VendorSanity
Connects overhttp

Our grade: 4 checks

Login Login required, broad access
Upkeep Active · 2026-11
Known bugs 0 open
Connection http

Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.

Community rating

4.2 6 reviews
50% would trust it in production
  • 5 2
  • 4 3
  • 3 1
  • 2 0
  • 1 0

Trust in production

  • Trust it - 50%
  • With caveats - 50%
  • Wouldn't - 0%

100% would recommend this server

How reviewers scored it

  • Setup & docs 4.0
  • Auth experience 3.8
  • Reliability 3.8
  • Maintainer responsiveness 3.8

Why it got a B

Sanity's official server, hosted over HTTPS with no advisories on record and frequent releases (10 changelog entries in October 2026). It replaced the local @sanity/mcp-server package, which is deprecated, so don't install that. Edits normally go to drafts, but it can also publish, write straight to published for live-edit document types, make a private dataset public, add CORS origins and deploy schemas, so keep tool approval on. Its source isn't public, which costs a band on maintenance. Biggest deduction: OAuth has a single global scope and carries your whole Sanity role with no read-only mode, so use an API token with the Viewer role for read-only work.

How to connect

// Command Palette > View: Open MCP Settings > + New MCP Server (mcp.json)
{
  "mcpServers": {
    "Sanity": {
      "type": "http",
      "url": "https://mcp.sanity.io"
    }
  }
}

Is Sanity MCP Server safe?

Is Sanity MCP Server safe to use?

Sanity MCP Server grades B (solid, with minor gaps). Login is required, but access is coarse: one sign-in or key covers more than your agent needs, so grant the narrowest account you can. Upkeep is hard to verify (closed source or a single maintainer), so pin the version you tested.

Does Sanity MCP Server have known vulnerabilities?

Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.

Does Sanity MCP Server support authentication?

Yes. It requires a login, so access can be tied to a person or a scoped key.

Embed this badge

Maintain this server? Add the grade to your README.

TrustedMCP grade B

Markdown

[![TrustedMCP grade B](https://trustedmcp.io/badge/sanity-mcp.svg)](https://trustedmcp.io/servers/sanity-mcp)

HTML

<a href="https://trustedmcp.io/servers/sanity-mcp"><img src="https://trustedmcp.io/badge/sanity-mcp.svg" alt="TrustedMCP grade B" height="80"></a>

Community reviews

Eva Novak Security engineer
Trusts with caveats Recommends

Our team uses it every day

I use this almost daily. Releases come often and the changelog is clear. Sign-in flow was painless and I never had to paste a key into a config file. Hosted endpoint means no local process to babysit. I would use it in prod, but only with a human approving writes.

Used for Letting a coding agent open and triage issues

  • Setup & docs 4/5
  • Auth experience 4/5
  • Reliability 3/5
  • Maintainer responsiveness 4/5
Maya Johnson Full-stack developer
Trusts in production Recommends

Easy win for our agent setup

Simple to set up in Cursor, simple to reason about. Updates land regularly, and nothing broke when I upgraded. Scoped the token to just what the agent needs and it respected that. Good choice if you need Sanity in your agent.

Used for Automating release notes

  • Setup & docs 4/5
  • Auth experience 4/5
  • Reliability 4/5
  • Maintainer responsiveness 3/5
Sofia Rossi Staff engineer
Trusts in production Recommends

Solid and well behaved

Tried it on a side project first, then rolled it out at work. Filed an issue and got a reply within two days. The scope options are worth reading carefully, the defaults are broader than I wanted.

Used for Code review summaries for pull requests

  • Setup & docs 4/5
  • Auth experience 4/5
  • Reliability 5/5
  • Maintainer responsiveness 5/5
Oscar Lund CTO, early-stage startup
Trusts with caveats Recommends

Does what it says, no drama

Installed it on a Friday, it was part of my workflow by Monday. Nice to use something maintained by Sanity rather than a random fork. Worth it, just do not skip the hardening steps.

Used for Debugging sessions in Cursor

  • Setup & docs 4/5
  • Auth experience 4/5
  • Reliability 3/5
  • Maintainer responsiveness 3/5
Mateo Garcia Developer, healthtech
Trusts with caveats Recommends

Does the job, docs could be better

I like it, with reservations. Nothing to install, I just point the client at the URL. Auth is handled properly, and revoking access later was one click. Fine in production if you sandbox it.

Used for Pairing with Claude Code on a monorepo

  • Setup & docs 3/5
  • Auth experience 3/5
  • Reliability 4/5
  • Maintainer responsiveness 3/5
Leah Cohen Backend engineer
Trusts in production Recommends

Saves me a context switch every hour

Of the Sanity integrations I tried, this one is the most predictable. You can tell it is actively maintained, the rough edges keep getting fixed.

Used for Looking up Sanity data without leaving the editor

  • Setup & docs 5/5
  • Auth experience 4/5
  • Reliability 4/5
  • Maintainer responsiveness 5/5

Write a review

Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.

How was it overall?

Would you trust it in production?
Would you recommend it to another team?

Score the details

Setup & docs
Auth experience
Reliability
Maintainer responsiveness

Tell other teams how it went

About you