CaveCMS
How-to

How to Edit Your Website with AI Agents

What an AI CMS really is, and how to let Cursor, Claude Code, or Codex edit your live site safely over a real HTTP API.

Derrick Siawor

Derrick Siawor · Maker of CaveCMS

· Updated · 3 min read

For years, "AI website builder" meant a tool that generated a site once and then left you to edit it by hand. That's changing. The genuinely useful capability in 2026 is letting an AI agent edit your real, live website, safely, over an API, the same way a developer would. This guide explains what an AI CMS actually is, how agent editing works, and how to set it up. For the broader context, see the complete guide to self-hosted CMS platforms.

What "AI CMS" really means

There are two very different things people call AI in a CMS:

  1. A writing assistant. It helps you draft and polish copy inside the editor. Useful, common, and a nice convenience.
  2. An editing agent. An AI coding assistant (Cursor, Claude Code, Windsurf, Codex) that connects to your site's API and makes real changes: updating a page, adding a section, changing your branding, publishing.

The second is the leap. Instead of you translating "make the pricing section clearer" into a dozen manual edits, you tell your assistant, and it does the work directly against your site.

How agent editing works

Under the hood it's refreshingly boring, which is exactly what you want for something touching your live site:

  • Your CMS exposes a real HTTP API: authenticate with a token, read your content, and edit a whole page in one request.
  • You mint a scoped, revocable token so the agent can only do what you allow, and you can cut off access instantly.
  • You point your AI tool at the site with a small config file (an AGENTS.md) that tells it how your API works.
  • The agent reads the current page, proposes and applies edits, and you review the result on your real site.

Because it's a standard API with scoped tokens, the agent never gets more access than you grant, and every change is something you can see and roll back.

Why this matters

  • Speed. "Update the hero headline and publish" becomes one sentence instead of a sequence of clicks.
  • Plain language. You describe the outcome; the agent handles the mechanics.
  • Safety. Scoped tokens and review mean the AI operates inside guardrails, not loose on your whole account.
  • It's still your site. The agent edits content through the API; it doesn't own anything. You can revoke the token and keep working by hand.

This is only possible when the CMS treats programmatic editing as a first-class feature. Many platforms bolt on an AI plugin; far fewer expose a real API designed for agents. It's one of the clearest differences in CaveCMS vs WordPress.

Setting it up with CaveCMS

CaveCMS was built for this workflow:

  1. In your admin, go to Settings → API Tokens and mint a scoped token.
  2. Add an AGENTS.md to your project so your AI tool knows how to talk to the API.
  3. Point Cursor, Claude Code, Windsurf, or Codex at your site and describe the change you want.

The full walkthrough (what AGENTS.md contains, how to mint a token, and how to make your first change by prompt) is in the AI agents documentation, and the complete endpoint reference lives in the API docs. Everything is part of the product; agent editing isn't a paid add-on. You can see where it fits among the rest of the built-in features.

The takeaway

An AI CMS worth the name doesn't just write words for you; it lets a trusted agent edit your real site, over an API, within limits you set. That's a faster, calmer way to run a website, and it keeps ownership exactly where it belongs: with you. Get started to set up a site you can edit by hand or by AI on your own server.

Beautiful sites anyone can edit.

Pick a template and have a real CaveCMS site live in about twenty minutes.