directus
Directus is a backend-as-a-service platform that connects to any SQL database and instantly generates REST and GraphQL APIs, a visual admin interface, and AI capabilities. It supports multiple databases (PostgreSQL, MySQL, MariaDB, MS SQL, SQLite, Oracle, CockroachDB) and can be self-hosted or used on Directus Cloud.
Key facts
Objective fields from the source. Values we can't verify are shown as “Unknown” rather than guessed.
| Field | Value |
|---|---|
| Repository | directus/directus |
| Owner | directus |
| Primary language | TypeScript |
| License | Other — Requires review (not clearly OSI) |
| Stars | 36.4k |
| Forks | 4.8k |
| Open issues | 409 |
| Latest release | v12.1.1 (2026-07-01) |
| Last updated | 2026-07-07 |
| Source | https://github.com/directus/directus |
What directus is
TypeScript-based headless CMS and API gateway that auto-generates REST/GraphQL from database schemas, includes role-based access control down to field level, native MCP server support for AI agents, and extensibility via custom endpoints, hooks, and interfaces. Deployable on-premises or managed cloud.
Get the directus source
Clone the repository and explore it locally.
git clone https://github.com/directus/directus.gitcd directus# follow the project's README for install & configurationNeed it deployed, integrated, or customized instead? DEV.co ships production installs.
Best use cases
Implementation considerations
- Database compatibility: Verify your SQL database variant is officially supported (Postgres, MySQL, MariaDB, MS SQL, SQLite, Oracle, CockroachDB listed; ensure version compatibility).
- Schema design: Auto-generated APIs reflect your database schema directly; plan schema structure for intuitive API contracts and field-level permission granularity.
- Access control planning: Define roles, permissions, and field-level policies upfront; role-based access is enforced uniformly for humans and AI agents.
- Extensibility scope: Identify custom endpoints, hooks, or custom interfaces early; Directus supports extensions but requires TypeScript/JavaScript competency.
- Self-host vs. managed: Evaluate operational overhead (database, Redis, storage, CDN) if self-hosting; Directus Cloud simplifies provisioning but introduces vendor dependency.
When to avoid it — and what to weigh
- NoSQL or Unstructured Data — Directus is SQL-only. Projects requiring MongoDB, document stores, or graph databases require a different backend.
- Custom Complex Business Logic — If core application logic heavily depends on procedural workflows, custom data transformations, or tight coupling to business rules, a traditional framework may be more suited than a headless API layer.
- High-Scale Real-Time Collaboration — For applications requiring sub-second collaborative editing, conflict resolution, or operational transformation, Directus' architecture is not designed as a primary real-time engine.
- Strict Open-Source Licensing Requirements — Directus uses the Monospace Sustainable Core License (MSCL 1.0), a source-available license with commercial restrictions. Organizations requiring pure OSI-compliant open-source licenses must review terms carefully.
License & commercial use
Licensed under Monospace Sustainable Core License (MSCL) 1.0, a source-available (not open-source) license derived from Fair Core License. Free tier available for exploration. Free for organizations under $5M revenue and 50 employees via Open Innovation Grant (requires application). Commercial license required above those thresholds for advanced/enterprise features.
MSCL 1.0 is a source-available license with commercial restrictions—not a standard OSI-approved permissive license. Commercial use requires either: (1) qualification for Open Innovation Grant (sub-$5M revenue, sub-50 employees, application required), (2) free tier for non-commercial/evaluative use, or (3) commercial license purchase. Organizations above thresholds using advanced/enterprise features must purchase a commercial license. Verify current pricing and license terms on directus.com/pricing before production deployment.
DEV.co evaluation signals
Editorial assessment — not user reviews. Directional, with an explicit confidence level.
| Signal | Assessment |
|---|---|
| Maintenance | Active |
| Documentation | Strong |
| License clarity | Needs review |
| Deployment complexity | Low |
| DEV.co fit | Strong |
| Assessment confidence | High |
Role-based access control enforced at field level for both human users and AI agents. No special security cases or workarounds for AI agents—policies apply uniformly. Self-hosted deployments require securing Node.js runtime, database credentials, Redis, and file storage. Directus Cloud handles infrastructure security but introduces vendor dependency. No claims made regarding penetration testing, vulnerability disclosure history, or third-party security audit results in provided data; verify with vendor security documentation.
Alternatives to consider
Supabase
Open-source (Apache 2.0) PostgreSQL-only backend with auto-generated REST/GraphQL APIs, real-time subscriptions, and built-in auth. No AI/MCP. Better for projects requiring pure OSI licensing.
Hasura
Instant GraphQL APIs on SQL databases with role-based access control and webhook triggers. Commercial and free tiers available. GraphQL-first (not REST-primary). Wider database support.
Strapi
Open-source (Business Source License) headless CMS with custom content modeling, REST APIs, and plugin extensibility. NoSQL-capable. Better for content-first workflows; less database-agnostic than Directus.
Build on directus with DEV.co software developers
Start with Directus Cloud (90-second setup) or review self-hosting options. Check license eligibility for your organization at directus.com/oig.
Talk to DEV.coRelated on DEV.co
Explore the category and the services that help you build with it.
directus FAQ
Can Directus work with my existing SQL database?
Is Directus free for commercial use?
Can AI agents directly access my data via Directus?
What is the difference between self-hosted and Directus Cloud?
Custom software development services
From first prototype to production, DEV.co delivers software development services around tools like directus. Our software development agency staffs experienced software developers and web developers for custom software development, web development, integrations, and ongoing support across open-source cms and beyond.
Ready to wrap your database?
Start with Directus Cloud (90-second setup) or review self-hosting options. Check license eligibility for your organization at directus.com/oig.