@frogbotai/plugin-mcp 0.14.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 FrogBot
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,28 @@
+# @frogbotai/plugin-mcp
+
+Expose selected FrogBot collections and globals to external MCP clients through Payload's MCP server.
+
+```ts
+import { apiKeysPlugin } from '@frogbotai/plugin-api-keys';
+import { mcpPlugin } from '@frogbotai/plugin-mcp';
+import { rolesPlugin } from '@frogbotai/plugin-roles';
+import { buildConfig } from 'frogbot';
+
+export default buildConfig({
+  collections: [
+    { slug: 'users', auth: true, fields: [] },
+    { slug: 'posts', fields: [{ name: 'title', type: 'text' }] },
+  ],
+  plugins: [
+    rolesPlugin(),
+    apiKeysPlugin(),
+    mcpPlugin({
+      collections: { posts: { enabled: { find: true } } },
+    }),
+  ],
+});
+```
+
+Connect MCP clients to `/api/mcp` with a Bearer token minted by `@frogbotai/plugin-api-keys`. Revoked, malformed, and unknown keys are rejected. The plugin requires `apiKeysPlugin()` earlier in the plugin array.
+
+This package is a thin adapter around `@payloadcms/plugin-mcp`. Payload adds a dormant `payload-mcp-api-keys` collection for schema stability, but its keys cannot authenticate this endpoint. Experimental config, collection-definition, job, and auth-mutation tools are unavailable. SSE is not supported.

package/dist/access.d.ts

@@ -0,0 +1,13 @@
+import type { ApiKeyStrategy } from '@frogbotai/plugin-api-keys';
+import type { MCPAccessSettings } from '@payloadcms/plugin-mcp';
+import type { MCPPluginConfig } from '@payloadcms/plugin-mcp';
+import type { PayloadRequest } from 'payload';
+type ResolveMcpAccessOptions = {
+    authenticate: ApiKeyStrategy['authenticate'];
+    pluginOptions: MCPPluginConfig;
+    req: PayloadRequest;
+};
+export declare function validateMcpCapabilities(pluginOptions: MCPPluginConfig): void;
+export declare function resolveMcpAccess({ authenticate, pluginOptions, req }: ResolveMcpAccessOptions): Promise<MCPAccessSettings>;
+export {};
+//# sourceMappingURL=access.d.ts.map

package/dist/access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.d.ts","sourceRoot":"","sources":["../src/access.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAG9C,KAAK,uBAAuB,GAAG;IAC7B,YAAY,EAAE,cAAc,CAAC,cAAc,CAAC,CAAC;IAC7C,aAAa,EAAE,eAAe,CAAC;IAC/B,GAAG,EAAE,cAAc,CAAC;CACrB,CAAC;AAMF,wBAAgB,uBAAuB,CAAC,aAAa,EAAE,eAAe,GAAG,IAAI,CAa5E;AAoBD,wBAAsB,gBAAgB,CAAC,EAAE,YAAY,EAAE,aAAa,EAAE,GAAG,EAAE,EAAE,uBAAuB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAsBhI"}

package/dist/access.js

@@ -0,0 +1,57 @@
+import { UnauthorizedError } from 'payload';
+const toCamelCase = (value) => value
+    .replace(/[-_\s]+(.)?/g, (_, character) => character?.toUpperCase() ?? '')
+    .replace(/^(.)/, (_, character) => character.toLowerCase());
+export function validateMcpCapabilities(pluginOptions) {
+    const reserved = new Set(['auth', 'config', 'jobs']);
+    for (const [type, entities] of [
+        ['Collection', pluginOptions.collections],
+        ['Global', pluginOptions.globals],
+    ]) {
+        for (const slug of Object.keys(entities ?? {})) {
+            const capability = toCamelCase(slug);
+            if (reserved.has(capability)) {
+                throw new Error(`[plugin-mcp] ${type} slug '${slug}' maps to reserved MCP capability '${capability}'.`);
+            }
+        }
+    }
+}
+function collectionGrants(options) {
+    return Object.fromEntries(Object.entries(options ?? {}).map(([slug, config]) => [
+        toCamelCase(slug),
+        config?.enabled === true ? { create: true, delete: true, find: true, update: true } : config?.enabled,
+    ]));
+}
+function globalGrants(options) {
+    return Object.fromEntries(Object.entries(options ?? {}).map(([slug, config]) => [
+        toCamelCase(slug),
+        config?.enabled === true ? { find: true, update: true } : config?.enabled,
+    ]));
+}
+function namedGrants(items) {
+    return Object.fromEntries((items ?? []).map(({ name }) => [toCamelCase(name), true]));
+}
+export async function resolveMcpAccess({ authenticate, pluginOptions, req }) {
+    const result = await authenticate({ headers: req.headers, payload: req.payload });
+    if (!result.user)
+        throw new UnauthorizedError();
+    return {
+        user: result.user,
+        ...collectionGrants(pluginOptions.collections),
+        ...globalGrants(pluginOptions.globals),
+        'payload-mcp-tool': namedGrants(pluginOptions.mcp?.tools),
+        'payload-mcp-prompt': namedGrants(pluginOptions.mcp?.prompts),
+        'payload-mcp-resource': namedGrants(pluginOptions.mcp?.resources),
+        auth: {
+            auth: false,
+            forgotPassword: false,
+            login: false,
+            resetPassword: false,
+            unlock: false,
+            verify: false,
+        },
+        config: { find: false, update: false },
+        jobs: { create: false, run: false, update: false },
+    };
+}
+//# sourceMappingURL=access.js.map

package/dist/access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.js","sourceRoot":"","sources":["../src/access.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAQ5C,MAAM,WAAW,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK;KACzC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,SAA6B,EAAE,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;KAC7F,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,SAAiB,EAAE,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC;AAEtE,MAAM,UAAU,uBAAuB,CAAC,aAA8B;IACpE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IACrD,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI;QAC7B,CAAC,YAAY,EAAE,aAAa,CAAC,WAAW,CAAC;QACzC,CAAC,QAAQ,EAAE,aAAa,CAAC,OAAO,CAAC;KACzB,EAAE,CAAC;QACX,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;YAC/C,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,UAAU,IAAI,sCAAsC,UAAU,IAAI,CAAC,CAAC;YAC1G,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAuC;IAC/D,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;QAC9E,WAAW,CAAC,IAAI,CAAC;QACjB,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO;KACtG,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,YAAY,CAAC,OAAmC;IACvD,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;QAC9E,WAAW,CAAC,IAAI,CAAC;QACjB,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO;KAC1E,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,WAAW,CAAC,KAA0C;IAC7D,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EAAE,YAAY,EAAE,aAAa,EAAE,GAAG,EAA2B;IAClG,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAClF,IAAI,CAAC,MAAM,CAAC,IAAI;QAAE,MAAM,IAAI,iBAAiB,EAAE,CAAC;IAEhD,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,GAAG,gBAAgB,CAAC,aAAa,CAAC,WAAW,CAAC;QAC9C,GAAG,YAAY,CAAC,aAAa,CAAC,OAAO,CAAC;QACtC,kBAAkB,EAAE,WAAW,CAAC,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC;QACzD,oBAAoB,EAAE,WAAW,CAAC,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC;QAC7D,sBAAsB,EAAE,WAAW,CAAC,aAAa,CAAC,GAAG,EAAE,SAAS,CAAC;QACjE,IAAI,EAAE;YACJ,IAAI,EAAE,KAAK;YACX,cAAc,EAAE,KAAK;YACrB,KAAK,EAAE,KAAK;YACZ,aAAa,EAAE,KAAK;YACpB,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,KAAK;SACd;QACD,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE;QACtC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE;KACnD,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,5 @@
+import type { MCPPluginConfig } from '@payloadcms/plugin-mcp';
+import type { Plugin } from 'frogbot';
+export type McpPluginOptions = Omit<MCPPluginConfig, 'experimental' | 'overrideAuth'>;
+export declare function mcpPlugin(pluginOptions?: McpPluginOptions): Plugin;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE9D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAItC,MAAM,MAAM,gBAAgB,GAAG,IAAI,CAAC,eAAe,EAAE,cAAc,GAAG,cAAc,CAAC,CAAC;AAEtF,wBAAgB,SAAS,CAAC,aAAa,GAAE,gBAAqB,GAAG,MAAM,CAiBtE"}

package/dist/index.js

@@ -0,0 +1,21 @@
+import { isApiKeyStrategy } from '@frogbotai/plugin-api-keys';
+import { mcpPlugin as payloadMcpPlugin } from '@payloadcms/plugin-mcp';
+import { resolveMcpAccess, validateMcpCapabilities } from './access.js';
+export function mcpPlugin(pluginOptions = {}) {
+    validateMcpCapabilities(pluginOptions);
+    return async (config) => {
+        const apiKeyStrategy = config.collections.flatMap((collection) => {
+            const auth = typeof collection.auth === 'object' ? collection.auth : undefined;
+            return auth?.strategies ?? [];
+        }).find(isApiKeyStrategy);
+        if (!apiKeyStrategy) {
+            throw new Error('[plugin-mcp] apiKeysPlugin must be configured before mcpPlugin.');
+        }
+        const { experimental: _experimental, overrideAuth: _overrideAuth, ...options } = pluginOptions;
+        return await payloadMcpPlugin({
+            ...options,
+            overrideAuth: (req) => resolveMcpAccess({ authenticate: apiKeyStrategy.authenticate, pluginOptions: options, req }),
+        })(config);
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAE9D,OAAO,EAAE,SAAS,IAAI,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAGvE,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAIxE,MAAM,UAAU,SAAS,CAAC,gBAAkC,EAAE;IAC5D,uBAAuB,CAAC,aAAa,CAAC,CAAC;IACvC,OAAO,KAAK,EAAE,MAAM,EAAE,EAAE;QACtB,MAAM,cAAc,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE;YAC/D,MAAM,IAAI,GAAG,OAAO,UAAU,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAC/E,OAAO,IAAI,EAAE,UAAU,IAAI,EAAE,CAAC;QAChC,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC1B,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACrF,CAAC;QAED,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,GAAG,OAAO,EAAE,GAAG,aAAgC,CAAC;QAClH,OAAO,MAAM,gBAAgB,CAAC;YAC5B,GAAG,OAAO;YACV,YAAY,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,gBAAgB,CAAC,EAAE,YAAY,EAAE,cAAc,CAAC,YAAY,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;SACpH,CAAC,CAAC,MAAe,CAA6B,CAAC;IAClD,CAAC,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,52 @@
+{
+  "name": "@frogbotai/plugin-mcp",
+  "version": "0.14.0",
+  "description": "Payload MCP integration for FrogBot.",
+  "license": "MIT",
+  "author": "Colby Gilbert",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/frogbotai/frogbot.git",
+    "directory": "packages/plugins/plugin-mcp"
+  },
+  "homepage": "https://github.com/frogbotai/frogbot#readme",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "engines": {
+    "node": ">=22"
+  },
+  "dependencies": {
+    "@payloadcms/plugin-mcp": "3.85.1"
+  },
+  "peerDependencies": {
+    "payload": "3.85.1",
+    "@frogbotai/plugin-api-keys": "0.14.0",
+    "frogbot": "0.14.0"
+  },
+  "devDependencies": {
+    "payload": "3.85.1",
+    "typescript": "5.6.2",
+    "frogbot": "0.14.0",
+    "@frogbotai/plugin-api-keys": "0.14.0",
+    "@frogbotai/plugin-roles": "0.14.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "clean": "rm -rf dist",
+    "typecheck": "tsc --noEmit"
+  }
+}