MCP Observatory
5m ago Tracked 59,997 Last 5m ago 24h 2,477
npm JavaScript analyzed 3.90.1

@payloadcms/plugin-mcp

v3.90.1
npm

MCP (Model Context Protocol) capabilities with Payload

maintainer
alessiogr
licence
MIT
first seen
2026-05-22
last seen
2026-09-19
releases · 30d
23
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 21 tools
transport — counts 21 tools · 0 res · 0 prompts permission surface via code analysis

tools

  • auth
  • create${collectionSlug.charAt(0).toUpperCase() + toCamelCase(collectionSlug).slice(1)}
  • createCollection
  • createJob
  • delete${collectionSlug.charAt(0).toUpperCase() + toCamelCase(collectionSlug).slice(1)}
  • deleteCollection
  • find${collectionSlug.charAt(0).toUpperCase() + toCamelCase(collectionSlug).slice(1)}
  • find${globalSlug.charAt(0).toUpperCase() + toCamelCase(globalSlug).slice(1)}
  • findCollections
  • findConfig
  • forgotPassword
  • login
  • resetPassword
  • runJob
  • unlock
  • update${collectionSlug.charAt(0).toUpperCase() + toCamelCase(collectionSlug).slice(1)}
  • update${globalSlug.charAt(0).toUpperCase() + toCamelCase(globalSlug).slice(1)}
  • updateCollection
  • updateConfig
  • updateJob
  • verify
skills & danger signals npm-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed v3.90.1 · analyzer v33 · 8h ago

danger signals2

code evidence v3.90.1 · npm-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 140

filesystem 18

  • fs package/dist/mcp/helpers/fileValidation.js :1 import { existsSync } from 'fs';
  • fs package/dist/mcp/tools/collection/create.js :1 import { writeFileSync } from 'fs';
  • fs package/dist/mcp/tools/collection/delete.js :1 import { readFileSync, unlinkSync, writeFileSync } from 'fs';
  • fs package/dist/mcp/tools/collection/find.js :1 import { readdirSync, readFileSync, statSync } from 'fs';
  • fs package/dist/mcp/tools/collection/update.js :1 import { readFileSync, writeFileSync } from 'fs';
  • fs package/dist/mcp/tools/config/find.js :1 import { readFileSync, statSync } from 'fs';
  • fs package/dist/mcp/tools/config/update.js :1 import { readFileSync, writeFileSync } from 'fs';
  • fs package/dist/mcp/tools/job/create.js :1 import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'fs';
  • fs package/dist/mcp/tools/job/update.js :1 import { existsSync, readFileSync, writeFileSync } from 'fs';
  • fs package/src/mcp/helpers/fileValidation.ts :3 import { existsSync } from 'fs'
  • fs package/src/mcp/tools/collection/create.ts :4 import { writeFileSync } from 'fs'
  • fs package/src/mcp/tools/collection/delete.ts :4 import { readFileSync, unlinkSync, writeFileSync } from 'fs'
show 6 more
  • fs package/src/mcp/tools/collection/find.ts :4 import { readdirSync, readFileSync, statSync } from 'fs'
  • fs package/src/mcp/tools/collection/update.ts :4 import { readFileSync, writeFileSync } from 'fs'
  • fs package/src/mcp/tools/config/find.ts :4 import { readFileSync, statSync } from 'fs'
  • fs package/src/mcp/tools/config/update.ts :4 import { readFileSync, writeFileSync } from 'fs'
  • fs package/src/mcp/tools/job/create.ts :4 import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'fs'
  • fs package/src/mcp/tools/job/update.ts :4 import { existsSync, readFileSync, writeFileSync } from 'fs'

tool registrations 42

  • auth package/dist/mcp/tools/auth/auth.js :71
  • forgotPassword package/dist/mcp/tools/auth/forgotPassword.js :42
  • login package/dist/mcp/tools/auth/login.js :42
  • resetPassword package/dist/mcp/tools/auth/resetPassword.js :41
  • unlock package/dist/mcp/tools/auth/unlock.js :41
  • verify package/dist/mcp/tools/auth/verify.js :37
  • createCollection package/dist/mcp/tools/collection/create.js :131
  • deleteCollection package/dist/mcp/tools/collection/delete.js :146
  • findCollections package/dist/mcp/tools/collection/find.js :157
  • updateCollection package/dist/mcp/tools/collection/update.js :201
  • findConfig package/dist/mcp/tools/config/find.js :89
  • updateConfig package/dist/mcp/tools/config/update.js :207
show 28 more
  • find${globalSlug.charAt(0).toUpperCase() + toCamelCase(globalSlug).slice(1)} package/dist/mcp/tools/global/find.js :75
  • update${globalSlug.charAt(0).toUpperCase() + toCamelCase(globalSlug).slice(1)} package/dist/mcp/tools/global/update.js :115
  • createJob package/dist/mcp/tools/job/create.js :285
  • runJob package/dist/mcp/tools/job/run.js :120
  • updateJob package/dist/mcp/tools/job/update.js :175
  • create${collectionSlug.charAt(0).toUpperCase() + toCamelCase(collectionSlug).slice(1)} package/dist/mcp/tools/resource/create.js :113
  • delete${collectionSlug.charAt(0).toUpperCase() + toCamelCase(collectionSlug).slice(1)} package/dist/mcp/tools/resource/delete.js :142
  • find${collectionSlug.charAt(0).toUpperCase() + toCamelCase(collectionSlug).slice(1)} package/dist/mcp/tools/resource/find.js :161
  • update${collectionSlug.charAt(0).toUpperCase() + toCamelCase(collectionSlug).slice(1)} package/dist/mcp/tools/resource/update.js :230
  • auth package/src/mcp/tools/auth/auth.ts :79
  • forgotPassword package/src/mcp/tools/auth/forgotPassword.ts :62
  • login package/src/mcp/tools/auth/login.ts :54
  • resetPassword package/src/mcp/tools/auth/resetPassword.ts :51
  • unlock package/src/mcp/tools/auth/unlock.ts :55
  • verify package/src/mcp/tools/auth/verify.ts :47
  • createCollection package/src/mcp/tools/collection/create.ts :200
  • deleteCollection package/src/mcp/tools/collection/delete.ts :201
  • findCollections package/src/mcp/tools/collection/find.ts :214
  • updateCollection package/src/mcp/tools/collection/update.ts :280
  • findConfig package/src/mcp/tools/config/find.ts :118
  • updateConfig package/src/mcp/tools/config/update.ts :270
  • find${globalSlug.charAt(0).toUpperCase() + toCamelCase(globalSlug).slice(1)} package/src/mcp/tools/global/find.ts :119
  • update${globalSlug.charAt(0).toUpperCase() + toCamelCase(globalSlug).slice(1)} package/src/mcp/tools/global/update.ts :189
  • createJob package/src/mcp/tools/job/create.ts :398
  • runJob package/src/mcp/tools/job/run.ts :148
  • updateJob package/src/mcp/tools/job/update.ts :239
  • create${collectionSlug.charAt(0).toUpperCase() + toCamelCase(collectionSlug).slice(1)} package/src/mcp/tools/resource/create.ts :191
  • delete${collectionSlug.charAt(0).toUpperCase() + toCamelCase(collectionSlug).slice(1)} package/src/mcp/tools/resource/delete.ts :207

2 more not shown — this panel samples each group; the count above is the real total.

declared dependencies 7

  • @modelcontextprotocol/sdk@1.30.0
  • @types/json-schema@7.0.15
  • json-schema-to-zod@2.6.1
  • mcp-handler@^1.0.7
  • zod@^3.25.50
  • @payloadcms/eslint-config@3.28.0
  • payload@3.90.1