MCP (Model Context Protocol) capabilities with Payload
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport streamable-http counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
no tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed v3.85.1 · analyzer v17 · 1d ago
danger signals2
- dynamic code executionnew Function()package/dist/utils/schemaConversion/convertCollectionSchemaToZod.js:31
return new Function('z', `return ${transpileResult.outputText}`)(z); - dynamic code executionnew Function()package/src/utils/schemaConversion/convertCollectionSchemaToZod.ts:39
return new Function('z', `return ${transpileResult.outputText}`)(z)
evidence-backed
findings quoted directly from the published source artifact — not inferred
filesystem 18
- fs package/dist/mcp/helpers/fileValidation.js :1
import { existsSync } from 'fs'; - fs package/dist/mcp/tools/collection/create.js :1
import { writeFileSync } from 'fs'; - fs package/dist/mcp/tools/collection/delete.js :1
import { readFileSync, unlinkSync, writeFileSync } from 'fs'; - fs package/dist/mcp/tools/collection/find.js :1
import { readdirSync, readFileSync, statSync } from 'fs'; - fs package/dist/mcp/tools/collection/update.js :1
import { readFileSync, writeFileSync } from 'fs'; - fs package/dist/mcp/tools/config/find.js :1
import { readFileSync, statSync } from 'fs'; - fs package/dist/mcp/tools/config/update.js :1
import { readFileSync, writeFileSync } from 'fs'; - fs package/dist/mcp/tools/job/create.js :1
import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'fs'; - fs package/dist/mcp/tools/job/update.js :1
import { existsSync, readFileSync, writeFileSync } from 'fs'; - fs package/src/mcp/helpers/fileValidation.ts :3
import { existsSync } from 'fs' - fs package/src/mcp/tools/collection/create.ts :4
import { writeFileSync } from 'fs' - fs package/src/mcp/tools/collection/delete.ts :4
import { readFileSync, unlinkSync, writeFileSync } from 'fs' - fs package/src/mcp/tools/collection/find.ts :4
import { readdirSync, readFileSync, statSync } from 'fs' - fs package/src/mcp/tools/collection/update.ts :4
import { readFileSync, writeFileSync } from 'fs' - fs package/src/mcp/tools/config/find.ts :4
import { readFileSync, statSync } from 'fs' - fs package/src/mcp/tools/config/update.ts :4
import { readFileSync, writeFileSync } from 'fs' - fs package/src/mcp/tools/job/create.ts :4
import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'fs' - fs package/src/mcp/tools/job/update.ts :4
import { existsSync, readFileSync, writeFileSync } from 'fs'
tool registrations 21
- auth package/dist/mcp/tools/auth/auth.js :49
- forgotPassword package/dist/mcp/tools/auth/forgotPassword.js :40
- login package/dist/mcp/tools/auth/login.js :43
- resetPassword package/dist/mcp/tools/auth/resetPassword.js :41
- unlock package/dist/mcp/tools/auth/unlock.js :40
- verify package/dist/mcp/tools/auth/verify.js :37
- createCollection package/dist/mcp/tools/collection/create.js :131
- deleteCollection package/dist/mcp/tools/collection/delete.js :146
- findCollections package/dist/mcp/tools/collection/find.js :157
- updateCollection package/dist/mcp/tools/collection/update.js :201
- findConfig package/dist/mcp/tools/config/find.js :89
- updateConfig package/dist/mcp/tools/config/update.js :207
- find${globalSlug.charAt(0).toUpperCase() + toCamelCase(globalSlug).slice(1)} package/dist/mcp/tools/global/find.js :73
- update${globalSlug.charAt(0).toUpperCase() + toCamelCase(globalSlug).slice(1)} package/dist/mcp/tools/global/update.js :113
- createJob package/dist/mcp/tools/job/create.js :285
- runJob package/dist/mcp/tools/job/run.js :118
- updateJob package/dist/mcp/tools/job/update.js :175
- create${collectionSlug.charAt(0).toUpperCase() + toCamelCase(collectionSlug).slice(1)} package/dist/mcp/tools/resource/create.js :113
- delete${collectionSlug.charAt(0).toUpperCase() + toCamelCase(collectionSlug).slice(1)} package/dist/mcp/tools/resource/delete.js :142
- find${collectionSlug.charAt(0).toUpperCase() + toCamelCase(collectionSlug).slice(1)} package/dist/mcp/tools/resource/find.js :161
- update${collectionSlug.charAt(0).toUpperCase() + toCamelCase(collectionSlug).slice(1)} package/dist/mcp/tools/resource/update.js :244
declared dependencies 7
- @modelcontextprotocol/sdk@1.27.1
- @types/json-schema@7.0.15
- json-schema-to-zod@2.6.1
- mcp-handler@^1.0.7
- zod@^3.25.50
- @payloadcms/eslint-config@3.28.0
- payload@3.85.1