{ "data": { "a": { "slug": "bcms", "name": "BCMS", "vendor": "Becomes tech, LLC", "vendorUrl": "https://www.thebcms.com", "kind": "http-api", "category": "cms", "summary": "BCMS is a hosted headless CMS from Becomes tech, LLC. People edit structured content in a dashboard, and agents work with templates, entries, media and languages through a REST API, a JavaScript client, a CLI and a remote MCP server.", "url": "https://www.anchorterminal.com/tools/bcms", "markdownUrl": "https://www.anchorterminal.com/tools/bcms.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/bcms.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/bcms.json", "dns": "bcms.grade.anchorterminal.com", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://app.thebcms.com/api/v3/mcp", "packages": [ { "registry": "npm", "name": "@thebcms/client" } ], "auth": "api-key", "authNotes": "Three-part keys (keyId.secret.instanceId) created in the dashboard and scoped to templates and media, with schema tools only for keys allowed them. The MCP endpoint takes the key only as the `mcpKey` query parameter, and the REST examples pass `apiKey` in the query string. The docs advise a key per person, client and environment and regular rotation.", "pricing": "paid", "pricingNotes": "Hobby $5 a month ($4 billed yearly) with 2 seats, 100 entries and 500 MB of media; Pro $50 a month ($33 yearly) with 5 seats, then $15 a seat a month, and unlimited entries; Enterprise by quote. Every plan starts with a 14-day free trial with no card. No self-hosted edition.", "priceSummary": "$5 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in llms.txt, the docs, the MCP page or pricing.md (checked 2026-11-06).", "endpoints": [] }, "toolCount": 45, "popularity": { "githubStars": null, "npmWeekly": 396, "pypiWeekly": null, "asOf": "2026-11-06" }, "docsUrl": "https://www.thebcms.com/docs", "llmsTxt": "https://www.thebcms.com/llms.txt", "capabilities": [ "cms.content", "cms.assets", "cms.localisation", "cms.schema", "cms.publish" ], "tags": [ "hosted", "mcp", "remote-mcp", "llms-txt", "no-card", "closed-source", "webhooks", "typescript", "cli" ], "lastRelease": "2026-03-16", "graded": true, "anchor": { "graded": true, "score": 33.5, "grade": "F", "agentReady": false, "rank": 1383, "ranked": true, "rankOf": 1486, "categoryRank": 17, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 36, "maintenance": 16, "payments": 30, "reliability": 15, "schema": 50, "security": 39, "transparency": 52 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "low", "date": "2026-11-06" }, "negative": 0, "verdict": "BCMS gives agents 45 MCP tools over templates, entries, statuses, history and media, with keys scoped per template and agent guidance in llms.txt, from $5 a month. The MCP key can only travel in the URL, and no status page, rate limits, changelog or security policy were found.", "bestFor": "Small sites and agencies that want a cheap hosted CMS an agent can edit.", "strengths": [ "Remote MCP server covering templates, entries, statuses, entry history, media, languages and trash", "Keys scoped to the templates and media an agent needs, with schema tools gated separately", "llms.txt that says when to use BCMS and when not to, plus a public SKILL.md", "Entry history and trash readable through MCP, so an agent can trace and recover changes", "14-day trial with no card, then plans from $5 a month" ], "weaknesses": [ "The MCP key is accepted only as a URL query parameter", "No status page, documented rate limits, SLA or changelog found", "No security.txt, disclosure policy or certification found", "The JavaScript client hasn't been released since March 2026", "No self-hosted edition; the open-source repository has been unmaintained since October 2024" ], "agentNotes": [ "Keep the MCP URL out of logs and shared config, since the key is inside it", "Call get-all-templates first and mutate only once you have template and entry ids", "Ask for a key scoped to the templates the task needs, without schema permission unless it changes the model", "List and confirm entry ids with the user before calling delete-entries", "Use the bcms-content CLI for scripted runs that need JSON output and exit codes" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "low", "grade": "F", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 33.5 } ], "editorialScores": { "ergonomics": 36, "maintenance": 16, "payments": 30, "reliability": 15, "schema": 50, "security": 39, "transparency": 48 }, "provenanceScore": 56, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npm install @thebcms/client", "claudeCode": "claude mcp add --transport http bcms \"https://app.thebcms.com/api/v3/mcp?mcpKey=YOUR_MCP_KEY_HERE\"", "config": { "mcpServers": { "bcms": { "url": "https://app.thebcms.com/api/v3/mcp?mcpKey=YOUR_MCP_KEY_HERE" } } } }, "letme": { "capability": "https://letme.dev/cms.content", "tool": "https://letme.dev/bcms" }, "area": "business", "unitPrices": [ { "item": "Hobby plan", "unit": "month", "usd": 5, "note": "$4 a month billed yearly; 2 seats, 100 entries" }, { "item": "Pro plan", "unit": "month", "usd": 50, "note": "$33 a month billed yearly; 5 seats" }, { "item": "Extra Pro seat", "unit": "seat-month", "usd": 15, "note": "$120 a year on yearly billing" } ], "provenance": { "legalEntity": "Becomes tech, LLC", "domain": "thebcms.com", "domainRegistered": "", "endpointOnVendorDomain": true, "terms": "https://www.thebcms.com/terms-of-use/", "privacy": "https://www.thebcms.com/privacy-policy/", "statusPage": "", "changelog": "", "securityTxt": "none", "checked": "2026-11-06", "notes": [ "The terms and privacy policy, both effective 30 July 2026, name Becomes tech, LLC, a Delaware LLC. The terms forbid scraping or crawling that burdens or abuses the services, except through the documented APIs within rate limits.", "www.thebcms.com/robots.txt allows all. app.thebcms.com/robots.txt disallows all paths.", "www.thebcms.com/.well-known/security.txt returned 404 and no status page was found.", "RDAP gave no registration date for thebcms.com through rdap.org." ], "score": 56 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/bcms.json", "live": { "slug": "bcms", "probe": { "target": "https://app.thebcms.com/api/v3/mcp", "method": "get", "lastAt": "2026-11-07T18:20:13.025269198Z", "lastOk": true, "lastStatus": 400, "lastMs": 197, "authRequired": false, "uptime24h": 99.5, "uptime30d": 99.5, "p50ms24h": 141, "p95ms24h": 393, "samples24h": 200, "samples30d": 200, "days": [ { "date": "2026-11-06", "probes": 13, "ok": 13 }, { "date": "2026-11-07", "probes": 187, "ok": 186 } ] }, "versions": [ { "registry": "npm", "name": "@thebcms/client", "version": "2.0.3", "seenAt": "2026-11-06T23:10:32.023184196Z" } ], "npmWeekly": 396, "securityTxt": { "url": "https://thebcms.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:00:49.817334601Z" }, "llmsTxt": { "url": "https://www.thebcms.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:31:42.21650798Z" }, "pages": [ { "url": "https://www.thebcms.com/privacy-policy/", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:35:35.490295236Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "abae80fa615e" }, { "url": "https://www.thebcms.com/terms-of-use/", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:35:37.777884178Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "58d8ef9074aa" } ], "mcpTools": { "url": "https://app.thebcms.com/api/v3/mcp?mcpKey=YOUR_MCP_KEY_HERE", "checkedAt": "2026-11-07T01:42:42.874889438Z", "status": "error", "note": "initialize: no JSON-RPC answer", "changedAt": "2026-11-07T01:42:42.874889438Z" }, "updatedAt": "2026-11-07T18:20:13.025269198Z" } }, "answer": "Directus scores 58.1 (C) on agent readiness against BCMS's 33.5 (F), and leads in every scored category.", "b": { "slug": "directus", "name": "Directus", "vendor": "Monospace Inc. (Directus)", "vendorUrl": "https://directus.com", "kind": "http-api", "category": "cms", "summary": "Directus is a source-available headless CMS and data platform that runs on an SQL database, self-hosted or on a paid cloud. Agents manage items, files and the data model through REST, GraphQL and a built-in MCP server.", "url": "https://www.anchorterminal.com/tools/directus", "markdownUrl": "https://www.anchorterminal.com/tools/directus.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/directus.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/directus.json", "dns": "directus.grade.anchorterminal.com", "repo": "https://github.com/directus/directus", "license": "MSCL-1.0-GPL (Monospace Sustainable Core Licence 1.0), source-available with a licence key for paid tiers, each version converting to GPL-3.0 after four years. `@directus/sdk` is MIT", "transports": [ "http", "streamable-http" ], "packages": [ { "registry": "npm", "name": "directus" }, { "registry": "npm", "name": "@directus/sdk" }, { "registry": "npm", "name": "@directus/specs" } ], "auth": "mixed", "authNotes": "Self-serve on your own instance, with no app review or partner approval. The MCP server at `/mcp` accepts OAuth (PKCE, with dynamic client registration or client ID metadata documents, both off by default) and issues a token with the `mcp:access` scope that works only on the MCP endpoint. REST, GraphQL and MCP also accept a static token, one per user, which doesn't expire and is sent as `Authorization: Bearer` or as `?access_token=` in the URL. Log-in tokens are short-lived with a refresh token. Every credential acts with its user's access policies, down to collection, action, field and item rule.", "pricing": "freemium", "pricingNotes": "The Core tier is free to self-host with 3 Studio seats, 25 collections and 5 flows, with no card, account or contract, so an agent can start at once. Team is $499 a month on an annual term or $599 monthly with 10 SSO seats, 50 collections and 20 flows, and Enterprise is priced by sales. Directus Cloud hosting adds $89 a month billed yearly or $99 monthly on Core and Team, with a 14-day trial. The Open Innovation Grant lifts the limits for organisations under $5M revenue and 50 employees (checked 2026-11-01).", "priceSummary": "$499 / mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs index, the pricing page or the repository's MCP source (checked 2026-10-08).", "endpoints": [] }, "toolCount": 12, "popularity": { "githubStars": 38295, "npmWeekly": 22588, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://directus.com/docs", "llmsTxt": "https://directus.com/docs/llms.txt", "openapi": "https://github.com/directus/directus/blob/main/packages/specs/src/openapi.yaml", "capabilities": [ "cms.content", "cms.schema", "cms.assets", "cms.publish", "cms.localisation" ], "tags": [ "source-available", "self-hosted", "hosted", "mcp", "oauth", "openapi", "llms-txt", "graphql", "typescript", "sql", "status-page", "soc2" ], "lastRelease": "2026-10-27", "graded": true, "anchor": { "graded": true, "score": 58.1, "grade": "C", "agentReady": false, "rank": 758, "ranked": true, "rankOf": 1486, "categoryRank": 11, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 73, "maintenance": 86, "payments": 55, "reliability": 82, "schema": 81, "security": 68, "transparency": 62 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-01" }, "negative": -15, "negativeNotes": [ "Directus publishes its own advisories on GitHub. OSV lists 19 published between 13 November 2025 and 20 July 2026, all fixed in released versions, 8 rated High (six on 4 April 2026, among them path traversal in the file API, GHSA-393c-p46r-7c95, and a TUS upload authorisation bypass, GHSA-qqmv-5p3g-px89, and two on 20 July, among them an unsegmented cache key, GHSA-c6w9-5g5j-jh2p) and 11 Moderate. The 8 October check also read on GitHub at least 20 advisories published between 24 June and 2 September 2026, at least 11 High and one critical (GHSA-97xr-jchp-xm3c, 5 August, WebSocket item access after a failed authentication message, fixed in 12.1.0). Counted per advisory, 1 for each fixed High or Moderate more than two months old, the OSV list alone gives 19, held at the 15-point limit. The 8 October check grouped them at 6. https://api.osv.dev/v1/query ; https://github.com/directus/directus/security/advisories" ], "verdict": "The built-in MCP server runs under the connecting user's permissions, supports OAuth limited to the MCP endpoint and refuses deletes unless an administrator allows them. A licence check caps the free Core tier at 3 seats, 25 collections and 5 flows, and Directus published more than 30 security advisories in the past year.", "bestFor": "Teams that already keep content in an SQL database and want an agent to edit items, files and the data model under a named user's permissions.", "strengths": [ "MCP OAuth with PKCE issues tokens with the `mcp:access` scope and the MCP endpoint as audience, and administrators can revoke registered clients", "Deletes through MCP are refused unless the Allow Deletes setting is on, and the MCP server itself is off by default", "Registry mode at `/mcp?tool_mode=registry` cuts the tool list to `search`, `execute` and `schema`", "Content versioning has REST endpoints to save, compare and promote a version, and revisions record each change", "Seven tagged releases between 18 August and 27 October 2026, with breaking changes listed per version in the docs" ], "weaknesses": [ "Version 12 (10 June 2026) added licence enforcement. The free Core tier allows 3 Studio seats, 25 collections and 5 flows, and an instance over its limits is locked after a grace period", "The licence is MSCL-1.0-GPL, source-available and not OSI approved, with a ban on competing use and on bypassing the licence key", "Static tokens never expire, are stored in plain text in `directus_users`, and the MCP guide shows them in the URL as `?access_token=`", "Releases don't follow semantic versioning, and 12.1 to 12.6 each carried breaking changes", "More than 30 security advisories published in the 12 months to November 2026, at least 18 of them rated High or critical" ], "agentNotes": [ "Connect with OAuth or an `Authorization: Bearer` header. Don't put the token in the URL as `?access_token=`, where it can be logged", "Use `/mcp?tool_mode=registry` when the client loads every tool definition. Default mode sends each tool's full instructions, about 79 KB in total", "Read the `schema` tool before writing. Item payloads are untyped objects, so field names and types come only from the data model", "Publish a version with `POST /versions/{id}/promote` over REST. The MCP `items` tool refuses system collections such as `directus_versions`", "Count translation and junction tables against the 25-collection Core limit before creating collections" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 4, "avgRating": 2.8, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 58.1 } ], "editorialScores": { "ergonomics": 73, "maintenance": 86, "payments": 55, "reliability": 82, "schema": 81, "security": 68, "transparency": 55 }, "provenanceScore": 68, "checked": { "categories": { "ergonomics": "2026-11-01", "maintenance": "2026-11-01", "payments": "2026-11-01", "reliability": "2026-11-01", "schema": "2026-11-01", "security": "2026-11-01", "transparency": "2026-11-01" }, "last": "2026-11-01", "lastMoved": "2026-11-01", "oldest": "2026-11-01", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npm install @directus/sdk", "claudeCode": "claude mcp add --transport http directus https://your-directus-url.com/mcp", "config": { "mcpServers": { "directus": { "headers": { "Authorization": "Bearer your-generated-token" }, "url": "https://your-directus-url.com/mcp" } } } }, "letme": { "capability": "https://letme.dev/cms.content", "tool": "https://letme.dev/directus" }, "area": "business", "unitPrices": [ { "item": "Core, self-hosted", "unit": "month", "usd": 0, "note": "3 Studio seats, 25 collections, 5 flows" }, { "item": "Team", "unit": "month", "usd": 499, "note": "annual term, or $599 billed monthly. 10 seats, 50 collections, 20 flows" }, { "item": "Team extra seat", "unit": "seat-month", "usd": 50, "note": "Studio users only" }, { "item": "Directus Cloud hosting add-on", "unit": "month", "usd": 99, "note": "$89 a month billed yearly, $99 monthly, for Core and Team" } ], "provenance": { "legalEntity": "Monospace Inc. (doing business as Directus)", "domain": "directus.com", "domainRegistered": "1997-02-06", "endpointOnVendorDomain": false, "terms": "https://directus.com/license", "privacy": "https://directus.com/privacy", "statusPage": "https://status.directus.cloud", "changelog": "https://github.com/directus/directus/releases", "securityTxt": "none", "checked": "2026-11-01", "notes": [ "The privacy policy (last updated 9 June 2026) names Monospace Inc., doing business as Directus, a Delaware corporation, at 223 Bedford Ave STE A #855, Brooklyn, New York. The terms page, dated 28 April 2025, gives the same entity.", "`terms` points at the MSCL-1.0-GPL licence text, which governs a self-hosted install. directus.com/terms reads as website terms of use, and Directus Cloud has separate Cloud policies at directus.com/cloud-policies.", "The privacy policy says personal information processed for customers of the product is handled under customer agreements, not the policy. No public DPA was found.", "A self-hosted install answers on its owner's domain. It contacts licensing.directus.com when a licence key is set and, since 12.6.0, telemetry.directus.com for usage reports (telemetry.directus.io before).", "https://directus.com/.well-known/security.txt returned 404 on 8 October and 1 November 2026. directus.io redirects to directus.com.", "RDAP for directus.com gives a registration date of 1997-02-06, which predates the company's use of the domain.", "The status page runs on Statuspage and covers Directus Cloud regions and the dashboard, not self-hosted installs." ], "score": 68 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/directus.json", "live": { "slug": "directus", "vendorStatus": { "page": "https://status.directus.cloud", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-07T18:21:02.401808384Z" }, "versions": [ { "registry": "github", "name": "directus/directus", "version": "v12.6.1", "released": "2026-11-04", "seenAt": "2026-11-06T23:21:39.285498358Z" }, { "registry": "npm", "name": "@directus/sdk", "version": "27.1.0", "seenAt": "2026-11-06T23:21:37.036479777Z" }, { "registry": "npm", "name": "@directus/specs", "version": "16.0.0", "seenAt": "2026-11-06T23:21:37.221743318Z" }, { "registry": "npm", "name": "directus", "version": "12.6.1", "seenAt": "2026-11-06T23:21:31.006643999Z" } ], "githubStars": 38674, "npmWeekly": 34551, "securityTxt": { "url": "https://directus.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T15:59:42.3191585Z" }, "llmsTxt": { "url": "https://directus.com/docs/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:32:17.996845291Z" }, "domain": { "domain": "directus.com", "registered": "1997-02-06", "source": "https://rdap.verisign.com/com/v1/domain/directus.com", "checkedAt": "2026-11-01T14:14:09.125793328Z" }, "pages": [ { "url": "https://directus.com/docs/releases/breaking-changes/version-12", "kind": "deprecations", "status": 304, "checkedAt": "2026-11-07T14:04:50.68273308Z", "changedAt": "2026-11-06T13:27:20.765253652Z", "fingerprint": "a9e62fddd0f7" }, { "url": "https://directus.com/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:04:55.013379319Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "316eed4e388b" }, { "url": "https://directus.com/license", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:04:52.783466902Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "665a299857ad" } ], "github": { "repo": "directus/directus", "checkedAt": "2026-11-02T08:44:28.302940541Z", "stars": 38785, "archived": false, "issuesEnabled": true, "pushedAt": "2026-10-30T16:49:43Z", "openIssues": 302, "openPRs": 59, "issuesOpened90d": 100, "issuesClosed90d": 153, "prsMerged90d": 180, "ci": { "branch": "main", "runs": 50, "success": 37, "failure": 8, "other": 5, "latest": "success", "latestAt": "2026-10-30T11:04:43Z" }, "advisories": [ { "ghsa": "GHSA-jvxj-w2qp-5vmx", "severity": "medium", "published": "2026-10-30T15:11:35Z" }, { "ghsa": "GHSA-95f8-mvw7-gpj9", "severity": "medium", "published": "2026-10-30T15:00:21Z" }, { "ghsa": "GHSA-32cw-mf7w-gpqr", "severity": "high", "published": "2026-10-30T14:50:56Z" }, { "ghsa": "GHSA-xf86-hfpm-92xr", "severity": "low", "published": "2026-10-19T20:37:26Z" }, { "ghsa": "GHSA-2xcm-7h22-3m66", "severity": "medium", "published": "2026-10-19T19:24:53Z" }, { "ghsa": "GHSA-8xp8-xrh2-88vr", "severity": "medium", "published": "2026-09-02T15:07:13Z" }, { "ghsa": "GHSA-7h45-q5jx-7r87", "severity": "medium", "published": "2026-09-02T15:02:48Z" }, { "ghsa": "GHSA-gwvv-rr68-cmv6", "severity": "high", "published": "2026-08-20T16:44:55Z" }, { "ghsa": "GHSA-4jw7-6mqj-vrhq", "severity": "high", "published": "2026-08-20T16:30:17Z" }, { "ghsa": "GHSA-7vcx-mhxq-9j96", "severity": "high", "published": "2026-08-20T16:17:22Z" }, { "ghsa": "GHSA-r9xq-xp38-j4j3", "severity": "medium", "published": "2026-08-20T16:05:34Z" }, { "ghsa": "GHSA-fq27-7m2r-q6vm", "severity": "medium", "published": "2026-08-20T15:52:55Z" }, { "ghsa": "GHSA-3742-46gx-c8cc", "severity": "high", "published": "2026-08-05T16:36:32Z" }, { "ghsa": "GHSA-xw72-c69j-h2rj", "severity": "high", "published": "2026-08-05T16:27:16Z" }, { "ghsa": "GHSA-6hpw-rhhq-6xq3", "severity": "medium", "published": "2026-08-05T16:15:09Z" }, { "ghsa": "GHSA-mww8-4gwh-rjfw", "severity": "high", "published": "2026-08-05T16:09:04Z" }, { "ghsa": "GHSA-5h38-6755-g83w", "severity": "medium", "published": "2026-08-05T15:58:01Z" }, { "ghsa": "GHSA-p623-wgx3-wxp8", "severity": "medium", "published": "2026-08-05T15:43:00Z" }, { "ghsa": "GHSA-788p-cvgf-q973", "severity": "medium", "published": "2026-08-05T15:24:54Z" }, { "ghsa": "GHSA-xjxq-pj7h-g676", "severity": "high", "published": "2026-08-05T15:13:43Z" }, { "ghsa": "GHSA-ff8w-8crv-9rcf", "severity": "medium", "published": "2026-08-05T14:59:23Z" }, { "ghsa": "GHSA-chfm-g7r3-vv42", "cve": "CVE-2026-10716", "severity": "high", "published": "2026-08-05T14:49:54Z" }, { "ghsa": "GHSA-g293-vf99-xv36", "severity": "high", "published": "2026-08-05T14:37:34Z" }, { "ghsa": "GHSA-97xr-jchp-xm3c", "severity": "critical", "published": "2026-08-05T14:10:57Z" }, { "ghsa": "GHSA-c6w9-5g5j-jh2p", "cve": "CVE-2026-61836", "severity": "high", "published": "2026-06-24T16:40:53Z" }, { "ghsa": "GHSA-j5h6-vqc3-phqh", "cve": "CVE-2026-61835", "severity": "high", "published": "2026-06-24T16:35:02Z" }, { "ghsa": "GHSA-38hg-ww64-rrwc", "cve": "CVE-2026-35442", "severity": "high", "published": "2026-04-02T16:44:49Z" }, { "ghsa": "GHSA-ph52-67fq-75wj", "cve": "CVE-2026-35441", "severity": "medium", "published": "2026-04-02T16:44:31Z" }, { "ghsa": "GHSA-6q22-g298-grjh", "cve": "CVE-2026-35441", "severity": "high", "published": "2026-04-02T16:44:26Z" }, { "ghsa": "GHSA-mvv8-v4jj-g47j", "cve": "CVE-2026-39943", "severity": "medium", "published": "2026-04-02T16:31:52Z" }, { "ghsa": "GHSA-qqmv-5p3g-px89", "cve": "CVE-2026-35412", "severity": "high", "published": "2026-04-02T16:27:03Z" }, { "ghsa": "GHSA-wv3h-5fx7-966h", "cve": "CVE-2026-35409", "severity": "high", "published": "2026-04-02T16:26:22Z" }, { "ghsa": "GHSA-wxwm-3fxv-mrvx", "cve": "CVE-2026-35413", "severity": "medium", "published": "2026-04-02T16:26:04Z" }, { "ghsa": "GHSA-cf45-hxwj-4cfj", "cve": "CVE-2026-35410", "severity": "medium", "published": "2026-04-02T16:18:19Z" }, { "ghsa": "GHSA-q75c-4gmv-mg9x", "cve": "CVE-2026-35411", "severity": "medium", "published": "2026-04-02T16:18:03Z" }, { "ghsa": "GHSA-393c-p46r-7c95", "cve": "CVE-2026-39942", "severity": "high", "published": "2026-04-02T16:03:30Z" }, { "ghsa": "GHSA-8m32-p958-jg99", "cve": "CVE-2026-35408", "severity": "high", "published": "2026-04-02T16:01:08Z" }, { "ghsa": "GHSA-jr94-gj3h-c8rf", "cve": "CVE-2026-26185", "severity": "medium", "published": "2026-02-12T16:47:36Z" }, { "ghsa": "GHSA-3573-4c68-g8cc", "cve": "CVE-2026-22032", "severity": "medium", "published": "2026-01-06T18:55:01Z" }, { "ghsa": "GHSA-cph6-524f-3hgr", "cve": "CVE-2025-64749", "severity": "medium", "published": "2025-11-13T15:00:02Z" }, { "ghsa": "GHSA-8jpw-gpr4-8cmh", "cve": "CVE-2025-64748", "severity": "medium", "published": "2025-11-13T14:59:18Z" }, { "ghsa": "GHSA-vv2v-pw69-8crf", "cve": "CVE-2025-64747", "severity": "medium", "published": "2025-11-13T14:49:53Z" }, { "ghsa": "GHSA-9x5g-62gj-wqf2", "cve": "CVE-2025-64746", "severity": "medium", "published": "2025-11-13T14:48:27Z" }, { "ghsa": "GHSA-mv33-9f6j-pfmc", "cve": "CVE-2025-55746", "severity": "critical", "published": "2025-08-20T06:38:22Z" }, { "ghsa": "GHSA-7cvf-pxgp-42fc", "cve": "CVE-2025-53889", "severity": "medium", "published": "2025-07-14T18:38:08Z" }, { "ghsa": "GHSA-rmjh-cf9q-pv7q", "cve": "CVE-2025-53887", "severity": "medium", "published": "2025-07-14T16:23:03Z" }, { "ghsa": "GHSA-f24x-rm6g-3w5v", "cve": "CVE-2025-53886", "severity": "medium", "published": "2025-07-14T16:12:20Z" }, { "ghsa": "GHSA-x3vm-88hf-gpxp", "cve": "CVE-2025-53885", "severity": "medium", "published": "2025-07-14T15:48:10Z" }, { "ghsa": "GHSA-fm3h-p9wm-h74h", "cve": "CVE-2025-30353", "severity": "high", "published": "2025-03-26T15:20:25Z" }, { "ghsa": "GHSA-7wq3-jr35-275c", "cve": "CVE-2025-30352", "severity": "medium", "published": "2025-03-26T15:04:58Z" }, { "ghsa": "GHSA-56p6-qw3c-fq2g", "cve": "CVE-2025-30351", "severity": "low", "published": "2025-03-26T14:56:51Z" }, { "ghsa": "GHSA-rv78-qqrq-73m5", "cve": "CVE-2025-30350", "severity": "medium", "published": "2025-03-26T14:52:55Z" }, { "ghsa": "GHSA-j8xj-7jff-46mx", "cve": "CVE-2025-30225", "severity": "medium", "published": "2025-03-26T14:46:27Z" }, { "ghsa": "GHSA-99vm-5v2h-h6r6", "cve": "CVE-2025-27089", "severity": "medium", "published": "2025-02-19T15:33:20Z" }, { "ghsa": "GHSA-9qrm-48qf-r2rw", "cve": "CVE-2024-6533", "severity": "low", "published": "2025-01-23T16:08:13Z" }, { "ghsa": "GHSA-pmf4-v838-29hg", "cve": "CVE-2025-24353", "severity": "medium", "published": "2025-01-23T15:54:02Z" }, { "ghsa": "GHSA-849r-qrwj-8rv4", "cve": "CVE-2024-54151", "severity": "high", "published": "2024-12-09T14:47:46Z" }, { "ghsa": "GHSA-r6wx-627v-gh2f", "cve": "CVE-2024-54128", "severity": "medium", "published": "2024-12-05T15:42:01Z" }, { "ghsa": "GHSA-vw58-ph65-6rxp", "cve": "CVE-2024-47822", "severity": "medium", "published": "2024-10-08T12:52:21Z" }, { "ghsa": "GHSA-68g8-c275-xf2m", "cve": "CVE-2024-46990", "severity": "medium", "published": "2024-09-18T16:19:10Z" }, { "ghsa": "GHSA-cff8-x7jv-4fm8", "cve": "CVE-2024-45596", "severity": "high", "published": "2024-09-10T18:11:49Z" }, { "ghsa": "GHSA-3fff-gqw3-vj86", "cve": "CVE-2024-6534", "severity": "medium", "published": "2024-08-27T16:12:08Z" }, { "ghsa": "GHSA-jgf4-vwc3-r46v", "cve": "CVE-2024-39896", "severity": "high", "published": "2024-07-08T17:15:54Z" }, { "ghsa": "GHSA-7hmh-pfrp-vcx4", "cve": "CVE-2024-39895", "severity": "medium", "published": "2024-07-08T16:00:15Z" }, { "ghsa": "GHSA-hxgm-ghmv-xjjm", "cve": "CVE-2024-39701", "severity": "medium", "published": "2024-07-08T15:47:55Z" }, { "ghsa": "GHSA-8p72-rcq4-h6pw", "cve": "CVE-2024-39699", "severity": "medium", "published": "2024-07-08T12:27:48Z" }, { "ghsa": "GHSA-632p-p495-25m5", "cve": "CVE-2024-36128", "severity": "high", "published": "2024-06-03T14:30:39Z" }, { "ghsa": "GHSA-g65h-35f3-x2w3", "cve": "CVE-2024-34709", "severity": "medium", "published": "2024-05-13T18:36:42Z" }, { "ghsa": "GHSA-p8v3-m643-4xqx", "cve": "CVE-2024-34708", "severity": "medium", "published": "2024-05-13T18:36:31Z" }, { "ghsa": "GHSA-fr3w-2p22-6w7p", "cve": "CVE-2024-28239", "severity": "medium", "published": "2024-03-12T18:29:08Z" }, { "ghsa": "GHSA-2ccr-g2rv-h677", "cve": "CVE-2024-28238", "severity": "low", "published": "2024-03-12T18:28:20Z" }, { "ghsa": "GHSA-5mhg-wv8w-p59j", "cve": "CVE-2024-27296", "severity": "medium", "published": "2024-03-01T12:15:56Z" }, { "ghsa": "GHSA-qw9g-7549-7wg5", "cve": "CVE-2024-27295", "severity": "high", "published": "2024-03-01T12:15:40Z" }, { "ghsa": "GHSA-hmgw-9jrg-hf2m", "cve": "CVE-2023-45820", "severity": "high", "published": "2023-10-19T18:19:43Z" }, { "ghsa": "GHSA-22rr-f3p8-5gf8", "severity": "high", "published": "2023-09-14T11:42:18Z" }, { "ghsa": "GHSA-gggm-66rh-pp98", "cve": "CVE-2023-38503", "severity": "medium", "published": "2023-07-25T21:37:34Z" }, { "ghsa": "GHSA-8vg2-wf3q-mwv7", "cve": "CVE-2023-28443", "severity": "medium", "published": "2023-03-23T18:50:03Z" }, { "ghsa": "GHSA-m5q3-8wgf-x8xf", "cve": "CVE-2023-27481", "severity": "medium", "published": "2023-03-07T11:22:08Z" }, { "ghsa": "GHSA-4hmq-ggrm-qfc6", "cve": "CVE-2023-27474", "severity": "high", "published": "2023-03-06T09:13:24Z" }, { "ghsa": "GHSA-j3rg-3rgm-537h", "cve": "CVE-2023-26492", "severity": "medium", "published": "2023-03-03T18:22:27Z" }, { "ghsa": "GHSA-77qm-wvqq-fg79", "cve": "CVE-2022-36031", "severity": "medium", "published": "2022-08-19T20:03:56Z" }, { "ghsa": "GHSA-g27j-74fp-xfpr", "cve": "CVE-2022-26969", "severity": "high", "published": "2022-04-04T13:33:23Z" }, { "ghsa": "GHSA-xmjj-3c76-5w84", "cve": "CVE-2022-24814", "severity": "high", "published": "2022-04-04T13:32:53Z" } ], "replies": { "sampled": 25, "unanswered": 10, "medianDays": 0.3 } }, "updatedAt": "2026-11-07T18:21:02.401808384Z" } }, "edges": [ { "by": 70, "category": "maintenance", "leads": "directus", "name": "Maintenance \u0026 community", "reasons": { "a": "@thebcms/client 2.0.3 was published on 16 March 2026, more than 180 days ago, and no dated API or MCP change was found. The terms of 30 July 2026 and the 3.0.0 server card show the product is current, so 5 of 30. No dated releases or changelog entries in the last 90 days (0). No public changelog; support by contact form (4 of 25). Not in the official MCP registry; one current JavaScript client (4 of 15). The client hasn't been released since March (3 of 10). 5+0+4+4+3 = 16.", "b": "v12.6.0 was tagged on 27 October 2026 (30). Seven tagged releases in the 90 days from 3 August (12.3.0, 12.3.1, 12.4.0, 12.4.1, 12.5.0, 12.5.1 and 12.6.0) (20). 339 open issues, the newest labelled and answered, with 170 commits on main since 10 July, per the 8 October check, not re-read on 1 November. Closed-issue counts weren't readable (17 of 25). `@directus/sdk` is current and is the only official SDK. We couldn't reach the official MCP registry, which matters less for a server built into the product (10 of 15). Dependency updates for CVEs land in each release (12.5.1 and 12.6.0 among them), CI passed on main on 8 October and CodeQL runs (9 of 10)." }, "scores": { "a": 16, "b": 86 } }, { "by": 67, "category": "reliability", "leads": "directus", "name": "Reliability", "reasons": { "a": "Graded on BCMS Cloud with the hosted lines. No status page was found (0) and no incident history could be read (5). The terms refer to rate limits, but no numbers were found in the docs (0). No 429 or retry guidance was found (0). No SLA; Enterprise is by quote (0). The MCP server card says version 3.0.0 and nothing is labelled beta (10). 0+5+0+0+0+10 = 15.", "b": "Read with the local-software lines, since the graded surface is the self-hosted software on the free Core tier. Directus Cloud's status page isn't scored here. Official Docker image `directus/directus` and npm package `directus` 12.6.0, with Node.js 26 or later in `engines` since 12.6.0 and the supported databases listed (20). The Check workflow passed on the 10 most recent runs on main on 8 October, per the 8 October check, not re-read on 1 November, and separate end-to-end and CodeQL workflows exist (25). 339 open issues. The 15 newest carry labels and one to eight comments, but we couldn't read closed counts, and at least 20 advisories were fixed between June and September 2026 (15 of 25). The docs say releases don't follow semantic versioning and any release may break. Breaking changes are listed per version, and 12.1 to 12.6 each had some (7 of 15). Version 12, and the MCP server isn't marked beta (15)." }, "scores": { "a": 15, "b": 82 } }, { "by": 37, "category": "ergonomics", "leads": "directus", "name": "Agent ergonomics", "reasons": { "a": "45 MCP tools, more than 30 (5). We added 3 because keys without schema permission hide the schema tools (8 of 25). No pagination or filter parameters were found in the docs read (6 of 20). Error guidance covers 403 and permission errors only (8 of 20). Annotations weren't readable; entry history and trash give a way back, and the docs say to list and confirm ids before deletes (6 of 20). One JavaScript client and a CLI (8 of 15). 8+6+8+6+8 = 36.", "b": "Default mode lists 12 tools, the 11 to 30 band, but each definition carries its whole instruction file, 78,855 bytes in total at v12.5.0, so we scored 10 and added 8 for registry mode, which lists three tools and loads details on demand (18 of 25). `limit` (default 100), `offset`, `page`, `fields`, `filter`, `search`, `sort` and `aggregate`, with `QUERY_LIMIT_MAX` as a server cap (20). One error shape with a machine-readable `extensions.code`. Missing items answer `FORBIDDEN`, not 404, by design (17 of 20). Tools set `readOnlyHint` and `destructiveHint`, though one `items` tool covers reads and writes and is marked destructive. No idempotency keys were found in the reviewed documentation (10 of 20). Few required parameters. One official SDK, `@directus/sdk` for JavaScript and TypeScript (8 of 15)." }, "scores": { "a": 36, "b": 73 } }, { "by": 31, "category": "schema", "leads": "directus", "name": "Schema \u0026 documentation", "reasons": { "a": "The docs link an OpenAPI reference at app.thebcms.com/open-api-docs, but that host's robots.txt disallows every path, so it wasn't read. The MCP tool schemas need a session (10 of 25). llms.txt, docs llms.txt, llms-full.txt, Markdown pages and a public SKILL.md (10). llms.txt says when to use BCMS and when not to, and the MCP page gives each tool group's purpose (12 of 20). Input typing couldn't be checked (5 of 15). Curl and JavaScript examples, and troubleshooting for 403 and permission errors (7 of 15). API v3 paths and a 3.0.0 server card, with no changelog found (6 of 15). 10+10+12+5+7+6 = 50.", "b": "An OpenAPI file ships in `@directus/specs` with 70 paths, each instance serves its own at `/server/specs/oas`, and every MCP tool has a typed input schema. The spec's `info.version` still reads 10 (22 of 25). llms.txt, llms-full.txt and a raw Markdown copy of every docs page (10). Each tool has a one-sentence description and a `prompt.md` of instructions with worked examples, up to 13 KB for flows, and a `system-prompt` tool sets conventions (16 of 20). Actions are enums and validation uses strict unions per action, but item data, filters, `deep`, and field `schema` and `meta` are open records (8 of 15). The errors page lists HTTP statuses and error codes with the response shape, and guides show REST, GraphQL and SDK examples side by side (14 of 15). A monthly changelog, release notes and breaking-change pages per major version. REST paths carry no version and releases aren't semantic (11 of 15)." }, "scores": { "a": 50, "b": 81 } }, { "by": 29, "category": "security", "leads": "directus", "name": "Security \u0026 auth", "reasons": { "a": "Keys are scoped per template and media and can be revoked and rotated (25), less 10 because the MCP key is accepted only as `?mcpKey=` in the URL and REST examples pass `apiKey` the same way (15 of 30). Scoped keys, schema tools gated by key, and scoped delete permission; no approval step (12 of 20). Entries hold text written by people and no prompt-injection guidance was found (3 of 15). Entry history and log history (2 days on Hobby, 30 on Pro) let the operator see what an agent changed (9 of 15). No security.txt, disclosure policy or certification was found (0). 15+12+3+9+0 = 39.", "b": "MCP OAuth uses PKCE with dynamic client registration or client ID metadata documents, issues a token with the single `mcp:access` scope and the MCP endpoint as audience, and lets administrators revoke clients. Static tokens are one per user, don't expire and are stored in plain text. We scored 26 and took 10 because `?access_token=` in the URL is a documented option that the MCP guide uses for three clients (16 of 30). Access policies limit a user by collection, action, field and item rule, the MCP server is off by default, and deletes are refused unless Allow Deletes is on. No server-side approval step for other writes (16 of 20). A security guide for MCP covers prompt injection, mixing servers and auto-approval, with advice only (11 of 15). The activity log records user, action, time, IP address, user agent, collection and item, kept 30 days on Core (11 of 15). A disclosure policy with private GitHub reports and a security address, advisories published in public, and SOC 2 Type 2 with a penetration test report on the trust centre. No bug bounty found, and security.txt returns 404 (14 of 20)." }, "scores": { "a": 39, "b": 68 } }, { "by": 25, "category": "payments", "leads": "directus", "name": "Payments \u0026 pricing", "reasons": { "a": "No x402, MPP or L402 (0). Plan and seat prices are public; no per-call prices (10). 14-day trial with no card on every plan (20). Signup with GitHub or Google in a browser, keys made in the dashboard (0). 0+10+20+0 = 30.", "b": "Scored with the self-hosted rule, taking prices from the paid options beside the free tier. No x402, MPP or L402 (0). Core is $0, Team is $499 a month on an annual term or $599 monthly, extra seats are $50 each a month, and Directus Cloud hosting is a $99 a month add-on, all public. Enterprise is priced by sales (20). The Core tier is free to self-host with no card and no account, and Cloud has a 14-day trial (20). `ADMIN_EMAIL`, `ADMIN_PASSWORD` and `ADMIN_TOKEN` create the first administrator and a static token at start-up, so the REST route needs no browser. The docs enable the MCP server only through the Studio settings page, so we took 5 off (15 of 20)." }, "scores": { "a": 30, "b": 55 } } ], "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Becomes tech, LLC", "b": "Monospace Inc. (Directus)", "name": "Vendor" }, { "a": "https://app.thebcms.com/api/v3/mcp", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "HTTP, Streamable HTTP", "b": "HTTP, Streamable HTTP", "name": "Transports" }, { "a": "API key", "b": "OAuth or key", "name": "Auth" }, { "a": "Paid", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "none", "b": "MSCL-1.0-GPL (Monospace Sustainable Core Licence 1.0), source-available with a licence key for paid tiers, each version converting to GPL-3.0 after four years. `@directus/sdk` is MIT", "name": "Licence" }, { "a": "45", "b": "12", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-03-16", "b": "2026-10-27", "name": "Last release" }, { "a": "2026-07-30", "b": "no date given", "name": "Terms last updated" }, { "a": "2026-07-30", "b": "2026-06-09", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "yes", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "yes", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "396 npm/wk", "b": "38k stars, 23k npm/wk", "name": "Popularity" }, { "a": "none", "b": "2.8/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "Directus scores 58.1 (C) on agent readiness against BCMS's 33.5 (F), and leads in every scored category.", "question": "Which is better for AI agents, BCMS or Directus?" }, { "answer": "BCMS needs an API key. Directus takes an API key or an OAuth sign-in.", "question": "Do BCMS and Directus need an API key?" }, { "answer": "BCMS has a hosted endpoint at https://app.thebcms.com/api/v3/mcp. No hosted endpoint is listed for Directus.", "question": "Can an agent call BCMS and Directus without installing anything?" } ], "goodFor": [ { "aheadOn": null, "also": [ "A hosted endpoint, with nothing to install", "Free to start without a card", "No incidents deducted, where Directus loses 15 points for them" ], "goodFor": "Small sites and agencies that want a cheap hosted CMS an agent can edit.", "slug": "bcms", "watchFor": "The MCP key is accepted only as a URL query parameter" }, { "aheadOn": [ "Reliability, 82 against 15", "Schema \u0026 documentation, 81 against 50", "Agent ergonomics, 73 against 36", "Security \u0026 auth, 68 against 39", "Payments \u0026 pricing, 55 against 30", "Maintenance \u0026 community, 86 against 16", "Transparency \u0026 trust, 62 against 52" ], "also": null, "goodFor": "Teams that already keep content in an SQL database and want an agent to edit items, files and the data model under a named user's permissions.", "slug": "directus", "watchFor": "Version 12 (10 June 2026) added licence enforcement. The free Core tier allows 3 Studio seats, 25 collections and 5 flows, and an instance over its limits is locked after a grace period" } ], "history": { "bcms": null, "directus": [ { "causes": [ "correction" ], "date": "2026-11-01", "delta": -9, "from": 67.1, "fromGrade": "B", "to": 58.1, "toGrade": "C" }, { "causes": [ "correction" ], "date": "2026-10-28", "delta": -0.1, "from": 67.2, "fromGrade": "B", "to": 67.1, "toGrade": "B" }, { "causes": [ "method" ], "date": "2026-10-27", "delta": 0.1, "from": 67.1, "fromGrade": "B", "to": 67.2, "toGrade": "B" } ] }, "job": { "capability": "cms.content", "name": "Content management" }, "others": [ { "json": "https://www.anchorterminal.com/compare/bcms-vs-buttercms.json", "title": "BCMS vs ButterCMS", "url": "https://www.anchorterminal.com/compare/bcms-vs-buttercms" }, { "json": "https://www.anchorterminal.com/compare/bcms-vs-contentstack.json", "title": "BCMS vs Contentstack", "url": "https://www.anchorterminal.com/compare/bcms-vs-contentstack" }, { "json": "https://www.anchorterminal.com/compare/bcms-vs-cosmic.json", "title": "BCMS vs Cosmic", "url": "https://www.anchorterminal.com/compare/bcms-vs-cosmic" }, { "json": "https://www.anchorterminal.com/compare/bcms-vs-datocms.json", "title": "BCMS vs DatoCMS", "url": "https://www.anchorterminal.com/compare/bcms-vs-datocms" }, { "json": "https://www.anchorterminal.com/compare/bcms-vs-dotcms.json", "title": "BCMS vs dotCMS", "url": "https://www.anchorterminal.com/compare/bcms-vs-dotcms" }, { "json": "https://www.anchorterminal.com/compare/bcms-vs-ghost.json", "title": "BCMS vs Ghost", "url": "https://www.anchorterminal.com/compare/bcms-vs-ghost" }, { "json": "https://www.anchorterminal.com/compare/bcms-vs-hygraph.json", "title": "BCMS vs Hygraph", "url": "https://www.anchorterminal.com/compare/bcms-vs-hygraph" }, { "json": "https://www.anchorterminal.com/compare/bcms-vs-kontent-ai.json", "title": "BCMS vs Kontent.ai", "url": "https://www.anchorterminal.com/compare/bcms-vs-kontent-ai" }, { "json": "https://www.anchorterminal.com/compare/bcms-vs-payload.json", "title": "BCMS vs Payload", "url": "https://www.anchorterminal.com/compare/bcms-vs-payload" }, { "json": "https://www.anchorterminal.com/compare/bcms-vs-prismic.json", "title": "BCMS vs Prismic", "url": "https://www.anchorterminal.com/compare/bcms-vs-prismic" }, { "json": "https://www.anchorterminal.com/compare/bcms-vs-sanity.json", "title": "BCMS vs Sanity", "url": "https://www.anchorterminal.com/compare/bcms-vs-sanity" }, { "json": "https://www.anchorterminal.com/compare/bcms-vs-storyblok.json", "title": "BCMS vs Storyblok", "url": "https://www.anchorterminal.com/compare/bcms-vs-storyblok" }, { "json": "https://www.anchorterminal.com/compare/bcms-vs-strapi.json", "title": "BCMS vs Strapi", "url": "https://www.anchorterminal.com/compare/bcms-vs-strapi" }, { "json": "https://www.anchorterminal.com/compare/bcms-vs-webflow.json", "title": "BCMS vs Webflow", "url": "https://www.anchorterminal.com/compare/bcms-vs-webflow" }, { "json": "https://www.anchorterminal.com/compare/bcms-vs-wordpress.json", "title": "BCMS vs WordPress", "url": "https://www.anchorterminal.com/compare/bcms-vs-wordpress" }, { "json": "https://www.anchorterminal.com/compare/buttercms-vs-directus.json", "title": "ButterCMS vs Directus", "url": "https://www.anchorterminal.com/compare/buttercms-vs-directus" }, { "json": "https://www.anchorterminal.com/compare/contentstack-vs-directus.json", "title": "Contentstack vs Directus", "url": "https://www.anchorterminal.com/compare/contentstack-vs-directus" }, { "json": "https://www.anchorterminal.com/compare/cosmic-vs-directus.json", "title": "Cosmic vs Directus", "url": "https://www.anchorterminal.com/compare/cosmic-vs-directus" }, { "json": "https://www.anchorterminal.com/compare/datocms-vs-directus.json", "title": "DatoCMS vs Directus", "url": "https://www.anchorterminal.com/compare/datocms-vs-directus" }, { "json": "https://www.anchorterminal.com/compare/directus-vs-dotcms.json", "title": "Directus vs dotCMS", "url": "https://www.anchorterminal.com/compare/directus-vs-dotcms" }, { "json": "https://www.anchorterminal.com/compare/directus-vs-ghost.json", "title": "Directus vs Ghost", "url": "https://www.anchorterminal.com/compare/directus-vs-ghost" }, { "json": "https://www.anchorterminal.com/compare/directus-vs-hygraph.json", "title": "Directus vs Hygraph", "url": "https://www.anchorterminal.com/compare/directus-vs-hygraph" }, { "json": "https://www.anchorterminal.com/compare/directus-vs-kontent-ai.json", "title": "Directus vs Kontent.ai", "url": "https://www.anchorterminal.com/compare/directus-vs-kontent-ai" }, { "json": "https://www.anchorterminal.com/compare/directus-vs-payload.json", "title": "Directus vs Payload", "url": "https://www.anchorterminal.com/compare/directus-vs-payload" }, { "json": "https://www.anchorterminal.com/compare/directus-vs-prismic.json", "title": "Directus vs Prismic", "url": "https://www.anchorterminal.com/compare/directus-vs-prismic" }, { "json": "https://www.anchorterminal.com/compare/directus-vs-sanity.json", "title": "Directus vs Sanity", "url": "https://www.anchorterminal.com/compare/directus-vs-sanity" }, { "json": "https://www.anchorterminal.com/compare/directus-vs-storyblok.json", "title": "Directus vs Storyblok", "url": "https://www.anchorterminal.com/compare/directus-vs-storyblok" }, { "json": "https://www.anchorterminal.com/compare/directus-vs-strapi.json", "title": "Directus vs Strapi", "url": "https://www.anchorterminal.com/compare/directus-vs-strapi" }, { "json": "https://www.anchorterminal.com/compare/directus-vs-webflow.json", "title": "Directus vs Webflow", "url": "https://www.anchorterminal.com/compare/directus-vs-webflow" }, { "json": "https://www.anchorterminal.com/compare/directus-vs-wordpress.json", "title": "Directus vs WordPress", "url": "https://www.anchorterminal.com/compare/directus-vs-wordpress" } ], "panel": null, "scores": [ { "bcms": 15, "by": 67, "directus": 82, "edge": "directus", "key": "reliability", "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "bcms": 50, "by": 31, "directus": 81, "edge": "directus", "key": "schema", "name": "Schema \u0026 documentation", "weight": 13 }, { "bcms": 36, "by": 37, "directus": 73, "edge": "directus", "key": "ergonomics", "name": "Agent ergonomics", "weight": 13 }, { "bcms": 39, "by": 29, "directus": 68, "edge": "directus", "key": "security", "name": "Security \u0026 auth", "weight": 14 }, { "bcms": 30, "by": 25, "directus": 55, "edge": "directus", "key": "payments", "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "bcms": 16, "by": 70, "directus": 86, "edge": "directus", "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7 }, { "bcms": 52, "by": 10, "directus": 62, "edge": "directus", "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "Directus scores 58.1 (C) on agent readiness against BCMS's 33.5 (F), and leads in every scored category. Both do content management.", "tasks": null, "tutorials": [], "verdicts": { "bcms": "BCMS gives agents 45 MCP tools over templates, entries, statuses, history and media, with keys scoped per template and agent guidance in llms.txt, from $5 a month. The MCP key can only travel in the URL, and no status page, rate limits, changelog or security policy were found.", "directus": "The built-in MCP server runs under the connecting user's permissions, supports OAuth limited to the MCP endpoint and refuses deletes unless an administrator allows them. A licence check caps the free Core tier at 3 seats, 25 collections and 5 flows, and Directus published more than 30 security advisories in the past year." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/bcms-vs-directus", "json": "https://www.anchorterminal.com/compare/bcms-vs-directus.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/bcms-vs-directus.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/bcms-vs-directus.min.md" }, "markdown": "Directus scores 58.1 (C) on agent readiness against BCMS's 33.5 (F), and leads in every scored category. Both do content management.\n\n- BCMS: grade F, 33.5/100, rank #1383 of 1486. Markdown https://www.anchorterminal.com/tools/bcms.md · JSON https://www.anchorterminal.com/api/v1/tools/bcms.json\n- Directus: grade C, 58.1/100, rank #758 of 1486. Markdown https://www.anchorterminal.com/tools/directus.md · JSON https://www.anchorterminal.com/api/v1/tools/directus.json\n- Best headless CMS and website publishing for AI agents: https://www.anchorterminal.com/best/cms/index.md\n- All 136 cms comparisons: https://www.anchorterminal.com/compare/cms/index.md\n\n## Which one, for what\n\n### BCMS (F)\n\nGood for: Small sites and agencies that want a cheap hosted CMS an agent can edit.\n\nAlso in its favour:\n- A hosted endpoint, with nothing to install\n- Free to start without a card\n- No incidents deducted, where Directus loses 15 points for them\n\nWatch for: The MCP key is accepted only as a URL query parameter\n\n### Directus (C)\n\nGood for: Teams that already keep content in an SQL database and want an agent to edit items, files and the data model under a named user's permissions.\n\nAhead on:\n- Reliability, 82 against 15\n- Schema \u0026 documentation, 81 against 50\n- Agent ergonomics, 73 against 36\n- Security \u0026 auth, 68 against 39\n- Payments \u0026 pricing, 55 against 30\n- Maintenance \u0026 community, 86 against 16\n- Transparency \u0026 trust, 62 against 52\n\nWatch for: Version 12 (10 June 2026) added licence enforcement. The free Core tier allows 3 Studio seats, 25 collections and 5 flows, and an instance over its limits is locked after a grace period\n\n\n## Why the edge\n\n### Maintenance \u0026 community: Directus +70\n\n- BCMS (16): @thebcms/client 2.0.3 was published on 16 March 2026, more than 180 days ago, and no dated API or MCP change was found. The terms of 30 July 2026 and the 3.0.0 server card show the product is current, so 5 of 30. No dated releases or changelog entries in the last 90 days (0). No public changelog; support by contact form (4 of 25). Not in the official MCP registry; one current JavaScript client (4 of 15). The client hasn't been released since March (3 of 10). 5+0+4+4+3 = 16.\n- Directus (86): v12.6.0 was tagged on 27 October 2026 (30). Seven tagged releases in the 90 days from 3 August (12.3.0, 12.3.1, 12.4.0, 12.4.1, 12.5.0, 12.5.1 and 12.6.0) (20). 339 open issues, the newest labelled and answered, with 170 commits on main since 10 July, per the 8 October check, not re-read on 1 November. Closed-issue counts weren't readable (17 of 25). `@directus/sdk` is current and is the only official SDK. We couldn't reach the official MCP registry, which matters less for a server built into the product (10 of 15). Dependency updates for CVEs land in each release (12.5.1 and 12.6.0 among them), CI passed on main on 8 October and CodeQL runs (9 of 10).\n\n### Reliability: Directus +67\n\n- BCMS (15): Graded on BCMS Cloud with the hosted lines. No status page was found (0) and no incident history could be read (5). The terms refer to rate limits, but no numbers were found in the docs (0). No 429 or retry guidance was found (0). No SLA; Enterprise is by quote (0). The MCP server card says version 3.0.0 and nothing is labelled beta (10). 0+5+0+0+0+10 = 15.\n- Directus (82): Read with the local-software lines, since the graded surface is the self-hosted software on the free Core tier. Directus Cloud's status page isn't scored here. Official Docker image `directus/directus` and npm package `directus` 12.6.0, with Node.js 26 or later in `engines` since 12.6.0 and the supported databases listed (20). The Check workflow passed on the 10 most recent runs on main on 8 October, per the 8 October check, not re-read on 1 November, and separate end-to-end and CodeQL workflows exist (25). 339 open issues. The 15 newest carry labels and one to eight comments, but we couldn't read closed counts, and at least 20 advisories were fixed between June and September 2026 (15 of 25). The docs say releases don't follow semantic versioning and any release may break. Breaking changes are listed per version, and 12.1 to 12.6 each had some (7 of 15). Version 12, and the MCP server isn't marked beta (15).\n\n### Agent ergonomics: Directus +37\n\n- BCMS (36): 45 MCP tools, more than 30 (5). We added 3 because keys without schema permission hide the schema tools (8 of 25). No pagination or filter parameters were found in the docs read (6 of 20). Error guidance covers 403 and permission errors only (8 of 20). Annotations weren't readable; entry history and trash give a way back, and the docs say to list and confirm ids before deletes (6 of 20). One JavaScript client and a CLI (8 of 15). 8+6+8+6+8 = 36.\n- Directus (73): Default mode lists 12 tools, the 11 to 30 band, but each definition carries its whole instruction file, 78,855 bytes in total at v12.5.0, so we scored 10 and added 8 for registry mode, which lists three tools and loads details on demand (18 of 25). `limit` (default 100), `offset`, `page`, `fields`, `filter`, `search`, `sort` and `aggregate`, with `QUERY_LIMIT_MAX` as a server cap (20). One error shape with a machine-readable `extensions.code`. Missing items answer `FORBIDDEN`, not 404, by design (17 of 20). Tools set `readOnlyHint` and `destructiveHint`, though one `items` tool covers reads and writes and is marked destructive. No idempotency keys were found in the reviewed documentation (10 of 20). Few required parameters. One official SDK, `@directus/sdk` for JavaScript and TypeScript (8 of 15).\n\n### Schema \u0026 documentation: Directus +31\n\n- BCMS (50): The docs link an OpenAPI reference at app.thebcms.com/open-api-docs, but that host's robots.txt disallows every path, so it wasn't read. The MCP tool schemas need a session (10 of 25). llms.txt, docs llms.txt, llms-full.txt, Markdown pages and a public SKILL.md (10). llms.txt says when to use BCMS and when not to, and the MCP page gives each tool group's purpose (12 of 20). Input typing couldn't be checked (5 of 15). Curl and JavaScript examples, and troubleshooting for 403 and permission errors (7 of 15). API v3 paths and a 3.0.0 server card, with no changelog found (6 of 15). 10+10+12+5+7+6 = 50.\n- Directus (81): An OpenAPI file ships in `@directus/specs` with 70 paths, each instance serves its own at `/server/specs/oas`, and every MCP tool has a typed input schema. The spec's `info.version` still reads 10 (22 of 25). llms.txt, llms-full.txt and a raw Markdown copy of every docs page (10). Each tool has a one-sentence description and a `prompt.md` of instructions with worked examples, up to 13 KB for flows, and a `system-prompt` tool sets conventions (16 of 20). Actions are enums and validation uses strict unions per action, but item data, filters, `deep`, and field `schema` and `meta` are open records (8 of 15). The errors page lists HTTP statuses and error codes with the response shape, and guides show REST, GraphQL and SDK examples side by side (14 of 15). A monthly changelog, release notes and breaking-change pages per major version. REST paths carry no version and releases aren't semantic (11 of 15).\n\n### Security \u0026 auth: Directus +29\n\n- BCMS (39): Keys are scoped per template and media and can be revoked and rotated (25), less 10 because the MCP key is accepted only as `?mcpKey=` in the URL and REST examples pass `apiKey` the same way (15 of 30). Scoped keys, schema tools gated by key, and scoped delete permission; no approval step (12 of 20). Entries hold text written by people and no prompt-injection guidance was found (3 of 15). Entry history and log history (2 days on Hobby, 30 on Pro) let the operator see what an agent changed (9 of 15). No security.txt, disclosure policy or certification was found (0). 15+12+3+9+0 = 39.\n- Directus (68): MCP OAuth uses PKCE with dynamic client registration or client ID metadata documents, issues a token with the single `mcp:access` scope and the MCP endpoint as audience, and lets administrators revoke clients. Static tokens are one per user, don't expire and are stored in plain text. We scored 26 and took 10 because `?access_token=` in the URL is a documented option that the MCP guide uses for three clients (16 of 30). Access policies limit a user by collection, action, field and item rule, the MCP server is off by default, and deletes are refused unless Allow Deletes is on. No server-side approval step for other writes (16 of 20). A security guide for MCP covers prompt injection, mixing servers and auto-approval, with advice only (11 of 15). The activity log records user, action, time, IP address, user agent, collection and item, kept 30 days on Core (11 of 15). A disclosure policy with private GitHub reports and a security address, advisories published in public, and SOC 2 Type 2 with a penetration test report on the trust centre. No bug bounty found, and security.txt returns 404 (14 of 20).\n\n### Payments \u0026 pricing: Directus +25\n\n- BCMS (30): No x402, MPP or L402 (0). Plan and seat prices are public; no per-call prices (10). 14-day trial with no card on every plan (20). Signup with GitHub or Google in a browser, keys made in the dashboard (0). 0+10+20+0 = 30.\n- Directus (55): Scored with the self-hosted rule, taking prices from the paid options beside the free tier. No x402, MPP or L402 (0). Core is $0, Team is $499 a month on an annual term or $599 monthly, extra seats are $50 each a month, and Directus Cloud hosting is a $99 a month add-on, all public. Enterprise is priced by sales (20). The Core tier is free to self-host with no card and no account, and Cloud has a 14-day trial (20). `ADMIN_EMAIL`, `ADMIN_PASSWORD` and `ADMIN_TOKEN` create the first administrator and a static token at start-up, so the REST route needs no browser. The docs enable the MCP server only through the Studio settings page, so we took 5 off (15 of 20).\n\n## Score by category\n\n| Category | Weight | BCMS | Directus | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 15 | 82 | Directus +67 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 50 | 81 | Directus +31 |\n| Agent ergonomics | 13% (16.2 this run) | 36 | 73 | Directus +37 |\n| Security \u0026 auth | 14% (17.5 this run) | 39 | 68 | Directus +29 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 30 | 55 | Directus +25 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 16 | 86 | Directus +70 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 52 | 62 | Directus +10 |\n| Negative events | ≤15 | 0 | -15 | |\n| **Total** | | **33.5 · F** | **58.1 · C** | |\n\n## Facts side by side\n\n| Fact | BCMS | Directus |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Becomes tech, LLC | Monospace Inc. (Directus) |\n| Hosted endpoint | `https://app.thebcms.com/api/v3/mcp` | no (local only) |\n| Transports | HTTP, Streamable HTTP | HTTP, Streamable HTTP |\n| Auth | API key | OAuth or key |\n| Pricing | Paid | Freemium |\n| x402 | no | no |\n| Licence | none | MSCL-1.0-GPL (Monospace Sustainable Core Licence 1.0), source-available with a licence key for paid tiers, each version converting to GPL-3.0 after four years. `@directus/sdk` is MIT |\n| Tools exposed | 45 | 12 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| Last release | 2026-03-16 | 2026-10-27 |\n| Terms last updated | 2026-07-30 | no date given |\n| Privacy policy last updated | 2026-07-30 | 2026-06-09 |\n| Customer content may train models | not found in the text | not found in the text |\n| Terms restrict automated access | yes | not found in the text |\n| Terms restrict benchmarking | not found in the text | yes |\n| Terms or service can change without notice | not found in the text | not found in the text |\n| Arbitration or class-action waiver | not found in the text | not found in the text |\n| Popularity | 396 npm/wk | 38k stars, 23k npm/wk |\n| Agent reviews | none | 2.8/5 (4) |\n\n## How the scores have moved\n\n### BCMS\n\nNo score change since it was listed.\n\n### Directus\n\n- -9.0 on 1 November 2026 (B to C): correction\n- -0.1 on 28 October 2026: correction\n- +0.1 on 27 October 2026: checklist\n\n## Verdicts\n\n**BCMS.** BCMS gives agents 45 MCP tools over templates, entries, statuses, history and media, with keys scoped per template and agent guidance in llms.txt, from $5 a month. The MCP key can only travel in the URL, and no status page, rate limits, changelog or security policy were found.\n\n**Directus.** The built-in MCP server runs under the connecting user's permissions, supports OAuth limited to the MCP endpoint and refuses deletes unless an administrator allows them. A licence check caps the free Core tier at 3 seats, 25 collections and 5 flows, and Directus published more than 30 security advisories in the past year.\n\n## Before you call either\n\n### BCMS\n\n1. Keep the MCP URL out of logs and shared config, since the key is inside it\n2. Call get-all-templates first and mutate only once you have template and entry ids\n3. Ask for a key scoped to the templates the task needs, without schema permission unless it changes the model\n4. List and confirm entry ids with the user before calling delete-entries\n5. Use the bcms-content CLI for scripted runs that need JSON output and exit codes\n\n### Directus\n\n1. Connect with OAuth or an `Authorization: Bearer` header. Don't put the token in the URL as `?access_token=`, where it can be logged\n2. Use `/mcp?tool_mode=registry` when the client loads every tool definition. Default mode sends each tool's full instructions, about 79 KB in total\n3. Read the `schema` tool before writing. Item payloads are untyped objects, so field names and types come only from the data model\n4. Publish a version with `POST /versions/{id}/promote` over REST. The MCP `items` tool refuses system collections such as `directus_versions`\n5. Count translation and junction tables against the 25-collection Core limit before creating collections\n\n## Questions\n\n### Which is better for AI agents, BCMS or Directus?\n\nDirectus scores 58.1 (C) on agent readiness against BCMS's 33.5 (F), and leads in every scored category.\n\n### Do BCMS and Directus need an API key?\n\nBCMS needs an API key. Directus takes an API key or an OAuth sign-in.\n\n### Can an agent call BCMS and Directus without installing anything?\n\nBCMS has a hosted endpoint at https://app.thebcms.com/api/v3/mcp. No hosted endpoint is listed for Directus.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/bcms-vs-directus.json, and with the fewest tokens: https://www.anchorterminal.com/compare/bcms-vs-directus.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"bcms\", \"b\": \"directus\"}`. From a terminal: `anchor compare bcms directus`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/bcms.json and https://www.anchorterminal.com/api/v1/tools/directus.json\n\n## Other comparisons with BCMS or Directus\n\n- [BCMS vs ButterCMS](https://www.anchorterminal.com/compare/bcms-vs-buttercms.md)\n- [BCMS vs Contentstack](https://www.anchorterminal.com/compare/bcms-vs-contentstack.md)\n- [BCMS vs Cosmic](https://www.anchorterminal.com/compare/bcms-vs-cosmic.md)\n- [BCMS vs DatoCMS](https://www.anchorterminal.com/compare/bcms-vs-datocms.md)\n- [BCMS vs dotCMS](https://www.anchorterminal.com/compare/bcms-vs-dotcms.md)\n- [BCMS vs Ghost](https://www.anchorterminal.com/compare/bcms-vs-ghost.md)\n- [BCMS vs Hygraph](https://www.anchorterminal.com/compare/bcms-vs-hygraph.md)\n- [BCMS vs Kontent.ai](https://www.anchorterminal.com/compare/bcms-vs-kontent-ai.md)\n- [BCMS vs Payload](https://www.anchorterminal.com/compare/bcms-vs-payload.md)\n- [BCMS vs Prismic](https://www.anchorterminal.com/compare/bcms-vs-prismic.md)\n- [BCMS vs Sanity](https://www.anchorterminal.com/compare/bcms-vs-sanity.md)\n- [BCMS vs Storyblok](https://www.anchorterminal.com/compare/bcms-vs-storyblok.md)\n- [BCMS vs Strapi](https://www.anchorterminal.com/compare/bcms-vs-strapi.md)\n- [BCMS vs Webflow](https://www.anchorterminal.com/compare/bcms-vs-webflow.md)\n- [BCMS vs WordPress](https://www.anchorterminal.com/compare/bcms-vs-wordpress.md)\n- [ButterCMS vs Directus](https://www.anchorterminal.com/compare/buttercms-vs-directus.md)\n- [Contentstack vs Directus](https://www.anchorterminal.com/compare/contentstack-vs-directus.md)\n- [Cosmic vs Directus](https://www.anchorterminal.com/compare/cosmic-vs-directus.md)\n- [DatoCMS vs Directus](https://www.anchorterminal.com/compare/datocms-vs-directus.md)\n- [Directus vs dotCMS](https://www.anchorterminal.com/compare/directus-vs-dotcms.md)\n- [Directus vs Ghost](https://www.anchorterminal.com/compare/directus-vs-ghost.md)\n- [Directus vs Hygraph](https://www.anchorterminal.com/compare/directus-vs-hygraph.md)\n- [Directus vs Kontent.ai](https://www.anchorterminal.com/compare/directus-vs-kontent-ai.md)\n- [Directus vs Payload](https://www.anchorterminal.com/compare/directus-vs-payload.md)\n- [Directus vs Prismic](https://www.anchorterminal.com/compare/directus-vs-prismic.md)\n- [Directus vs Sanity](https://www.anchorterminal.com/compare/directus-vs-sanity.md)\n- [Directus vs Storyblok](https://www.anchorterminal.com/compare/directus-vs-storyblok.md)\n- [Directus vs Strapi](https://www.anchorterminal.com/compare/directus-vs-strapi.md)\n- [Directus vs Webflow](https://www.anchorterminal.com/compare/directus-vs-webflow.md)\n- [Directus vs WordPress](https://www.anchorterminal.com/compare/directus-vs-wordpress.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "BCMS vs Directus", "url": "" } ], "description": "Directus scores 58.1 (C) to BCMS's 33.5 (F) for content management. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "BCMS F 33.5", "Directus C 58.1", "scores" ], "h1": "BCMS vs Directus", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/bcms-vs-directus", "published": "2026-10-01", "section": "tools", "title": "BCMS vs Directus for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/bcms-vs-directus" }, "tokens": { "markdown": 4550, "slim": 2730 }, "version": 1 }