The CMS That Ships As a Single Binary

Open-source headless CMS focused on user experience and content flexibility.

Website • About • Features • Getting Started • Why This?

---

⚠️ This project is still under active development.

What Is This?

A modern content management system that gives you complete control over your content without forcing you into a specific frontend technology. Define your content structure, manage multiple websites, and deliver content anywhere via API.

The entire system ships as a single binary. One file runs the admin dashboard, REST API, GraphQL endpoint, and gRPC services. No dependencies. No containers. No complex infrastructure.

---

Features

🏗️ Content Modeling That Fits Your Data

Build custom content types through an intuitive interface. Whether you need blog posts, product catalogs, documentation pages, or landing pages, you define the structure and the system handles the rest.

🌐 One CMS, Multiple Sites

Manage content for multiple websites or applications from a single dashboard. Each site stays isolated with its own content, media library, and user permissions.

🚀 API-First by Design

Your content is instantly available via REST, GraphQL, gRPC, and MCP (Model Context Protocol) APIs. Build websites, mobile apps, or any digital experience using the tools and frameworks you prefer.

📁 Media Management Built In

Upload, organize, and serve images and files with automatic thumbnail generation. Works with local storage or connect your own S3-compatible storage.

🔐 Secure & Scalable

Role-based access control, JWT authentication, and rate limiting included out of the box. Whether you're running a personal blog or a multi-tenant platform, the security model adapts to your needs.

💻 Modern Admin Dashboard

A clean, fast interface for content editors and administrators. Rich text editing, media browsing, content previews, and user management—all in one place.

---

Getting Started

Run It

bun run build
./target/release/cms

Visit http://localhost:3000 and log in with:

• Username: admin
• Password: admin

Change the default password after your first login.

Access Your Content

Endpoint	What It Does
/api/v1/	REST API for your content
/api/graphql	GraphQL endpoint
/api/v1/docs	Interactive API documentation
port 50051	gRPC endpoint
/mcp	MCP Streamable HTTP endpoint

---

MCP over stdio

Run a standalone MCP process for clients that launch local stdio servers:

CMS_MCP_TOKEN=cms_site_... cms mcp stdio

The command connects to an existing CMS database and never starts HTTP/gRPC listeners, seeds users, creates a SQLite database, or runs migrations. Run cms serve first when the database schema needs initialization or migration. MCP protocol messages use stdout; structured process logs use stderr.

Because the process is launched by the MCP client from an arbitrary working directory, it does not rely on a .env in the current directory. The database path and the JWT_SECRET/HMAC_SECRET it needs to verify the token are read from the CMS home directory (~/.cms, see Data directory) that cms serve initialized. The client only needs to supply CMS_MCP_TOKEN (and CMS_HOME if you moved the home directory):

// Example MCP client config
{
  "command": "cms",
  "args": ["mcp", "stdio"],
  "env": { "CMS_MCP_TOKEN": "cms_site_..." }
}

Data directory

All runtime files live under a single home directory so a fresh install works from any working directory. The location is $CMS_HOME when set, otherwise ~/.cms (resolved cross-platform — same layout on Windows, macOS, and Linux):

~/.cms/
  config.toml     # non-secret configuration (cms config init writes here)
  secrets.toml    # auto-generated JWT_SECRET/HMAC_SECRET (0600 on unix)
  cms.db          # default SQLite database (+ -wal / -shm)
  logs/           # rolling logs when [log] output = "file"
  storage/        # default filesystem storage for uploads

cms serve creates this directory on first run and generates secrets.toml if absent. Environment variables (DATABASE_URL, JWT_SECRET, HMAC_SECRET, STORAGE_FS_PATH, S3 settings, …) still override these defaults.

Why This CMS?

One File, Everything Included

Most CMS platforms require databases, web servers, reverse proxies, and container orchestration just to get started. This CMS compiles to a single executable that embeds the dashboard, APIs, and documentation site. Copy one file to your server and run it.

Developer Experience First

Built by developers, for developers. The API is predictable, the documentation is interactive, and the codebase is designed to be extended and customized.

Database Flexibility

Use SQLite for simple deployments or connect to PostgreSQL or MySQL for production workloads. The same binary works with all three.

Built for Teams

Multi-site support and role-based permissions mean your content team, developers, and stakeholders can all work in the same system without stepping on each other.

---

Development

Clone this repository

git clone https://github.com/velopulent/cms

# Run development server
cd cms
bun run dev

Visit localhost:3000 to access the backend, localhost:5173 to access the React Dashboard.

---

License

AGPL v3