Role-Based Access Control
AI users get the same permissions as humans. Content editors see content. Admins see everything. You control exactly what AI can touch.
Connect AI to your backend - with guardrails. Your permissions, your schema, your control. Marketing ships without tickets. Devs finally escape CRUD hell.
Once you connect it, everything else becomes busywork.
And not just fields and types. Your relationships, validations, permissions, everything. Now, AI becomes the translation layer between "we need this" and "here's how it works in the database."
One fetch read and it's done. My AI tools can see the entire API structure at once and iterate without me having to explain endpoints or schemas. It eliminates typos, improves our mutual understanding, and makes the development flow much smoother.
Vincent Cottalorda
Frontend Developer
AI builds the entire schema. Collections, fields, relationships, validations. What used to take hours now takes one sentence.
AI handles the tedious work. Bulk updates, metadata enrichment, file organization. Your content team moves at the speed of ideas, not tickets.
Describe your desired workflow in plain language. AI builds it with proper error handling. Create complex automations without touching a single node.
MCP operates like any other Directus user. Create dedicated AI accounts with specific roles. Lock down production. Let junior devs prototype freely in staging. Your access policies don't change - AI just follows them.
The most interesting area right now for me is using MCP to develop applications and extensions on top of Directus using models to write code, modify the database schema, and introspect contents for example data.
This dramatically improves results for development and allows a full AI "full-stack" workflow.
It's a great tool that simplifies LLM integrations by replacing traditional API fetch. Particularly powerful with Claude Code - I use it to automatically fetch schemas and translate them into Zod validators and DDD patterns.
This eliminates human transcription errors when going from DB schemas to code, which saves time and improves reliability.
One fetch read and it's done - Claude can see the entire API structure at once and iterate without me having to explain endpoints or schemas.
It eliminates typos, improves our mutual understanding, and makes the development flow much smoother.
Watch Bryant build a multi-site CMS in 10 minutes
Have other questions?
Check out the documentation or join our community forum.
Yes! MCP is included in every version of Directus, both self-hosted and cloud. It's available starting with Directus v11.12. Simply update your instance and configure your MCP client to connect.
MCP respects all your existing Directus permissions. Every AI action goes through the same authentication and authorization layer as any other API request. AI can only access and modify what the authenticated user is allowed to. You can create dedicated AI accounts with specific role restrictions, disable destructive operations, or make AI read-only if needed.
Any AI client that supports the Model Context Protocol standard. This includes Claude Desktop, Cursor, ChatGPT Desktop, VS Code with GitHub Copilot, Raycast, and more. Setup takes about 5 minutes - just add your Directus instance URL and authentication token to your MCP client's configuration.
Absolutely. You have full control over which tools are available. You can disable schema modifications, prevent deletions, make the entire connection read-only, or customize which specific operations AI can perform. This is perfect for production environments where you want AI assistance but need strict guardrails.
No. Your data stays in your Directus instance - whether self-hosted or on Directus Cloud. MCP is a protocol that allows AI clients to connect to your Directus API. The AI processes requests and responses through the standard API, just like any other client. Your data never leaves your infrastructure.
Yes! All activity is logged in Directus's standard audit system. You can see exactly what AI did, when, and under which user account. Every create, update, and delete operation is tracked with full transparency. Perfect for compliance, debugging, and understanding how your team is using AI.
Your developers aren't human APIs. Your marketers can't wait weeks for changes. Connect AI to your backend and let your team work at the speed of ideas.