' y='250' fill='#94a3b8' font-size='11.5' text-anchor='middle'>VS Code \u00b7 ChatGPT<\/text><rect x='270' y='170' width='180' height='110' rx='10' fill='#1e293b' stroke='#334155'\/><text x='360' y='205' fill='#f1f5f9' font-size='15' font-weight='600' text-anchor='middle'>Remote MCP Server<\/text><text x='360' y='230' fill='#94a3b8' font-size='11.5' text-anchor='middle'>mcp.contentful.com<\/text><text x='360' y='250' fill='#94a3b8' font-size='11.5' text-anchor='middle'>hosted, zero infra<\/text><rect x='510' y='170' width='180' height='110' rx='10' fill='#1e293b' stroke='#334155'\/><text x='600' y='205' fill='#f1f5f9' font-size='15' font-weight='600' text-anchor='middle'>Contentful MCP App<\/text><text x='600' y='230' fill='#94a3b8' font-size='11.5' text-anchor='middle'>per space + env<\/text><text x='600' y='250' fill='#94a3b8' font-size='11.5' text-anchor='middle'>tool allow-list<\/text><rect x='750' y='170' width='180' height='110' rx='10' fill='#164e63' stroke='#0e7490'\/><text x='840' y='205' fill='#f1f5f9' font-size='15' font-weight='600' text-anchor='middle'>Your Space<\/text><text x='840' y='230' fill='#a5d8e6' font-size='11.5' text-anchor='middle'>entries \u00b7 assets<\/text><text x='840' y='250' fill='#a5d8e6' font-size='11.5' text-anchor='middle'>content types \u00b7 locales<\/text><line x1='215' y1='225' x2='262' y2='225' stroke='#94a3b8' stroke-width='2' marker-end='url(#ctfah)'\/><text x='240' y='210' fill='#7dd3fc' font-size='10' text-anchor='middle'>OAuth 2.1<\/text><line x1='455' y1='225' x2='502' y2='225' stroke='#94a3b8' stroke-width='2' marker-end='url(#ctfah)'\/><text x='480' y='210' fill='#7dd3fc' font-size='10' text-anchor='middle'>gate<\/text><line x1='695' y1='225' x2='742' y2='225' stroke='#94a3b8' stroke-width='2' marker-end='url(#ctfah)'\/><text x='720' y='210' fill='#7dd3fc' font-size='10' text-anchor='middle'>CMA<\/text><rect x='30' y='330' width='900' height='110' rx='12' fill='#111c33' stroke='#1e3a5f'\/><text x='55' y='365' fill='#7dd3fc' font-size='13' font-weight='600'>Two layers of permission, and both have to say yes<\/text><text x='55' y='394' fill='#94a3b8' font-size='13'>1 \u2014 Your own Contentful role and space permissions, carried by the OAuth identity<\/text><text x='55' y='418' fill='#94a3b8' font-size='13'>2 \u2014 The MCP app allow-list for that space and environment, set to read-only or read\/write per tool category<\/text><\/svg>\n\n\n\n<p class=\"wp-block-paragraph\"><em>The client never talks to the Content Management API directly. Every tool call passes through the hosted server, which checks the MCP app configuration for the space and environment in play before anything reaches your content.<\/em><\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Remote or Local: Pick Your Trade-off<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Contentful runs two servers with the same core toolset. They differ almost entirely in how identity and gating work.<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>Authentication:<\/strong> the remote server uses OAuth 2.1, so each person signs in as themselves. The local server runs on a Management API personal access token supplied through environment variables.<\/li><li><strong>Identity:<\/strong> remote calls carry the individual user&#8217;s identity. Local calls all run as whoever owns the token, which flattens your audit trail to a single actor.<\/li><li><strong>Gating:<\/strong> remote adds a second layer on top of user permissions, an allow-list managed by the Contentful MCP app per space and environment. Local has exactly one boundary: the token itself.<\/li><li><strong>Setup:<\/strong> remote is a URL in a config file. Local means provisioning a token and running a Node process.<\/li><li><strong>Best for:<\/strong> remote suits day-to-day team use where an admin wants central control over exposed tools. Local still wins for scripting, CI, and anywhere OAuth is not an option.<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">One detail that trips people up: the remote server is useless in a space until the <strong>Contentful MCP app<\/strong> is installed and configured there. The app is not a server, it is the permission gate. Installing it alone does nothing either. You need both halves.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Connecting a Client<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Most MCP-aware clients need nothing more than the endpoint:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>{\n  \"mcpServers\": {\n    \"contentful\": {\n      \"url\": \"https:\/\/mcp.contentful.com\/mcp\"\n    }\n  }\n}<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">On first connect, the client discovers that OAuth is required, sends you to Contentful to sign in, and then asks you to pick the spaces and environments in scope for the session. That last step is not optional and it is not sticky. <strong>You select the space and environment pair every single time you connect<\/strong>, even when the MCP app is already installed. Skip it and the session has nothing to operate on.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If your organization is provisioned in the EU, swap in <code>https:\/\/mcp.eu.contentful.com\/mcp<\/code> everywhere. Region is fixed by the endpoint you connect to, so authentication and every Management API call stay inside EU infrastructure. There is no in-session switch.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Assets Take Two Phases<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">MCP tool calls are JSON over HTTP, which means binary files cannot ride along inside one. The remote server splits uploads in two:<\/p>\n\n\n\n<ol class=\"wp-block-list\"><li>Call <code>create_upload_session<\/code> with no arguments. You get back an upload handle, a URL, and an expiry.<\/li><li><code>PUT<\/code> the raw bytes to that URL with a <code>Content-Length<\/code> header. This endpoint is deliberately unauthenticated, so the handle <em>is<\/em> the credential. Treat it like a secret.<\/li><li>Call <code>upload_asset<\/code> with the handle, and the server binds the staged bytes into a real Contentful asset.<\/li><\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Handles expire after an hour and are single-use. Every upload needs a fresh session. If you are connected through ChatGPT, you can skip the session step entirely and call <code>upload_asset<\/code> directly, because the file gets passed to the server for you.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Failure Modes Worth Knowing in Advance<\/strong><\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>A tool returns &#8220;not allowed&#8221;:<\/strong> that category is probably switched off in the MCP app config for that environment. Update the app, then re-run the connection flow.<\/li><li><strong>Environment aliases are not supported.<\/strong> Point at the underlying environment ID directly, or you will get a forbidden error when fetching the app installation.<\/li><li><strong>The browser never opens:<\/strong> usually a stale or revoked token cached in the client. Remove the server and add it back so OAuth starts clean.<\/li><li><strong>EU calls routing oddly:<\/strong> check that every snippet uses the EU endpoint, not the global one.<\/li><\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Where I Would Start<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Read-only, and narrowly. Contentful&#8217;s own guidance says the same thing, and it is the right instinct. Turn on entries and content types as read-only in one non-production environment, enable human confirmation of tool calls in your client, and spend a week asking questions rather than issuing commands.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The workflows that pay off first are the assessment-heavy ones: auditing entries for missing localization fields before a launch, finding pages with absent alt text, spotting inconsistent metadata across a product release. None of those touch production content, and all of them are tedious enough by hand that you will notice the difference immediately.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Write access is the step after trust, not the step before it. The nice thing about the two-layer model is that it lets you make that a deliberate decision per environment rather than an all-or-nothing switch.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"wp-block-paragraph\"><em>Further reading: Contentful&#8217;s <a href=\"https:\/\/www.contentful.com\/developers\/docs\/tools\/mcp-server\/\" target=\"_blank\" rel=\"noreferrer noopener\">MCP server documentation<\/a> and their <a href=\"https:\/\/www.contentful.com\/blog\/remote-mcp-now-generally-available\/\" target=\"_blank\" rel=\"noreferrer noopener\">general availability announcement<\/a>. The local server is <a href=\"https:\/\/github.com\/contentful\/contentful-mcp-server\" target=\"_blank\" rel=\"noreferrer noopener\">open source on GitHub<\/a>.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Contentful&#8217;s Remote MCP server is now generally available. Here is how the hosted endpoint works, how its two permission layers stack, and what to watch out for when you point Claude, Cursor, or VS Code at your spaces.<\/p>\n","protected":false},"author":1,"featured_media":164,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"saved_in_kubio":false,"footnotes":""},"categories":[9],"tags":[],"class_list":["post-132","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ai-tooling"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Contentful&#039;s Remote MCP Server: Governed AI Access to Your Content Layer - My Blog | Serbeld Digital Creations<\/title>\n<meta name=\"description\" content=\"Contentful&#039;s Remote MCP server is generally available. How the hosted OAuth endpoint works, how its two permission layers stack, and the setup gotchas to know first.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.serbeld.space\/en\/2026\/07\/28\/contentful-remote-mcp-server-governed-ai-access\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Contentful&#039;s Remote MCP Server: Governed AI Access to Your Content Layer - My Blog | Serbeld Digital Creations\" \/>\n<meta property=\"og:description\" content=\"Contentful&#039;s Remote MCP server is generally available. How the hosted OAuth endpoint works, how its two permission layers stack, and the setup gotchas to know first.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.serbeld.space\/en\/2026\/07\/28\/contentful-remote-mcp-server-governed-ai-access\/\" \/>\n<meta property=\"og:site_name\" content=\"My Blog | Serbeld Digital Creations\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-28T03:43:13+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-07-28T11:46:21+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.serbeld.space\/en\/wp-content\/uploads\/2026\/07\/Blue-fibre-optic-light-protocol-connection.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1600\" \/>\n\t<meta property=\"og:image:height\" content=\"1018\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Sergio Bele\u00f1o\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Sergio Bele\u00f1o\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.serbeld.space\\\/en\\\/2026\\\/07\\\/28\\\/contentful-remote-mcp-server-governed-ai-access\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.serbeld.space\\\/en\\\/2026\\\/07\\\/28\\\/contentful-remote-mcp-server-governed-ai-access\\\/\"},\"author\":{\"name\":\"Sergio Bele\u00f1o\",\"@id\":\"https:\\\/\\\/www.serbeld.space\\\/en\\\/#\\\/schema\\\/person\\\/48af20418730d7abd4745862cb50bd91\"},\"headline\":\"Contentful&#8217;s Remote MCP Server: Governed AI Access to Your Content Layer\",\"datePublished\":\"2026-07-28T03:43:13+00:00\",\"dateModified\":\"2026-07-28T11:46:21+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.serbeld.space\\\/en\\\/2026\\\/07\\\/28\\\/contentful-remote-mcp-server-governed-ai-access\\\/\"},\"wordCount\":988,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/www.serbeld.space\\\/en\\\/2026\\\/07\\\/28\\\/contentful-remote-mcp-server-governed-ai-access\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.serbeld.space\\\/en\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/Server-hardware-in-low-blue-light.jpg\",\"articleSection\":[\"AI &amp; Tooling\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.serbeld.space\\\/en\\\/2026\\\/07\\\/28\\\/contentful-remote-mcp-server-governed-ai-access\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.serbeld.space\\\/en\\\/2026\\\/07\\\/28\\\/contentful-remote-mcp-server-governed-ai-access\\\/\",\"url\":\"https:\\\/\\\/www.serbeld.space\\\/en\\\/2026\\\/07\\\/28\\\/contentful-remote-mcp-server-governed-ai-access\\\/\",\"name\":\"Contentful's Remote MCP Server: Governed AI Access to Your Content Layer - My Blog | Serbeld Digital Creations\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.serbeld.space\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.serbeld.space\\\/en\\\/2026\\\/07\\\/28\\\/contentful-remote-mcp-server-governed-ai-access\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.serbeld.space\\\/en\\\/2026\\\/07\\\/28\\\/contentful-remote-mcp-server-governed-ai-access\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.serbeld.space\\\/en\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/Server-hardware-in-low-blue-light.jpg\",\"datePublished\":\"2026-07-28T03:43:13+00:00\",\"dateModified\":\"2026-07-28T11:46:21+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.serbeld.space\\\/en\\\/#\\\/schema\\\/person\\\/48af20418730d7abd4745862cb50bd91\"},\"description\":\"Contentful's Remote MCP server is generally available. How the hosted OAuth endpoint works, how its two permission layers stack, and the setup gotchas to know first.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.serbeld.space\\\/en\\\/2026\\\/07\\\/28\\\/contentful-remote-mcp-server-governed-ai-access\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.serbeld.space\\\/en\\\/2026\\\/07\\\/28\\\/contentful-remote-mcp-server-governed-ai-access\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.serbeld.space\\\/en\\\/2026\\\/07\\\/28\\\/contentful-remote-mcp-server-governed-ai-access\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.serbeld.space\\\/en\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/Server-hardware-in-low-blue-light.jpg\",\"contentUrl\":\"https:\\\/\\\/www.serbeld.space\\\/en\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/Server-hardware-in-low-blue-light.jpg\",\"width\":1600,\"height\":1067,\"caption\":\"Close-up of server cooling fans lit in low blue light inside a data center\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.serbeld.space\\\/en\\\/2026\\\/07\\\/28\\\/contentful-remote-mcp-server-governed-ai-access\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.serbeld.space\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Contentful&#8217;s Remote MCP Server: Governed AI Access to Your Content Layer\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.serbeld.space\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/www.serbeld.space\\\/en\\\/\",\"name\":\"My Blog | Serbeld Digital Creations\",\"description\":\"Explore a world of innovation and creativity with Serbeld Digital Creations. Discover cutting-edge technology projects and digital marvels crafted by Serbeld. Join us on a journey through the digital realm where ideas come to life.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.serbeld.space\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.serbeld.space\\\/en\\\/#\\\/schema\\\/person\\\/48af20418730d7abd4745862cb50bd91\",\"name\":\"Sergio Bele\u00f1o\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/a10c42d0d6b00687137658785dd7dea4acf2aeaad435abb9bf0f05c5740a1681?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/a10c42d0d6b00687137658785dd7dea4acf2aeaad435abb9bf0f05c5740a1681?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/a10c42d0d6b00687137658785dd7dea4acf2aeaad435abb9bf0f05c5740a1681?s=96&d=mm&r=g\",\"caption\":\"Sergio Bele\u00f1o\"},\"sameAs\":[\"https:\\\/\\\/www.serbeld.space\\\/en\"],\"url\":\"https:\\\/\\\/www.serbeld.space\\\/en\\\/author\\\/admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Contentful's Remote MCP Server: Governed AI Access to Your Content Layer - My Blog | Serbeld Digital Creations","description":"Contentful's Remote MCP server is generally available. How the hosted OAuth endpoint works, how its two permission layers stack, and the setup gotchas to know first.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.serbeld.space\/en\/2026\/07\/28\/contentful-remote-mcp-server-governed-ai-access\/","og_locale":"en_US","og_type":"article","og_title":"Contentful's Remote MCP Server: Governed AI Access to Your Content Layer - My Blog | Serbeld Digital Creations","og_description":"Contentful's Remote MCP server is generally available. How the hosted OAuth endpoint works, how its two permission layers stack, and the setup gotchas to know first.","og_url":"https:\/\/www.serbeld.space\/en\/2026\/07\/28\/contentful-remote-mcp-server-governed-ai-access\/","og_site_name":"My Blog | Serbeld Digital Creations","article_published_time":"2026-07-28T03:43:13+00:00","article_modified_time":"2026-07-28T11:46:21+00:00","og_image":[{"width":1600,"height":1018,"url":"https:\/\/www.serbeld.space\/en\/wp-content\/uploads\/2026\/07\/Blue-fibre-optic-light-protocol-connection.jpg","type":"image\/jpeg"}],"author":"Sergio Bele\u00f1o","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Sergio Bele\u00f1o","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.serbeld.space\/en\/2026\/07\/28\/contentful-remote-mcp-server-governed-ai-access\/#article","isPartOf":{"@id":"https:\/\/www.serbeld.space\/en\/2026\/07\/28\/contentful-remote-mcp-server-governed-ai-access\/"},"author":{"name":"Sergio Bele\u00f1o","@id":"https:\/\/www.serbeld.space\/en\/#\/schema\/person\/48af20418730d7abd4745862cb50bd91"},"headline":"Contentful&#8217;s Remote MCP Server: Governed AI Access to Your Content Layer","datePublished":"2026-07-28T03:43:13+00:00","dateModified":"2026-07-28T11:46:21+00:00","mainEntityOfPage":{"@id":"https:\/\/www.serbeld.space\/en\/2026\/07\/28\/contentful-remote-mcp-server-governed-ai-access\/"},"wordCount":988,"commentCount":0,"image":{"@id":"https:\/\/www.serbeld.space\/en\/2026\/07\/28\/contentful-remote-mcp-server-governed-ai-access\/#primaryimage"},"thumbnailUrl":"https:\/\/www.serbeld.space\/en\/wp-content\/uploads\/2026\/07\/Server-hardware-in-low-blue-light.jpg","articleSection":["AI &amp; Tooling"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.serbeld.space\/en\/2026\/07\/28\/contentful-remote-mcp-server-governed-ai-access\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.serbeld.space\/en\/2026\/07\/28\/contentful-remote-mcp-server-governed-ai-access\/","url":"https:\/\/www.serbeld.space\/en\/2026\/07\/28\/contentful-remote-mcp-server-governed-ai-access\/","name":"Contentful's Remote MCP Server: Governed AI Access to Your Content Layer - My Blog | Serbeld Digital Creations","isPartOf":{"@id":"https:\/\/www.serbeld.space\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.serbeld.space\/en\/2026\/07\/28\/contentful-remote-mcp-server-governed-ai-access\/#primaryimage"},"image":{"@id":"https:\/\/www.serbeld.space\/en\/2026\/07\/28\/contentful-remote-mcp-server-governed-ai-access\/#primaryimage"},"thumbnailUrl":"https:\/\/www.serbeld.space\/en\/wp-content\/uploads\/2026\/07\/Server-hardware-in-low-blue-light.jpg","datePublished":"2026-07-28T03:43:13+00:00","dateModified":"2026-07-28T11:46:21+00:00","author":{"@id":"https:\/\/www.serbeld.space\/en\/#\/schema\/person\/48af20418730d7abd4745862cb50bd91"},"description":"Contentful's Remote MCP server is generally available. How the hosted OAuth endpoint works, how its two permission layers stack, and the setup gotchas to know first.","breadcrumb":{"@id":"https:\/\/www.serbeld.space\/en\/2026\/07\/28\/contentful-remote-mcp-server-governed-ai-access\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.serbeld.space\/en\/2026\/07\/28\/contentful-remote-mcp-server-governed-ai-access\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.serbeld.space\/en\/2026\/07\/28\/contentful-remote-mcp-server-governed-ai-access\/#primaryimage","url":"https:\/\/www.serbeld.space\/en\/wp-content\/uploads\/2026\/07\/Server-hardware-in-low-blue-light.jpg","contentUrl":"https:\/\/www.serbeld.space\/en\/wp-content\/uploads\/2026\/07\/Server-hardware-in-low-blue-light.jpg","width":1600,"height":1067,"caption":"Close-up of server cooling fans lit in low blue light inside a data center"},{"@type":"BreadcrumbList","@id":"https:\/\/www.serbeld.space\/en\/2026\/07\/28\/contentful-remote-mcp-server-governed-ai-access\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.serbeld.space\/en\/"},{"@type":"ListItem","position":2,"name":"Contentful&#8217;s Remote MCP Server: Governed AI Access to Your Content Layer"}]},{"@type":"WebSite","@id":"https:\/\/www.serbeld.space\/en\/#website","url":"https:\/\/www.serbeld.space\/en\/","name":"My Blog | Serbeld Digital Creations","description":"Explore a world of innovation and creativity with Serbeld Digital Creations. Discover cutting-edge technology projects and digital marvels crafted by Serbeld. Join us on a journey through the digital realm where ideas come to life.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.serbeld.space\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.serbeld.space\/en\/#\/schema\/person\/48af20418730d7abd4745862cb50bd91","name":"Sergio Bele\u00f1o","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/a10c42d0d6b00687137658785dd7dea4acf2aeaad435abb9bf0f05c5740a1681?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/a10c42d0d6b00687137658785dd7dea4acf2aeaad435abb9bf0f05c5740a1681?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/a10c42d0d6b00687137658785dd7dea4acf2aeaad435abb9bf0f05c5740a1681?s=96&d=mm&r=g","caption":"Sergio Bele\u00f1o"},"sameAs":["https:\/\/www.serbeld.space\/en"],"url":"https:\/\/www.serbeld.space\/en\/author\/admin\/"}]}},"_links":{"self":[{"href":"https:\/\/www.serbeld.space\/en\/wp-json\/wp\/v2\/posts\/132","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.serbeld.space\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.serbeld.space\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.serbeld.space\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.serbeld.space\/en\/wp-json\/wp\/v2\/comments?post=132"}],"version-history":[{"count":3,"href":"https:\/\/www.serbeld.space\/en\/wp-json\/wp\/v2\/posts\/132\/revisions"}],"predecessor-version":[{"id":160,"href":"https:\/\/www.serbeld.space\/en\/wp-json\/wp\/v2\/posts\/132\/revisions\/160"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.serbeld.space\/en\/wp-json\/wp\/v2\/media\/164"}],"wp:attachment":[{"href":"https:\/\/www.serbeld.space\/en\/wp-json\/wp\/v2\/media?parent=132"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.serbeld.space\/en\/wp-json\/wp\/v2\/categories?post=132"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.serbeld.space\/en\/wp-json\/wp\/v2\/tags?post=132"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}