01 · Records and state owned
List sites, create pages, add components, update and manage content, and perform supported marketing/content workflows through secure SitecoreAI tools
Sitecore
SitecoreAI / XM Cloud
Curated anchor platform in enterprise dxp and cms with material relevance to the Marcom operating stack and a first-party developer surface.
Content, CMS, creative & DAMSystem of productionAgent-accessible SaaS
Concrete capability record
Data, retrieval, actions, identity, and operating limits
A field-by-field summary of what the reviewed first-party references actually support. Publisher update dates and BYO-UI review dates are shown separately below.
02 · Data you can retrieve
List sites, create pages, add components, update and manage content, and perform supported marketing/content workflows through secure SitecoreAI tools
03 · Actions and write paths
SitecoreAI / XM Cloud's first-party MCP/agent surface includes state-changing tools in the documented capability area: List sites, create pages, add components, update and manage content, and perform supported marketing/content workflows through secure SitecoreAI tools. The audit did not enumerate every mutation; verify the current tool catalog and require explicit confirmation for consequential actions.
04 · Authentication and permissions
Authentication model is documented by the vendor; inspect the cited source before implementation. Sitecore explicitly limits reliability to documented supported use cases; preserve tenant permissions and do not generalize beyond the published tool reference.
05 · Monitoring, approval, and recovery
Official SitecoreAI documentation confirms a first-party Marketer MCP that turns prompts into Agent API actions. Official SitecoreAI documentation confirms a first-party Marketer MCP that turns prompts into Agent API actions. Sitecore explicitly limits reliability to documented supported use cases; preserve tenant permissions and do not generalize beyond the published tool reference.
06 · Gaps and implementation limits
Official SitecoreAI documentation confirms a first-party Marketer MCP that turns prompts into Agent API actions. Sitecore explicitly limits reliability to documented supported use cases; preserve tenant permissions and do not generalize beyond the published tool reference.
First-party access
Documented surfaces
Sitecore GraphQL ↗XM Cloud exposes GraphQL authoring, management, and delivery access with endpoint-specific authentication, schema, role, and publishing-state boundaries.Source: Sitecore Authoring and Management GraphQL APIMCP / agent surface ↗Verified first-party provider MCPAPI ↗Developer accessDeveloper docs ↗SDKs and platform guidanceProduct ↗Native platform experience
Agent access
MCP and adjacent posture
Verified first-party provider MCPSitecore-hosted Marketer MCP server through SitecoreAI Agent APICurrent documented service; supported-use-case limits apply
Role: provider
Read scope: List sites, create pages, add components, update and manage content, and perform supported marketing/content workflows through secure SitecoreAI tools
Write scope: State-changing tools are present in the documented scope; review the official tool catalog and require confirmation for consequential actions.
Authentication: Authentication model is documented by the vendor; inspect the cited source before implementation.
Approval boundary: Official SitecoreAI documentation confirms a first-party Marketer MCP that turns prompts into Agent API actions.
Protocol does not erase product boundaries.
Confirm the current tool catalog, plan, region, scopes, rate limits, terms, and write behavior before implementation.
Editorial assessment
Access-maturity dimensions
A comparative architecture lens—not a quality score, market ranking, or buying recommendation. Scale: 1–5.
Data access4
Action access4
Event access1
Identity4
Governance4
Agent access4
UI extensibility4
Portability4
Observability3
Documentation4
Proposed interfaces
What customers could build on top.
These are design proposals derived from documented access—not claims that Sitecore ships these experiences.
Single-platform patterns
- Enterprise campaign-site and personalization studio
- Campaign asset assembly room
- Brief-to-experience studio
- Content approval queue
Multi-platform compositions
- SitecoreAI / XM Cloud + CRM or campaign platform: campaign asset assembly room
- SitecoreAI / XM Cloud + work-management system + analytics or distribution platform: cross-system decision workspace
Evidence and dates
First-party references, with publisher and review dates separated
“Publisher updated” is shown only when the page exposes an update date. “BYO-UI reviewed” records when this research checked the reference. A missing publisher date is reported as missing—not replaced with the review date.
5 recorded sources
MCPRepresentative source
https://doc.sitecore.com/sai/en/users/sitecoreai/sitecore-marketer-mcp-server.html ↗Official SitecoreAI documentation confirms a first-party Marketer MCP that turns prompts into Agent API actions. Sitecore explicitly limits reliability to documented supported use cases; preserve tenant permissions and…
- Publisher updated
- Not stated by publisher
- BYO-UI reviewed
- Jul 10, 2026
Targeted first-party MCP/agent-role review; broader API inventory retained
APISource inventory
https://doc.sitecore.com/xmc/en/developers/xm-cloud/ ↗First-party API reference or API overview recorded for this platform.
- Publisher updated
- Not stated by publisher
- BYO-UI reviewed
- Jul 10, 2026
Inventory source: structurally normalized; content was not individually reopened in this pass.
Developer docsSource inventory
https://doc.sitecore.com/ ↗First-party developer documentation or platform overview.
- Publisher updated
- Not stated by publisher
- BYO-UI reviewed
- Jul 10, 2026
Inventory source: structurally normalized; content was not individually reopened in this pass.
HomepageSource inventory
https://www.sitecore.com/ ↗First-party product homepage used to confirm product identity and current positioning.
- Publisher updated
- Not stated by publisher
- BYO-UI reviewed
- Jul 10, 2026
Inventory source: structurally normalized; content was not individually reopened in this pass.
Sitecore GraphQLTargeted review
Sitecore Authoring and Management GraphQL API ↗XM Cloud exposes GraphQL authoring, management, and delivery access with endpoint-specific authentication, schema, role, and publishing-state boundaries.
- Publisher updated
- Not stated by publisher
- BYO-UI reviewed
- Jul 10, 2026
Targeted first-party access review
Verified fact
Tied to the representative first-party source or targeted access review.
Source inventory
Official links recorded for deeper research but not necessarily reopened endpoint by endpoint.
Editorial assessment
System role, maturity interpretation, and architectural boundary.
Proposed design
Interface patterns and compositions—not vendor product claims.