Why this exists. Most ways of connecting an AI to Joomla run a script on each person's computer: ten sites, ten scripts to keep running. MCP for J makes the site itself the server. Install it once, and any AI app anywhere connects with the site's address and a login.

What's in the package. One package installs four parts, all enabled automatically:

• the component, which is the MCP server, permission checks, sign-in, activity log and admin screens;
• the Web Services plugin, which creates the endpoint address;
• the System plugin, with the 93 built-in tools;
• the OAuth authentication plugin.

What the AI can do. 93 built-in tools in 15 groups: articles, categories, tags, menus, modules, custom fields, users and API tokens, permissions, extensions and plugins, templates, languages, Schema.org / SEO, system tasks, Joomla update, and admin-menu presets. Every tool describes itself to the AI app, so there's nothing to configure.

Connecting. Three ways, from the Dashboard:

1. Log in. Switch on OAuth sign-in, paste the site's address into the app, log in and click Allow. This is the only way ChatGPT and claude.ai can connect.
2. Paste a setup prompt into an AI app that can run commands.
3. Paste a ready-made config into the app's settings.

Step-by-step instructions for each app are in the documentation.

Permissions and security. The AI can never do more than the Joomla account it acts for. Super Users work immediately. Other groups need Joomla's Web Services Login permission, plus MCP for J's own Use and Write permissions, which are set in Options → Permissions. Five tools that can change who has power over the site are Super-User-only: installing extensions, changing permissions, enabling or disabling extensions, changing plugin settings, and applying Joomla updates. Read-only mode limits the endpoint to tools that only read. Deletes go to the trash first. The activity log records every tool call, but never tokens or passwords.

Add-ons. Browse MCP Add-ons installs tools for specific extensions, such as AcyMailing, Akeeba Backup, Community Builder, Convert Forms, DPCalendar, J2Commerce, JCE and VirtueMart. Free add-ons install with one click. Pro add-ons for commercial extensions are available with a Cybersalt membership. The add-ons are built independently; you need the extension itself from its vendor.

What contacts cybersalt.com. The add-on catalog contacts cybersalt.com when you browse it; linking a Cybersalt account sends your domain and email; the MCP endpoint itself never calls home. Updates come through Joomla's normal update server.

Joomla 5 and 6, PHP 8.2+. GPL-2.0-or-later. The core is free and complete: no licence key, nothing held back.

Current release: 2.9.1
Documentation: https://docs.cybersalt.com/extensions/mcp-for-j
Changelog: https://docs.cybersalt.com/extensions/mcp-for-j/changelog