Connect Webflow to Microsoft Copilot via MCP

💡 No install? Use cloud.anythingmcp.com directly. Sign in, click Connectors → Webflow, paste your credentials, mint an MCP API key and you're done. No Docker, no git clone, no local server.

Webflow + Microsoft Copilot

Let your AI work on a Webflow site: read the site, its pages and SEO settings, CMS collections and items, forms and submissions, assets, and e-commerce products and orders; draft and update CMS items, and publish items or the whole site once you agree. Uses a site API token.

Prerequisites

See the full setup instructions baked into the connector (visible in the in-app store when you select the connector). The required environment variables for this connector are:

WEBFLOW_API_TOKEN

Step 1 — Get credentials

1. Sign in at https://webflow.com/dashboard, hover the site and click its gear icon to open Site settings. You need to be a site administrator.
2. In the left sidebar choose Apps & integrations, scroll down to API access at the bottom of the page and click Generate API token.
3. Name the token (for example "AnythingMCP") and choose these scopes:
   • sites:read, sites:write (to publish the site)
   • pages:read, pages:write (for page settings)
   • cms:read, cms:write (to create, change, publish, unpublish or delete items)
   • forms:read, assets:read
   • ecommerce:read (only on an e-commerce site)
4. Click Generate token, copy the token right away and paste it into WEBFLOW_API_TOKEN without the word Bearer, then install the connector.
5. Start with webflow_get_token_info: it shows the scopes and the site id the token grants. Then webflow_list_sites returns the site's details; its id is the site_id the other tools take.

Scopes: scopes cannot be added to a token later. If a tool answers 403 missing_scopes, generate a new token with the missing scope and paste it into WEBFLOW_API_TOKEN.

Read-only setup: tick only the :read scopes and switch off webflow_publish_site, webflow_update_page_settings, webflow_create_item, webflow_update_item, webflow_publish_items, webflow_create_live_item and webflow_update_live_item.

Switched off at install: webflow_delete_item, which deletes a CMS item for good, and webflow_unpublish_live_item, which takes a published item off the website (it stays in the CMS as a draft). Turn them on only if the AI should delete or unpublish items.

One site per token: a site token only reaches the site it was generated on. A site can have up to 5 tokens, and a token expires after 365 days without use. For several sites, install the connector once per site.

Plans: the API works on every site plan, the free Starter plan included. The CMS tools need a plan with the CMS: Starter includes a small one (20 collections, 50 items), Basic none. On Starter, Webflow may refuse publishing single items (webflow_publish_items, webflow_create_live_item, webflow_update_live_item, webflow_unpublish_live_item), as it lists this as a feature of the paid CMS plans: publish the whole site instead. Products and orders need an e-commerce site plan; other sites answer 409.

Staged and live content: every CMS item has a staged version (what editors see) and, once published, a live version on the website. webflow_create_item and webflow_update_item change only the staged content, so nothing changes on the public site; new items are drafts. webflow_publish_items puts chosen items live, and webflow_publish_site publishes every staged change of the site, pages and items. webflow_create_live_item and webflow_update_live_item write straight to the public site. Marking a published item as a draft does not take it off the site; archiving it does, at the next site publish. webflow_list_items shows the staged items, webflow_list_live_items what visitors see.

Publishing is public: confirm first. Before the AI publishes the site or items, writes live items or changes page settings (titles, slugs, SEO and Open Graph texts with webflow_update_page_settings), it tells you exactly what will change on the website and waits for your yes. Webflow accepts one successful site publish per minute.

Field data: an item's content is keyed by each field's slug from webflow_get_collection, not by its display name; name and slug are required for a new item. Rich text is HTML, a reference takes an item id, and a new image is a public URL (at most 4 MB) given as {"url": "https://..."}. Changing an item's slug breaks links to the old URL.

Locales: on a localized site webflow_get_site lists the locales. Without one, the tools use the primary locale.

Rate limits: per token, 60 requests a minute on the Starter and Basic site plans, 120 on the CMS, e-commerce and Business plans. Over the limit Webflow answers 429 with a Retry-After header, usually 60 seconds: wait and try again. List tools return at most 100 entries per page.

Common errors: 400 names the field at fault: an unknown field slug, a value in the wrong format, or a missing name or slug. 401 means the token is wrong, revoked or expired: generate a new one under Site settings → Apps & integrations → API access. 403 (missing_scopes or forbidden) means the token lacks a scope (generate a new token with it) or the site plan does not include the feature. 404 is a wrong id, or an id from another site. 409 means the request clashes with the site's state, for example e-commerce calls on a site without e-commerce. 429 is the rate limit: wait for the Retry-After time.

The connector does not create or change collections and fields, does not edit page content, components or custom code, does not upload or delete assets, does not change form submissions or edit products and orders, and does not handle webhooks, comments or analytics.

Step 2 — Install the adapter

curl -fsSL https://raw.githubusercontent.com/HelpCode-ai/anythingmcp/main/docker-compose.quickstart.yml -o docker-compose.yml
printf 'JWT_SECRET=%s\nENCRYPTION_KEY=%s\n' "$(openssl rand -hex 32)" "$(openssl rand -hex 32)" > .env
docker compose up -d

Step 3 — Add the connector in Microsoft Copilot

Your server URL: in AnythingMCP, open MCP Servers → the server this connector is on, and copy its URL (https://cloud.anythingmcp.com/mcp/…). Use it wherever this guide shows YOUR_SERVER_ID.

Microsoft Copilot uses MCP servers through agents built in Copilot Studio: you add AnythingMCP to an agent as a tool, then publish the agent to Microsoft 365 Copilot and Teams. Copilot Studio connects from Microsoft's cloud over Streamable HTTP, which AnythingMCP supports.

1. In Copilot Studio, open your agent (or create one), go to Tools and choose Add a tool → New tool → Model Context Protocol.
2. Enter a Server name (for example AnythingMCP), a Server description that says what the connector does, and the Server URL https://cloud.anythingmcp.com/mcp/YOUR_SERVER_ID. Copilot Studio uses the description to decide when to call the server.
3. Under authentication, choose API key, set Type to Header and the header name to X-API-Key, then select Create.
4. In Add tool, choose Create a new connection, paste an MCP API key from AnythingMCP (MCP Servers → your server → API keys) and select Add to agent.
5. Try it in the agent's Test pane: ask for something that needs the Webflow tools.
6. Select Publish, then Channels → Microsoft 365 and Microsoft Teams, keep Make agent available in Microsoft Copilot selected and choose Add channel. See agent in Teams installs it for you; in Microsoft 365 Copilot, type @ and pick the agent.

Prefer per-user sign-in? Choose OAuth 2.0 → Dynamic discovery instead of an API key: each user then signs in to AnythingMCP the first time the agent calls it.

Self-hosting? Use your instance's public HTTPS address instead of https://cloud.anythingmcp.com. Copilot Studio connects from Microsoft's cloud, so localhost does not work.

Available tools

Example prompts

• "List the pages of our Webflow site that have no SEO title or meta description."
• "Which blog posts in the CMS are still drafts, and when were they last updated?"
• "Show me this week's contact form submissions with name, company and message."
• "Create a new post in the Blog collection titled "Spring product update" with a short summary, as a draft only. Do not publish it."

FAQ

Which Copilot is this for? Microsoft 365 Copilot at work, through agents built in Copilot Studio. The Microsoft Copilot app for personal accounts has no option to add your own MCP server.

What do I need? A work account with access to Copilot Studio (a license or a trial) to build the agent. People who use it in Microsoft 365 Copilot or Teams need access to the agent: share it with them, or ask an admin to publish it to the organization. If your organization applies data policies to Power Platform connectors, they cover MCP servers too.

The agent doesn't call the tools. Check that the header name is exactly X-API-Key and that the key belongs to the same MCP server as the URL, and make the server description specific: Copilot Studio uses it to decide when to call the server. Publish the agent again after each change; in an open chat, type "start over" to get the new version.

Next steps

• Connector landing page
• Connect to Claude
• Connect to ChatGPT
• Connect to Cursor
• Connect to Gemini
• Connect to Meta Muse