MCP server
Agent workflow
The server states its own expectations on connect. They come down to: read before you write, carry the revision, and audit afterwards.
The order
- list_flow_sitesFind the site. Never assume an id from an earlier session.
- get_flow_webflow_rulesFetch the enforced rules rather than working from a remembered copy.
- Read what you are about to change
get_flow_page,get_flow_sectionandget_flow_design_tokensreturn current content and the revision you will need. - WritePass the revision you just read. Section writes are checked against the rulebook before they are stored.
- audit_flow_siteConfirm the whole site still passes, and check token consistency.
Revisions are not optional
Every update and delete takes the updated_at revision of the thing it is changing. A write carrying a stale revision is refused.
This is what makes it safe to have an agent and a human editing the same site: the second writer is told their view is out of date instead of silently overwriting the first.
Editing elements rather than whole sections
Rewriting a whole section to change one button is wasteful and risks collateral changes. For precise edits:
inspect_flow_sectionfirst — it returns stable selectors and the element structure.- Then
add_flow_element,update_flow_elementorremove_flow_elementagainst one exactly-matched selector.
Each of those can also replace the section's complete CSS and JavaScript in the same call, which is how you keep styles in step with a markup change.
When a write is rejected
A rule violation returns HTFLOW_WEBFLOW_RULES_VIOLATED and the section is not saved. The right response is to regenerate the section so it satisfies the rules — not to retry the same source, and not to work around the check.