{ "schema": "varexis-public-evidence-record/0.3", "generated_at_utc": "2026-10-14T01:00:52.414Z", "record_id": "VXI-EXT-TOOL-TRUST-WEBFLOW-01-v1", "record_kind": "external_reference", "title": "Webflow MCP: Site changes and Designer dependencies", "system": "Webflow MCP", "evidence_family": "agent_tool_trust_review", "index_status": "PUBLIC_SAFE_SOURCE_REVIEW", "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY", "canonical_question": "Does keeping the Webflow Designer closed stop an agent from changing my site?", "near_questions": [ "Can an agent change Webflow while the Designer is closed?", "Does a missing Bridge connection prevent every site edit?", "Which Webflow actions need a live Designer session?", "Can my agent write site custom code?", "Does a site-review request authorise publishing changes?", "Can Webflow MCP add users or change roles?", "What happens when the agent connects to the wrong workspace?", "Does an empty interactions result prove there are no interactions?", "Which evidence should precede a CMS change?", "Can an agent read site analytics through this connection?", "Can I save the reviewed site-change boundaries?", "When should a Webflow connector permission review be renewed?" ], "supported_claims": [ { "claim": "Webflow documents that most MCP operations use its Data API without an open Designer. Only some live-session capabilities need the Bridge App. The server can change site content and design within existing permissions, so closing the Designer is not evidence of a read-only connection.", "reliance": "DOCUMENTED_CAPABILITY_ONLY" } ], "not_demonstrated_claims": [ "Verified buyer configuration or effective access rights", "Independent execution, completeness or security testing", "Vendor certification, legal compliance or guaranteed suitability" ], "public_summary": "Webflow documents that most MCP operations use its Data API without an open Designer. Only some live-session capabilities need the Bridge App. The server can change site content and design within existing permissions, so closing the Designer is not evidence of a read-only connection.", "related_record_ids": [ "VXI-EXT-TOOL-TRUST-CANVA-01-v1", "VXI-EXT-TOOL-TRUST-LAUNCHDARKLY-LOCAL-01-v1", "VXI-EXT-TOOL-TRUST-SANITY-01-v1", "VXI-EXT-TOOL-TRUST-NETLIFY-LOCAL-01-v1" ], "source_review": { "source_type": "official_external_documentation", "source_title": "Webflow MCP operations and unsupported capabilities", "source_url": "https://developers.webflow.com/mcp/reference/overview", "checked_on": "2026-10-14", "candidate_record_id": "VXI-EXT-TOOL-TRUST-WEBFLOW-01-v1", "candidate_record_sha256": "a343dc0f39f2859829ab7ce4ddb2578bbdf0ce767cf6d7cc1aab3874b89ecae6", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "answer_policy": { "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY", "bounded_answer": "Webflow documents that most MCP operations use its Data API without an open Designer. Only some live-session capabilities need the Bridge App. The server can change site content and design within existing permissions, so closing the Designer is not evidence of a read-only connection.", "required_buyer_context": "Identify the workspace, authorised sites, role, intended change and whether a live Designer capability is required.", "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state." }, "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.", "trust_profile": { "schema": "varexis-agent-tool-trust/1", "identity": { "tool": "Webflow MCP", "variant": "Main hosted MCP; beta and documentation-only servers excluded" }, "review_status": "documentation_review_only", "checked_on": "2026-10-14", "version_scope": "Dated rolling documentation snapshot; no installed or hosted runtime version independently verified.", "plan_scope": "Buyer plan, entitlement and effective configuration are not verified.", "findings": [ { "field": "operator", "label": "Publisher and operator", "status": "documented", "statement": "Webflow hosts the main MCP service.", "source_ids": [ "webflow", "webflow-auth" ] }, { "field": "purpose", "label": "Purpose", "status": "documented", "statement": "Connect assistants to site design, CMS and related management operations.", "source_ids": [ "webflow", "webflow-auth" ] }, { "field": "reads", "label": "Read capability", "status": "documented", "statement": "Reads site data and supported analytics; live visual capture needs the Bridge App.", "source_ids": [ "webflow", "webflow-auth" ] }, { "field": "writes", "label": "Write capability", "status": "documented", "statement": "Can modify content, design and custom code; some page-branch operations require Enterprise.", "source_ids": [ "webflow", "webflow-auth" ] }, { "field": "auth", "label": "Authentication", "status": "documented", "statement": "OAuth authorises site access within one workspace per connection.", "source_ids": [ "webflow", "webflow-auth" ] }, { "field": "permissions", "label": "Permission surface", "status": "documented", "statement": "Existing roles govern operations; MCP cannot change user access settings.", "source_ids": [ "webflow", "webflow-auth" ] }, { "field": "egress", "label": "Data leaving the environment", "status": "review_inference", "statement": "Site data and responses pass between Webflow and the connected assistant.", "source_ids": [ "webflow", "webflow-auth" ] }, { "field": "failures", "label": "Failure modes to consider", "status": "review_inference", "statement": "A closed Designer does not prevent ordinary API changes; unsupported features can appear absent.", "source_ids": [ "webflow", "webflow-auth" ] }, { "field": "unknown", "label": "Unknowns and applicability", "status": "unknown", "statement": "The buyer role, publishing workflow and site state have not been checked.", "source_ids": [] }, { "field": "gate", "label": "Suggested refusal or clarification condition", "status": "varexis_review_policy", "statement": "Require approval for the intended site change; do not treat closing the Designer as an access control.", "source_ids": [] } ], "evidence_sources": [ { "source_id": "webflow", "url": "https://developers.webflow.com/mcp/reference/overview", "final_url": "https://developers.webflow.com/mcp/reference/overview", "title": "Webflow MCP operations and unsupported capabilities", "checked_on": "2026-10-14", "sha256": "140312420eed616a88ad2d704587e2f851b47687d82e2ece3bf20721da02df72", "bytes": 265334 }, { "source_id": "webflow-auth", "url": "https://developers.webflow.com/mcp/reference/how-it-works", "final_url": "https://developers.webflow.com/mcp/reference/how-it-works", "title": "Webflow MCP OAuth, roles and Designer Bridge", "checked_on": "2026-10-14", "sha256": "287b3c5d4ea34f671b03c0005510e3f6aba404e01aa0b4a035e8cc2bc409fd40", "bytes": 240792 } ], "observed_tool_execution": false, "policy_basis": "Suggested VAREXIS review gates; apply the buyer's authorized task and policy. These conditions do not execute or enforce controls.", "commercial_reliance_boundary": "A source-linked review aid, not a vendor certification, security clearance or deployment assessment. Unknown does not mean false or unsafe.", "paid_value": { "decision_context": "Save the distinction between API changes, live Designer requirements and role evidence.", "free": "Complete review, practical questions, sources and limitations; may be saved locally.", "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.", "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.", "excluded": [ "Fresh vendor research", "Continuous monitoring or change alerts", "Testing the buyer configuration", "Private evidence or vendor certification" ], "integrity": "Hashes identify content versions; they do not prove truth or provide a signature." }, "revalidation": { "trigger": "Recheck when permissions, deployment, authentication, source guidance or intended use changes; a purchase does not trigger revalidation.", "specific_watch": "Recheck role grants, workspace connection and Bridge-dependent capabilities." }, "change_history": [ { "version": 1, "date": "2026-10-14", "change": "Initial documentation review; no earlier vendor assessment claimed." } ] }, "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.", "service_route": { "request_guide": "/varexis-index/request.html", "request_workflow": "/varexis-index/request-workflow.json", "service_id": "single_request", "service_routes_url": "/varexis-index/service-routes.json", "payment_required": true, "availability_endpoint": "/api/index/capabilities", "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED", "checkout_url": "/index-access" }, "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.", "human_page": "/varexis-index/catalog.html#webflow-mcp-design-publish-trust", "machine_readable_record": "/varexis-index/records/webflow-mcp-design-publish-trust.json" }