MCP (Model Context Protocol) capabilities with Payload
@payloadcms/plugin-mcp is an MCP server distributed on npm, maintained by alessiogr, tracked here since May 2026. It has shipped 474 releases (currently 3.90.1) and exposes 21 tools. Tools include auth, create${collectionSlug.charAt(0).toUpperCase() + toCamelCase(collectionSlug).slice(1)}, createCollection, createJob, delete${collectionSlug.charAt(0).toUpperCase() + toCamelCase(collectionSlug).slice(1)}, deleteCollection, and 15 more. Its composite risk grade is A — an inferred review prompt computed from observed signals, not a verdict.
Reading the source raised one review prompt — dangerous code — each a pattern worth a human look rather than a finding of fault.
full security breakdown →-
auth -
create${collectionSlug.charAt(0).toUpperCase() + toCamelCase(collectionSlug).slice(1)} -
createCollection -
createJob -
delete${collectionSlug.charAt(0).toUpperCase() + toCamelCase(collectionSlug).slice(1)} -
deleteCollection -
find${collectionSlug.charAt(0).toUpperCase() + toCamelCase(collectionSlug).slice(1)} -
find${globalSlug.charAt(0).toUpperCase() + toCamelCase(globalSlug).slice(1)} -
findCollections -
findConfig -
forgotPassword -
login -
resetPassword -
runJob -
unlock -
update${collectionSlug.charAt(0).toUpperCase() + toCamelCase(collectionSlug).slice(1)} -
update${globalSlug.charAt(0).toUpperCase() + toCamelCase(globalSlug).slice(1)} -
updateCollection -
updateConfig -
updateJob
06-22 00:00 08-05 00:00 now
| version | date | src |
|---|---|---|
| 4.0.0-canary.35 | 2026-09-18 | npm |
| 3.90.1 | 2026-09-18 | npm |
| 4.0.0-canary.34 | 2026-09-18 | npm |
| 3.90.0 | 2026-09-18 | npm |
| 4.0.0-internal.b8e7c89 | 2026-09-14 | npm |
| 3.89.0 | 2026-09-10 | npm |
| 4.0.0-canary.33 | 2026-09-08 | npm |
| 4.0.0-internal.3ed7230 | 2026-09-08 | npm |
| 4.0.0-canary.32 | 2026-09-08 | npm |
| 4.0.0-internal.fec2230 | 2026-09-08 | npm |