MCP Observatory
3m ago Tracked 26,650 Last 3m ago 24h 1,621
npm JavaScript analyzed 3.87.0

@payloadcms/plugin-mcp

v3.87.0
npm

MCP (Model Context Protocol) capabilities with Payload

maintainer
alessiogr
license
MIT
first seen
2026-05-22
last seen
2026-08-02
releases · 30d
55
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 21 tools
transport streamable-http counts 21 tools · 0 res · 0 prompts permission surface via code analysis

tools

  • auth
  • create${collectionSlug.charAt(0).toUpperCase() + toCamelCase(collectionSlug).slice(1)}
  • createCollection
  • createJob
  • delete${collectionSlug.charAt(0).toUpperCase() + toCamelCase(collectionSlug).slice(1)}
  • deleteCollection
  • find${collectionSlug.charAt(0).toUpperCase() + toCamelCase(collectionSlug).slice(1)}
  • find${globalSlug.charAt(0).toUpperCase() + toCamelCase(globalSlug).slice(1)}
  • findCollections
  • findConfig
  • forgotPassword
  • login
  • resetPassword
  • runJob
  • unlock
  • update${collectionSlug.charAt(0).toUpperCase() + toCamelCase(collectionSlug).slice(1)}
  • update${globalSlug.charAt(0).toUpperCase() + toCamelCase(globalSlug).slice(1)}
  • updateCollection
  • updateConfig
  • updateJob
  • verify
skills & danger signals npm-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed v3.87.0 · analyzer v28 · 2d ago

danger signals2

code evidence v3.87.0 · npm-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 88

filesystem 18

  • fs package/dist/mcp/helpers/fileValidation.js :1 import { existsSync } from 'fs';
  • fs package/dist/mcp/tools/collection/create.js :1 import { writeFileSync } from 'fs';
  • fs package/dist/mcp/tools/collection/delete.js :1 import { readFileSync, unlinkSync, writeFileSync } from 'fs';
  • fs package/dist/mcp/tools/collection/find.js :1 import { readdirSync, readFileSync, statSync } from 'fs';
  • fs package/dist/mcp/tools/collection/update.js :1 import { readFileSync, writeFileSync } from 'fs';
  • fs package/dist/mcp/tools/config/find.js :1 import { readFileSync, statSync } from 'fs';
  • fs package/dist/mcp/tools/config/update.js :1 import { readFileSync, writeFileSync } from 'fs';
  • fs package/dist/mcp/tools/job/create.js :1 import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'fs';
  • fs package/dist/mcp/tools/job/update.js :1 import { existsSync, readFileSync, writeFileSync } from 'fs';
  • fs package/src/mcp/helpers/fileValidation.ts :3 import { existsSync } from 'fs'
  • fs package/src/mcp/tools/collection/create.ts :4 import { writeFileSync } from 'fs'
  • fs package/src/mcp/tools/collection/delete.ts :4 import { readFileSync, unlinkSync, writeFileSync } from 'fs'
  • fs package/src/mcp/tools/collection/find.ts :4 import { readdirSync, readFileSync, statSync } from 'fs'
  • fs package/src/mcp/tools/collection/update.ts :4 import { readFileSync, writeFileSync } from 'fs'
  • fs package/src/mcp/tools/config/find.ts :4 import { readFileSync, statSync } from 'fs'
  • fs package/src/mcp/tools/config/update.ts :4 import { readFileSync, writeFileSync } from 'fs'
  • fs package/src/mcp/tools/job/create.ts :4 import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'fs'
  • fs package/src/mcp/tools/job/update.ts :4 import { existsSync, readFileSync, writeFileSync } from 'fs'

tool registrations 21

  • auth package/dist/mcp/tools/auth/auth.js :49
  • forgotPassword package/dist/mcp/tools/auth/forgotPassword.js :40
  • login package/dist/mcp/tools/auth/login.js :43
  • resetPassword package/dist/mcp/tools/auth/resetPassword.js :41
  • unlock package/dist/mcp/tools/auth/unlock.js :40
  • verify package/dist/mcp/tools/auth/verify.js :37
  • createCollection package/dist/mcp/tools/collection/create.js :131
  • deleteCollection package/dist/mcp/tools/collection/delete.js :146
  • findCollections package/dist/mcp/tools/collection/find.js :157
  • updateCollection package/dist/mcp/tools/collection/update.js :201
  • findConfig package/dist/mcp/tools/config/find.js :89
  • updateConfig package/dist/mcp/tools/config/update.js :207
  • find${globalSlug.charAt(0).toUpperCase() + toCamelCase(globalSlug).slice(1)} package/dist/mcp/tools/global/find.js :73
  • update${globalSlug.charAt(0).toUpperCase() + toCamelCase(globalSlug).slice(1)} package/dist/mcp/tools/global/update.js :113
  • createJob package/dist/mcp/tools/job/create.js :285
  • runJob package/dist/mcp/tools/job/run.js :118
  • updateJob package/dist/mcp/tools/job/update.js :175
  • create${collectionSlug.charAt(0).toUpperCase() + toCamelCase(collectionSlug).slice(1)} package/dist/mcp/tools/resource/create.js :113
  • delete${collectionSlug.charAt(0).toUpperCase() + toCamelCase(collectionSlug).slice(1)} package/dist/mcp/tools/resource/delete.js :142
  • find${collectionSlug.charAt(0).toUpperCase() + toCamelCase(collectionSlug).slice(1)} package/dist/mcp/tools/resource/find.js :161
  • update${collectionSlug.charAt(0).toUpperCase() + toCamelCase(collectionSlug).slice(1)} package/dist/mcp/tools/resource/update.js :244

declared dependencies 7

  • @modelcontextprotocol/sdk@1.27.1
  • @types/json-schema@7.0.15
  • json-schema-to-zod@2.6.1
  • mcp-handler@^1.0.7
  • zod@^3.25.50
  • @payloadcms/eslint-config@3.28.0
  • payload@3.87.0