{ "data": { "a": { "slug": "directus", "name": "Directus", "vendor": "Monospace Inc. (Directus)", "vendorUrl": "https://directus.com", "kind": "http-api", "category": "cms", "summary": "Directus is a source-available headless CMS and data platform that runs on an SQL database, self-hosted or on a paid cloud. Agents manage items, files and the data model through REST, GraphQL and a built-in MCP server.", "url": "https://www.anchorterminal.com/tools/directus", "markdownUrl": "https://www.anchorterminal.com/tools/directus.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/directus.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/directus.json", "repo": "https://github.com/directus/directus", "license": "MSCL-1.0-GPL (Monospace Sustainable Core Licence 1.0), source-available with a licence key for paid tiers, each version converting to GPL-3.0 after four years. `@directus/sdk` is MIT", "transports": [ "http", "streamable-http" ], "packages": [ { "registry": "npm", "name": "directus" }, { "registry": "npm", "name": "@directus/sdk" }, { "registry": "npm", "name": "@directus/specs" } ], "auth": "mixed", "authNotes": "Self-serve on your own instance, with no app review or partner approval. The MCP server at `/mcp` accepts OAuth (PKCE, with dynamic client registration or client ID metadata documents, both off by default) and issues a token with the `mcp:access` scope that works only on the MCP endpoint. REST, GraphQL and MCP also accept a static token, one per user, which doesn't expire and is sent as `Authorization: Bearer` or as `?access_token=` in the URL. Log-in tokens are short-lived with a refresh token. Every credential acts with its user's access policies, down to collection, action, field and item rule.", "pricing": "freemium", "pricingNotes": "The Core tier is free to self-host with 3 Studio seats, 25 collections and 5 flows, with no card, account or contract, so an agent can start at once. Team is $499 a month on an annual term or $599 monthly, Enterprise is priced by sales, and Directus Cloud hosting is a $99 a month add-on with a 14-day trial. The Open Innovation Grant lifts the limits for organisations under $5M revenue and 50 employees (checked 2026-10-08).", "priceSummary": "$499 / mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs index, the pricing page or the repository's MCP source (checked 2026-10-08).", "endpoints": [] }, "toolCount": 12, "popularity": { "githubStars": 38295, "npmWeekly": 22588, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://directus.com/docs", "llmsTxt": "https://directus.com/docs/llms.txt", "openapi": "https://github.com/directus/directus/blob/main/packages/specs/src/openapi.yaml", "capabilities": [ "cms.content", "cms.schema", "cms.assets", "cms.publish", "cms.localisation" ], "tags": [ "source-available", "self-hosted", "hosted", "mcp", "oauth", "openapi", "llms-txt", "graphql", "typescript", "sql", "status-page", "soc2" ], "lastRelease": "2026-10-07", "graded": true, "anchor": { "graded": true, "score": 67.1, "grade": "B", "agentReady": false, "rank": 263, "ranked": true, "rankOf": 950, "categoryRank": 7, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 73, "maintenance": 86, "payments": 55, "reliability": 82, "schema": 81, "security": 68, "transparency": 61 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-08" }, "negative": -6, "negativeNotes": [ "5 August 2026. Directus published GHSA-97xr-jchp-xm3c (critical, CVSS 9.2, no CVE). On versions before 12.1.0, a public WebSocket client could read, create, update or delete items in user collections after a failed authentication message. At least 20 advisories were published between 24 June and 2 September 2026, at least 11 rated high, among them SQL injection through geometry fields (GHSA-chfm-g7r3-vv42) and a TUS upload authorisation bypass (GHSA-xjxq-pj7h-g676). The critical fix shipped in 12.1.0 on 1 July, before publication, the vendor published every advisory itself, and none mentions exploitation, so we deduct 6 of a possible 15. https://github.com/directus/directus/security/advisories/GHSA-97xr-jchp-xm3c ; https://github.com/directus/directus/security/advisories" ], "verdict": "The built-in MCP server works under the connecting user's permissions, supports OAuth limited to the MCP endpoint and blocks deletes unless an administrator allows them. Since version 12 a licence check caps the free Core tier at 3 Studio seats, 25 collections and 5 flows, and the default tool list carries about 79 KB of instructions.", "bestFor": "Teams that already keep content in an SQL database and want an agent to edit items, files and the data model under a named user's permissions.", "strengths": [ "MCP OAuth with PKCE issues tokens with the `mcp:access` scope and the MCP endpoint as audience, and administrators can revoke registered clients", "Deletes through MCP are refused unless the Allow Deletes setting is on, and the MCP server itself is off by default", "Registry mode at `/mcp?tool_mode=registry` cuts the tool list to `search`, `execute` and `schema`", "Content versioning has REST endpoints to save, compare and promote a version, and revisions record each change", "Six tagged releases between 29 July and 7 October 2026, with breaking changes listed per version in the docs" ], "weaknesses": [ "Version 12 (10 June 2026) added licence enforcement. The free Core tier allows 3 Studio seats, 25 collections and 5 flows, and an instance over its limits is locked after a grace period", "The licence is MSCL-1.0-GPL, source-available and not OSI approved, with a ban on competing use and on bypassing the licence key", "Static tokens never expire, are stored in plain text in `directus_users`, and the MCP guide shows them in the URL as `?access_token=`", "Releases don't follow semantic versioning, and 12.1 to 12.5 each carried breaking changes", "At least 20 security advisories were published between June and September 2026, one rated critical and at least 11 rated high" ], "agentNotes": [ "Connect with OAuth or an `Authorization: Bearer` header. Don't put the token in the URL as `?access_token=`, where it can be logged", "Use `/mcp?tool_mode=registry` when the client loads every tool definition. Default mode sends each tool's full instructions, about 79 KB in total", "Read the `schema` tool before writing. Item payloads are untyped objects, so field names and types come only from the data model", "Publish a version with `POST /versions/{id}/promote` over REST. The MCP `items` tool refuses system collections such as `directus_versions`", "Count translation and junction tables against the 25-collection Core limit before creating collections" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 67.1 } ], "editorialScores": { "ergonomics": 73, "maintenance": 86, "payments": 55, "reliability": 82, "schema": 81, "security": 68, "transparency": 55 }, "provenanceScore": 66 }, "connect": { "install": "npm install @directus/sdk", "claudeCode": "claude mcp add --transport http directus https://your-directus-url.com/mcp", "config": { "mcpServers": { "directus": { "headers": { "Authorization": "Bearer your-generated-token" }, "url": "https://your-directus-url.com/mcp" } } } }, "letme": { "capability": "https://letme.dev/cms.content", "tool": "https://letme.dev/directus" }, "area": "business", "unitPrices": [ { "item": "Core, self-hosted", "unit": "month", "usd": 0, "note": "3 Studio seats, 25 collections, 5 flows" }, { "item": "Team", "unit": "month", "usd": 499, "note": "annual term, or $599 billed monthly. 10 seats, 50 collections, 20 flows" }, { "item": "Team extra seat", "unit": "seat-month", "usd": 50, "note": "Studio users only" }, { "item": "Directus Cloud hosting add-on", "unit": "month", "usd": 99, "note": "for Core, Team and Open Innovation Grant projects" } ], "provenance": { "legalEntity": "Monospace Inc. (doing business as Directus)", "domain": "directus.com", "domainRegistered": "1997-02-06", "endpointOnVendorDomain": false, "terms": "https://directus.com/license", "privacy": "https://directus.com/privacy", "statusPage": "https://status.directus.cloud", "changelog": "https://github.com/directus/directus/releases", "securityTxt": "none", "checked": "2026-10-08", "notes": [ "The privacy policy (last updated 9 June 2026) names Monospace Inc., doing business as Directus, a Delaware corporation, at 223 Bedford Ave STE A #855, Brooklyn, New York. The terms page, dated 28 April 2025, gives the same entity.", "`terms` points at the MSCL-1.0-GPL licence text, which governs a self-hosted install. directus.com/terms reads as website terms of use, and Directus Cloud has separate Cloud policies at directus.com/cloud-policies.", "The privacy policy says personal information processed for customers of the product is handled under customer agreements, not the policy. No public DPA was found.", "A self-hosted install answers on its owner's domain. It contacts licensing.directus.com when a licence key is set and telemetry.directus.io for usage reports.", "https://directus.com/.well-known/security.txt returned 404 on 8 October 2026. directus.io redirects to directus.com.", "RDAP for directus.com gives a registration date of 1997-02-06, which predates the company's use of the domain.", "The status page runs on Statuspage and covers Directus Cloud regions and the dashboard, not self-hosted installs." ], "score": 66 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/directus.json", "live": { "slug": "directus", "vendorStatus": { "page": "https://status.directus.cloud", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-10T02:05:54.437225869Z" }, "versions": [ { "registry": "github", "name": "directus/directus", "version": "v12.5.0", "released": "2026-10-07", "seenAt": "2026-10-09T16:50:01.675353362Z" }, { "registry": "npm", "name": "@directus/sdk", "version": "27.0.0", "seenAt": "2026-10-09T16:49:58.503081402Z" }, { "registry": "npm", "name": "@directus/specs", "version": "15.2.1", "seenAt": "2026-10-09T16:49:59.647374927Z" }, { "registry": "npm", "name": "directus", "version": "12.5.0", "seenAt": "2026-10-09T16:49:55.642007485Z" } ], "githubStars": 38358, "npmWeekly": 17467, "securityTxt": { "url": "https://directus.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-09T15:39:41.129232656Z" }, "llmsTxt": { "url": "https://directus.com/docs/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-09T14:01:48.465093792Z" }, "pages": [ { "url": "https://directus.com/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-09T18:36:24.491723754Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "316eed4e388b" }, { "url": "https://directus.com/license", "kind": "terms", "status": 200, "checkedAt": "2026-10-09T18:36:22.292727647Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "665a299857ad" } ], "updatedAt": "2026-10-10T02:05:54.437225869Z" } }, "answer": "Kontent.ai scores 70.5 (BB) on agent readiness against Directus's 67.1 (B), and leads in 2 of 7 scored categories. Directus leads on schema \u0026 documentation and payments \u0026 pricing.", "b": { "slug": "kontent-ai", "name": "Kontent.ai", "vendor": "Kontent CZ s.r.o.", "vendorUrl": "https://kontent.ai", "kind": "http-api", "category": "cms", "summary": "Kontent.ai is a hosted headless CMS from Kontent CZ s.r.o. in Brno. Its Management API v2 reads and writes content items, language variants, assets, content models and workflow steps, and an open-source MCP server wraps it.", "url": "https://www.anchorterminal.com/tools/kontent-ai", "markdownUrl": "https://www.anchorterminal.com/tools/kontent-ai.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/kontent-ai.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/kontent-ai.json", "repo": "https://github.com/kontent-ai/mcp-server", "license": "Proprietary service under the Kontent.ai Terms of Service. The management SDKs for JavaScript and .NET and the MCP server on GitHub are MIT", "transports": [ "http", "stdio", "streamable-http" ], "remoteUrl": "https://manage.kontent.ai/v2", "packages": [ { "registry": "npm", "name": "@kontent-ai/management-sdk" }, { "registry": "npm", "name": "@kontent-ai/mcp-server" } ], "auth": "api-key", "authNotes": "A Bearer API key in the `Authorization` header. A project manager creates a Management API key in the web app under Project settings, API keys, and picks its permissions (read content, edit content, read assets, edit assets, content model, environment settings), the environments it reaches and its expiry (1 minute to 2 years, 6 months by default). A Personal API key inherits its owner's role instead. Regenerating a key revokes the old one after a few minutes. No OAuth flow and no API for creating keys was found. The Management API has to be enabled per environment.", "pricing": "paid", "pricingNotes": "No public price. The pricing page shows sliders for user seats, content types and content items and a form that requests a calculation, and the terms put the price, limits and overage unit prices in an order form. A 30-day trial needs no card and includes API access. The terms mention a Developer Plan, which the pricing page does not show (checked 2026-10-09).", "priceSummary": "Paid", "where": "both", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the Management API docs, the MCP server README or the pricing page (checked 2026-10-09).", "endpoints": [] }, "toolCount": 54, "popularity": { "githubStars": null, "npmWeekly": 8381, "pypiWeekly": null, "asOf": "2026-10-09" }, "docsUrl": "https://kontent.ai/learn/docs/apis/management-api-v2", "llmsTxt": "https://kontent.ai/llms.txt", "registryName": "io.github.kontent-ai/mcp-server", "capabilities": [ "cms.content", "cms.publish", "cms.assets", "cms.localisation", "cms.schema" ], "tags": [ "official", "hosted", "closed-source", "api-key", "mcp", "free-trial", "no-card", "sales-led", "llms-txt", "typescript", "dotnet", "webhooks", "graphql", "status-page", "soc2", "iso27001", "audit-log" ], "lastRelease": "2026-10-02", "graded": true, "anchor": { "graded": true, "score": 70.5, "grade": "BB", "agentReady": true, "rank": 153, "ranked": true, "rankOf": 950, "categoryRank": 3, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 71, "maintenance": 83, "payments": 20, "reliability": 82, "schema": 74, "security": 81, "transparency": 75 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-09" }, "negative": 0, "verdict": "Management API keys take per-area permissions, environment limits and an expiry from one minute to two years, and changes made with a key are named in the audit log. Rate limits and Retry-After are documented. No price is published, and no OpenAPI file was found. Access starts with a 30-day trial that a person opens in a browser.", "bestFor": "A company already on Kontent.ai, or evaluating it on a trial, that wants an agent to draft, localise, move through workflow and publish structured content with a permission-limited key and an audit trail.", "strengths": [ "Management API keys carry selectable permissions (read content, edit content, assets, content model, environment settings), environment limits and an expiry from 1 minute to 2 years", "Rate limits are published (10 requests a second and 400 a minute per environment), and a 429 carries a Retry-After header", "The audit log keeps 90 days of changes and names the API key that made each one. Content item changes were added on 2 October 2026", "All 54 tools in the MCP server (MIT, version 0.39.0) set readOnlyHint and destructiveHint, and its README has a section on indirect prompt injection", "security.txt is valid to July 2027, with a disclosure policy that pays discretionary rewards, and the trust centre lists SOC 2 Type 2 and ISO 27001, 27017, 27018 and 42001", "The sub-processor page names each vendor, its location and the data sent, and projects can be stored in the US, the Netherlands, Australia or Canada" ], "weaknesses": [ "No price is published. The pricing page shows sliders for seats, content types and items and a form that requests a quote", "No OpenAPI file was found. The docs link a Postman collection, which we did not read", "Access needs a person. The 30-day trial needs no card, but sign-up, the Management API toggle and key creation happen in the web app", "No idempotency keys. The docs advise against parallel requests, saying they may cause inconsistencies in content", "The availability annex covers the administration interface and the Delivery API, not the Management API, and the guaranteed level sits in each order form", "The Terms of Service forbid automated access to the Service unless the procedure is described in the documentation. This matters before any probe is run", "The MCP server loads 54 tools, 22 of them marked destructive, and runs only on the owner's machine. No hosted endpoint was found" ], "agentNotes": [ "Send `Authorization: Bearer \u003ckey\u003e` to `https://manage.kontent.ai/v2/projects/{environment_id}/...`. The Management API must be switched on under Environment settings, General, Enabled APIs first", "Ask for a Management API key with only the permissions the task needs. Read content alone gives a read-only key, and keys expire after six months by default", "Stay under 10 requests a second and 400 a minute per environment, send requests one at a time, and wait the seconds in Retry-After on a 429", "Page lists by passing the `continuation_token` from the response back in the `x-continuation` header", "Create items with an `external_id` and write with the upsert PUT at `/items/external-id/{id}` so a retry after a lost response does not create a duplicate", "With the MCP server, call `get-patch-guide` before any patch tool, and use a client that prompts on destructiveHint" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 70.5 } ], "editorialScores": { "ergonomics": 71, "maintenance": 83, "payments": 20, "reliability": 82, "schema": 74, "security": 81, "transparency": 69 }, "provenanceScore": 80 }, "connect": { "install": "npm i @kontent-ai/management-sdk --save", "http": "curl --request GET \\\n --url https://manage.kontent.ai/v2/projects/KONTENT_AI_ENVIRONMENT_ID/items \\\n --header 'Authorization: Bearer KONTENT_AI_MANAGEMENT_API_KEY' \\\n --header 'Content-type: application/json'", "config": { "kontent-ai-stdio": { "args": [ "@kontent-ai/mcp-server@latest", "stdio" ], "command": "npx", "env": { "KONTENT_API_KEY": "\u003cyour-management-api-key\u003e", "KONTENT_ENVIRONMENT_ID": "\u003cyour-environment-id\u003e" } } } }, "letme": { "capability": "https://letme.dev/cms.content", "tool": "https://letme.dev/kontent-ai" }, "area": "business", "provenance": { "legalEntity": "Kontent CZ s.r.o.", "domain": "kontent.ai", "domainRegistered": "", "endpointOnVendorDomain": true, "terms": "https://kontent.ai/terms-of-service/", "privacy": "https://kontent.ai/privacy/", "statusPage": "https://status.kontent.ai", "changelog": "https://kontent.ai/learn/product-updates", "securityTxt": "valid", "checked": "2026-10-09", "notes": [ "The Terms of Service effective 11 September 2026 name Kontent CZ s.r.o., Nové sady 996/25, 602 00 Brno, Czech Republic, company number 173 00 576, or an affiliate named in the order form. The Data Processing Addendum and the availability and AI annexes are part of the same page.", "The privacy policy effective 2 June 2025 is issued by Kontent s.r.o. at the same address with Kontent CZ s.r.o. and Kontent US, LLC as joint controllers, and has a section for users of the product.", "The Management API answers at manage.kontent.ai, a kontent.ai subdomain.", "kontent.ai/.well-known/security.txt gives security@kontent.ai, a PGP key, the disclosure policy and an Open Bug Bounty page, and expires on 21 July 2027.", "The domain's registration date was not looked up." ], "score": 80 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/kontent-ai.json", "live": { "slug": "kontent-ai", "probe": { "target": "https://manage.kontent.ai/v2", "method": "get", "lastAt": "2026-10-10T02:07:13.352806651Z", "lastOk": true, "lastStatus": 404, "lastMs": 358, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 375, "p95ms24h": 588, "samples24h": 107, "samples30d": 107, "days": [ { "date": "2026-10-09", "probes": 85, "ok": 85 }, { "date": "2026-10-10", "probes": 22, "ok": 22 } ] }, "vendorStatus": { "page": "https://status.kontent.ai", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-10T02:06:06.753307497Z" }, "versions": [ { "registry": "github", "name": "kontent-ai/mcp-server", "version": "0.39.0", "released": "2026-08-31", "seenAt": "2026-10-09T17:00:51.588844437Z" }, { "registry": "npm", "name": "@kontent-ai/management-sdk", "version": "8.5.7", "seenAt": "2026-10-09T17:00:49.298560089Z" }, { "registry": "npm", "name": "@kontent-ai/mcp-server", "version": "0.39.0", "seenAt": "2026-10-09T17:00:50.153755771Z" } ], "githubStars": 9, "npmWeekly": 8381, "pages": [ { "url": "https://kontent.ai/learn/product-updates", "kind": "changelog", "status": 200, "checkedAt": "2026-10-09T18:40:45.195164377Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "3f0ce279378b" }, { "url": "https://kontent.ai/privacy/", "kind": "privacy", "status": 200, "checkedAt": "2026-10-09T18:40:47.371617041Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "47ae43c907ba" }, { "url": "https://kontent.ai/terms-of-service/", "kind": "terms", "status": 200, "checkedAt": "2026-10-09T18:40:49.654963617Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "b1ef49b6e91c" } ], "updatedAt": "2026-10-10T02:07:13.352806651Z" } }, "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Monospace Inc. (Directus)", "b": "Kontent CZ s.r.o.", "name": "Vendor" }, { "a": "no (local only)", "b": "https://manage.kontent.ai/v2", "name": "Hosted endpoint" }, { "a": "HTTP, Streamable HTTP", "b": "HTTP, stdio, Streamable HTTP", "name": "Transports" }, { "a": "OAuth or key", "b": "API key", "name": "Auth" }, { "a": "Freemium", "b": "Paid", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MSCL-1.0-GPL (Monospace Sustainable Core Licence 1.0), source-available with a licence key for paid tiers, each version converting to GPL-3.0 after four years. `@directus/sdk` is MIT", "b": "Proprietary service under the Kontent.ai Terms of Service. The management SDKs for JavaScript and .NET and the MCP server on GitHub are MIT", "name": "Licence" }, { "a": "12", "b": "54", "name": "Tools exposed" }, { "a": "no", "b": "yes", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "not listed", "b": "io.github.kontent-ai/mcp-server", "name": "MCP registry" }, { "a": "2026-10-07", "b": "2026-10-02", "name": "Last release" }, { "a": "no date given", "b": "2026-09-11", "name": "Terms last updated" }, { "a": "2026-06-09", "b": "2025-06-02", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "yes", "name": "Terms restrict automated access" }, { "a": "yes", "b": "yes", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "38k stars, 23k npm/wk", "b": "8.4k npm/wk", "name": "Popularity" } ], "faq": [ { "answer": "Kontent.ai scores 70.5 (BB) on agent readiness against Directus's 67.1 (B), and leads in 2 of 7 scored categories. Directus leads on schema \u0026 documentation and payments \u0026 pricing.", "question": "Which is better for AI agents, Directus or Kontent.ai?" }, { "answer": "Directus takes an API key or an OAuth sign-in. Kontent.ai needs an API key.", "question": "Do Directus and Kontent.ai need an API key?" }, { "answer": "No hosted endpoint is listed for Directus. Kontent.ai has a hosted endpoint at https://manage.kontent.ai/v2.", "question": "Can an agent call Directus and Kontent.ai without installing anything?" } ], "goodFor": [ { "aheadOn": [ "Schema \u0026 documentation, 81 against 74", "Payments \u0026 pricing, 55 against 20" ], "also": null, "goodFor": "Teams that already keep content in an SQL database and want an agent to edit items, files and the data model under a named user's permissions.", "slug": "directus", "watchFor": "Version 12 (10 June 2026) added licence enforcement. The free Core tier allows 3 Studio seats, 25 collections and 5 flows, and an instance over its limits is locked after a grace period" }, { "aheadOn": [ "Security \u0026 auth, 81 against 68", "Transparency \u0026 trust, 75 against 61" ], "also": [ "Agent-ready, a grade of BB or better", "A hosted endpoint, with nothing to install", "Runs on your own machine", "Free to start without a card", "No incidents deducted, where Directus loses 6 points for them" ], "goodFor": "A company already on Kontent.ai, or evaluating it on a trial, that wants an agent to draft, localise, move through workflow and publish structured content with a permission-limited key and an audit trail.", "slug": "kontent-ai", "watchFor": "No price is published. The pricing page shows sliders for seats, content types and items and a form that requests a quote" } ], "job": { "capability": "cms.content", "name": "Content management" }, "others": [ { "json": "https://www.anchorterminal.com/compare/buttercms-vs-directus.json", "title": "ButterCMS vs Directus", "url": "https://www.anchorterminal.com/compare/buttercms-vs-directus" }, { "json": "https://www.anchorterminal.com/compare/buttercms-vs-kontent-ai.json", "title": "ButterCMS vs Kontent.ai", "url": "https://www.anchorterminal.com/compare/buttercms-vs-kontent-ai" }, { "json": "https://www.anchorterminal.com/compare/contentstack-vs-directus.json", "title": "Contentstack vs Directus", "url": "https://www.anchorterminal.com/compare/contentstack-vs-directus" }, { "json": "https://www.anchorterminal.com/compare/contentstack-vs-kontent-ai.json", "title": "Contentstack vs Kontent.ai", "url": "https://www.anchorterminal.com/compare/contentstack-vs-kontent-ai" }, { "json": "https://www.anchorterminal.com/compare/datocms-vs-directus.json", "title": "DatoCMS vs Directus", "url": "https://www.anchorterminal.com/compare/datocms-vs-directus" }, { "json": "https://www.anchorterminal.com/compare/datocms-vs-kontent-ai.json", "title": "DatoCMS vs Kontent.ai", "url": "https://www.anchorterminal.com/compare/datocms-vs-kontent-ai" }, { "json": "https://www.anchorterminal.com/compare/directus-vs-ghost.json", "title": "Directus vs Ghost", "url": "https://www.anchorterminal.com/compare/directus-vs-ghost" }, { "json": "https://www.anchorterminal.com/compare/directus-vs-hygraph.json", "title": "Directus vs Hygraph", "url": "https://www.anchorterminal.com/compare/directus-vs-hygraph" }, { "json": "https://www.anchorterminal.com/compare/directus-vs-payload.json", "title": "Directus vs Payload", "url": "https://www.anchorterminal.com/compare/directus-vs-payload" }, { "json": "https://www.anchorterminal.com/compare/directus-vs-prismic.json", "title": "Directus vs Prismic", "url": "https://www.anchorterminal.com/compare/directus-vs-prismic" }, { "json": "https://www.anchorterminal.com/compare/directus-vs-sanity.json", "title": "Directus vs Sanity", "url": "https://www.anchorterminal.com/compare/directus-vs-sanity" }, { "json": "https://www.anchorterminal.com/compare/directus-vs-storyblok.json", "title": "Directus vs Storyblok", "url": "https://www.anchorterminal.com/compare/directus-vs-storyblok" }, { "json": "https://www.anchorterminal.com/compare/directus-vs-strapi.json", "title": "Directus vs Strapi", "url": "https://www.anchorterminal.com/compare/directus-vs-strapi" }, { "json": "https://www.anchorterminal.com/compare/directus-vs-webflow.json", "title": "Directus vs Webflow", "url": "https://www.anchorterminal.com/compare/directus-vs-webflow" }, { "json": "https://www.anchorterminal.com/compare/directus-vs-wordpress.json", "title": "Directus vs WordPress", "url": "https://www.anchorterminal.com/compare/directus-vs-wordpress" }, { "json": "https://www.anchorterminal.com/compare/ghost-vs-kontent-ai.json", "title": "Ghost vs Kontent.ai", "url": "https://www.anchorterminal.com/compare/ghost-vs-kontent-ai" }, { "json": "https://www.anchorterminal.com/compare/hygraph-vs-kontent-ai.json", "title": "Hygraph vs Kontent.ai", "url": "https://www.anchorterminal.com/compare/hygraph-vs-kontent-ai" }, { "json": "https://www.anchorterminal.com/compare/kontent-ai-vs-payload.json", "title": "Kontent.ai vs Payload", "url": "https://www.anchorterminal.com/compare/kontent-ai-vs-payload" }, { "json": "https://www.anchorterminal.com/compare/kontent-ai-vs-prismic.json", "title": "Kontent.ai vs Prismic", "url": "https://www.anchorterminal.com/compare/kontent-ai-vs-prismic" }, { "json": "https://www.anchorterminal.com/compare/kontent-ai-vs-sanity.json", "title": "Kontent.ai vs Sanity", "url": "https://www.anchorterminal.com/compare/kontent-ai-vs-sanity" }, { "json": "https://www.anchorterminal.com/compare/kontent-ai-vs-storyblok.json", "title": "Kontent.ai vs Storyblok", "url": "https://www.anchorterminal.com/compare/kontent-ai-vs-storyblok" }, { "json": "https://www.anchorterminal.com/compare/kontent-ai-vs-strapi.json", "title": "Kontent.ai vs Strapi", "url": "https://www.anchorterminal.com/compare/kontent-ai-vs-strapi" }, { "json": "https://www.anchorterminal.com/compare/kontent-ai-vs-webflow.json", "title": "Kontent.ai vs Webflow", "url": "https://www.anchorterminal.com/compare/kontent-ai-vs-webflow" }, { "json": "https://www.anchorterminal.com/compare/kontent-ai-vs-wordpress.json", "title": "Kontent.ai vs WordPress", "url": "https://www.anchorterminal.com/compare/kontent-ai-vs-wordpress" } ], "scores": [ { "by": 0, "directus": 82, "edge": "", "key": "reliability", "kontent-ai": 82, "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 7, "directus": 81, "edge": "directus", "key": "schema", "kontent-ai": 74, "name": "Schema \u0026 documentation", "weight": 13 }, { "by": 2, "directus": 73, "edge": "directus", "key": "ergonomics", "kontent-ai": 71, "name": "Agent ergonomics", "weight": 13 }, { "by": 13, "directus": 68, "edge": "kontent-ai", "key": "security", "kontent-ai": 81, "name": "Security \u0026 auth", "weight": 14 }, { "by": 35, "directus": 55, "edge": "directus", "key": "payments", "kontent-ai": 20, "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 3, "directus": 86, "edge": "directus", "key": "maintenance", "kontent-ai": 83, "name": "Maintenance \u0026 community", "weight": 7 }, { "by": 14, "directus": 61, "edge": "kontent-ai", "key": "transparency", "kontent-ai": 75, "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "Kontent.ai scores 70.5 (BB) on agent readiness against Directus's 67.1 (B), and leads in 2 of 7 scored categories. Directus leads on schema \u0026 documentation and payments \u0026 pricing. Both do content management.", "verdicts": { "directus": "The built-in MCP server works under the connecting user's permissions, supports OAuth limited to the MCP endpoint and blocks deletes unless an administrator allows them. Since version 12 a licence check caps the free Core tier at 3 Studio seats, 25 collections and 5 flows, and the default tool list carries about 79 KB of instructions.", "kontent-ai": "Management API keys take per-area permissions, environment limits and an expiry from one minute to two years, and changes made with a key are named in the audit log. Rate limits and Retry-After are documented. No price is published, and no OpenAPI file was found. Access starts with a 30-day trial that a person opens in a browser." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/directus-vs-kontent-ai", "json": "https://www.anchorterminal.com/compare/directus-vs-kontent-ai.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/directus-vs-kontent-ai.md", "slim": "https://www.anchorterminal.com/compare/directus-vs-kontent-ai.min.md" }, "markdown": "Kontent.ai scores 70.5 (BB) on agent readiness against Directus's 67.1 (B), and leads in 2 of 7 scored categories. Directus leads on schema \u0026 documentation and payments \u0026 pricing. Both do content management.\n\n- Directus: grade B, 67.1/100, rank #263 of 950. Markdown https://www.anchorterminal.com/tools/directus.md · JSON https://www.anchorterminal.com/api/v1/tools/directus.json\n- Kontent.ai: grade BB, 70.5/100, rank #153 of 950. Markdown https://www.anchorterminal.com/tools/kontent-ai.md · JSON https://www.anchorterminal.com/api/v1/tools/kontent-ai.json\n- Best headless CMS and website publishing for AI agents: https://www.anchorterminal.com/best/cms/index.md\n- All 91 cms comparisons: https://www.anchorterminal.com/compare/cms/index.md\n\n## Which one, for what\n\n### Directus (B)\n\nGood for: Teams that already keep content in an SQL database and want an agent to edit items, files and the data model under a named user's permissions.\n\nAhead on:\n- Schema \u0026 documentation, 81 against 74\n- Payments \u0026 pricing, 55 against 20\n\nWatch for: Version 12 (10 June 2026) added licence enforcement. The free Core tier allows 3 Studio seats, 25 collections and 5 flows, and an instance over its limits is locked after a grace period\n\n### Kontent.ai (BB)\n\nGood for: A company already on Kontent.ai, or evaluating it on a trial, that wants an agent to draft, localise, move through workflow and publish structured content with a permission-limited key and an audit trail.\n\nAhead on:\n- Security \u0026 auth, 81 against 68\n- Transparency \u0026 trust, 75 against 61\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n- A hosted endpoint, with nothing to install\n- Runs on your own machine\n- Free to start without a card\n- No incidents deducted, where Directus loses 6 points for them\n\nWatch for: No price is published. The pricing page shows sliders for seats, content types and items and a form that requests a quote\n\n\n## Score by category\n\n| Category | Weight | Directus | Kontent.ai | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 82 | 82 | even |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 81 | 74 | Directus +7 |\n| Agent ergonomics | 13% (16.2 this run) | 73 | 71 | Directus +2 |\n| Security \u0026 auth | 14% (17.5 this run) | 68 | 81 | Kontent.ai +13 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 55 | 20 | Directus +35 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 86 | 83 | Directus +3 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 61 | 75 | Kontent.ai +14 |\n| Negative events | ≤15 | -6 | 0 | |\n| **Total** | | **67.1 · B** | **70.5 · BB** | |\n\n## Facts side by side\n\n| Fact | Directus | Kontent.ai |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Monospace Inc. (Directus) | Kontent CZ s.r.o. |\n| Hosted endpoint | no (local only) | `https://manage.kontent.ai/v2` |\n| Transports | HTTP, Streamable HTTP | HTTP, stdio, Streamable HTTP |\n| Auth | OAuth or key | API key |\n| Pricing | Freemium | Paid |\n| x402 | no | no |\n| Licence | MSCL-1.0-GPL (Monospace Sustainable Core Licence 1.0), source-available with a licence key for paid tiers, each version converting to GPL-3.0 after four years. `@directus/sdk` is MIT | Proprietary service under the Kontent.ai Terms of Service. The management SDKs for JavaScript and .NET and the MCP server on GitHub are MIT |\n| Tools exposed | 12 | 54 |\n| Read-only variant documented | no | yes |\n| llms.txt | yes | yes |\n| MCP registry | not listed | `io.github.kontent-ai/mcp-server` |\n| Last release | 2026-10-07 | 2026-10-02 |\n| Terms last updated | no date given | 2026-09-11 |\n| Privacy policy last updated | 2026-06-09 | 2025-06-02 |\n| Customer content may train models | not found in the text | not found in the text |\n| Terms restrict automated access | not found in the text | yes |\n| Terms restrict benchmarking | yes | yes |\n| Terms or service can change without notice | not found in the text | not found in the text |\n| Arbitration or class-action waiver | not found in the text | not found in the text |\n| Popularity | 38k stars, 23k npm/wk | 8.4k npm/wk |\n\n## Verdicts\n\n**Directus.** The built-in MCP server works under the connecting user's permissions, supports OAuth limited to the MCP endpoint and blocks deletes unless an administrator allows them. Since version 12 a licence check caps the free Core tier at 3 Studio seats, 25 collections and 5 flows, and the default tool list carries about 79 KB of instructions.\n\n**Kontent.ai.** Management API keys take per-area permissions, environment limits and an expiry from one minute to two years, and changes made with a key are named in the audit log. Rate limits and Retry-After are documented. No price is published, and no OpenAPI file was found. Access starts with a 30-day trial that a person opens in a browser.\n\n## Before you call either\n\n### Directus\n\n1. Connect with OAuth or an `Authorization: Bearer` header. Don't put the token in the URL as `?access_token=`, where it can be logged\n2. Use `/mcp?tool_mode=registry` when the client loads every tool definition. Default mode sends each tool's full instructions, about 79 KB in total\n3. Read the `schema` tool before writing. Item payloads are untyped objects, so field names and types come only from the data model\n4. Publish a version with `POST /versions/{id}/promote` over REST. The MCP `items` tool refuses system collections such as `directus_versions`\n5. Count translation and junction tables against the 25-collection Core limit before creating collections\n\n### Kontent.ai\n\n1. Send `Authorization: Bearer \u003ckey\u003e` to `https://manage.kontent.ai/v2/projects/{environment_id}/...`. The Management API must be switched on under Environment settings, General, Enabled APIs first\n2. Ask for a Management API key with only the permissions the task needs. Read content alone gives a read-only key, and keys expire after six months by default\n3. Stay under 10 requests a second and 400 a minute per environment, send requests one at a time, and wait the seconds in Retry-After on a 429\n4. Page lists by passing the `continuation_token` from the response back in the `x-continuation` header\n5. Create items with an `external_id` and write with the upsert PUT at `/items/external-id/{id}` so a retry after a lost response does not create a duplicate\n6. With the MCP server, call `get-patch-guide` before any patch tool, and use a client that prompts on destructiveHint\n\n## Questions\n\n### Which is better for AI agents, Directus or Kontent.ai?\n\nKontent.ai scores 70.5 (BB) on agent readiness against Directus's 67.1 (B), and leads in 2 of 7 scored categories. Directus leads on schema \u0026 documentation and payments \u0026 pricing.\n\n### Do Directus and Kontent.ai need an API key?\n\nDirectus takes an API key or an OAuth sign-in. Kontent.ai needs an API key.\n\n### Can an agent call Directus and Kontent.ai without installing anything?\n\nNo hosted endpoint is listed for Directus. Kontent.ai has a hosted endpoint at https://manage.kontent.ai/v2.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/directus-vs-kontent-ai.json, and with the fewest tokens: https://www.anchorterminal.com/compare/directus-vs-kontent-ai.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"directus\", \"b\": \"kontent-ai\"}`. From a terminal: `anchor compare directus kontent-ai`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/directus.json and https://www.anchorterminal.com/api/v1/tools/kontent-ai.json\n\n## Other comparisons with Directus or Kontent.ai\n\n- [ButterCMS vs Directus](https://www.anchorterminal.com/compare/buttercms-vs-directus.md)\n- [ButterCMS vs Kontent.ai](https://www.anchorterminal.com/compare/buttercms-vs-kontent-ai.md)\n- [Contentstack vs Directus](https://www.anchorterminal.com/compare/contentstack-vs-directus.md)\n- [Contentstack vs Kontent.ai](https://www.anchorterminal.com/compare/contentstack-vs-kontent-ai.md)\n- [DatoCMS vs Directus](https://www.anchorterminal.com/compare/datocms-vs-directus.md)\n- [DatoCMS vs Kontent.ai](https://www.anchorterminal.com/compare/datocms-vs-kontent-ai.md)\n- [Directus vs Ghost](https://www.anchorterminal.com/compare/directus-vs-ghost.md)\n- [Directus vs Hygraph](https://www.anchorterminal.com/compare/directus-vs-hygraph.md)\n- [Directus vs Payload](https://www.anchorterminal.com/compare/directus-vs-payload.md)\n- [Directus vs Prismic](https://www.anchorterminal.com/compare/directus-vs-prismic.md)\n- [Directus vs Sanity](https://www.anchorterminal.com/compare/directus-vs-sanity.md)\n- [Directus vs Storyblok](https://www.anchorterminal.com/compare/directus-vs-storyblok.md)\n- [Directus vs Strapi](https://www.anchorterminal.com/compare/directus-vs-strapi.md)\n- [Directus vs Webflow](https://www.anchorterminal.com/compare/directus-vs-webflow.md)\n- [Directus vs WordPress](https://www.anchorterminal.com/compare/directus-vs-wordpress.md)\n- [Ghost vs Kontent.ai](https://www.anchorterminal.com/compare/ghost-vs-kontent-ai.md)\n- [Hygraph vs Kontent.ai](https://www.anchorterminal.com/compare/hygraph-vs-kontent-ai.md)\n- [Kontent.ai vs Payload](https://www.anchorterminal.com/compare/kontent-ai-vs-payload.md)\n- [Kontent.ai vs Prismic](https://www.anchorterminal.com/compare/kontent-ai-vs-prismic.md)\n- [Kontent.ai vs Sanity](https://www.anchorterminal.com/compare/kontent-ai-vs-sanity.md)\n- [Kontent.ai vs Storyblok](https://www.anchorterminal.com/compare/kontent-ai-vs-storyblok.md)\n- [Kontent.ai vs Strapi](https://www.anchorterminal.com/compare/kontent-ai-vs-strapi.md)\n- [Kontent.ai vs Webflow](https://www.anchorterminal.com/compare/kontent-ai-vs-webflow.md)\n- [Kontent.ai vs WordPress](https://www.anchorterminal.com/compare/kontent-ai-vs-wordpress.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-10", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Directus vs Kontent.ai", "url": "" } ], "description": "Kontent.ai scores 70.5 (BB) to Directus's 67.1 (B) for content management. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Directus B 67.1", "Kontent.ai BB 70.5", "scores" ], "h1": "Directus vs Kontent.ai", "image": "https://www.anchorterminal.com/assets/og/compare-directus-vs-kontent-ai.png", "path": "/compare/directus-vs-kontent-ai", "published": "2026-10-01", "section": "tools", "title": "Directus vs Kontent.ai for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-09", "url": "https://www.anchorterminal.com/compare/directus-vs-kontent-ai" }, "tokens": { "markdown": 2650, "slim": 780 }, "version": 1 }