Skip to main content
Glama

django-admin-mcp

Alpha PyPI version PyPI downloads Python versions Django Tests codecov Ruff uv Pydantic v2 Typed: mypy Django Packages License Documentation

Expose Django admin models to MCP (Model Context Protocol) clients via HTTP. Add a mixin to your ModelAdmin classes and get instant access to CRUD operations, admin actions, model history, and more.


โœจ Features

  • ๐Ÿ“ฆ Zero dependencies โ€” only Django and Pydantic required

  • ๐Ÿ” Token authentication โ€” secure Bearer token auth with configurable expiry

  • ๐Ÿ›ก๏ธ Django admin permissions โ€” respects existing view/add/change/delete permissions

  • ๐Ÿ”’ Field filtering โ€” control which fields are exposed via mcp_fields and mcp_exclude_fields

  • ๐Ÿ“ Full CRUD โ€” list, get, create, update, delete operations

  • โšก Admin actions โ€” execute registered Django admin actions

  • ๐Ÿ“ฆ Bulk operations โ€” create, update, or delete multiple records at once

  • ๐Ÿ” Model introspection โ€” describe model fields and relationships

  • ๐Ÿ”— Related objects โ€” traverse foreign keys and reverse relations

  • ๐Ÿ“œ Change history โ€” access Django admin's history log

  • ๐Ÿ”Ž Autocomplete โ€” search suggestions for foreign key fields


๐Ÿ“ฅ Installation

pip install django-admin-mcp

Add to your Django project:

# settings.py
INSTALLED_APPS = [
    'django_admin_mcp',
    # ...
]

# urls.py
from django.urls import path, include

urlpatterns = [
    path('mcp/', include('django_admin_mcp.urls')),
    # ...
]

Run migrations to create the token model:

python manage.py migrate django_admin_mcp

๐Ÿš€ Quick Start

1๏ธโƒฃ Expose Your Models

Add the mixin to any ModelAdmin. Set mcp_expose = True to expose direct tools:

from django.contrib import admin
from django_admin_mcp import MCPAdminMixin
from .models import Article, Author

@admin.register(Article)
class ArticleAdmin(MCPAdminMixin, admin.ModelAdmin):
    mcp_expose = True  # Exposes list_article, get_article, etc.
    list_display = ['title', 'author', 'published']

@admin.register(Author)
class AuthorAdmin(MCPAdminMixin, admin.ModelAdmin):
    pass  # Discoverable via find_models, no direct tools

๐Ÿ”’ Protecting Sensitive Fields

Use mcp_exclude_fields to prevent sensitive data exposure:

@admin.register(User)
class UserAdmin(MCPAdminMixin, admin.ModelAdmin):
    mcp_expose = True
    # Never expose sensitive fields via MCP
    mcp_exclude_fields = ['password', 'security_token']

2๏ธโƒฃ Create an API Token

Go to Django admin at /admin/django_admin_mcp/mcptoken/ and create a token. Tokens can optionally be tied to users, groups, or have direct permissions assigned.

3๏ธโƒฃ Configure Your MCP Client

Add to your MCP client settings (~/.claude/claude_desktop_config.json or project .mcp.json):

{
  "mcpServers": {
    "django-admin": {
      "url": "http://localhost:8000/mcp/",
      "headers": {
        "Authorization": "Bearer YOUR_TOKEN"
      }
    }
  }
}

4๏ธโƒฃ Use with Your Agent

Once configured, the agent can use the tools directly:

User: What models are available in Django admin?
Agent: [calls find_models tool]

User: Show me the latest 10 articles
Agent: [calls list_article with limit=10]

User: Get article #42 and update its title to "New Title"
Agent: [calls get_article with id=42, then update_article]

๐Ÿ› ๏ธ Available Tools

For each exposed model (e.g., Article), the following tools are generated:

๐Ÿ“ CRUD Operations

Tool

Description

list_article

List all articles with pagination (limit, offset) and filtering

get_article

Get a single article by id

create_article

Create a new article with field values

update_article

Update an existing article by id

delete_article

Delete an article by id

๐Ÿ” Model Introspection

Tool

Description

find_models

Discover all exposed models and their available tools

describe_article

Get field definitions, types, and constraints

โšก Admin Actions

Tool

Description

actions_article

List available admin actions for the model

action_article

Execute an admin action on selected records

bulk_article

Bulk create, update, or delete multiple records

๐Ÿ”— Relationships

Tool

Description

related_article

Get related objects via foreign keys

history_article

View Django admin change history

autocomplete_article

Search suggestions for autocomplete fields


๐ŸŒ HTTP Protocol Reference

For custom integrations, the MCP endpoint accepts POST requests:

# List available tools
curl -X POST http://localhost:8000/mcp/ \
  -H "Authorization: Bearer TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"method": "tools/list"}'

# Call a tool
curl -X POST http://localhost:8000/mcp/ \
  -H "Authorization: Bearer TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"method": "tools/call", "name": "list_article", "arguments": {"limit": 10}}'

๐Ÿ’ฌ Example Conversations

๐Ÿ“ CRUD Operations

User: Create a new article titled "Getting Started with Django"

Agent: I'll create that article for you.
[calls create_article with title="Getting Started with Django"]
Created article #15: "Getting Started with Django"

User: Update article 15 to add content

Agent: [calls update_article with id=15, content="..."]
Updated article #15 successfully.

User: Delete article 15

Agent: [calls delete_article with id=15]
Deleted article #15.

โšก Admin Actions

User: Mark articles 1, 2, and 3 as published

Agent: [calls action_article with action="mark_as_published", ids=[1,2,3]]
Marked 3 articles as published.

๐Ÿ“ฆ Bulk Operations

User: Set status to "archived" for articles 10-15

Agent: [calls bulk_article with operation="update", ids=[10,11,12,13,14,15], data={"status": "archived"}]
Updated 6 articles.

User: Delete all draft articles from last month

Agent: [calls list_article to find drafts, then bulk_article with operation="delete"]
Deleted 12 draft articles.

๐Ÿ”— Exploring Relationships

User: Show me all comments on article 42

Agent: [calls related_article with id=42, relation="comments"]
Found 8 comments on article #42...

User: What changes were made to article 42?

Agent: [calls history_article with id=42]
Change history for article #42:
- 2024-01-15: Changed title (admin)
- 2024-01-10: Created (admin)

๐Ÿ” Model Discovery

User: What can I manage through MCP?

Agent: [calls find_models]
Available models:
- article (5 tools: list, get, create, update, delete)
- author (5 tools: list, get, create, update, delete)
- category (5 tools: list, get, create, update, delete)

User: What fields does article have?

Agent: [calls describe_article]
Article fields:
- id (AutoField, read-only)
- title (CharField, max_length=200, required)
- content (TextField, optional)
- author (ForeignKey to Author, required)
- published (BooleanField, default=False)
- created_at (DateTimeField, auto)

๐Ÿ” Security

๐Ÿ—๏ธ Two-Level Exposure

Models with MCPAdminMixin are automatically discoverable via the find_models tool, allowing the agent to see what's available. To expose full CRUD tools directly, set mcp_expose = True:

# Discoverable via find_models only
class AuthorAdmin(MCPAdminMixin, admin.ModelAdmin):
    pass

# Full tools exposed (list_article, get_article, etc.)
class ArticleAdmin(MCPAdminMixin, admin.ModelAdmin):
    mcp_expose = True

๐Ÿ”‘ Token Authentication

  • ๐ŸŽซ Tokens are created in Django admin

  • ๐Ÿ‘ค Tokens can be associated with a user, groups, or have direct permissions

  • ๐Ÿšซ Tokens without any permissions have no access (principle of least privilege)

  • โฐ Token expiry is configurable (default: 90 days)

  • ๐Ÿ—‘๏ธ Revoke tokens by deleting them in admin

๐Ÿ›ก๏ธ Permission Checking

All operations respect Django admin permissions:

Operation

Required Permission

list_* / get_*

๐Ÿ‘๏ธ view

create_*

โž• add

update_*

โœ๏ธ change

delete_*

๐Ÿ—‘๏ธ delete

If a token lacks permission, the operation returns an error.


๐Ÿ“‹ Requirements

Dependency

Version

๐Ÿ Python

>= 3.10

๐ŸŒ Django

>= 3.2

๐Ÿ“ Pydantic

>= 2.0

โœ… Supported Django Versions

Django 3.2 ยท 4.0 ยท 4.1 ยท 4.2 ยท 5.0


๐Ÿ“„ License

GPL-3.0-or-later

A
license - permissive license
-
quality - not tested
B
maintenance

Maintenance

โ€“Maintainers
<1hResponse time
2wRelease cycle
5Releases (12mo)
Issues opened vs closed

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/7tg/django-admin-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server