Blog with Next.js

Install the SDK and read posts in a server component. The longer install walkthrough is Next.js.

npm i @cosmicjs/sdk
# .env.local
BUCKET_SLUG=your_bucket_slug
BUCKET_READ_KEY=your_read_key
// app/page.tsx
import { createBucketClient } from '@cosmicjs/sdk';

const cosmic = createBucketClient({
  bucketSlug: process.env.BUCKET_SLUG,
  readKey: process.env.BUCKET_READ_KEY,
});

export default async function Page() {
  const { objects: posts } = await cosmic.objects
    .find({ type: 'blog-posts' })
    .props('title,slug,metadata');

  return (
    <ul>
      {posts?.map((post) => (
        <li key={post.slug}>{post.title}</li>
      ))}
    </ul>
  );
}

FAQ

Does this use the App Router?

Yes. app/page.tsx is an async server component. The read runs on the server.

What Object type does the sample expect?

An Object type with slug blog-posts, an image metafield named image, and a rich text metafield named content.

Where do the keys go?

In .env.local as BUCKET_SLUG and BUCKET_READ_KEY. Do not prefix a write key with NEXT_PUBLIC_.

How much does Cosmic cost?

Project plans are Free ($0), Builder ($99/mo), Team ($299/mo), Business ($499/mo), Enterprise (custom pricing). Yearly billing saves 10%. Workspace plans are Small Workspace ($999/mo) and Large Workspace ($2,999/mo), and they start with a 30-day free trial. Allowances, add-on rates, and the rest of the pricing FAQ are plain text at https://www.cosmicjs.com/pricing.md.

Are API keys required, and is content private?

Each Bucket has a read key and a write key in Bucket Settings > API Access. GET requests use the read key. POST, PATCH, and DELETE use the write key as Authorization: Bearer. Do not put the write key in a browser bundle, a mobile app, or a NEXT_PUBLIC_ variable. SAML single sign-on is on Large Workspace and Enterprise. The audit log is append-only. Text versions: https://www.cosmicjs.com/security.md and https://www.cosmicjs.com/docs/dashboard/audit-log.md.

Can an agent create a Cosmic project without an existing account?

Yes. POST https://dapi.cosmicjs.com/v3/agents/sign-up provisions a free-tier project and bucket tied to a human email, with no existing Cosmic account. The human claims it with the emailed one-time code. The playbook is https://www.cosmicjs.com/docs/ai-onboarding.md.