Directus Open Data Platform

⚠️ Potential Breaking Changes

Restricted the settings fields readable with minimal app access to those actually needed by non-admin users, no longer exposing admin-only and sensitive AI configuration fields (#27996)

The minimal app permissions now grant read access to only a subset of directus_settings fields. This applies to new policies, existing policies are untouched.

Replaced the TinyMCE editor powering the WYSIWYG with Tiptap... (#27754)

The WYSIWYG interface now runs on Tiptap instead of TinyMCE

• tinymceOverrides no longer has any effect. Stored values are kept and a console warning is logged, but the editor ignores them. Use the fontsize/fontfamily toolbar menus and customFormats instead.
• TinyMCE is no longer bundled with the app, so anything depending on it (custom plugins, skins, content CSS, the global tinymce object) no longer applies.
• Existing content that contains markup the editor would normalize now locks the field read-only until the warning dialog is confirmed. Editing and autosave are blocked while locked, including raw-value editing.

Fixed deployment webhooks resolving a project from the wrong provider when external IDs collide (#27816)

The DeploymentProjectsService.readByExternalId method now takes the deployment ID as its first argument (i.e. readByExternalId(deploymentId, externalId))

Added support for multi-collection flat data imports (#27984)

Import file size is now capped by default

A new IMPORT_MAX_FILE_SIZE environment variable (default: 50mb) limits the size of uploaded import files and schema snapshots. Previously, imports were effectively unrestricted, allowing files larger than 50mb to be processed. With this change, imports exceeding the configured limit will be rejected. Increase IMPORT_MAX_FILE_SIZE to restore the previous behavior.

Updated background query flag handling for POST /utils/import/:collection

The background query flag now treats a valueless indicator (i.e. ?background) as true. If you previously relied on a valueless background flag being interpreted as false, pass an explicit value instead (i.e. ?background=false).

Added a mode parameter and partial snapshot support to the schema diff endpoint (#27984)

The SDK schemaDiff command now takes its options as an object (schemaDiff(snapshot, { force, mode }))

Added support for restricting image transformation output size via ASSETS_TRANSFORM_IMAGE_MAX_OUTPUT_DIMENSION (#27995)

Image transformation output is now restricted

Image transformations that project an output larger than ASSETS_TRANSFORM_IMAGE_MAX_OUTPUT_DIMENSION (default 3000 px) on either axis are now rejected with an IllegalAssetTransformationError.

• @directus/app
• Replaced the TinyMCE editor powering the WYSIWYG with Tiptap (#27754 by @alvarosabu)

To avoid data loss, the editor preserves attributes (class, id, title, role, lang, dir, data-, aria-) and non-schema semantic tags. If stored HTML still contains markup the editor would normalize, the field is locked read-only with a warning dialog, so no edit or autosave can rewrite it before you confirm; raw-value editing is disabled while locked so the warning can't be bypassed.

• @directus/api
• Restricted the settings fields readable with minimal app access to those actually needed by non-admin users, no longer exposing admin-only and sensitive AI configuration fields (#27996 by @br41nslug)
• Fixed deployment webhooks resolving a project from t

Directus

The Collaborative Backend for Builders & AI

Connect any SQL database and get instant REST and GraphQL APIs, a visual management Studio, and a native MCP server for

AI agents.

45M+ downloads · 500K+ projects deployed

<!-- prettier-ignore -->

[!NOTE]

Free for most organizations. Under $5M annual revenue and 50 employees? Directus is completely free.

Apply for an Open Innovation Grant license and get a key in minutes.

Learn more about our license.

---

🐇 Introduction

Directus wraps any SQL database with a REST and GraphQL API layer and a visual Studio. Engineers control schema and

access. Non-technical teammates and AI agents work directly with live data. No tickets, no boilerplate.

• REST & GraphQL APIs: Automatically generated from your database schema. No configuration required.
• Visual Studio: A full management interface for non-technical teammates.
• AI Assistant: Embedded in the Studio. Creates, translates, and takes direct action on your content.
• Native MCP Server: Connect Claude, Cursor, ChatGPT, or any MCP-compatible tool directly to your data.
• Policy-based Access Control: Granular permissions down to the field level, for humans and AI agents alike.
• Bring your own database: Postgres, MySQL, MariaDB, MS SQL, SQLite, OracleDB, CockroachDB, and more.
• Fully extensible: Custom endpoints, hooks, interfaces, and modules.
• Self-host or cloud: Run locally, on your own infrastructure, or on Directus Cloud.

Learn more about Directus · Documentation

---

🤖 AI & MCP

Directus includes a built-in AI Assistant and a native MCP server. AI works with your live data, not a copy of it.

• AI Assistant: Creates content, runs translations, and triggers workflows directly from the Studio.
• Native MCP Server: Any MCP-compatible agent or tool can connect to Directus. Same access policies that apply to

your team apply to AI.

• Governed by default: AI agents operate under the same role-based permissions as human users. No special cases, no

workarounds.

Read the AI & MCP docs

---

🚀 Directus Cloud

Directus Cloud provisions a fully managed project in under 90 seconds.

• Centrally managed: Self-service dashboard to create and monitor all your projects in one place
• All-in-one solution: Database, storage, and auto-scaling included with a global CDN
• Simple setup: Select a region and get a running instance immediately

Create a Directus Cloud Project

---

⚡ One-Click Deployment Options

Deploy on Railway

One click. Fully provisioned with PostgreSQL, Redis, and S3-compatible storage, connected via Railway's private network.

Deploy on Railway

---

🙋 Community Help

The Directus Documentation is a great place to start, or explore these other channels:

• Community Forum (Questions, Discussions)
• Discord (Live Chat)
• GitHub Issues (Report Bugs)
• Roadmap (Roadmap & Feature Requests)
• Resources (Latest News)
• YouTube (Video Tutorials)

---

❤️ Contributing

Read our Contributing Guide before submitting pull

requests.

Report security vulnerabilities per our Security Policy.

Built by our core team and contributors. Thank you.

---

📄 License

Directus is licensed under the Monospace Sustainable Core License (MSCL) 1.0, a

source-available license derived from the Fair Core License.

Free for most builders. Organizations under $5M in annual revenue and 50 employees can use Directus for free under

the Open Innovation Grant.

Free Core Tier. A free tier is available to everyone to explore and build on Directus without a commercial license.

Commercial License. Organizations above those thresholds using advanced or enterprise features require a commercial

license. See pricing for details.