Drupal MCP Server & AI Connector
The Model Context Protocol is the open standard assistants use to reach outside tools. Drupal AI Agent acts as an MCP server for your Drupal site: the assistant asks it for a capability, it checks what you have authorised, and only then does it touch your site. This page covers the technical side for Drupal.
What the connector talks to on Drupal
Drupal's core JSON:API module, at /jsonapi. It is part of Drupal 9 and 10 and needs enabling rather than installing.
An ordinary Drupal account made for this purpose, over HTTP Basic. The core Basic Authentication module ships switched off, which is why a correct password can still be refused until it is enabled.
Worth knowing about Drupal
Drupal identifies content by UUID rather than by the node id in the URL, so the two are kept distinct throughout.
What the platform does not allow
JSON:API is read-only out of the box. Until write operations are accepted at /admin/config/services/jsonapi, content can be listed and read but not created or changed.
Authentication and permissions
The assistant authorises through OAuth 2.1 with PKCE, and is granted scopes rather than an open door. Your Drupal credential is encrypted at rest, tied to the one website it belongs to, and never sent to the assistant. Every operation is recorded, and an operation outside what you granted is refused before it reaches your site.
Everything above describes what Drupal’s interface offers. None of it is marked verified yet, which in this product means exercised against a live installation with the date recorded.
Common questions
What is an MCP server, in plain terms?
A service an AI assistant can call to do real work. Rather than describing a change to you, the assistant asks the server to make it. Drupal AI Agent is that server for Drupal, and the boundary of what it will do is set by what you authorised.
Does the assistant see my Drupal password or token?
No. The credential is encrypted and bound to the single website it was given for, so a copy of it elsewhere is useless. The assistant asks for an action; it never receives the way in.
Is this an official Drupal product?
No. Drupal AI Agent is an independent product that uses Drupal’s own published interfaces. It is not affiliated with or endorsed by Drupal.
Getting started with Drupal AI Agent
Drupal AI Agent is not on sale yet. The product page tracks where it stands, and nothing is advertised before it works.