npm JavaScript analyzed 3.90.1

@payloadcms/plugin-mcp

v3.90.1
npm

MCP (Model Context Protocol) capabilities with Payload

maintainer
alessiogr
licence
MIT
first seen
2026-05-22
last seen
2026-09-19
releases · 30d
23
short id

@payloadcms/plugin-mcp is an MCP server distributed on npm, maintained by alessiogr, tracked here since May 2026. It has shipped 474 releases (currently 3.90.1) and exposes 21 tools. Tools include auth, create${collectionSlug.charAt(0).toUpperCase() + toCamelCase(collectionSlug).slice(1)}, createCollection, createJob, delete${collectionSlug.charAt(0).toUpperCase() + toCamelCase(collectionSlug).slice(1)}, deleteCollection, and 15 more. Its composite risk grade is A — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised one review prompt — dangerous code — each a pattern worth a human look rather than a finding of fault.

Its 21 tools appear to reach filesystem, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

full security breakdown →
tools 20 of 21
  • auth
  • create${collectionSlug.charAt(0).toUpperCase() + toCamelCase(collectionSlug).slice(1)}
  • createCollection
  • createJob
  • delete${collectionSlug.charAt(0).toUpperCase() + toCamelCase(collectionSlug).slice(1)}
  • deleteCollection
  • find${collectionSlug.charAt(0).toUpperCase() + toCamelCase(collectionSlug).slice(1)}
  • find${globalSlug.charAt(0).toUpperCase() + toCamelCase(globalSlug).slice(1)}
  • findCollections
  • findConfig
  • forgotPassword
  • login
  • resetPassword
  • runJob
  • unlock
  • update${collectionSlug.charAt(0).toUpperCase() + toCamelCase(collectionSlug).slice(1)}
  • update${globalSlug.charAt(0).toUpperCase() + toCamelCase(globalSlug).slice(1)}
  • updateCollection
  • updateConfig
  • updateJob
All 21 tools →
release cadence · 90d 113 releases
06-22 00:00 08-05 00:00 now
recent releases last 10
version date src
4.0.0-canary.35 2026-09-18 npm
3.90.1 2026-09-18 npm
4.0.0-canary.34 2026-09-18 npm
3.90.0 2026-09-18 npm
4.0.0-internal.b8e7c89 2026-09-14 npm
3.89.0 2026-09-10 npm
4.0.0-canary.33 2026-09-08 npm
4.0.0-internal.3ed7230 2026-09-08 npm
4.0.0-canary.32 2026-09-08 npm
4.0.0-internal.fec2230 2026-09-08 npm

view all →