Payload CMS MCP Server
MCP (Model Context Protocol) capabilities with Payload
Critical Issues
Security ScoreF
Vulnerabilities Found
Quality ScoreC
Maintenance71
Popularity43
Documentation31
Available Documentation
Compatibility67
Features
Agentic MCP Risk Intelligence
MCPSafe checks risks unique to AI-connected MCP servers — prompt surfaces, model-controlled tools, credentials, filesystems, and network reachability.
The current scan did not find prompt-injection, agent command, exfiltration, unbounded filesystem, or MCP SSRF patterns.
Tool metadata can steer or hijack AI clients before a user invokes the tool.
Model-selected tool arguments can reach shell/process execution.
Tool context combines credential access with outbound network capability.
AI-controlled paths may access files outside the intended workspace.
AI-controlled URLs may reach local, metadata, or internal network services.
Vulnerabilities(252)
README
No README available for this server.
View repositoryEmbed Security Badge
Add this badge to your README or documentation
[](https://mcpsafe.org/registry/payloadcms-plugin-mcp)Server Information
- Source
- NPM
- Package
- @payloadcms/plugin-mcp
- Version
- 3.85.2
- License
- MIT
- Added
- Jan 27, 2026
- Updated
- Jul 6, 2026