Blog with Astro

The install steps for a new Astro app are on the Astro page. This is the page that lists posts.

npm i @cosmicjs/sdk

---
// src/pages/index.astro
import { createBucketClient } from '@cosmicjs/sdk';

const cosmic = createBucketClient({
  bucketSlug: import.meta.env.BUCKET_SLUG,
  readKey: import.meta.env.BUCKET_READ_KEY,
});

const { objects: posts } = await cosmic.objects
  .find({ type: 'blog-posts' })
  .props('title,slug,metadata');
---

<ul>
  {posts?.map((post) => <li><a href={`/blog/${post.slug}`}>{post.title}</a></li>)}
</ul>

Set BUCKET_SLUG and BUCKET_READ_KEY in .env. Do not prefix them with PUBLIC_.

FAQ

Where does the request run?

In the frontmatter, on the server, at build time or on each request if the page is server-rendered.

Will a PUBLIC_ env var leak the read key?

Yes. Read BUCKET_SLUG and BUCKET_READ_KEY from import.meta.env without the PUBLIC_ prefix.

How much does Cosmic cost?

Project plans are Free ($0), Builder ($99/mo), Team ($299/mo), Business ($499/mo), Enterprise (custom pricing). Yearly billing saves 10%. Workspace plans are Small Workspace ($999/mo) and Large Workspace ($2,999/mo), and they start with a 30-day free trial. Allowances, add-on rates, and the rest of the pricing FAQ are plain text at https://www.cosmicjs.com/pricing.md.

Are API keys required, and is content private?

Each Bucket has a read key and a write key in Bucket Settings > API Access. GET requests use the read key. POST, PATCH, and DELETE use the write key as Authorization: Bearer. Do not put the write key in a browser bundle, a mobile app, or a NEXT_PUBLIC_ variable. SAML single sign-on is on Large Workspace and Enterprise. The audit log is append-only. Text versions: https://www.cosmicjs.com/security.md and https://www.cosmicjs.com/docs/dashboard/audit-log.md.

Can an agent create a Cosmic project without an existing account?

Yes. POST https://dapi.cosmicjs.com/v3/agents/sign-up provisions a free-tier project and bucket tied to a human email, with no existing Cosmic account. The human claims it with the emailed one-time code. The playbook is https://www.cosmicjs.com/docs/ai-onboarding.md.