@frogbotai/plugin-mcp 0.33.0 → 0.35.0

package/README.md

@@ -1,6 +1,6 @@
 # @frogbotai/plugin-mcp
 
-Expose selected FrogBot collections and globals to external MCP clients.
+Expose your app's collections to external MCP clients.
 
 ```ts
 import { apiKeysPlugin } from '@frogbotai/plugin-api-keys';
@@ -13,16 +13,10 @@ export default buildConfig({
     { slug: 'users', auth: true, fields: [] },
     { slug: 'posts', fields: [{ name: 'title', type: 'text' }] },
   ],
-  plugins: [
-    rolesPlugin(),
-    apiKeysPlugin(),
-    mcpPlugin({
-      collections: { posts: { enabled: { find: true } } },
-    }),
-  ],
+  plugins: [rolesPlugin(), apiKeysPlugin(), mcpPlugin()],
 });
 ```
 
 Connect MCP clients to `/api/mcp` with a Bearer token minted by `@frogbotai/plugin-api-keys`. Revoked, malformed, and unknown keys are rejected. The plugin requires `apiKeysPlugin()` earlier in the plugin array.
 
-The plugin also adds a dormant `payload-mcp-api-keys` collection for schema stability, but its keys cannot authenticate this endpoint. Experimental config, collection-definition, job, and auth-mutation tools are unavailable. SSE is not supported.
+Every app collection is exposed, and each call runs as the key's owner under the collection's access control. FrogBot's own collections (chats, API keys, logs) are never exposed. SSE is not supported.

package/dist/access.d.ts

@@ -1,14 +1,16 @@
-import type { MCPAccessSettings } from '@payloadcms/plugin-mcp';
-import type { MCPPluginConfig } from '@payloadcms/plugin-mcp';
+import type { AuthorizedMCP, SanitizedMCPPluginConfig } from '@payloadcms/plugin-mcp';
 import type { AuthStrategy } from 'frogbot';
 import type { PayloadRequest } from 'payload';
-type ResolveMcpAccessOptions = {
+type AuthorizeMcpOptions = {
     collection: string;
     strategy: AuthStrategy;
-    pluginOptions: MCPPluginConfig;
+    pluginConfig: SanitizedMCPPluginConfig;
     req: PayloadRequest;
 };
-export declare function validateMcpCapabilities(pluginOptions: MCPPluginConfig): void;
-export declare function resolveMcpAccess({ collection, strategy, pluginOptions, req, }: ResolveMcpAccessOptions): Promise<MCPAccessSettings>;
+/**
+ * Signs the request in with a FrogBot API key and returns the MCP items the key's user can reach,
+ * without FrogBot's own collections. Access is always enforced, whatever the request asks.
+ */
+export declare function authorizeMcp({ collection, strategy, pluginConfig, req, }: AuthorizeMcpOptions): Promise<AuthorizedMCP>;
 export {};
 //# sourceMappingURL=access.d.ts.map

package/dist/access.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"access.d.ts","sourceRoot":"","sources":["../src/access.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAsB,MAAM,SAAS,CAAC;AAEhE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAG9C,KAAK,uBAAuB,GAAG;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,YAAY,CAAC;IACvB,aAAa,EAAE,eAAe,CAAC;IAC/B,GAAG,EAAE,cAAc,CAAC;CACrB,CAAC;AAOF,wBAAgB,uBAAuB,CAAC,aAAa,EAAE,eAAe,GAAG,IAAI,CAiB5E;AA0BD,wBAAsB,gBAAgB,CAAC,EACrC,UAAU,EACV,QAAQ,EACR,aAAa,EACb,GAAG,GACJ,EAAE,uBAAuB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAsCtD"}
+{"version":3,"file":"access.d.ts","sourceRoot":"","sources":["../src/access.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAEtF,OAAO,KAAK,EAAE,YAAY,EAAsB,MAAM,SAAS,CAAC;AAMhE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAG9C,KAAK,mBAAmB,GAAG;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,YAAY,CAAC;IACvB,YAAY,EAAE,wBAAwB,CAAC;IACvC,GAAG,EAAE,cAAc,CAAC;CACrB,CAAC;AAEF;;;GAGG;AACH,wBAAsB,YAAY,CAAC,EACjC,UAAU,EACV,QAAQ,EACR,YAAY,EACZ,GAAG,GACJ,EAAE,mBAAmB,GAAG,OAAO,CAAC,aAAa,CAAC,CAkC9C"}

package/dist/access.js

@@ -1,65 +1,17 @@
-import { attachRegisteredFrogBot, executeAuthStrategy } from 'frogbot/internal';
+import { filterMCPItems } from '@payloadcms/plugin-mcp/internal';
+import { attachRegisteredFrogBot, executeAuthStrategy, isInternalCollection } from 'frogbot/internal';
 import { UnauthorizedError } from 'payload';
-const toCamelCase = (value)=>value.replace(/[-_\s]+(.)?/g, (_, character)=>character?.toUpperCase() ?? '').replace(/^(.)/, (_, character)=>character.toLowerCase());
-export function validateMcpCapabilities(pluginOptions) {
-    const reserved = new Set([
-        'auth',
-        'config',
-        'jobs'
-    ]);
-    for (const [type, entities] of [
-        [
-            'Collection',
-            pluginOptions.collections
-        ],
-        [
-            'Global',
-            pluginOptions.globals
-        ]
-    ]){
-        for (const slug of Object.keys(entities ?? {})){
-            const capability = toCamelCase(slug);
-            if (reserved.has(capability)) {
-                throw new Error(`[plugin-mcp] ${type} slug '${slug}' maps to reserved MCP capability '${capability}'.`);
-            }
-        }
-    }
-}
-function collectionGrants(options) {
-    return Object.fromEntries(Object.entries(options ?? {}).map(([slug, config])=>[
-            toCamelCase(slug),
-            config?.enabled === true ? {
-                create: true,
-                delete: true,
-                find: true,
-                update: true
-            } : config?.enabled
-        ]));
-}
-function globalGrants(options) {
-    return Object.fromEntries(Object.entries(options ?? {}).map(([slug, config])=>[
-            toCamelCase(slug),
-            config?.enabled === true ? {
-                find: true,
-                update: true
-            } : config?.enabled
-        ]));
-}
-function namedGrants(items) {
-    return Object.fromEntries((items ?? []).map(({ name })=>[
-            toCamelCase(name),
-            true
-        ]));
-}
-export async function resolveMcpAccess({ collection, strategy, pluginOptions, req }) {
+/**
+ * Signs the request in with a FrogBot API key and returns the MCP items the key's user can reach,
+ * without FrogBot's own collections. Access is always enforced, whatever the request asks.
+ */ export async function authorizeMcp({ collection, strategy, pluginConfig, req }) {
     const frogbotReq = attachRegisteredFrogBot(req);
-    const frogbot = frogbotReq.frogbot;
     let result;
     try {
         result = await executeAuthStrategy({
             collection,
             strategy,
-            frogbot,
+            frogbot: frogbotReq.frogbot,
             headers: req.headers,
             req: frogbotReq,
             strategyName: strategy.name
@@ -68,33 +20,19 @@ export async function resolveMcpAccess({ collection, strategy, pluginOptions, re
         throw new UnauthorizedError();
     }
     if (!result.user) throw new UnauthorizedError();
+    req.user = {
+        ...result.user,
+        collection: result.user.collection ?? collection
+    };
+    const internal = new Set(req.payload.config.collections.filter(isInternalCollection).map(({ slug })=>slug));
+    const items = await filterMCPItems({
+        items: pluginConfig.items.filter((item)=>item.type !== 'collectionTool' || !internal.has(item.collectionSlug)),
+        overrideAccess: false,
+        req
+    });
     return {
-        user: {
-            ...result.user,
-            collection: result.user.collection ?? collection
-        },
-        ...collectionGrants(pluginOptions.collections),
-        ...globalGrants(pluginOptions.globals),
-        'payload-mcp-tool': namedGrants(pluginOptions.mcp?.tools),
-        'payload-mcp-prompt': namedGrants(pluginOptions.mcp?.prompts),
-        'payload-mcp-resource': namedGrants(pluginOptions.mcp?.resources),
-        auth: {
-            auth: false,
-            forgotPassword: false,
-            login: false,
-            resetPassword: false,
-            unlock: false,
-            verify: false
-        },
-        config: {
-            find: false,
-            update: false
-        },
-        jobs: {
-            create: false,
-            run: false,
-            update: false
-        }
+        items,
+        overrideAccess: false
     };
 }
 

package/dist/access.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/access.ts"],"names":["attachRegisteredFrogBot","executeAuthStrategy","UnauthorizedError","toCamelCase","value","replace","_","character","toUpperCase","toLowerCase","validateMcpCapabilities","pluginOptions","reserved","Set","type","entities","collections","globals","slug","Object","keys","capability","has","Error","collectionGrants","options","fromEntries","entries","map","config","enabled","create","delete","find","update","globalGrants","namedGrants","items","name","resolveMcpAccess","collection","strategy","req","frogbotReq","frogbot","result","headers","strategyName","user","mcp","tools","prompts","resources","auth","forgotPassword","login","resetPassword","unlock","verify","jobs","run"],"mappings":"AAGA,SAASA,uBAAuB,EAAEC,mBAAmB,QAAQ,mBAAmB;AAEhF,SAASC,iBAAiB,QAAQ,UAAU;AAS5C,MAAMC,cAAc,CAACC,QACnBA,MACGC,OAAO,CAAC,gBAAgB,CAACC,GAAGC,YAAkCA,WAAWC,iBAAiB,IAC1FH,OAAO,CAAC,QAAQ,CAACC,GAAGC,YAAsBA,UAAUE,WAAW;AAEpE,OAAO,SAASC,wBAAwBC,aAA8B;IACpE,MAAMC,WAAW,IAAIC,IAAI;QAAC;QAAQ;QAAU;KAAO;IAEnD,KAAK,MAAM,CAACC,MAAMC,SAAS,IAAI;QAC7B;YAAC;YAAcJ,cAAcK,WAAW;SAAC;QACzC;YAAC;YAAUL,cAAcM,OAAO;SAAC;KAClC,CAAW;QACV,KAAK,MAAMC,QAAQC,OAAOC,IAAI,CAACL,YAAY,CAAC,GAAI;YAC9C,MAAMM,aAAalB,YAAYe;YAE/B,IAAIN,SAASU,GAAG,CAACD,aAAa;gBAC5B,MAAM,IAAIE,MACR,CAAC,aAAa,EAAET,KAAK,OAAO,EAAEI,KAAK,mCAAmC,EAAEG,WAAW,EAAE,CAAC;YAE1F;QACF;IACF;AACF;AAEA,SAASG,iBAAiBC,OAAuC;IAC/D,OAAON,OAAOO,WAAW,CACvBP,OAAOQ,OAAO,CAACF,WAAW,CAAC,GAAGG,GAAG,CAAC,CAAC,CAACV,MAAMW,OAAO,GAAK;YACpD1B,YAAYe;YACZW,QAAQC,YAAY,OAChB;gBAAEC,QAAQ;gBAAMC,QAAQ;gBAAMC,MAAM;gBAAMC,QAAQ;YAAK,IACvDL,QAAQC;SACb;AAEL;AAEA,SAASK,aAAaV,OAAmC;IACvD,OAAON,OAAOO,WAAW,CACvBP,OAAOQ,OAAO,CAACF,WAAW,CAAC,GAAGG,GAAG,CAAC,CAAC,CAACV,MAAMW,OAAO,GAAK;YACpD1B,YAAYe;YACZW,QAAQC,YAAY,OAAO;gBAAEG,MAAM;gBAAMC,QAAQ;YAAK,IAAIL,QAAQC;SACnE;AAEL;AAEA,SAASM,YAAYC,KAA0C;IAC7D,OAAOlB,OAAOO,WAAW,CAAC,AAACW,CAAAA,SAAS,EAAE,AAAD,EAAGT,GAAG,CAAC,CAAC,EAAEU,IAAI,EAAE,GAAK;YAACnC,YAAYmC;YAAO;SAAK;AACrF;AAEA,OAAO,eAAeC,iBAAiB,EACrCC,UAAU,EACVC,QAAQ,EACR9B,aAAa,EACb+B,GAAG,EACqB;IACxB,MAAMC,aAAa3C,wBAAwB0C;IAC3C,MAAME,UAAUD,WAAWC,OAAO;IAClC,IAAIC;IAEJ,IAAI;QACFA,SAAS,MAAM5C,oBAAoB;YACjCuC;YACAC;YACAG;YACAE,SAASJ,IAAII,OAAO;YACpBJ,KAAKC;YACLI,cAAcN,SAASH,IAAI;QAC7B;IACF,EAAE,OAAM;QACN,MAAM,IAAIpC;IACZ;IAEA,IAAI,CAAC2C,OAAOG,IAAI,EAAE,MAAM,IAAI9C;IAE5B,OAAO;QACL8C,MAAM;YAAE,GAAGH,OAAOG,IAAI;YAAER,YAAYK,OAAOG,IAAI,CAACR,UAAU,IAAIA;QAAW;QACzE,GAAGhB,iBAAiBb,cAAcK,WAAW,CAAC;QAC9C,GAAGmB,aAAaxB,cAAcM,OAAO,CAAC;QACtC,oBAAoBmB,YAAYzB,cAAcsC,GAAG,EAAEC;QACnD,sBAAsBd,YAAYzB,cAAcsC,GAAG,EAAEE;QACrD,wBAAwBf,YAAYzB,cAAcsC,GAAG,EAAEG;QACvDC,MAAM;YACJA,MAAM;YACNC,gBAAgB;YAChBC,OAAO;YACPC,eAAe;YACfC,QAAQ;YACRC,QAAQ;QACV;QACA7B,QAAQ;YAAEI,MAAM;YAAOC,QAAQ;QAAM;QACrCyB,MAAM;YAAE5B,QAAQ;YAAO6B,KAAK;YAAO1B,QAAQ;QAAM;IACnD;AACF","file":"access.js"}
+{"version":3,"sources":["../src/access.ts"],"names":["filterMCPItems","attachRegisteredFrogBot","executeAuthStrategy","isInternalCollection","UnauthorizedError","authorizeMcp","collection","strategy","pluginConfig","req","frogbotReq","result","frogbot","headers","strategyName","name","user","internal","Set","payload","config","collections","filter","map","slug","items","item","type","has","collectionSlug","overrideAccess"],"mappings":"AACA,SAASA,cAAc,QAAQ,kCAAkC;AAEjE,SACEC,uBAAuB,EACvBC,mBAAmB,EACnBC,oBAAoB,QACf,mBAAmB;AAE1B,SAASC,iBAAiB,QAAQ,UAAU;AAS5C;;;CAGC,GACD,OAAO,eAAeC,aAAa,EACjCC,UAAU,EACVC,QAAQ,EACRC,YAAY,EACZC,GAAG,EACiB;IACpB,MAAMC,aAAaT,wBAAwBQ;IAC3C,IAAIE;IAEJ,IAAI;QACFA,SAAS,MAAMT,oBAAoB;YACjCI;YACAC;YACAK,SAASF,WAAWE,OAAO;YAC3BC,SAASJ,IAAII,OAAO;YACpBJ,KAAKC;YACLI,cAAcP,SAASQ,IAAI;QAC7B;IACF,EAAE,OAAM;QACN,MAAM,IAAIX;IACZ;IAEA,IAAI,CAACO,OAAOK,IAAI,EAAE,MAAM,IAAIZ;IAE5BK,IAAIO,IAAI,GAAG;QAAE,GAAGL,OAAOK,IAAI;QAAEV,YAAYK,OAAOK,IAAI,CAACV,UAAU,IAAIA;IAAW;IAE9E,MAAMW,WAAW,IAAIC,IACnBT,IAAIU,OAAO,CAACC,MAAM,CAACC,WAAW,CAACC,MAAM,CAACnB,sBAAsBoB,GAAG,CAAC,CAAC,EAAEC,IAAI,EAAE,GAAKA;IAGhF,MAAMC,QAAQ,MAAMzB,eAAe;QACjCyB,OAAOjB,aAAaiB,KAAK,CAACH,MAAM,CAC9B,CAACI,OAASA,KAAKC,IAAI,KAAK,oBAAoB,CAACV,SAASW,GAAG,CAACF,KAAKG,cAAc;QAE/EC,gBAAgB;QAChBrB;IACF;IAEA,OAAO;QAAEgB;QAAOK,gBAAgB;IAAM;AACxC","file":"access.js"}

package/dist/index.d.ts

@@ -1,5 +1,6 @@
 import type { MCPPluginConfig } from '@payloadcms/plugin-mcp';
 import type { Plugin } from 'frogbot';
-export type McpPluginOptions = Omit<MCPPluginConfig, 'experimental' | 'overrideAuth'>;
-export declare function mcpPlugin(pluginOptions?: McpPluginOptions): Plugin;
+export { defineCollectionTool, defineGlobalTool, definePrompt, defineTool, } from '@payloadcms/plugin-mcp';
+export type McpPluginOptions = Omit<MCPPluginConfig, 'overrideGetAuthorizedMCP'>;
+export declare function mcpPlugin(options?: McpPluginOptions): Plugin;
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE9D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAKtC,MAAM,MAAM,gBAAgB,GAAG,IAAI,CAAC,eAAe,EAAE,cAAc,GAAG,cAAc,CAAC,CAAC;AAEtF,wBAAgB,SAAS,CAAC,aAAa,GAAE,gBAAqB,GAAG,MAAM,CAsCtE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE9D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAItC,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,YAAY,EACZ,UAAU,GACX,MAAM,wBAAwB,CAAC;AAEhC,MAAM,MAAM,gBAAgB,GAAG,IAAI,CAAC,eAAe,EAAE,0BAA0B,CAAC,CAAC;AAEjF,wBAAgB,SAAS,CAAC,OAAO,GAAE,gBAAqB,GAAG,MAAM,CAkChE"}

package/dist/index.js

@@ -1,10 +1,9 @@
 import { isApiKeyStrategy } from '@frogbotai/plugin-api-keys';
 import { mcpPlugin as payloadMcpPlugin } from '@payloadcms/plugin-mcp';
-import { wrapPayloadPlugin } from 'frogbot/internal';
-import { resolveMcpAccess, validateMcpCapabilities } from './access.js';
-export function mcpPlugin(pluginOptions = {}) {
-    validateMcpCapabilities(pluginOptions);
-    return async (config)=>{
+import { authorizeMcp } from './access.js';
+export { defineCollectionTool, defineGlobalTool, definePrompt, defineTool } from '@payloadcms/plugin-mcp';
+export function mcpPlugin(options = {}) {
+    return (config)=>{
         const apiKeyStrategy = config.collections.flatMap((collection)=>{
             const auth = typeof collection.auth === 'object' ? collection.auth : undefined;
             return (auth?.strategies ?? []).map((strategy)=>({
@@ -15,16 +14,21 @@ export function mcpPlugin(pluginOptions = {}) {
         if (!apiKeyStrategy) {
             throw new Error('[plugin-mcp] apiKeysPlugin must be configured before mcpPlugin.');
         }
-        const { experimental: _experimental, overrideAuth: _overrideAuth, ...options } = pluginOptions;
-        return wrapPayloadPlugin(payloadMcpPlugin({
-            ...options,
-            overrideAuth: (req)=>resolveMcpAccess({
-                    collection: apiKeyStrategy.collection,
-                    strategy: apiKeyStrategy.strategy,
-                    pluginOptions: options,
-                    req
+        return {
+            ...config,
+            _payloadPlugins: [
+                ...config._payloadPlugins ?? [],
+                payloadMcpPlugin({
+                    ...options,
+                    overrideGetAuthorizedMCP: ({ pluginConfig, req })=>authorizeMcp({
+                            collection: apiKeyStrategy.collection,
+                            strategy: apiKeyStrategy.strategy,
+                            pluginConfig,
+                            req
+                        })
                 })
-        }))(config);
+            ]
+        };
     };
 }
 

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"names":["isApiKeyStrategy","mcpPlugin","payloadMcpPlugin","wrapPayloadPlugin","resolveMcpAccess","validateMcpCapabilities","pluginOptions","config","apiKeyStrategy","collections","flatMap","collection","auth","undefined","strategies","map","strategy","slug","find","Error","experimental","_experimental","overrideAuth","_overrideAuth","options","req"],"mappings":"AAAA,SAASA,gBAAgB,QAAQ,6BAA6B;AAE9D,SAASC,aAAaC,gBAAgB,QAAQ,yBAAyB;AAEvE,SAASC,iBAAiB,QAAQ,mBAAmB;AAErD,SAASC,gBAAgB,EAAEC,uBAAuB,QAAQ,cAAc;AAIxE,OAAO,SAASJ,UAAUK,gBAAkC,CAAC,CAAC;IAC5DD,wBAAwBC;IAExB,OAAO,OAAOC;QACZ,MAAMC,iBAAiBD,OAAOE,WAAW,CACtCC,OAAO,CAAC,CAACC;YACR,MAAMC,OAAO,OAAOD,WAAWC,IAAI,KAAK,WAAWD,WAAWC,IAAI,GAAGC;YAErE,OAAO,AAACD,CAAAA,MAAME,cAAc,EAAE,AAAD,EAAGC,GAAG,CAAC,CAACC,WAAc,CAAA;oBACjDL,YAAYA,WAAWM,IAAI;oBAC3BD;gBACF,CAAA;QACF,GACCE,IAAI,CAAC,CAAC,EAAEF,QAAQ,EAAE,GAAKhB,iBAAiBgB;QAE3C,IAAI,CAACR,gBAAgB;YACnB,MAAM,IAAIW,MAAM;QAClB;QAEA,MAAM,EACJC,cAAcC,aAAa,EAC3BC,cAAcC,aAAa,EAC3B,GAAGC,SACJ,GAAGlB;QAEJ,OAAOH,kBACLD,iBAAiB;YACf,GAAGsB,OAAO;YACVF,cAAc,CAACG,MACbrB,iBAAiB;oBACfO,YAAYH,eAAeG,UAAU;oBACrCK,UAAUR,eAAeQ,QAAQ;oBACjCV,eAAekB;oBACfC;gBACF;QACJ,IACAlB;IACJ;AACF","file":"index.js"}
+{"version":3,"sources":["../src/index.ts"],"names":["isApiKeyStrategy","mcpPlugin","payloadMcpPlugin","authorizeMcp","defineCollectionTool","defineGlobalTool","definePrompt","defineTool","options","config","apiKeyStrategy","collections","flatMap","collection","auth","undefined","strategies","map","strategy","slug","find","Error","_payloadPlugins","overrideGetAuthorizedMCP","pluginConfig","req"],"mappings":"AAAA,SAASA,gBAAgB,QAAQ,6BAA6B;AAE9D,SAASC,aAAaC,gBAAgB,QAAQ,yBAAyB;AAGvE,SAASC,YAAY,QAAQ,cAAc;AAE3C,SACEC,oBAAoB,EACpBC,gBAAgB,EAChBC,YAAY,EACZC,UAAU,QACL,yBAAyB;AAIhC,OAAO,SAASN,UAAUO,UAA4B,CAAC,CAAC;IACtD,OAAO,CAACC;QACN,MAAMC,iBAAiBD,OAAOE,WAAW,CACtCC,OAAO,CAAC,CAACC;YACR,MAAMC,OAAO,OAAOD,WAAWC,IAAI,KAAK,WAAWD,WAAWC,IAAI,GAAGC;YAErE,OAAO,AAACD,CAAAA,MAAME,cAAc,EAAE,AAAD,EAAGC,GAAG,CAAC,CAACC,WAAc,CAAA;oBACjDL,YAAYA,WAAWM,IAAI;oBAC3BD;gBACF,CAAA;QACF,GACCE,IAAI,CAAC,CAAC,EAAEF,QAAQ,EAAE,GAAKlB,iBAAiBkB;QAE3C,IAAI,CAACR,gBAAgB;YACnB,MAAM,IAAIW,MAAM;QAClB;QAEA,OAAO;YACL,GAAGZ,MAAM;YACTa,iBAAiB;mBACXb,OAAOa,eAAe,IAAI,EAAE;gBAChCpB,iBAAiB;oBACf,GAAGM,OAAO;oBACVe,0BAA0B,CAAC,EAAEC,YAAY,EAAEC,GAAG,EAAE,GAC9CtB,aAAa;4BACXU,YAAYH,eAAeG,UAAU;4BACrCK,UAAUR,eAAeQ,QAAQ;4BACjCM;4BACAC;wBACF;gBACJ;aACD;QACH;IACF;AACF","file":"index.js"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frogbotai/plugin-mcp",
-  "version": "0.33.0",
+  "version": "0.35.0",
   "description": "Payload MCP integration for FrogBot.",
   "license": "MIT",
   "author": "Colby Gilbert",
@@ -24,22 +24,22 @@
     "dist"
   ],
   "engines": {
-    "node": ">=22"
+    "node": ">=24.21.0"
   },
   "dependencies": {
-    "@payloadcms/plugin-mcp": "3.90.1"
+    "@payloadcms/plugin-mcp": "4.0.0-beta.2"
   },
   "peerDependencies": {
-    "payload": "3.90.1",
-    "frogbot": "0.33.0",
-    "@frogbotai/plugin-api-keys": "0.33.0"
+    "payload": "4.0.0-beta.2",
+    "@frogbotai/plugin-api-keys": "0.35.0",
+    "frogbot": "0.35.0"
   },
   "devDependencies": {
-    "payload": "3.90.1",
-    "typescript": "5.6.2",
-    "@frogbotai/plugin-roles": "0.33.0",
-    "@frogbotai/plugin-api-keys": "0.33.0",
-    "frogbot": "0.33.0"
+    "payload": "4.0.0-beta.2",
+    "typescript": "6.0.3",
+    "@frogbotai/plugin-api-keys": "0.35.0",
+    "@frogbotai/plugin-roles": "0.35.0",
+    "frogbot": "0.35.0"
   },
   "publishConfig": {
     "access": "public"