All sources were read on 2026-10-29 without credentials, using a browser-like user agent. Montala's public Subversion server and the GitHub REST API were read as anonymous visitors (). Facts drawn from source code are marked as observations. No call was made to any ResourceSpace instance, and no customer system was accessed. Montala publishes no machine-readable API specification, so DAM Wiki archives none (see API spec downloads).
Official technical sources
| Id | Title | URL | Type | Accessed | Notes |
|---|---|---|---|---|---|
| S1 | API documentation (Knowledge Base) | knowledge-base/api/ | Official | 2026-10-29 | Signing, authmode (userkey / sessionkey / native), POST variant, test tool, $enable_remote_apis, API log (11.1), function index (93 entries) |
| S2 | API: do_search | knowledge-base/api/do_search | Official | 2026-10-29 | Parameters, archive states, date syntax, fetchrows offset/limit (10.3) |
| S3 | API: search_get_previews | knowledge-base/api/search_get_previews | Official | 2026-10-29 | Preview URLs, fetchrows offset/limit (says 10.2) |
| S4 | API: upload_multipart | knowledge-base/api/upload_multipart | Official | 2026-10-29 | Multipart flow, HTTP 204/400/413/500, PHP and cURL samples |
| S5 | API: upload_file_by_url | knowledge-base/api/upload_file_by_url | Official | 2026-10-29 | $api_upload_urls allow-list |
| S6 | API: get_resource_path | knowledge-base/api/get_resource_path | Official | 2026-10-29 | Temporary URLs, 24 h default expiry, write_metadata (10.7) |
| S7 | API: login | knowledge-base/api/login | Official | 2026-10-29 | Session API key; must be POSTed |
| S8 | API: get_system_status | knowledge-base/api/get_system_status | Official | 2026-10-29 | Health checks, severity (10.3) |
| S9 | IIIF | knowledge-base/api/iiif | Official | 2026-10-29 | Presentation 3.0 / Image 3.0 level 0, URL patterns, configuration |
| S10 | OpenAPI documentation (developer note) | knowledge-base/developers/openapi | Official | 2026-10-29 | /api/openapi.php "from version 11", JSON-RPC-like design, no API versioning, failures may return 200 |
| S11 | Client side API requests | knowledge-base/developers/client-side-api-calls | Official | 2026-10-29 | api() JS helper, native mode limits (10.2), CSRF |
| S12 | API Webhooks plugin | knowledge-base/plugins/api-webhooks | Official | 2026-10-29 | Edit-page buttons, server-side POST, optional SHA-256 hash |
| S13 | Subversion and Git repository access | resourcespace.com/svn | Official | 2026-10-29 | SVN releases/trunk, GitHub clone, move to GitHub, Contributor License Agreement |
| S14 | ResourceSpace licence text | svn…/trunk/documentation/licenses/resourcespace.txt | Official | 2026-10-29 | BSD-style, copyright holders 2006-2026, trademark clause |
| S15 | Public Subversion tree (trunk, releases 7.7-11.0) | svn.resourcespace.com/svn/rs/ | Observed | 2026-10-29 | Revision 29981. api/ (index.php, example.php, iiif/), include/api_bindings.php (76 bindings in trunk, 75 in 11.0), include/api_functions.php, include/tusconfig.php, 61 plugin folders, AGENTS.md; no openapi.php or MCP code |
| S16 | Subversion branch 20260730_acota_q13781 (MCP prototype) | svn…/branches/20260730_acota_q13781/ | Observed | 2026-10-29 | api/mcp.php (PHP MCP SDK, streamable HTTP, OAuth protected-resource metadata, version 0.0.1), include/Mcp/ (tools, resources, resource template, token validator) |
| S17 | GitHub: resourcespace/resourcespace | github.com/resourcespace/resourcespace | Observed | 2026-10-29 | Via the GitHub REST API: created 2026-01-19, last push 2026-10-28, licence reported as "Other", 88 stars; no openapi/mcp paths in the master tree |
| S18 | Installing via Docker + resourcespace/docker | knowledge-base/systemadmin/install_docker | Official | 2026-10-29 | Official Docker Compose (ResourceSpace + MariaDB); repo github.com/resourcespace/docker |
| S19 | General installation requirements | knowledge-base/systemadmin/general_requirements | Official | 2026-10-29 | MySQL 8.0+ / MariaDB 10.4+, Apache 2.4+ / IIS 7+, PHP matrix by version, extensions, tools, Composer (v11) |
| S20 | Installation overview | knowledge-base/systemadmin/install_overview | Official | 2026-10-29 | SVN checkout, setup, cron hit-count job, filestore security |
| S21 | Versions (release notes 9.6-11.0) | resourcespace.com/versions | Official | 2026-10-29 | Release dates and features |
| S22 | Older versions (1.1-9.5) | resourcespace.com/versions-older | Official | 2026-10-29 | API v2 in 7.9 (2016-09-16), 1.1 on 2007-04-17 |
| S23 | Roadmap | resourcespace.com/roadmap | Official | 2026-10-29 | 11.1 (2027-02-23), 11.2 (2027-06-23), 11.3 (2027-10-25); q13781 "MCP API interface" (Scoping); q12869 API throttling; q13630 API login lockout |
| S24 | Labs (development-branch change list) | resourcespace.com/labs | Official | 2026-10-29 | r28779-r29951 (2026-05-19 → 2026-10-26): CI-HUB, Canva SSO / SpotDev, API log, update_resource_lock |
| S53 | Simple SAML plugin | knowledge-base/plugins/simplesaml | Official | 2026-10-29 | SAML 2.0 SP via simplesamlphp, IdP examples, metadata URL (10.7) |
| S54 | TOTP plugin | knowledge-base/plugins/totp | Official | 2026-10-29 | MFA per user group |
| S55 | Security settings | knowledge-base/systemadmin/security_options | Official | 2026-10-29 | Password rules, login bans, 300-min auto-logout |
| S56 | CLIP AI Smart Search | knowledge-base/plugins/clip-ai-smart-search | Official | 2026-10-29 | Natural-language and visual search, FAISS, 512-d vectors |
| S57 | AI Faces (InsightFace) | knowledge-base/plugins/faces | Official | 2026-10-29 | buffalo_l model licence, Montala perpetual licence for contract customers |
| S58 | AI Metadata Generation (OpenAI GPT plugin) | knowledge-base/plugins/openai_gpt | Official | 2026-10-29 | Per-field prompts, image or text input, no-training agreement for supported customers |
| S59 | Google Vision plugin | knowledge-base/plugins/google-vision | Official | 2026-10-29 | 10,000 calls included, 50,000-call bolt-on |
| S60 | Whisper plugin | knowledge-base/plugins/whisper | Official | 2026-10-29 | Local transcription and subtitles |
| S61 | Tesseract OCR plugin | knowledge-base/plugins/tesseract | Official | 2026-10-29 | Local OCR via cron |
| S62 | OpenAI Image Editing plugin | knowledge-base/plugins/openai_image_edit | Official | 2026-10-29 | gpt-image-2; £250 + VAT per user/year, £1,000 for five users |
| S63 | Typesense Search plugin | knowledge-base/plugins/typesense_search | Official | 2026-10-29 | Experimental (11.0), no permission filtering yet |
| S64 | StaticSync | knowledge-base/systemadmin/staticsync | Official | 2026-10-29 | In-situ indexing and ingest (hot folders) |
| S65 | Mounting Amazon S3 for external storage | knowledge-base/systemadmin/s3storage | Official | 2026-10-29 | s3fs mount |
| S66 | Integrating with Uppy Companion | knowledge-base/systemadmin/uppy-companion | Official | 2026-10-29 | Google Drive, Dropbox, OneDrive sources |
| S67 | Configuring for multi-client use | knowledge-base/systemadmin/multi_client | Official | 2026-10-29 | Client field + filters; custom access level |
| S68 | Advanced workflow plugin | knowledge-base/plugins/workflow | Official | 2026-10-29 | Fixed base archive states; custom states and actions |
| S69 | License manager plugin | knowledge-base/plugins/license-manager | Official | 2026-10-29 | Multiple licences per resource, status filter (10.7) |
| S70 | Brand Guidelines plugin | knowledge-base/plugins/brand-guidelines | Official | 2026-10-29 | Sections/pages, bgv / bge permissions |
| S71 | Metadata field types | knowledge-base/resourceadmin/resource-field-types | Official | 2026-10-29 | Full field-type list |
| S72 | Creating controlled vocabularies | knowledge-base/resourceadmin/controlled-vocabularies | Official | 2026-10-29 | Dublin Core example |
| S73 | Supported file formats | knowledge-base/resourceadmin/supported_file_formats | Official | 2026-10-29 | Any file stored, harmful types excluded |
| S74 | File Information Tool Set (FITS) | knowledge-base/systemadmin/fits | Official | 2026-10-29 | Technical metadata extraction |
| S75 | Image banks plugin | knowledge-base/plugins/image-banks | Official | 2026-10-29 | External stock search |
| S76 | TMS link plugin | knowledge-base/plugins/tms-link | Official | 2026-10-29 | TMS database sync script |
| S77 | Integrate with Canva | knowledge-base/plugins/canva | Official | 2026-10-29 | ResourceSpace app in Canva, supported MIME types, SSO "Grant access" |
| S78 | Adobe Creative Cloud integration (LinkrUI) | knowledge-base/systemadmin/linkrui | Official | 2026-10-29 | Free vs Premium apps, SSO login |
| S79 | Google Docs (LinkrUI) | knowledge-base/systemadmin/google_docs | Official | 2026-10-29 | LinkrUI for Google Workspace |
| S80 | WordPress integration | knowledge-base/systemadmin/wordpress | Official | 2026-10-29 | Plugin v1.0.10 by Codecide (funded by ADRA International); private API key location |
| S81 | Drupal integration | knowledge-base/systemadmin/drupal | Official | 2026-10-29 | Drupal 11 media-library sync |
| S82 | Falcon link plugin | knowledge-base/plugins/plugin-falcon | Official | 2026-10-29 | Falcon.io templates via share links |
| S98 | Developer documentation index | knowledge-base/developers/ | Official | 2026-10-29 | Coding standards, security, plugins, schema, testing |
| S99 | Plugins index | knowledge-base/plugins/ | Official | 2026-10-29 | Plugin categories and names (conditional terms, track field history, resource usage, embeds, refine results…) |
| S100 | Resource status & access | knowledge-base/user/resource-status-and-access | Official | 2026-10-29 | Open / restricted / confidential definitions |
Official non-technical sources (vendor)
| Id | Title | URL | Type | Accessed | Notes |
|---|---|---|---|---|---|
| S25 | Introducing ResourceSpace Labs (blog, 2026-07-14) | blog/introducing-resourcespace-labs | Vendor | 2026-10-29 | Labs for all paid plans; said 11.1 was scheduled for October 2026 |
| S26 | ResourceSpace 11.0 (blog, 2026-06-29) | blog/version11 | Vendor | 2026-10-29 | UI redesign, WCAG, System Configuration, AI jobs |
| S27 | Pricing | resourcespace.com/pricing | 2026-10-29 | Packages, inclusions, FAQ (London Docklands hosting, ISO 27001, billing, exit). Prices read from the page's pricing script (GBP, annual base prices 4,240 / 9,560 / 16,910 / 41,740; £1.44/GB extra storage; "call us" above £50,000) | |
| S28 | Free DAM software (free tier sign-up) | resourcespace.com/free | Vendor | 2026-10-29 | 10 GB, up to 10 users, AI tagging, {name}.free.resourcespace.com, templates |
| S29 | Get ResourceSpace | resourcespace.com/get | Vendor | 2026-10-29 | Free cloud, cloud packages, Docker, source repository |
| S30 | FAQ | resourcespace.com/faq | Vendor | 2026-10-29 | UK data location, redundancy (Cambridge/London), 70 TB plan ceiling, ISO 27001 (Telecity/Redstone mention, outdated), hardware minimums, languages |
| S31 | About us | resourcespace.com/about | Vendor | 2026-10-29 | Oxfam origin, founders, employee-owned B Corp |
| S32 | Meet the team | resourcespace.com/team | Vendor | 2026-10-29 | 23 named staff; Dan Huby founder/CTO |
| S33 | Employee ownership | resourcespace.com/employee-ownership | Vendor | 2026-10-29 | 100% employee-owned since October 2020 (EOT) |
| S34 | ResourceSpace celebrates 20 years (blog, 2026-06-11) | blog/20th-anniversary | Vendor | 2026-10-29 | "Words and Pictures", 2013 office, Royal Warrant 2018 and 2025, 500+ organisations |
| S36 | Privacy policy | resourcespace.com/privacy | Vendor | 2026-10-29 | Address in Watchfield, Oxfordshire; Google and OpenAI sub-processors |
| S37 | Service Terms & SLA | resourcespace.com/terms | Vendor | 2026-10-29 | Priority response times, On Premise packages (12-month minimum), fair-use hours, BSD-style release of development work, sub-processors (Mythic Beasts, GB) |
| S38 | Information Security Policy | resourcespace.com/information_security_policy | Vendor | 2026-10-29 | ISMS "independently certified" to ISO/IEC 27001 |
| S39 | Montala 2025 B Corp impact report (blog, 2025-10-01) | blog/montala-2025-impact-report | Vendor | 2026-10-29 | ISO 27001:2022 transition; 4.99/5 satisfaction |
| S40 | ResourceSpace achieves B Corp certification (blog, 2022-08-26) | blog/b-corp-certification | Vendor | 2026-10-29 | |
| S41 | ResourceSpace is now on G-Cloud 14 (blog, 2024-11-12) | blog/resourcespace-g-cloud14 | Vendor | 2026-10-29 | First listed on G-Cloud 11 in 2019 |
| S42 | Features: Integration | features/integration | Vendor | 2026-10-29 | SSO/LDAP, Adobe/Figma/Canva, Office, social, cloud storage, WordPress/Drupal, BrandStencil/RightMarket, AI, TMS/EMu/MuseumPlus, IIIF, stock, REST API |
| S43 | Features: Security | features/security | Vendor | 2026-10-29 | SSO, MFA, isolated portals, consent management |
| S44 | Features: Metadata & AI | features/metadata | Vendor | 2026-10-29 | AI tagging, faces, natural-language search |
| S45 | Features: Search | features/search | Vendor | 2026-10-29 | Geographic search, duplicates, special terms, usage-based ordering |
| S46 | Features: Workflow | features/workflow | Vendor | 2026-10-29 | States, actions, revert |
| S47 | Features: Sharing | features/sharing | Vendor | 2026-10-29 | Shares, public access, CMS publishing, embeds, contributions |
| S48 | Features: Convert | features/convert | Vendor | 2026-10-29 | Previews, conversion, watermarks, transcoding |
| S49 | Features: Admin / analytics | features/admin | Vendor | 2026-10-29 | Analytics and reports |
| S50 | Home page | resourcespace.com | Vendor | 2026-10-29 | Positioning, sectors, 500+ organisations, £410,000 donated (pricing page says £490,000), social links |
| S51 | Case studies | resourcespace.com/casestudies | Vendor | 2026-10-29 | Named customers |
| S52 | Integration partners | resourcespace.com/integration-partners | Vendor | 2026-10-29 | MovingMedia, Prisma-IT, DML |
| S83 | Announcing ResourceSpace and LinkrUI integration (blog, 2024-07-24) | blog/linkrui-adobe-connector | Vendor | 2026-10-29 | Santa Cruz Software; Adobe apps |
| S84 | LinkrUI for Microsoft Office (blog, 2024-08-14) | blog/linkrui-microsoft-office | Vendor | 2026-10-29 | Word, PowerPoint, Excel |
| S85 | Integrating with BrandStencil | integrating-with-brandstencil | Vendor | 2026-10-29 | |
| S86 | Integrating with RightMarket | integrating-with-rightmarket | Vendor | 2026-10-29 | |
| S87 | Integrating with MONA | integrating-with-mona | Vendor | 2026-10-29 | CultureTech rights management |
| S88 | Events | resourcespace.com/events | Vendor | 2026-10-29 | Webinar calendar to 2027-08; OnDAM Paris |
| S89 | ResourceSpace General User Training (event) | events/general-training | Vendor | 2026-10-29 | 30-minute webinar, 2026-11-04, Webex registration |
| S90 | Help & Documentation | resourcespace.com/help | Vendor | 2026-10-29 | Google Group forum, commercial support, extranet, bug report |
| S91 | White papers | resourcespace.com/whitepapers | Vendor | 2026-10-29 | |
| S92 | Scene-by-scene video understanding is coming (blog, 2026-02-27) | blog/scene-by-scene-understanding-coming-soon | Vendor | 2026-10-29 | CTO post on a multimodal video pipeline |
| S95 | Knowledge Base home | resourcespace.com/knowledge-base | Vendor | 2026-10-29 | Sections and tutorial videos |
| S96 | Background information (KB) | knowledge-base/background-information | Vendor | 2026-10-29 | Montala funds most development; UK-based, employee-owned |
| S97 | Site probes: robots.txt, sitemap.xml, llms.txt | resourcespace.com/robots.txt | Observed | 2026-10-29 | robots allows all; sitemap ~2,350 URLs; /llms.txt returns the KB search page (no llms.txt) |
Third-party sources
| Id | Title | URL | Type | Accessed | Notes |
|---|---|---|---|---|---|
| S35 | Companies House: MONTALA LIMITED (06851491) | find-and-update.company-information.service.gov.uk/company/06851491 | Third-party | 2026-10-29 | Incorporated 2009-03-18, registered office Watchfield, SIC 62012 / 63110; officers page lists Daniel Mark Huby and James Anthony Rein |
| S93 | GitHub: Magnolia-Tech-Services-LLC/resourcespace-mcp | github.com/Magnolia-Tech-Services-LLC/resourcespace-mcp | Third-party | 2026-10-29 | Third-party MCP plugin; BSD-3-Clause; ResourceSpace 10.7/11; no affiliation statement |
| S94 | Glama: ResourceSpace MCP Server (Magnolia Tech Services) | glama.ai/mcp/servers/Magnolia-Tech-Services-LLC/ressourcespaceMCP | Third-party | 2026-10-29 | TypeScript, 75 tools in 4 servers, MIT |
| S101 | Packagist search "resourcespace" (+ PyPI / npm checks) | packagist.org/?query=resourcespace | 2026-10-29 | urban-brussels/resourcespace-api (74 downloads), rkw/rkw-resourcespace; PyPI and npm return 404 for resourcespace |
Not accessible
- Customer extranet (resourcespace.com/extranet) — invoices, renewals, support tickets and system downloads for subscribers. Behind login.
- ISMS overview, ISO 27001 certificate and security policies — available "on request, subject to clearance" (FAQ). Would cover certificate scope and certification body.
- G-Cloud 14 service listing on the UK Digital Marketplace — not read; it would give the official service definition and pricing document.
- LinkrUI and Figma connector listings — the Figma integration named on the vendor's integration page has no public documentation; the LinkrUI product pages (Santa Cruz Software) were not read.
- Per-instance OpenAPI output (
/api/openapi.php) — described in the developer note but not present in released code; it was not probed on any customer system.