Ai — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Ai (MCP Server) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<p align="center"><img src=".github/cover.png" alt="Contentrain — content governance for teams and AI agents" width="100%"></p>
Website · Docs · Discord · Twitter · LinkedIn
Extract, govern, and ship structured content from your codebase.
Contentrain is a content governance ecosystem for teams and AI agents. Agent generates. Human approves. Git records every change.
This repository holds its open-source tools (MIT, no account needed): the MCP engine, CLI, query SDK, rules, skills and types, plus the open packages of the WordPress migration pipeline (wp-import, emitter-astro, verify, astro-kit, decide). They help teams turn hardcoded UI text, docs, and structured content into a governed, reviewable content layer that lives in Git as structured JSON and Markdown. Agents can extract, create, translate, and update content, while Contentrain enforces schema, Git review, and portable file output.
Agent extracts or updates content → Contentrain standardizes → Human reviews → Any platform consumesnpx contentrain init # create .contentrain/ workspace
npx contentrain serve # open the local review UIThat's it. You now have a governed content workspace with models, validation, review branches, and a local UI — no account, no cloud, no proprietary content format.
Start here:
Before: Hardcoded strings scattered across your codebase — no structure, no translations, no review.
export default function Hero() {
return (
<section>
<h1>Welcome to our platform</h1>
<p>Start your free trial today</p>
<button>Get Started</button>
</section>
)
}After: Content lives in .contentrain/, typed and structured. Source files use i18n keys.
export default function Hero() {
const t = useTranslations()
return (
<section>
<h1>{t('hero.title')}</h1>
<p>{t('hero.subtitle')}</p>
<button>{t('hero.cta')}</button>
</section>
)
}// .contentrain/content/marketing/hero/en.json
{
"cta": "Get Started",
"subtitle": "Start your free trial today",
"title": "Welcome to our platform"
}The normalize flow extracts strings, creates models, and patches your source files — all through reviewable git branches.
This is the strongest entry point into the product:
take the content chaos already in your codebase and turn it into a governed, reviewable content layer.
┌─────────────┐ ┌──────────────────┐ ┌──────────────┐
│ AI Agent │────▶│ MCP (23 tools) │────▶│ .contentrain/│
│ (decides) │ │ (enforces) │ │ (stores) │
└─────────────┘ └──────────────────┘ └──────┬───────┘
│
┌──────────────────┐ │
│ Review UI / Git │◀─────────────┘
│ (human approves)│
└──────────────────┘| Kind | What it stores | Storage | Example |
|---|---|---|---|
| Collection | Multiple typed entries | JSON object-map | Blog posts, products, team |
| Singleton | Single entry per locale | JSON object | Hero section, site config |
| Document | Markdown + frontmatter | .md files | Docs, articles, changelog |
| Dictionary | Flat key-value strings | JSON flat map | i18n translations, UI labels |
27 field types (string, email, url, image, relation, array, object, markdown, ...) with built-in validation.
Content is plain JSON and Markdown. Any language reads it directly.
For TypeScript projects, generate a typed SDK:
npx contentrain generateimport { query, singleton, dictionary, document } from '#contentrain'
const hero = singleton('hero').locale('en').get()
const posts = query('blog-post').locale('en').include('author').all()
const labels = dictionary('ui-labels').locale('tr').get('auth.login')
const article = document('docs').locale('en').bySlug('getting-started')Works with Nuxt, Next.js, Astro, SvelteKit, Vue, React, Node, Go, Python, Flutter, and 20+ stacks.
This repo ships 16 Agent Skills — reusable workflow procedures that any AI coding agent can load on demand.
Install all skills to your agent:
npx skills add Contentrain/ai/packages/skillsOr install a specific skill:
npx skills add Contentrain/ai/packages/skills --skill contentrain-normalizeSkills work with Claude Code, Cursor, Windsurf, GitHub Copilot, OpenAI Codex, Gemini CLI, and 40+ other agents.
See AGENTS.md for the full skill catalog and agent guidance.
| Package | npm | Role |
|---|---|---|
@contentrain/mcp | 23 MCP tools + stdio / HTTP transport + Local / GitHub / GitLab providers | |
contentrain | CLI + Serve UI + MCP stdio entrypoint | |
@contentrain/query | Generated TypeScript query SDK | |
@contentrain/types | Shared type definitions + constants | |
@contentrain/rules | Agent quality rules for IDE integration | |
@contentrain/skills | Workflow procedures + framework guides | |
@contentrain/wp-import | WordPress WXR / REST → RawIR → .contentrain store | |
@contentrain/emitter-astro | ProjectIR → a complete Astro project | |
@contentrain/verify | SEO, indexing, link and asset gates for a built site | |
@contentrain/astro-kit | Copy-in Astro components + catalog + builder mapping tables | |
@contentrain/decide | Typed decisions — rule first, then Jev, then Claude Haiku — cached, budgeted, audited |
Production-ready templates with Contentrain content models, generated SDK client, and framework-specific patterns:
| Template | Framework | Use Case |
|---|---|---|
| astro-blog | Astro | Blog / editorial |
| astro-landing | Astro | Landing page |
| next-commerce | Next.js | E-commerce storytelling |
| next-multi-surface-saas | Next.js | Marketing + app + docs unified |
| next-saas-dashboard | Next.js | SaaS dashboard UI copy |
| next-white-label-portal | Next.js | White-label / multi-tenant |
| nuxt-admin-console | Nuxt | Admin console / operations |
| nuxt-saas | Nuxt | SaaS marketing site |
| sveltekit-editorial | SvelteKit | Editorial / publication |
| vitepress-docs | VitePress | Documentation site |
Each template is a GitHub template repo — click "Use this template" to start.
templates/astro-starter lives in this repository: the base a WordPress migration starts from — posts, pages, archives and permalinks, SEO, RSS, sitemap, search, Studio forms and comments, Gutenberg block styles — and it passes its own gates (astro check, knip, build + Pagefind, built-site checks) with no content. node scripts/starter-gates.mjs runs them on a standalone copy; CI runs them with the SDK at HEAD, empty and with the fixtures in templates/fixtures/ (wp-demo and others). The starter's own CI, which a delivered site keeps, adds Lighthouse.
npx contentrain init # initialize project
npx contentrain setup # configure the MCP server and rules for your IDE
npx contentrain import <wxr-or-url> # import a WordPress site into .contentrain
npx contentrain serve # local review UI (port 3333)
npx contentrain serve --stdio # MCP over stdio for IDE agents
npx contentrain validate # check content health
npx contentrain generate # generate typed SDK client
npx contentrain status # project overview
npx contentrain doctor # setup health check
npx contentrain reconcile # merge a diverged base branch, content-aware
npx contentrain studio login # authenticate with Studio
npx contentrain studio connect # connect repo to Studio projectContentrain has four parts. This repository is the first.
| Part | What it does | License |
|---|---|---|
| Open-source tools (Contentrain/ai, docs) | MCP engine, CLI, query SDK, normalize flow, rules, skills and types, plus the open WordPress migration packages. Developers and agents pull content out of code and structure it in their own repository. | MIT |
| Studio (Contentrain/studio, studio.contentrain.io) | The team operating surface for governed content: structured editing, review, roles and Git-backed operations. Media, CDN delivery, APIs and remote MCP (MCP Cloud) depend on plan and deployment. Managed plans or self-hosted. | AGPL-3.0 core, separately licensed ee/ |
| Migrate (migrate.contentrain.io) | A paid service that moves WordPress sites to Astro, with their content and template structure. | Hosted service |
| Bridge (Contentrain/wordpress-bridge, WordPress.org) | A free WordPress plugin that exports posts, pages, custom fields and interface text as a validated Contentrain store (JSON + Markdown), as a ZIP or to your own GitHub repository. | GPL-2.0-or-later |
pnpm install && pnpm build && pnpm test
pnpm lint # oxlint, warnings treated as errors
pnpm docs:check # the docs must not state a number the code disagrees withpnpm docs:check runs three checks, all needing pnpm build first:
from the packages that own them and compares every place the docs, this README and AGENTS.md state one.
@contentrain/* import in a documented example mustname a real export, and no example may mix CommonJS with a top-level await (a shape that runs in no module system at all).
packages/mcp/server.json (the MCP Registry manifest)must name the current @contentrain/mcp version.
The facts and examples checks self-test against real defects from this repo's history before they run, so a check that stops catching fails loudly instead of passing silently.
See RELEASING.md for the versioning and publish workflow.
If Contentrain AI is useful to you, consider giving it a star — it helps others discover the project.
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.