Version 17 looks and feels like the friendly Backoffice Umbraco is famous for.
But since Umbraco Version 13, a lot has changed underneath.
Version 17 is not only faster, more secure, and more stable; it is an agent-ready enterprise CMS, redefining how content can be created and managed from the Backoffice.
In this article, Thom Sanders, Cogworks AI and Automation Architect, and I cover:
- What Umbraco.AI is
- How it works out-of-the-box
- Features you can add to empower your content teams
- Adding your first Agents and using Copilot, Prompts and Automate
This isn't a technical tutorial, but we cover the initial Umbraco AI setup so you can see how the underlying "AI mechanics" work. We aim to show you how easy it is to apply precise content and governance rules once, so your teams can easily create on-brand content and seamless operations at scale.
What is Umbraco AI?
Umbraco AI is an installation you can add to Umbraco V17 and above. It is basically a new tab in your backoffice that controls the foundation for every AI feature, so you’re not stitching separate AI plugins together and hoping it works. Every rule and permission lives in one place, so you always know exactly where to find it.
When you first log in, Umbraco AI is yours to configure.
This is the foundation everything else in this introduction sits on. You install it and get a new AI section, including connections, Profiles, Contexts, Guardrails, and Settings you can adjust.
On its own, Umbraco AI doesn't do much (it's the plumbing, not the tap), so you’ll need to add features to it, such as:
- Umbraco Agents — your own configurable AI helpers, built on top of Umbraco AI.
- Umbraco Copilot — a chat assistant for editors in the Umbraco backoffice.
- Umbraco Prompts — one-click AI assistance for individual Umbraco CMS fields
- Umbraco Automate — automated workflows that run when something happens (similar to tools like n8n or Make, but built specifically for Umbraco).
There's loads more available from the Umbraco Marketplace. Your agency or developers can help install Umbraco AI and recommend the right features for your use case. If you would like to know more about the features you can access with Umbraco AI, talk to one of our Umbraco experts.

Setting Up User Access in Umbraco 17
With your features added, it's time to set up user access.
In large organisations, some users need to set the guidelines and others follow them. You might not want every editor to have access to AI and automation tools; that depends on your setup, how experienced your editors are, and how much risk your organisation is comfortable with.
You might want to create an "AI Managers" group, for example, that only gives access to the AI section, then add the right people to it. It's a small step, but it means AI settings stay with the people accountable for brand and compliance.
Setting Up Connections
Like everything in Umbraco, Umbraco AI is flexible.
One of the first things you do is select your connection. This is the AI provider your organisation trusts and has vetted, rather than being locked into whichever one a plugin happens to pick for you.
You may already have an approved AI vendor, such as Anthropic or Microsoft Azure AI Foundry, an existing contract, or rules about where your data is stored, or you may simply want to be ready for when the AI landscape changes. Umbraco AI lets you do that.
A connection is simply the link between Umbraco AI and a model provider. Everything else (Profiles, Agents, Prompts) runs on top of it.
You set up one connection per provider, and Umbraco AI lets you use more than one at a time. You can use different providers for different jobs: a cheaper, faster model for routine internal tasks, and a stronger model for client-facing content that needs more care.
In this example, we used Anthropic's Claude, which only requires an API key. Other providers take a bit more setting up; for example, Microsoft Azure AI Foundry is a bit fiddly to fill in, but if your organisation already uses that system, it'll look familiar.

Creating a Profile
Once you have created a connection, you can create a profile in Umbraco AI. This means Copilot, Prompts, and Agents can all use the same approved setup, instead of each needing its own. We called ours "General", a broad, all-purpose profile that other features plug into by default.
Key settings to note:
Model — you select from whichever models your connection supports (we picked a Claude Sonnet model).
Temperature — Thom's recommendation: reduce this down, just to keep the model on track and avoid hallucinations.
System prompt — you can set one here, but as the next section shows, most of this instruction lives in Context instead.

Setting Up Context for Brand Voice and Compliance
Context in Umbraco AI is where your brand voice and compliance language are enforced automatically on every AI request. In Umbraco 17, Context sits behind Umbraco Copilot, Prompts, and any Agents you set up.
You can mark a Context item as always included (added to every request) or on demand (left for the agent or LLM to fetch as needed). For the core rules you want followed everywhere, always-included is the way to go.
Within your Context, you can set up content rules.
For our example, our rules were:
•Always use British English spelling and grammar
•No emojis
•Rules for specific content fields
•Image rules: always use WebP format, use descriptive file names, keep file size under a set limit
•Always include FCA-required risk wording where relevant
That’s it. Set them once, and these rules are picked up automatically by everything you choose to add later, such as Umbraco Prompts, Umbraco Copilot, Umbraco Agents and Umbraco Automate.

Setting Up Guardrails
Once you've set up Context, it's time to get some Guardrails in place.
AI models can sometimes get things wrong, or "hallucinate", so Guardrails give you a way to catch that before it reaches a reader.
Here you can also enforce the things your organisation legally cannot say (FCA-restricted claims are a good example). Guardrails check what goes into the AI and what comes back out, and they can block, warn, or redact when something breaks the rules.
Each Guardrail runs at a specific point:
Pre-generate — checks the editor's request before it goes to the model.
Post-generate — checks the model's response before it goes back to the editor.
Testing the strength of Gaurdrails
In our demo, we set our Guardrail to "block" and set it for "pre-generate"
We then asked Copilot (which I'll introduce in a moment) to take the current page, change everything to US English, and sprinkle it liberally with swear words. It refused to do it. That's a relief 😅.

Configuring Default Settings in Umbraco AI
With Umbraco AI, there's never a moment when an AI feature is quietly running on an unconfigured, ungoverned model.
In Settings, it's a good idea to set up a default chat profile. This is what Copilot uses if nothing else has been set up. It matters because it closes a gap: even an interaction nobody set up on purpose still runs through your approved connection, your chosen model, and your guardrails, so nothing runs unmanaged by default.

Setting Up Agents in Umbraco AI
Once you have Connections, Profiles, and Context in place, you can begin creating your actual Umbraco Agents. This is where you use Umbraco 17's agent-ready architecture to build AI helpers with specific instructions and permissions.
Using Agents with Umbraco Copilot
In our demo, we created two Agents, Bob and Dave, and put them to work in Umbraco Copilot to show how permissions affect what an Agent can do at a basic level.

Agent 1: Bob "The Suggestor"
First, we made Bob, a simple example of a suggest-only Umbraco Agent. We wanted him to be like a newer member of the content team, or an external contributor wanting a second opinion on a page before it's published.
In our demo, Thom has full AI configuration control (as an AI Manager might have), so he handled adding Bob's instructions and permissions. I then logged into the CMS as a content editor and asked Bob to suggest some content changes for the page.

Bob came back with a long list of highly relevant issues, thanks to the brand voice Context we added during setup.
Most importantly, Bob's permissions are restricted, so you can action the list at your own pace. This gives content teams a completely risk-free way to get a second opinion, with no chance of an unapproved change going live, without having to switch between different tabs.

Agent 2: Dave "The Changemaker"
Next, Thom set up a second Agent, Dave. Where Bob only flags issues, Dave can act on them, updating any allowed fields like the title, subtitle, meta description and body copy.
Dave uses the same profile as Bob, and largely the same setup, but with different instructions and permissions: he has read and write access.
This kind of Umbraco Agent suits teams who trust their Agent's judgement, want to move faster through higher volumes of content, and are happy with a quick confirm-before-you-publish step.

Logged in as a content editor, I asked Dave, "Can you make changes to anything you see that is incorrect on this page?"
He came back with a long list of issues, removing superlatives and absolute claims like "always" and "guaranteed" — crucial for our financial services clients. Dave updates the title, subtitle, meta description and main content directly in the backoffice.
All that's left for me to do is save and publish. Easy.
The answers you get back from Umbraco Copilot are very specific. That's down to the setup we did earlier in Profile and Context, so your Umbraco Agents base their answers on your actual rules, rather than a generic "I've looked at this page, here's what I think."
Understanding Umbraco AI Logs and Governance
By now you're probably wondering about logs and governance. By and large, a company remains responsible when AI goes wrong, in the same way you'd be responsible for a mistake made by an employee, even where a third party like Umbraco or Anthropic built or supplied the tool.
Umbraco 17 helps make AI governance easier to manage. In the backoffice, every AI interaction is logged, so you can see what the Agent was asked to do and what it produced.

The logs and analytics let you regularly check how your AI Agents are performing, catch problems early, add additional Guardrails if needed, and confirm they're delivering the right results and behaving as expected.
You can see which model was used, how many tokens it used, the exact prompt it received, your content rules, and exactly what the Agent did with it - exactly the kind of detail regulated organisations and auditors expect to see when something needs reviewing. Super handy for keeping an eye on cost for when you’re running AI at scale.

Umbraco Prompts for Content Editors
Next: Umbraco Prompts. This is such a useful feature; it lets you complete small, one-click AI tasks right on the fields that need them most, so editors don't have to open a full Umbraco Copilot chat every time.
As an Umbraco content editor myself, this is a personal favourite, as it's a quick way to keep content on-brand, and it's great for the small jobs that are easy (and commonly) missed: a missing meta description, alt text, or a subtitle that isn't hitting the mark.
Setting up an Umbraco Prompt to generate alt text
To show you how it works, we set up a prompt in the backoffice and called it "Generate alt text".
First, we added basic prompt instructions: write short, descriptive alt text, under 125 characters, and write it straight into the alt text field.

Since we were just looking for a prompt to generate alt text, we made this available on the right content type and property—in this case, the "image" content type and the "alt text" property. That's all the setup done.

Logged in as a content editor, I found three dots next to "Alt Text", showing me that a prompt is available to generate under the conditions of my Umbraco AI settings.
You then get handy, on-brand suggestions that match the image, already following the guidelines we set up earlier.
You can see the image shows a calculator and a pen with a spreadsheet behind it, so I’m happy with the suggestion. If you want multiple suggestions to choose from, you can select that option.
Umbraco Prompts also work for any CMS field: SEO descriptions, meta titles, and so on. You could, for example, add a button on any text field in the content section that checks the content against your brand guidelines. Someone can do that in one click, without opening a chat with Copilot. It’s a super quick way to fine-tune your stale content.

A Quick Look at Umbraco Automate
Umbraco Automate is what happens inside the CMS to connect to the rest of your organisation's tools, so publishing isn't the end of the workflow.
Automate uses a connection, just like Copilot and Prompts do, and it connects Umbraco to systems outside the backoffice using triggers. It's similar in concept to tools like n8n, Make, or Microsoft Power Automate, but built specifically for Umbraco.
Let's demonstrate a simple automation. First, Thom set up an empty workspace and a Slack connection. This automation is designed to send a message to Slack when content on a page is published.
You start by setting up your triggers and actions.
Here we've added:
Trigger: content is published (optionally scoped to specific content types).
Get content: bind to the content key returned by the trigger.
Notify editor: a pop-up notification immediately after publishing.
Send Slack message: a message to a chosen Slack channel, including the full published URL.

Here's how it's set up: a Publish Alert workflow, triggered whenever content is published, that gets the content, notifies the editor, and posts to Slack.

And there's our Slack message.
This is a simple example, but it shows where Automate is heading. It's really useful for big content teams and larger organisations. Automate can also connect to Umbraco Workflows and Umbraco Forms — handy if you want a form submission or a multi-stage sign-off process to trigger the same kind of notification, without anyone needing to check for it manually.

What Umbraco AI really offers
For content teams working inside brand and regulatory guidelines, and trying to keep up with ever-growing volumes of content, Umbraco AI (available from Umbraco 17 onward) is a genuinely valuable tool.
Because your rules and governance are set once inside the Umbraco AI configuration, that groundwork keeps paying off — content can move fast because compliance is already built in, not something you're checking every time.
That's what I think Umbraco AI really offers: more productivity, more confidence, and better alignment across teams, letting people make quick decisions within the safety of your brand's guardrails, all from the backoffice.
Free Umbraco AI Consultation
With 18 years of dedicated Umbraco partnership and 470+ projects behind us, we're here to help.
We offer a free Umbraco AI consultation, plus advice on Umbraco upgrades, CMS migrations, or your Umbraco AI roadmap.
Innerworks and Cogworks are proud to partner with Community TechAid who aim to enable sustainable access to technology and skills needed to ensure digital inclusion for all. Any support you can give is hugely appreciated.

