Use the Webflow CLI from KosmoKrator to call Webflow tools headlessly, return JSON, inspect schemas, and automate workflows from coding agents, scripts, and CI.
Webflow can be configured headlessly with `kosmokrator integrations:configure webflow`.
# Install KosmoKrator first if it is not available on PATH.curl -fsSL https://raw.githubusercontent.com/OpenCompanyApp/kosmokrator/main/install.sh | bash# Configure and verify this integration.kosmokrator integrations:configure webflow --set access_token="$WEBFLOW_ACCESS_TOKEN" --enable --read allow --write ask --jsonkosmokrator integrations:doctor webflow --jsonkosmokrator integrations:status --json
Credentials
Authentication type: Manual OAuth tokenoauth2_manual_token. Configure credentials once, then use the same stored profile from
scripts, coding CLIs, Lua code mode, and the MCP gateway.
Key
Env var
Type
Required
Label
access_token
WEBFLOW_ACCESS_TOKEN
Secret secret
yes
Access Token
url
WEBFLOW_URL
URL url
no
API Base URL
Call Webflow Headlessly
Use the generic call form when another coding CLI or script needs a stable universal interface.
Every function below can be called headlessly. The generic form is stable across all integrations;
the provider shortcut is shorter but specific to Webflow.
webflow.webflow_list_sites
Read read
List all Webflow sites the authenticated user has access to. Returns site IDs, names, and domains needed for further CMS operations.
Create a new item in a Webflow CMS collection. Pass field data as key-value pairs matching the collection's schema. Set live to true to publish immediately.
The unique identifier of the CMS collection the item belongs to.
id
string
yes
The unique identifier of the CMS item.
webflow.webflow_create_item
Create a new item in a Webflow CMS collection. Pass field data as key-value pairs matching the collection's schema. Set live to true to publish immediately.
Headless calls still follow the integration read/write permission policy. Configure read/write defaults
with integrations:configure. Add --force only for trusted automation that should bypass that policy.