⚡ Lara Dashboard

Open-source Laravel Admin Panel, CMS & Modular Starter Kit — powered by Laravel 13, Livewire 3, Tailwind CSS v4, built-in MCP for AI agents, and inline AI content tools.

[![Latest Release][release-shield]][release-url] [![PHP Version][php-shield]][php-url] [![Laravel][laravel-shield]][laravel-url] [![Tailwind CSS][tailwind-shield]][tailwind-url] [![Livewire][livewire-shield]][livewire-url] [![License][license-shield]][license-url] [![Stargazers][stars-shield]][stars-url] [![Forks][forks-shield]][forks-url] [![Contributors][contributors-shield]][contributors-url] [![Issues][issues-shield]][issues-url]

🌐 Website • 🚀 Live Demo • 📖 Documentation • 🧩 Marketplace • 💬 Community

Lara Dashboard is a production-ready Laravel admin panel and headless CMS — a batteries-included Laravel boilerplate / starter kit with Users, Roles, Permissions (RBAC via Spatie), Modules, Settings, Translations, Posts & Pages, Media Library, REST API, MCP server for AI agents (Cursor, Claude Desktop, Claude Code), AI content generation, and a WordPress-style hooks system (via eventy) for extensibility.

Built for Laravel developers who want to ship admin dashboards, SaaS apps, CRMs and internal tools in hours, not weeks — without trading away Laravel idioms, testability or type-safety.

Try the live demo: https://laradashboard.com/try-demo/ Credentials: superadmin@example.com / 12345678

✨ Why Lara Dashboard?

• 🔐 Complete RBAC — Users, Roles, Permissions via Spatie, admin impersonation, social auth (Socialite), and 2FA-ready flows.
• 🧩 Modular Architecture — Self-contained modules via nwidart/laravel-modules. Install, enable, disable, zip and distribute with a single command.
• ⚡ CRUD Generator — php artisan module:make-crud scaffolds Model, Migration, Service, FormRequest, Controller, Datatable, Views, Routes, Menu and Tests in one pass.
• 📝 Full CMS — Posts, Pages, Categories, Tags, Media Library, visual block-based editor with drag-and-drop.
• 🤖 Develop & manage with AI (MCP) — Connect Cursor, Claude Desktop, or Claude Code to your site. Create posts, review CRM leads, send emails, search docs, clear cache, and run daily briefings from natural language — with token-based, permission-scoped access from Settings → MCP.
• ✍️ Inline AI content — Configure OpenAI, Anthropic, Gemini and more via filter hooks. Generate and refine content inside the admin and builder.
• 📧 Email System — Inbound/outbound SMTP connections, visual email template builder, campaign tracking, notifications.
• 🌐 i18n Out-of-the-box — 21 languages preloaded, chunked translation management, one-click language adds.
• 🔌 REST API — Auto-documented with Scramble, Sanctum-auth, ready for mobile apps and SPAs.
• 🎨 Beautiful UI — Tailwind CSS v4, Alpine.js, dark/light mode, 60+ components, responsive on every breakpoint.
• 🪝 WordPress-style Hooks — Actions and filters everywhere so you can extend without forking.
• 🧪 Tests & Static Analysis — Pest, PHPStan (Larastan), Rector, Pint — all wired up out of the box.
• 📦 Zero-friction Deploy — cPanel/shared-hosting ready, ZIP distribution with vendor folder, one-click core upgrades with backup/restore.

🤖 Develop & Manage Your Site with AI (MCP)

Lara Dashboard ships a built-in Model Context Protocol (MCP) server so AI coding assistants can operate your site like a power user — not just write code about it.

Connect Cursor (Desktop or CLI), Claude Desktop, or Claude Code, generate an MCP agent token in Settings → MCP, and ask your assistant to manage day-to-day work: draft and publish posts, triage form submissions, update CRM records, send templated email, inspect logs, and more. Installed modules can expose their own tools through the McpFilterHook registry.

What you can do from Cursor, Claude, or similar clients

Quick start

1. Open Settings → MCP, enable the MCP server, and save.
2. Click Generate MCP token and copy the token (shown once).
3. Add the server config to your AI client — the admin UI includes ready-made JSON for Cursor, Claude Desktop, and Claude Code.

Example config for Cursor (~/.cursor/mcp.json or project .cursor/mcp.json):

{
  "mcpServers": {
    "laradashboard": {
      "url": "https://your-site.test/mcp",
      "headers": {
        "Authorization": "Bearer YOUR_MCP_AGENT_TOKEN"
      }
    }
  }
}

For local development, you can store the token in an env var (LARADASHBOARD_MCP_TOKEN) and reference it from the config snippet in Settings → MCP.

Note: The MCP endpoint returns 404 until MCP is enabled in settings. Regular API login tokens do not work — use a dedicated MCP agent token with the abilities you choose.

📚 Table of Contents

• Develop & Manage with AI (MCP)

• Requirements

• Built With

• Project Setup

• Build Commands

• Features — How it Works

• Module Development

• CRUD Generator

• REST API

• Tests & Code Quality

• Distribution Package

• Screenshots

• Premium Modules

• Changelog

• Contributing

📋 Requirements:

• Spatie role permission package ^6.4
• Pest test package ^4.x
• Tailwind CSS >= 4.x
• Laravel Modules - https://laravelmodules.com/docs/12/getting-started/introduction
• Laravel Events (A WordPress like action/filter hooks) - https://github.com/tormjens/eventy
• PHP 8.3 or 8.4
• Node.js >= 20.19 - https://nodejs.org/en/download/

🛠️ Built With

• [![PHP][PHP.com]][PHP-url]
• [![Laravel][Laravel.com]][Laravel-url]
• [![Tailwind CSS][TailwindCSS.com]][TailwindCSS-url]
• [![JavaScript][JavaScript.com]][JavaScript-url]
• [![Alpine JS][AlpineJS.com]][AlpineJS-url]
• [![React][React.js]][React-url]
• [![MySQL][MySQL.com]][MySQL-url]

📝 Changelog

Latest release: v1.4.8 • Full changelog → • All GitHub releases

[v1.4.8] — 2026-10-03

• Fix (Security): Fixed some security improvements.
• Fix: Fixed some mobile responsive issues.

[v1.4.7] — 2026-10-02

• Fix (Security): Settings secrets stay hidden from settings.view; registration IP limits, Superadmin role changes, post publish status, email-builder redirects, and MCP base64 uploads are locked down.
• Fix (Security): Public translation JSON can only be read from resources/lang (GHSA-43jp-66c9-7cgh).
• Fix: Datatable horizontal scroll, small-screen toolbar, and sticky header stacking.
• Chore: phpseclib 3.0.57 and js-yaml 5.4.2.

[v1.4.5] — 2026-09-23

• New: Datatable column visibility on every list, and unified page scroll with sticky headers and pagination.
• New: View counts on Posts and Pages admin lists.
• New: MCP multipart hero uploads with serve_ok checks; base64 uploads capped at ~100KB (#327).
• New: Multi-turn AI chat completion across OpenAI, Claude, Gemini, and Ollama.
• Fix (Security): Core upgrades and Livewire module enable, disable, delete, and update actions are authorized (Superadmin / ModulePolicy).
• Fix: Text editor autoresize for embedded media; MCP media serve checks and signed uploads.

[v1.4.2] — 2026-09-14

• New: Public-form spam protection — honeypot, reCAPTCHA v3, disposable/typo/domain email validation, and reusable Blade components for Livewire forms.
• New: MCP UploadMediaTool for AI agents to upload files to the media library.
• Improve: Datatable shift-click bulk selection and sticky headers.
• Improve: Module replace UX (auto-activate + Replaced & active badge), MCP settings UI, and auth email guard settings.
• Fix: MCP media URLs, bulk actions dropdown, Pulse storage on fresh installs.

**[v1.4.0] — 2026-09-07