Sponsor MCPSafe10 founding slots
Registry/Payload CMS MCP Server

Payload CMS MCP Server

v3.87.1
Verified

Payload is the open-source, fullstack Next.js framework, giving you instant backend superpowers. Get a full TypeScript backend and admin panel instantly. Use Payload as a headless CMS or for building powerful applications.

MIT
other
other
45.0Kstars
317.8Kdownloads
4.2Kforks
Scanned Oct 2, 2026
WebsiteRepositoryGITHUB
Automated scan (limited checks) · scanned packages/payload, packages/plugin-mcp and 3 more (921 of 4,564 files) · 2026-10-02

This grade comes from an automated MCPSafe scan of the server's JavaScript, TypeScript and Python source on 2026-10-02. The repository is too large to scan in full, so only the MCP server's own packages were scanned: packages/payload, packages/plugin-mcp, packages/translations, templates/blank, templates/blank-tanstack (921 of 4,564 files). The grade says nothing about the rest of the repository. It checks for leaked credentials, shell or code injection from function inputs, unsafe deserialization, malware signatures, install-time scripts, and weak password handling. It does not check for path traversal, server-side request forgery, prompt injection in tool descriptions, network exposure, SQL injection, cross-site scripting, or vulnerable dependencies. It has not been manually reviewed, and the code may have changed since the scan.

A92%
Scanned 1w ago

Very Good Security

Vulnerabilities Found
0Crit
0High
1Med
0Low
0Info

Trust Score 85

Usable with caution
Trust grade A

Trust is stricter than security: it combines reviewed security, MCP capability risk, supply-chain metadata, quality, popularity, freshness, and penalties for unknowns.

Security
92
MCP risk
66
Supply chain
92
Maintenance
57
Docs
100
Freshness
80
Risk traits
Filesystem access
Network/API access
Requires secrets
Database access
Why it scores well
  • • Strong project quality signals
  • • Good documentation surface
  • • Solid supply-chain metadata
  • • Recently scanned
What reduces confidence
  • • MCP risk traits: Filesystem access, Network/API access, Requires secrets

Security ScoreA

92
out of 100

Vulnerabilities Found

0
Crit
0
High
1
Medi
0
Low
0
Info
Last scanned: 10/2/2026

Quality ScoreB

82
out of 100
57
Maint.
100
Popular
100
Docs
78
Compat
Maintenance57%
Popularity100%
Documentation100%
Compatibility78%

Maintenance57

Unknown
Commit Frequency65%
Release Frequency70%
Issue Response25%

Popularity100

45.0K
Stars
317.8K
Downloads
4.2K
Forks
Stars Score100%
Downloads Score99%
Forks Score100%

Documentation100

README Quality100%

Available Documentation

API DocsExamplesChangelog

Compatibility78

MCP Spec Compliance80%
Transport Support75%

Features

TypeScript

Supported Transports

STDIO

Vulnerabilities(0)

This grade comes from an automated scan. Individual findings from automated scans are not published.

READMEPayload CMS MCP Server

View source

<a href="https://payloadcms.com"><img width="100%" src="https://l4wlsi8vxy8hre4v.public.blob.vercel-storage.com/github-banner-new-logo.jpg" alt="Payload headless CMS Admin panel built with React" /></a>

<br />

<br />

<p align="left">

<a href="https://github.com/payloadcms/payload/actions"><img alt="GitHub Workflow Status" src="https://img.shields.io/github/actions/workflow/status/payloadcms/payload/main.yml?style=flat-square"></a>

&nbsp;

<a href="https://discord.gg/payload"><img alt="Discord" src="https://img.shields.io/discord/967097582721572934?label=Discord&color=7289da&style=flat-square" /></a>

&nbsp;

<a href="https://www.npmjs.com/package/payload"><img alt="npm" src="https://img.shields.io/npm/dw/payload?style=flat-square" /></a>

&nbsp;

<a href="https://github.com/payloadcms/payload/graphs/contributors"><img alt="npm" src="https://img.shields.io/github/contributors-anon/payloadcms/payload?color=yellow&style=flat-square" /></a>

&nbsp;

<a href="https://www.npmjs.com/package/payload"><img alt="npm" src="https://img.shields.io/npm/v/payload?style=flat-square" /></a>

&nbsp;

<a href="https://twitter.com/payloadcms"><img src="https://img.shields.io/badge/follow-payloadcms-1DA1F2?logo=twitter&style=flat-square" alt="Payload Twitter" /></a>

</p>

<hr/>

<h4>

<a target="blank" href="https://payloadcms.com/docs/getting-started/what-is-payload" rel="dofollow"><strong>Explore the Docs</strong></a>&nbsp;·&nbsp;<a target="blank" href="https://payloadcms.com/community-help" rel="dofollow"><strong>Community Help</strong></a>&nbsp;·&nbsp;<a target="blank" href="https://github.com/payloadcms/payload/discussions/1539" rel="dofollow"><strong>Roadmap</strong></a>&nbsp;·&nbsp;<a target="blank" href="https://www.g2.com/products/payload-cms/reviews#reviews" rel="dofollow"><strong>View G2 Reviews</strong></a>

</h4>

<hr/>

[!IMPORTANT]
Star this repo or keep an eye on it to follow along.

Payload is the first-ever Next.js native CMS that can install directly in your existing /app folder. It's the start of a new era for headless CMS.

<h3>Benefits over a regular CMS</h3>

<ul>

<li>It's both an app framework & headless CMS</li>

<li>Deploy anywhere, including serverless on Vercel for free</li>

<li>Combine your front+backend in the same <code>/app</code> folder if you want</li>

<li>Don't sign up for yet another SaaS - Payload is open source</li>

<li>Query your database in React Server Components</li>

<li>Both admin and backend are 100% extensible</li>

<li>No vendor lock-in</li>

<li>Never touch ancient WP code again</li>

<li>Build faster, never hit a roadblock</li>

</ul>

Quickstart

Before beginning to work with Payload, make sure you have all of the required software.

text
pnpx create-payload-app@latest

If you're new to Payload, you should start with the website template (pnpx create-payload-app@latest -t website). It shows how to do everything - including custom Rich Text blocks, on-demand revalidation, live preview, and more. It comes with a frontend built with Tailwind all in one /app folder.

One-click deployment options

You can deploy Payload serverlessly in one-click via Vercel and Cloudflare—giving everything you need without the hassle of the plumbing.

Deploy on Cloudflare

Fully self-contained — one click to deploy Payload with Workers, R2 for uploads, and D1 for a globally replicated database.

![Deploy to Cloudflare](https://dub.sh/payload-cloudflare)

Deploy on Vercel

All-in-one on Vercel — one click to deploy Payload with a Next.js front end, Neon database, and Vercel Blob for media storage.

![Deploy with Vercel](https://dub.sh/payload-vercel)

One-click templates

Jumpstart your next project with a ready-to-go template. These are production-ready, end-to-end solutions designed to get you to market fast. Build any kind of website, ecommerce store, blog, or portfolio — complete with a modern front end built using React Server Components and Tailwind.

🌐 Website

🛍️ Ecommerce 🎉 _NEW_ 🎉

We're constantly adding more templates to our **Templates Directory**.

If you maintain your own, add the payload-template topic to your GitHub repo so others can discover it.

🔗 Explore more:

✨ Payload Features

<a target="_blank" href="https://github.com/payloadcms/payload/discussions"><strong>Request Feature</strong></a>

🗒️ Documentation

Check out the Payload website to find in-depth documentation for everything that Payload offers.

Migrating from v2 to v3? Check out the 3.0 Migration Guide on how to do it.

🙋 Contributing

If you want to add contributions to this repository, please follow the instructions in contributing.md.

📚 Examples

The Examples Directory is a great resource for learning how to setup Payload in a variety of different ways, but you can also find great examples in our blog and throughout our social media.

If you'd like to run the examples, you can use create-payload-app to create a project from one:

sh
npx create-payload-app --example example_name

You can see more examples at:

🔌 Plugins

Payload is highly extensible and allows you to install or distribute plugins that add or remove functionality. There are both officially-supported and community-supported plugins available. If you maintain your own plugin, consider adding the payload-plugin topic to your GitHub repository for others to find.

🚨 Need help?

There are lots of good conversations and resources in our Github Discussions board and our Discord Server. If you're struggling with something, chances are, someone's already solved what you're up against. :point_down:

⭐ Like what we're doing? Give us a star

👏 Thanks to all our contributors

<img align="left" src="https://contributors-img.web.app/image?repo=payloadcms/payload"/>

Embed Security Badge

Add this badge to your README or documentation

Payload CMS MCP Server MCPSafe Security
[![Payload CMS MCP Server MCPSafe Security](https://api.mcpsafe.org
/api/badge/payload-cms-mcp-server.svg)](https://mcpsafe.org/registry/payload-cms-mcp-server)
Need more customization options?Badge Documentation

Server Information

Source
GITHUB
Version
3.87.1
Language
other
License
MIT
Transport
STDIO
Added
Aug 11, 2026
Updated
Oct 1, 2026