Back to Home
staminna icon

mcp-server-claude

by staminna

Overview

This server acts as an MCP (Model Context Protocol) interface for Directus, enabling AI assistants to programmatically interact with Directus data, schema, and operations.

Installation

Run Command
npx -y @staminna/directus-mcp-server

Environment Variables

  • DIRECTUS_URL
  • DIRECTUS_TOKEN
  • DIRECTUS_TIMEOUT
  • DIRECTUS_RETRIES
  • DIRECTUS_RETRY_DELAY
  • DIRECTUS_MAX_RETRY_DELAY
  • DIRECTUS_PROMPTS_COLLECTION_ENABLED
  • DIRECTUS_PROMPTS_COLLECTION
  • DIRECTUS_RESOURCES_ENABLED
  • DIRECTUS_RESOURCES_EXCLUDE_SYSTEM
  • NODE_ENV
  • DIRECTUS_HTTPS_CA
  • DIRECTUS_HTTPS_CERT
  • DIRECTUS_HTTPS_KEY
  • DIRECTUS_HTTPS_PFX
  • DIRECTUS_HTTPS_PASSPHRASE
  • DIRECTUS_HTTPS_REJECT_UNAUTHORIZED
  • DIRECTUS_HTTPS_SERVERNAME

Security Notes

The core server code follows good security practices like using environment variables for tokens and handling HTTPS. However, a critical security vulnerability exists in the provided helper script `show-windsurf-config.sh` which hardcodes a Directus API token (`1X6eST1lyCGCtjGOucQ-i65tLXfcKkE4`). If a user copies this configuration into their IDE settings (as instructed) without replacing the placeholder, their Directus API token will be exposed, leading to unauthorized access. While the server itself reads from environment variables, the ease with which a user could adopt this insecure configuration significantly lowers the overall security posture. There is also an option to disable TLS certificate validation (`DIRECTUS_HTTPS_REJECT_UNAUTHORIZED=false`), which, if enabled by users, could lead to insecure connections.

Similar Servers

Stats

Interest Score32
Security Score3
Cost ClassMedium
Avg Tokens1000
Stars2
Forks0
Last Update2025-12-12

Tags

DirectusMCPAPICMSAI Integration