We build headless Drupal and Next.js platforms, and publish the modules and tools we make along the way.
Each module is published on drupal.org. Report bugs and request features in the project's issue queue there; the repositories here carry the code.
| Module | What it does |
|---|---|
mcp_sentinel |
Governs AI-agent access to Drupal over MCP, JSON:API and GraphQL: policy profiles, field redaction, DLP and audit logging. |
file_gate |
Gates access to private files with short-lived signed URLs or authenticated access, for decoupled front ends. |
field_guard |
Per-field access control from configuration that fails closed. |
audit_chain |
Tamper-evident, hash-chained audit logging for any Drupal module. |
menu_autopilot |
Content-driven navigation: curate the top level, and children follow published content. |
graphql_compose_codegen |
Generates TypeScript types, GraphQL fragments and React component stubs from a Drupal content model. |
postmark_webhooks |
Receives Postmark bounce, spam and delivery webhooks and suppresses mail to those addresses. |
| Repository | What it is |
|---|---|
drupal-mcp-connector |
MCP server for Drupal: JSON:API and GraphQL, governed writes, draft translations, audit reports and a Drush bridge. Issues are tracked on GitHub. |
shared-ci |
Reusable GitHub Actions workflows our repositories call. |
The organization's default contributing guide, code of conduct and security policy apply to every repository that does not carry its own.
Report security issues to security@wilkesliberty.com, not in a public issue.