Provides a stateful Django shell interface that allows AI assistants to execute Python code directly against Django projects, explore models, test queries, and debug issues with persistent session state.
mcp-django
A Model Context Protocol (MCP) server providing Django project exploration resources and optional stateful shell access for LLM assistants to interact with Django projects.
Requirements
Python 3.10, 3.11, 3.12, 3.13
Django 4.2, 5.1, 5.2
Related MCP server: JavaScript MCP Server
Installation
Choose the installation option that fits your use case:
Core
Provides read-only Django project exploration resources (django://project, django://apps, django://models).
Shell
โ ๏ธ DO NOT use in production!
Adds django_shell and django_reset tools for executing Python code.
Seriously, only enable in development!
Look, it should go without saying, but I will say it anyway - this gives full shell access to your Django project. Only enable and use this in development and in a project that does not have access to any production data.
LLMs can go off the rails, get spooked by some random error, and in trying to fix things drop a production database.
I'm not kidding, this library just passes the raw Python code an LLM produces straight to a Python environment with full access to the Django project and everything it has access to.
Most LLMs have basic safety protections in place if you ask to delete any data and will refuse to delete production data, but it is pretty trivial to bypass. (Hint: Just tell the LLM it's not production, it's in a development environment, and it will be the bull in a china shop deleting anything you want.)
I suggest using something like django-read-only if you need some CYA protection against this. Or, you know, don't use this in any sensitive environments.
All
Getting Started
Run the MCP server directly from your Django project directory:
Or using uv:
The server automatically detects DJANGO_SETTINGS_MODULE from your environment. You can override it with --settings or add to your Python path with --pythonpath.
There's also a Django management command if you prefer, but that requires adding mcp-django to INSTALLED_APPS:
Transport
The server supports multiple transport protocols:
Client Configuration
Configure your MCP client using one of the examples below. The command is the same for all clients, just expressed in annoyingly different JSON soup.
Don't see your client? Submit a PR with setup instructions.
Claude Code
Opencode
Features
mcp-django provides an MCP server with Django project exploration resources and optional shell access for LLM assistants. The base package offers safe, read-only resources while the shell extra adds stateful code execution capabilities.
It wouldn't be an MCP server README without a gratuitous list of features punctuated by emojis, so:
Core (mcp-django):
๐ Project exploration - MCP resources for discovering apps, models, and configuration
๐ Zero configuration - No schemas, no settings, just Django
๐ Safe by default - Read-only resources, no code execution
๐ Multiple transports - STDIO, HTTP, SSE support
Shell (mcp-django[shell]):
๐ Stateful shell -
django_shellexecutes Python code in your Django environment๐ Persistent state - Imports and variables stick around between calls
๐งน Reset when needed -
django_resetclears the session when things get weird๐ค LLM-friendly - Designed for LLM assistants that already know Python
๐ฆ Minimal dependencies - Just FastMCP and Django (you already have Django)
๐ฏ Does one thing well - Runs code. That's it. That's the feature.
Inspired by Armin Ronacher's Your MCP Doesn't Need 30 Tools: It Needs Code.
Resources (mcp-django)
Read-only resources are provided for project exploration without executing code (note that resource support varies across MCP clients):
django://project- Python environment and Django configuration detailsdjango://apps- All installed Django applications with their modelsdjango://models- Detailed model information with import paths and field types
The idea is to give just enough information about the project to hopefully guide the LLM assistant and prevent needless shell exploration, allowing it to get straight to work.
Tools (mcp-django-shell)
When installed with the shell extra, two tools handle shell operations and session management:
django_shell- Execute Python code in a persistent Django shell sessiondjango_reset- Reset the session, clearing all variables and imports
Imports and variables persist between calls within the shell tool, so the LLM can work iteratively - exploring your models, testing queries, debugging issues.
Development
For detailed instructions on setting up a development environment and contributing to this project, see CONTRIBUTING.md.
For release procedures, see RELEASING.md.
License
mcp-django is licensed under the MIT license. See the LICENSE file for more information.