@payloadcms/plugin-mcp 4.0.0-internal.167c7cd → 4.0.0-internal.16f218d

package/bin.js

@@ -27,13 +27,6 @@ const start = async () => {
     return
   }
 
-  // tsx 4.22.4's synchronous loader leaks its namespace query onto Node built-ins on Node 23.5+.
-  // Force the stable asynchronous loader path, matching payload/bin.js.
-  const nodeModule = await import('node:module')
-  if (typeof nodeModule.default.registerHooks === 'function') {
-    nodeModule.default.registerHooks = undefined
-  }
-
   const { tsImport } = await import('tsx/esm/api')
   const { runMcpStdio } = await tsImport('./dist/stdio.js', baseURL)
   await runMcpStdio()

package/dist/endpoint/access.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"access.d.ts","sourceRoot":"","sources":["../../src/endpoint/access.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAwB,MAAM,SAAS,CAAA;AAInE,OAAO,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,aAAa,CAAA;AAIzD,MAAM,MAAM,oBAAoB,GAAG;IACjC,cAAc,EAAE,OAAO,CAAA;IACvB,GAAG,EAAE,cAAc,CAAA;CACpB,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,CAAC,IAAI,EAAE,oBAAoB,KAAK,OAAO,CAAC,aAAa,CAkCnF,CAAA;AAED,eAAO,MAAM,cAAc,oCAIxB;IACD,KAAK,EAAE,OAAO,EAAE,CAAA;IAChB,cAAc,EAAE,OAAO,CAAA;IACvB,GAAG,EAAE,cAAc,CAAA;CACpB,KAAG,OAAO,CAAC,OAAO,EAAE,CAkBpB,CAAA"}
+{"version":3,"file":"access.d.ts","sourceRoot":"","sources":["../../src/endpoint/access.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAwB,MAAM,SAAS,CAAA;AAInE,OAAO,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,aAAa,CAAA;AAKzD,MAAM,MAAM,oBAAoB,GAAG;IACjC,cAAc,EAAE,OAAO,CAAA;IACvB,GAAG,EAAE,cAAc,CAAA;CACpB,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,CAAC,IAAI,EAAE,oBAAoB,KAAK,OAAO,CAAC,aAAa,CAoDnF,CAAA;AAED,eAAO,MAAM,cAAc,oCAIxB;IACD,KAAK,EAAE,OAAO,EAAE,CAAA;IAChB,cAAc,EAAE,OAAO,CAAA;IACvB,GAAG,EAAE,cAAc,CAAA;CACpB,KAAG,OAAO,CAAC,OAAO,EAAE,CAkBpB,CAAA"}

package/dist/endpoint/access.js

@@ -1,5 +1,6 @@
-import { getAccessResults, UnauthorizedError } from 'payload';
+import { executeAuthStrategies, getAccessResults, UnauthorizedError } from 'payload';
 import { getPluginConfig } from '../utils/getPluginConfig.js';
+import { authenticateLoginToken } from './oauthLoginToken.js';
 /**
  * Authenticates an MCP request and removes items the user cannot access.
  * `overrideAccess` skips Payload and MCP item access checks.
@@ -18,11 +19,30 @@ import { getPluginConfig } from '../utils/getPluginConfig.js';
         const headers = new Headers(req.headers);
         const hasAuthorization = headers.has('Authorization');
         headers.set('DisableAutologin', 'true');
-        req.user = (await req.payload.auth({
+        // Not `payload.auth()`, which also computes permissions that filterMCPItems computes anyway
+        req.user = (await executeAuthStrategies({
             headers,
+            payload: req.payload,
             req
         })).user;
-        if (hasAuthorization && !req.user) {
+        // Only bearer tokens that no auth strategy accepted get here, e.g. an OAuth access token.
+        // API keys use the `<collection> API-Key <key>` scheme instead of `Bearer`, so they never do.
+        const bearerToken = headers.get('Authorization')?.match(/^Bearer (.+)$/)?.[1];
+        // Sealed Payload login tokens from the built-in OAuth server
+        if (!req.user && bearerToken && pluginConfig.oauth?.type === 'builtin' && !pluginConfig.oauth.issueToken) {
+            req.user = await authenticateLoginToken({
+                req,
+                token: bearerToken
+            });
+        }
+        if (!req.user && bearerToken && pluginConfig.oauth?.authenticate) {
+            req.user = await pluginConfig.oauth.authenticate({
+                req,
+                token: bearerToken
+            });
+        }
+        // With OAuth, the endpoint answers with a challenge that starts the client's sign-in
+        if (hasAuthorization && !req.user && !pluginConfig.oauth) {
             throw new UnauthorizedError(req.t);
         }
     }
@@ -62,13 +82,13 @@ export const filterMCPItems = async ({ items, overrideAccess, req })=>{
     switch(item.type){
         case 'collectionTool':
             return !item.tool.access || await item.tool.access({
-                collectionSlug: item.collectionSlug,
+                slug: item.collectionSlug,
                 permissions,
                 req
             });
         case 'globalTool':
             return !item.tool.access || await item.tool.access({
-                globalSlug: item.globalSlug,
+                slug: item.globalSlug,
                 permissions,
                 req
             });

package/dist/endpoint/access.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/endpoint/access.ts"],"sourcesContent":["import type { PayloadRequest, SanitizedPermissions } from 'payload'\n\nimport { getAccessResults, UnauthorizedError } from 'payload'\n\nimport type { AuthorizedMCP, MCPItem } from '../types.js'\n\nimport { getPluginConfig } from '../utils/getPluginConfig.js'\n\nexport type GetAuthorizedMCPArgs = {\n  overrideAccess: boolean\n  req: PayloadRequest\n}\n\n/**\n * Authenticates an MCP request and removes items the user cannot access.\n * `overrideAccess` skips Payload and MCP item access checks.\n */\nexport const getAuthorizedMCP: (args: GetAuthorizedMCPArgs) => Promise<AuthorizedMCP> = async ({\n  overrideAccess,\n  req,\n}) => {\n  const pluginConfig = getPluginConfig({ config: req.payload.config })\n\n  if (pluginConfig.overrideGetAuthorizedMCP) {\n    return await pluginConfig.overrideGetAuthorizedMCP({\n      overrideAccess,\n      pluginConfig,\n      req,\n    })\n  }\n\n  if (req.headers) {\n    const headers = new Headers(req.headers)\n    const hasAuthorization = headers.has('Authorization')\n\n    headers.set('DisableAutologin', 'true')\n    req.user = (await req.payload.auth({ headers, req })).user\n\n    if (hasAuthorization && !req.user) {\n      throw new UnauthorizedError(req.t)\n    }\n  }\n\n  return {\n    items: await filterMCPItems({\n      items: pluginConfig.items,\n      overrideAccess,\n      req,\n    }),\n    overrideAccess,\n  }\n}\n\nexport const filterMCPItems = async ({\n  items,\n  overrideAccess,\n  req,\n}: {\n  items: MCPItem[]\n  overrideAccess: boolean\n  req: PayloadRequest\n}): Promise<MCPItem[]> => {\n  // Match Payload core: overrideAccess bypasses access evaluation\n  if (overrideAccess) {\n    return items\n  }\n\n  const authorizedItems: MCPItem[] = []\n\n  const permissions = await getAccessResults({ req })\n\n  for (const item of items) {\n    if (!(await checkItemAccess({ item, permissions, req }))) {\n      continue\n    }\n    authorizedItems.push(item)\n  }\n\n  return authorizedItems\n}\n\n/**\n * Runs MCP item access callbacks\n */\nconst checkItemAccess = async ({\n  item,\n  permissions,\n  req,\n}: {\n  item: MCPItem\n  permissions?: SanitizedPermissions\n  req: PayloadRequest\n}): Promise<boolean> => {\n  switch (item.type) {\n    case 'collectionTool':\n      return (\n        !item.tool.access ||\n        (await item.tool.access({ collectionSlug: item.collectionSlug, permissions, req }))\n      )\n    case 'globalTool':\n      return (\n        !item.tool.access ||\n        (await item.tool.access({ globalSlug: item.globalSlug, permissions, req }))\n      )\n    case 'prompt':\n      return !item.prompt.access || (await item.prompt.access({ permissions, req }))\n    case 'resource':\n      return !item.resource.access || (await item.resource.access({ permissions, req }))\n    case 'tool':\n      return !item.tool.access || (await item.tool.access({ permissions, req }))\n  }\n}\n"],"names":["getAccessResults","UnauthorizedError","getPluginConfig","getAuthorizedMCP","overrideAccess","req","pluginConfig","config","payload","overrideGetAuthorizedMCP","headers","Headers","hasAuthorization","has","set","user","auth","t","items","filterMCPItems","authorizedItems","permissions","item","checkItemAccess","push","type","tool","access","collectionSlug","globalSlug","prompt","resource"],"mappings":"AAEA,SAASA,gBAAgB,EAAEC,iBAAiB,QAAQ,UAAS;AAI7D,SAASC,eAAe,QAAQ,8BAA6B;AAO7D;;;CAGC,GACD,OAAO,MAAMC,mBAA2E,OAAO,EAC7FC,cAAc,EACdC,GAAG,EACJ;IACC,MAAMC,eAAeJ,gBAAgB;QAAEK,QAAQF,IAAIG,OAAO,CAACD,MAAM;IAAC;IAElE,IAAID,aAAaG,wBAAwB,EAAE;QACzC,OAAO,MAAMH,aAAaG,wBAAwB,CAAC;YACjDL;YACAE;YACAD;QACF;IACF;IAEA,IAAIA,IAAIK,OAAO,EAAE;QACf,MAAMA,UAAU,IAAIC,QAAQN,IAAIK,OAAO;QACvC,MAAME,mBAAmBF,QAAQG,GAAG,CAAC;QAErCH,QAAQI,GAAG,CAAC,oBAAoB;QAChCT,IAAIU,IAAI,GAAG,AAAC,CAAA,MAAMV,IAAIG,OAAO,CAACQ,IAAI,CAAC;YAAEN;YAASL;QAAI,EAAC,EAAGU,IAAI;QAE1D,IAAIH,oBAAoB,CAACP,IAAIU,IAAI,EAAE;YACjC,MAAM,IAAId,kBAAkBI,IAAIY,CAAC;QACnC;IACF;IAEA,OAAO;QACLC,OAAO,MAAMC,eAAe;YAC1BD,OAAOZ,aAAaY,KAAK;YACzBd;YACAC;QACF;QACAD;IACF;AACF,EAAC;AAED,OAAO,MAAMe,iBAAiB,OAAO,EACnCD,KAAK,EACLd,cAAc,EACdC,GAAG,EAKJ;IACC,gEAAgE;IAChE,IAAID,gBAAgB;QAClB,OAAOc;IACT;IAEA,MAAME,kBAA6B,EAAE;IAErC,MAAMC,cAAc,MAAMrB,iBAAiB;QAAEK;IAAI;IAEjD,KAAK,MAAMiB,QAAQJ,MAAO;QACxB,IAAI,CAAE,MAAMK,gBAAgB;YAAED;YAAMD;YAAahB;QAAI,IAAK;YACxD;QACF;QACAe,gBAAgBI,IAAI,CAACF;IACvB;IAEA,OAAOF;AACT,EAAC;AAED;;CAEC,GACD,MAAMG,kBAAkB,OAAO,EAC7BD,IAAI,EACJD,WAAW,EACXhB,GAAG,EAKJ;IACC,OAAQiB,KAAKG,IAAI;QACf,KAAK;YACH,OACE,CAACH,KAAKI,IAAI,CAACC,MAAM,IAChB,MAAML,KAAKI,IAAI,CAACC,MAAM,CAAC;gBAAEC,gBAAgBN,KAAKM,cAAc;gBAAEP;gBAAahB;YAAI;QAEpF,KAAK;YACH,OACE,CAACiB,KAAKI,IAAI,CAACC,MAAM,IAChB,MAAML,KAAKI,IAAI,CAACC,MAAM,CAAC;gBAAEE,YAAYP,KAAKO,UAAU;gBAAER;gBAAahB;YAAI;QAE5E,KAAK;YACH,OAAO,CAACiB,KAAKQ,MAAM,CAACH,MAAM,IAAK,MAAML,KAAKQ,MAAM,CAACH,MAAM,CAAC;gBAAEN;gBAAahB;YAAI;QAC7E,KAAK;YACH,OAAO,CAACiB,KAAKS,QAAQ,CAACJ,MAAM,IAAK,MAAML,KAAKS,QAAQ,CAACJ,MAAM,CAAC;gBAAEN;gBAAahB;YAAI;QACjF,KAAK;YACH,OAAO,CAACiB,KAAKI,IAAI,CAACC,MAAM,IAAK,MAAML,KAAKI,IAAI,CAACC,MAAM,CAAC;gBAAEN;gBAAahB;YAAI;IAC3E;AACF"}
+{"version":3,"sources":["../../src/endpoint/access.ts"],"sourcesContent":["import type { PayloadRequest, SanitizedPermissions } from 'payload'\n\nimport { executeAuthStrategies, getAccessResults, UnauthorizedError } from 'payload'\n\nimport type { AuthorizedMCP, MCPItem } from '../types.js'\n\nimport { getPluginConfig } from '../utils/getPluginConfig.js'\nimport { authenticateLoginToken } from './oauthLoginToken.js'\n\nexport type GetAuthorizedMCPArgs = {\n  overrideAccess: boolean\n  req: PayloadRequest\n}\n\n/**\n * Authenticates an MCP request and removes items the user cannot access.\n * `overrideAccess` skips Payload and MCP item access checks.\n */\nexport const getAuthorizedMCP: (args: GetAuthorizedMCPArgs) => Promise<AuthorizedMCP> = async ({\n  overrideAccess,\n  req,\n}) => {\n  const pluginConfig = getPluginConfig({ config: req.payload.config })\n\n  if (pluginConfig.overrideGetAuthorizedMCP) {\n    return await pluginConfig.overrideGetAuthorizedMCP({\n      overrideAccess,\n      pluginConfig,\n      req,\n    })\n  }\n\n  if (req.headers) {\n    const headers = new Headers(req.headers)\n    const hasAuthorization = headers.has('Authorization')\n\n    headers.set('DisableAutologin', 'true')\n    // Not `payload.auth()`, which also computes permissions that filterMCPItems computes anyway\n    req.user = (await executeAuthStrategies({ headers, payload: req.payload, req })).user\n\n    // Only bearer tokens that no auth strategy accepted get here, e.g. an OAuth access token.\n    // API keys use the `<collection> API-Key <key>` scheme instead of `Bearer`, so they never do.\n    const bearerToken = headers.get('Authorization')?.match(/^Bearer (.+)$/)?.[1]\n    // Sealed Payload login tokens from the built-in OAuth server\n    if (\n      !req.user &&\n      bearerToken &&\n      pluginConfig.oauth?.type === 'builtin' &&\n      !pluginConfig.oauth.issueToken\n    ) {\n      req.user = await authenticateLoginToken({ req, token: bearerToken })\n    }\n    if (!req.user && bearerToken && pluginConfig.oauth?.authenticate) {\n      req.user = await pluginConfig.oauth.authenticate({ req, token: bearerToken })\n    }\n\n    // With OAuth, the endpoint answers with a challenge that starts the client's sign-in\n    if (hasAuthorization && !req.user && !pluginConfig.oauth) {\n      throw new UnauthorizedError(req.t)\n    }\n  }\n\n  return {\n    items: await filterMCPItems({\n      items: pluginConfig.items,\n      overrideAccess,\n      req,\n    }),\n    overrideAccess,\n  }\n}\n\nexport const filterMCPItems = async ({\n  items,\n  overrideAccess,\n  req,\n}: {\n  items: MCPItem[]\n  overrideAccess: boolean\n  req: PayloadRequest\n}): Promise<MCPItem[]> => {\n  // Match Payload core: overrideAccess bypasses access evaluation\n  if (overrideAccess) {\n    return items\n  }\n\n  const authorizedItems: MCPItem[] = []\n\n  const permissions = await getAccessResults({ req })\n\n  for (const item of items) {\n    if (!(await checkItemAccess({ item, permissions, req }))) {\n      continue\n    }\n    authorizedItems.push(item)\n  }\n\n  return authorizedItems\n}\n\n/**\n * Runs MCP item access callbacks\n */\nconst checkItemAccess = async ({\n  item,\n  permissions,\n  req,\n}: {\n  item: MCPItem\n  permissions?: SanitizedPermissions\n  req: PayloadRequest\n}): Promise<boolean> => {\n  switch (item.type) {\n    case 'collectionTool':\n      return (\n        !item.tool.access ||\n        (await item.tool.access({ slug: item.collectionSlug, permissions, req }))\n      )\n    case 'globalTool':\n      return (\n        !item.tool.access || (await item.tool.access({ slug: item.globalSlug, permissions, req }))\n      )\n    case 'prompt':\n      return !item.prompt.access || (await item.prompt.access({ permissions, req }))\n    case 'resource':\n      return !item.resource.access || (await item.resource.access({ permissions, req }))\n    case 'tool':\n      return !item.tool.access || (await item.tool.access({ permissions, req }))\n  }\n}\n"],"names":["executeAuthStrategies","getAccessResults","UnauthorizedError","getPluginConfig","authenticateLoginToken","getAuthorizedMCP","overrideAccess","req","pluginConfig","config","payload","overrideGetAuthorizedMCP","headers","Headers","hasAuthorization","has","set","user","bearerToken","get","match","oauth","type","issueToken","token","authenticate","t","items","filterMCPItems","authorizedItems","permissions","item","checkItemAccess","push","tool","access","slug","collectionSlug","globalSlug","prompt","resource"],"mappings":"AAEA,SAASA,qBAAqB,EAAEC,gBAAgB,EAAEC,iBAAiB,QAAQ,UAAS;AAIpF,SAASC,eAAe,QAAQ,8BAA6B;AAC7D,SAASC,sBAAsB,QAAQ,uBAAsB;AAO7D;;;CAGC,GACD,OAAO,MAAMC,mBAA2E,OAAO,EAC7FC,cAAc,EACdC,GAAG,EACJ;IACC,MAAMC,eAAeL,gBAAgB;QAAEM,QAAQF,IAAIG,OAAO,CAACD,MAAM;IAAC;IAElE,IAAID,aAAaG,wBAAwB,EAAE;QACzC,OAAO,MAAMH,aAAaG,wBAAwB,CAAC;YACjDL;YACAE;YACAD;QACF;IACF;IAEA,IAAIA,IAAIK,OAAO,EAAE;QACf,MAAMA,UAAU,IAAIC,QAAQN,IAAIK,OAAO;QACvC,MAAME,mBAAmBF,QAAQG,GAAG,CAAC;QAErCH,QAAQI,GAAG,CAAC,oBAAoB;QAChC,4FAA4F;QAC5FT,IAAIU,IAAI,GAAG,AAAC,CAAA,MAAMjB,sBAAsB;YAAEY;YAASF,SAASH,IAAIG,OAAO;YAAEH;QAAI,EAAC,EAAGU,IAAI;QAErF,0FAA0F;QAC1F,8FAA8F;QAC9F,MAAMC,cAAcN,QAAQO,GAAG,CAAC,kBAAkBC,MAAM,kBAAkB,CAAC,EAAE;QAC7E,6DAA6D;QAC7D,IACE,CAACb,IAAIU,IAAI,IACTC,eACAV,aAAaa,KAAK,EAAEC,SAAS,aAC7B,CAACd,aAAaa,KAAK,CAACE,UAAU,EAC9B;YACAhB,IAAIU,IAAI,GAAG,MAAMb,uBAAuB;gBAAEG;gBAAKiB,OAAON;YAAY;QACpE;QACA,IAAI,CAACX,IAAIU,IAAI,IAAIC,eAAeV,aAAaa,KAAK,EAAEI,cAAc;YAChElB,IAAIU,IAAI,GAAG,MAAMT,aAAaa,KAAK,CAACI,YAAY,CAAC;gBAAElB;gBAAKiB,OAAON;YAAY;QAC7E;QAEA,qFAAqF;QACrF,IAAIJ,oBAAoB,CAACP,IAAIU,IAAI,IAAI,CAACT,aAAaa,KAAK,EAAE;YACxD,MAAM,IAAInB,kBAAkBK,IAAImB,CAAC;QACnC;IACF;IAEA,OAAO;QACLC,OAAO,MAAMC,eAAe;YAC1BD,OAAOnB,aAAamB,KAAK;YACzBrB;YACAC;QACF;QACAD;IACF;AACF,EAAC;AAED,OAAO,MAAMsB,iBAAiB,OAAO,EACnCD,KAAK,EACLrB,cAAc,EACdC,GAAG,EAKJ;IACC,gEAAgE;IAChE,IAAID,gBAAgB;QAClB,OAAOqB;IACT;IAEA,MAAME,kBAA6B,EAAE;IAErC,MAAMC,cAAc,MAAM7B,iBAAiB;QAAEM;IAAI;IAEjD,KAAK,MAAMwB,QAAQJ,MAAO;QACxB,IAAI,CAAE,MAAMK,gBAAgB;YAAED;YAAMD;YAAavB;QAAI,IAAK;YACxD;QACF;QACAsB,gBAAgBI,IAAI,CAACF;IACvB;IAEA,OAAOF;AACT,EAAC;AAED;;CAEC,GACD,MAAMG,kBAAkB,OAAO,EAC7BD,IAAI,EACJD,WAAW,EACXvB,GAAG,EAKJ;IACC,OAAQwB,KAAKT,IAAI;QACf,KAAK;YACH,OACE,CAACS,KAAKG,IAAI,CAACC,MAAM,IAChB,MAAMJ,KAAKG,IAAI,CAACC,MAAM,CAAC;gBAAEC,MAAML,KAAKM,cAAc;gBAAEP;gBAAavB;YAAI;QAE1E,KAAK;YACH,OACE,CAACwB,KAAKG,IAAI,CAACC,MAAM,IAAK,MAAMJ,KAAKG,IAAI,CAACC,MAAM,CAAC;gBAAEC,MAAML,KAAKO,UAAU;gBAAER;gBAAavB;YAAI;QAE3F,KAAK;YACH,OAAO,CAACwB,KAAKQ,MAAM,CAACJ,MAAM,IAAK,MAAMJ,KAAKQ,MAAM,CAACJ,MAAM,CAAC;gBAAEL;gBAAavB;YAAI;QAC7E,KAAK;YACH,OAAO,CAACwB,KAAKS,QAAQ,CAACL,MAAM,IAAK,MAAMJ,KAAKS,QAAQ,CAACL,MAAM,CAAC;gBAAEL;gBAAavB;YAAI;QACjF,KAAK;YACH,OAAO,CAACwB,KAAKG,IAAI,CAACC,MAAM,IAAK,MAAMJ,KAAKG,IAAI,CAACC,MAAM,CAAC;gBAAEL;gBAAavB;YAAI;IAC3E;AACF"}

package/dist/endpoint/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/endpoint/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAkB,MAAM,SAAS,CAAA;AAa7D,eAAO,MAAM,WAAW,EAAE,cA+DzB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/endpoint/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAkB,MAAM,SAAS,CAAA;AAe7D,eAAO,MAAM,WAAW,EAAE,cA0EzB,CAAA"}

package/dist/endpoint/index.js

@@ -1,13 +1,20 @@
-import { createMcpHandler, isLegacyRequest, WebStandardStreamableHTTPServerTransport } from '@modelcontextprotocol/server';
+import { createMcpHandler, isLegacyRequest, readRequestBody, WebStandardStreamableHTTPServerTransport } from '@modelcontextprotocol/server';
 import { APIError } from 'payload';
 import { buildMcpServer } from '../mcp/buildMcpServer.js';
 import { getPluginConfig } from '../utils/getPluginConfig.js';
 import { getAuthorizedMCP } from './access.js';
+import { getMCPResource, oauthChallenge } from './oauth.js';
 export const mcpEndpoint = async (req)=>{
     if (!req.url) {
         throw new APIError('Missing request URL', 400);
     }
     req.payloadAPI = 'MCP';
+    // Lets auth strategies check that an OAuth access token was issued for this MCP server
+    req.context.mcp = {
+        resource: getMCPResource({
+            req
+        })
+    };
     const pluginConfig = getPluginConfig({
         config: req.payload.config
     });
@@ -25,10 +32,22 @@ export const mcpEndpoint = async (req)=>{
         overrideAccess,
         req
     });
+    if (pluginConfig.oauth && !req.user) {
+        return oauthChallenge({
+            req
+        });
+    }
+    const maxRequestBodySize = pluginConfig.mcp?.maxRequestBodySize;
     // Payload augments the original web-standard Request in place.
     const mcpRequest = req;
+    const parsedBody = await parseRequestBody({
+        maxRequestBodySize,
+        request: mcpRequest
+    });
     // Keep the old JSON-only, stateless behavior because the SDK's 2025 fallback uses SSE.
-    if (await isLegacyRequest(mcpRequest)) {
+    if (await isLegacyRequest(mcpRequest, parsedBody, {
+        maxRequestBodySize
+    })) {
         const server = buildMcpServer({
             authorizedMCP,
             pluginConfig,
@@ -36,6 +55,7 @@ export const mcpEndpoint = async (req)=>{
         });
         const transport = new WebStandardStreamableHTTPServerTransport({
             enableJsonResponse: true,
+            maxRequestBodySize,
             sessionIdGenerator: undefined
         });
         transport.onerror = (err)=>{
@@ -46,7 +66,9 @@ export const mcpEndpoint = async (req)=>{
         };
         try {
             await server.connect(transport);
-            return await transport.handleRequest(mcpRequest);
+            return await transport.handleRequest(mcpRequest, {
+                parsedBody
+            });
         } finally{
             await server.close().catch((err)=>{
                 req.payload.logger.error({
@@ -62,6 +84,7 @@ export const mcpEndpoint = async (req)=>{
             req
         }), {
         legacy: 'reject',
+        maxRequestBodySize,
         // SDK subscriptions always use SSE, so disable them to keep every response JSON-only.
         maxSubscriptions: 0,
         onerror: (err)=>{
@@ -73,7 +96,9 @@ export const mcpEndpoint = async (req)=>{
         responseMode: 'json'
     });
     try {
-        return await handler.fetch(mcpRequest);
+        return await handler.fetch(mcpRequest, {
+            parsedBody
+        });
     } finally{
         await handler.close().catch((err)=>{
             req.payload.logger.error({
@@ -83,5 +108,21 @@ export const mcpEndpoint = async (req)=>{
         });
     }
 };
+/**
+ * Parses a POST body once so the era check and the SDK handler can share it. The SDK
+ * skips its size limit for a pre-parsed body, so this reads with the same limit. It reads
+ * a clone and returns `undefined` for any body the SDK should reject (too large, unreadable,
+ * or not JSON), leaving the original request for the SDK to read and answer.
+ */ const parseRequestBody = async ({ maxRequestBodySize, request })=>{
+    if (request.method.toUpperCase() !== 'POST') {
+        return undefined;
+    }
+    try {
+        const body = await readRequestBody(request.clone(), maxRequestBodySize);
+        return body.tooLarge ? undefined : JSON.parse(body.text);
+    } catch  {
+        return undefined;
+    }
+};
 
 //# sourceMappingURL=index.js.map

package/dist/endpoint/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/endpoint/index.ts"],"sourcesContent":["import type { PayloadHandler, PayloadRequest } from 'payload'\n\nimport {\n  createMcpHandler,\n  isLegacyRequest,\n  WebStandardStreamableHTTPServerTransport,\n} from '@modelcontextprotocol/server'\nimport { APIError } from 'payload'\n\nimport { buildMcpServer } from '../mcp/buildMcpServer.js'\nimport { getPluginConfig } from '../utils/getPluginConfig.js'\nimport { getAuthorizedMCP } from './access.js'\n\nexport const mcpEndpoint: PayloadHandler = async (req) => {\n  if (!req.url) {\n    throw new APIError('Missing request URL', 400)\n  }\n\n  req.payloadAPI = 'MCP' as const\n\n  const pluginConfig = getPluginConfig({ config: req.payload.config })\n  const overrideAccessParam = new URL(req.url).searchParams.get('overrideAccess')\n\n  if (overrideAccessParam !== null && process.env.NODE_ENV !== 'development') {\n    throw new APIError('MCP overrideAccess is only available in development.', 400)\n  }\n\n  let overrideAccess = false\n  if (overrideAccessParam === 'true') {\n    overrideAccess = true\n  } else if (overrideAccessParam !== null && overrideAccessParam !== 'false') {\n    throw new APIError('MCP overrideAccess must be \"true\" or \"false\".', 400)\n  }\n\n  const authorizedMCP = await getAuthorizedMCP({ overrideAccess, req })\n  // Payload augments the original web-standard Request in place.\n  const mcpRequest = req as PayloadRequest & Request\n\n  // Keep the old JSON-only, stateless behavior because the SDK's 2025 fallback uses SSE.\n  if (await isLegacyRequest(mcpRequest)) {\n    const server = buildMcpServer({ authorizedMCP, pluginConfig, req })\n    const transport = new WebStandardStreamableHTTPServerTransport({\n      enableJsonResponse: true,\n      sessionIdGenerator: undefined, // stateless mode\n    })\n    transport.onerror = (err) => {\n      req.payload.logger.error({ err, msg: 'Error serving legacy MCP request' })\n    }\n\n    try {\n      await server.connect(transport)\n      return await transport.handleRequest(mcpRequest)\n    } finally {\n      await server.close().catch((err) => {\n        req.payload.logger.error({ err, msg: 'Error closing MCP server' })\n      })\n    }\n  }\n\n  const handler = createMcpHandler(() => buildMcpServer({ authorizedMCP, pluginConfig, req }), {\n    legacy: 'reject',\n    // SDK subscriptions always use SSE, so disable them to keep every response JSON-only.\n    maxSubscriptions: 0,\n    onerror: (err) => {\n      req.payload.logger.error({ err, msg: 'Error serving modern MCP request' })\n    },\n    responseMode: 'json',\n  })\n\n  try {\n    return await handler.fetch(mcpRequest)\n  } finally {\n    await handler.close().catch((err) => {\n      req.payload.logger.error({ err, msg: 'Error closing modern MCP handler' })\n    })\n  }\n}\n"],"names":["createMcpHandler","isLegacyRequest","WebStandardStreamableHTTPServerTransport","APIError","buildMcpServer","getPluginConfig","getAuthorizedMCP","mcpEndpoint","req","url","payloadAPI","pluginConfig","config","payload","overrideAccessParam","URL","searchParams","get","process","env","NODE_ENV","overrideAccess","authorizedMCP","mcpRequest","server","transport","enableJsonResponse","sessionIdGenerator","undefined","onerror","err","logger","error","msg","connect","handleRequest","close","catch","handler","legacy","maxSubscriptions","responseMode","fetch"],"mappings":"AAEA,SACEA,gBAAgB,EAChBC,eAAe,EACfC,wCAAwC,QACnC,+BAA8B;AACrC,SAASC,QAAQ,QAAQ,UAAS;AAElC,SAASC,cAAc,QAAQ,2BAA0B;AACzD,SAASC,eAAe,QAAQ,8BAA6B;AAC7D,SAASC,gBAAgB,QAAQ,cAAa;AAE9C,OAAO,MAAMC,cAA8B,OAAOC;IAChD,IAAI,CAACA,IAAIC,GAAG,EAAE;QACZ,MAAM,IAAIN,SAAS,uBAAuB;IAC5C;IAEAK,IAAIE,UAAU,GAAG;IAEjB,MAAMC,eAAeN,gBAAgB;QAAEO,QAAQJ,IAAIK,OAAO,CAACD,MAAM;IAAC;IAClE,MAAME,sBAAsB,IAAIC,IAAIP,IAAIC,GAAG,EAAEO,YAAY,CAACC,GAAG,CAAC;IAE9D,IAAIH,wBAAwB,QAAQI,QAAQC,GAAG,CAACC,QAAQ,KAAK,eAAe;QAC1E,MAAM,IAAIjB,SAAS,wDAAwD;IAC7E;IAEA,IAAIkB,iBAAiB;IACrB,IAAIP,wBAAwB,QAAQ;QAClCO,iBAAiB;IACnB,OAAO,IAAIP,wBAAwB,QAAQA,wBAAwB,SAAS;QAC1E,MAAM,IAAIX,SAAS,iDAAiD;IACtE;IAEA,MAAMmB,gBAAgB,MAAMhB,iBAAiB;QAAEe;QAAgBb;IAAI;IACnE,+DAA+D;IAC/D,MAAMe,aAAaf;IAEnB,uFAAuF;IACvF,IAAI,MAAMP,gBAAgBsB,aAAa;QACrC,MAAMC,SAASpB,eAAe;YAAEkB;YAAeX;YAAcH;QAAI;QACjE,MAAMiB,YAAY,IAAIvB,yCAAyC;YAC7DwB,oBAAoB;YACpBC,oBAAoBC;QACtB;QACAH,UAAUI,OAAO,GAAG,CAACC;YACnBtB,IAAIK,OAAO,CAACkB,MAAM,CAACC,KAAK,CAAC;gBAAEF;gBAAKG,KAAK;YAAmC;QAC1E;QAEA,IAAI;YACF,MAAMT,OAAOU,OAAO,CAACT;YACrB,OAAO,MAAMA,UAAUU,aAAa,CAACZ;QACvC,SAAU;YACR,MAAMC,OAAOY,KAAK,GAAGC,KAAK,CAAC,CAACP;gBAC1BtB,IAAIK,OAAO,CAACkB,MAAM,CAACC,KAAK,CAAC;oBAAEF;oBAAKG,KAAK;gBAA2B;YAClE;QACF;IACF;IAEA,MAAMK,UAAUtC,iBAAiB,IAAMI,eAAe;YAAEkB;YAAeX;YAAcH;QAAI,IAAI;QAC3F+B,QAAQ;QACR,sFAAsF;QACtFC,kBAAkB;QAClBX,SAAS,CAACC;YACRtB,IAAIK,OAAO,CAACkB,MAAM,CAACC,KAAK,CAAC;gBAAEF;gBAAKG,KAAK;YAAmC;QAC1E;QACAQ,cAAc;IAChB;IAEA,IAAI;QACF,OAAO,MAAMH,QAAQI,KAAK,CAACnB;IAC7B,SAAU;QACR,MAAMe,QAAQF,KAAK,GAAGC,KAAK,CAAC,CAACP;YAC3BtB,IAAIK,OAAO,CAACkB,MAAM,CAACC,KAAK,CAAC;gBAAEF;gBAAKG,KAAK;YAAmC;QAC1E;IACF;AACF,EAAC"}
+{"version":3,"sources":["../../src/endpoint/index.ts"],"sourcesContent":["import type { PayloadHandler, PayloadRequest } from 'payload'\n\nimport {\n  createMcpHandler,\n  isLegacyRequest,\n  readRequestBody,\n  WebStandardStreamableHTTPServerTransport,\n} from '@modelcontextprotocol/server'\nimport { APIError } from 'payload'\n\nimport { buildMcpServer } from '../mcp/buildMcpServer.js'\nimport { getPluginConfig } from '../utils/getPluginConfig.js'\nimport { getAuthorizedMCP } from './access.js'\nimport { getMCPResource, oauthChallenge } from './oauth.js'\n\nexport const mcpEndpoint: PayloadHandler = async (req) => {\n  if (!req.url) {\n    throw new APIError('Missing request URL', 400)\n  }\n\n  req.payloadAPI = 'MCP' as const\n  // Lets auth strategies check that an OAuth access token was issued for this MCP server\n  req.context.mcp = { resource: getMCPResource({ req }) }\n\n  const pluginConfig = getPluginConfig({ config: req.payload.config })\n  const overrideAccessParam = new URL(req.url).searchParams.get('overrideAccess')\n\n  if (overrideAccessParam !== null && process.env.NODE_ENV !== 'development') {\n    throw new APIError('MCP overrideAccess is only available in development.', 400)\n  }\n\n  let overrideAccess = false\n  if (overrideAccessParam === 'true') {\n    overrideAccess = true\n  } else if (overrideAccessParam !== null && overrideAccessParam !== 'false') {\n    throw new APIError('MCP overrideAccess must be \"true\" or \"false\".', 400)\n  }\n\n  const authorizedMCP = await getAuthorizedMCP({ overrideAccess, req })\n\n  if (pluginConfig.oauth && !req.user) {\n    return oauthChallenge({ req })\n  }\n\n  const maxRequestBodySize = pluginConfig.mcp?.maxRequestBodySize\n  // Payload augments the original web-standard Request in place.\n  const mcpRequest = req as PayloadRequest & Request\n  const parsedBody = await parseRequestBody({ maxRequestBodySize, request: mcpRequest })\n\n  // Keep the old JSON-only, stateless behavior because the SDK's 2025 fallback uses SSE.\n  if (await isLegacyRequest(mcpRequest, parsedBody, { maxRequestBodySize })) {\n    const server = buildMcpServer({ authorizedMCP, pluginConfig, req })\n    const transport = new WebStandardStreamableHTTPServerTransport({\n      enableJsonResponse: true,\n      maxRequestBodySize,\n      sessionIdGenerator: undefined, // stateless mode\n    })\n    transport.onerror = (err) => {\n      req.payload.logger.error({ err, msg: 'Error serving legacy MCP request' })\n    }\n\n    try {\n      await server.connect(transport)\n      return await transport.handleRequest(mcpRequest, { parsedBody })\n    } finally {\n      await server.close().catch((err) => {\n        req.payload.logger.error({ err, msg: 'Error closing MCP server' })\n      })\n    }\n  }\n\n  const handler = createMcpHandler(() => buildMcpServer({ authorizedMCP, pluginConfig, req }), {\n    legacy: 'reject',\n    maxRequestBodySize,\n    // SDK subscriptions always use SSE, so disable them to keep every response JSON-only.\n    maxSubscriptions: 0,\n    onerror: (err) => {\n      req.payload.logger.error({ err, msg: 'Error serving modern MCP request' })\n    },\n    responseMode: 'json',\n  })\n\n  try {\n    return await handler.fetch(mcpRequest, { parsedBody })\n  } finally {\n    await handler.close().catch((err) => {\n      req.payload.logger.error({ err, msg: 'Error closing modern MCP handler' })\n    })\n  }\n}\n\n/**\n * Parses a POST body once so the era check and the SDK handler can share it. The SDK\n * skips its size limit for a pre-parsed body, so this reads with the same limit. It reads\n * a clone and returns `undefined` for any body the SDK should reject (too large, unreadable,\n * or not JSON), leaving the original request for the SDK to read and answer.\n */\nconst parseRequestBody = async ({\n  maxRequestBodySize,\n  request,\n}: {\n  maxRequestBodySize?: number\n  request: Request\n}): Promise<unknown> => {\n  if (request.method.toUpperCase() !== 'POST') {\n    return undefined\n  }\n\n  try {\n    const body = await readRequestBody(request.clone(), maxRequestBodySize)\n    return body.tooLarge ? undefined : JSON.parse(body.text)\n  } catch {\n    return undefined\n  }\n}\n"],"names":["createMcpHandler","isLegacyRequest","readRequestBody","WebStandardStreamableHTTPServerTransport","APIError","buildMcpServer","getPluginConfig","getAuthorizedMCP","getMCPResource","oauthChallenge","mcpEndpoint","req","url","payloadAPI","context","mcp","resource","pluginConfig","config","payload","overrideAccessParam","URL","searchParams","get","process","env","NODE_ENV","overrideAccess","authorizedMCP","oauth","user","maxRequestBodySize","mcpRequest","parsedBody","parseRequestBody","request","server","transport","enableJsonResponse","sessionIdGenerator","undefined","onerror","err","logger","error","msg","connect","handleRequest","close","catch","handler","legacy","maxSubscriptions","responseMode","fetch","method","toUpperCase","body","clone","tooLarge","JSON","parse","text"],"mappings":"AAEA,SACEA,gBAAgB,EAChBC,eAAe,EACfC,eAAe,EACfC,wCAAwC,QACnC,+BAA8B;AACrC,SAASC,QAAQ,QAAQ,UAAS;AAElC,SAASC,cAAc,QAAQ,2BAA0B;AACzD,SAASC,eAAe,QAAQ,8BAA6B;AAC7D,SAASC,gBAAgB,QAAQ,cAAa;AAC9C,SAASC,cAAc,EAAEC,cAAc,QAAQ,aAAY;AAE3D,OAAO,MAAMC,cAA8B,OAAOC;IAChD,IAAI,CAACA,IAAIC,GAAG,EAAE;QACZ,MAAM,IAAIR,SAAS,uBAAuB;IAC5C;IAEAO,IAAIE,UAAU,GAAG;IACjB,uFAAuF;IACvFF,IAAIG,OAAO,CAACC,GAAG,GAAG;QAAEC,UAAUR,eAAe;YAAEG;QAAI;IAAG;IAEtD,MAAMM,eAAeX,gBAAgB;QAAEY,QAAQP,IAAIQ,OAAO,CAACD,MAAM;IAAC;IAClE,MAAME,sBAAsB,IAAIC,IAAIV,IAAIC,GAAG,EAAEU,YAAY,CAACC,GAAG,CAAC;IAE9D,IAAIH,wBAAwB,QAAQI,QAAQC,GAAG,CAACC,QAAQ,KAAK,eAAe;QAC1E,MAAM,IAAItB,SAAS,wDAAwD;IAC7E;IAEA,IAAIuB,iBAAiB;IACrB,IAAIP,wBAAwB,QAAQ;QAClCO,iBAAiB;IACnB,OAAO,IAAIP,wBAAwB,QAAQA,wBAAwB,SAAS;QAC1E,MAAM,IAAIhB,SAAS,iDAAiD;IACtE;IAEA,MAAMwB,gBAAgB,MAAMrB,iBAAiB;QAAEoB;QAAgBhB;IAAI;IAEnE,IAAIM,aAAaY,KAAK,IAAI,CAAClB,IAAImB,IAAI,EAAE;QACnC,OAAOrB,eAAe;YAAEE;QAAI;IAC9B;IAEA,MAAMoB,qBAAqBd,aAAaF,GAAG,EAAEgB;IAC7C,+DAA+D;IAC/D,MAAMC,aAAarB;IACnB,MAAMsB,aAAa,MAAMC,iBAAiB;QAAEH;QAAoBI,SAASH;IAAW;IAEpF,uFAAuF;IACvF,IAAI,MAAM/B,gBAAgB+B,YAAYC,YAAY;QAAEF;IAAmB,IAAI;QACzE,MAAMK,SAAS/B,eAAe;YAAEuB;YAAeX;YAAcN;QAAI;QACjE,MAAM0B,YAAY,IAAIlC,yCAAyC;YAC7DmC,oBAAoB;YACpBP;YACAQ,oBAAoBC;QACtB;QACAH,UAAUI,OAAO,GAAG,CAACC;YACnB/B,IAAIQ,OAAO,CAACwB,MAAM,CAACC,KAAK,CAAC;gBAAEF;gBAAKG,KAAK;YAAmC;QAC1E;QAEA,IAAI;YACF,MAAMT,OAAOU,OAAO,CAACT;YACrB,OAAO,MAAMA,UAAUU,aAAa,CAACf,YAAY;gBAAEC;YAAW;QAChE,SAAU;YACR,MAAMG,OAAOY,KAAK,GAAGC,KAAK,CAAC,CAACP;gBAC1B/B,IAAIQ,OAAO,CAACwB,MAAM,CAACC,KAAK,CAAC;oBAAEF;oBAAKG,KAAK;gBAA2B;YAClE;QACF;IACF;IAEA,MAAMK,UAAUlD,iBAAiB,IAAMK,eAAe;YAAEuB;YAAeX;YAAcN;QAAI,IAAI;QAC3FwC,QAAQ;QACRpB;QACA,sFAAsF;QACtFqB,kBAAkB;QAClBX,SAAS,CAACC;YACR/B,IAAIQ,OAAO,CAACwB,MAAM,CAACC,KAAK,CAAC;gBAAEF;gBAAKG,KAAK;YAAmC;QAC1E;QACAQ,cAAc;IAChB;IAEA,IAAI;QACF,OAAO,MAAMH,QAAQI,KAAK,CAACtB,YAAY;YAAEC;QAAW;IACtD,SAAU;QACR,MAAMiB,QAAQF,KAAK,GAAGC,KAAK,CAAC,CAACP;YAC3B/B,IAAIQ,OAAO,CAACwB,MAAM,CAACC,KAAK,CAAC;gBAAEF;gBAAKG,KAAK;YAAmC;QAC1E;IACF;AACF,EAAC;AAED;;;;;CAKC,GACD,MAAMX,mBAAmB,OAAO,EAC9BH,kBAAkB,EAClBI,OAAO,EAIR;IACC,IAAIA,QAAQoB,MAAM,CAACC,WAAW,OAAO,QAAQ;QAC3C,OAAOhB;IACT;IAEA,IAAI;QACF,MAAMiB,OAAO,MAAMvD,gBAAgBiC,QAAQuB,KAAK,IAAI3B;QACpD,OAAO0B,KAAKE,QAAQ,GAAGnB,YAAYoB,KAAKC,KAAK,CAACJ,KAAKK,IAAI;IACzD,EAAE,OAAM;QACN,OAAOtB;IACT;AACF"}

package/dist/endpoint/oauth.d.ts

@@ -0,0 +1,35 @@
+import type { PayloadHandler, PayloadRequest, SanitizedConfig } from 'payload';
+/**
+ * Serves the OAuth protected resource metadata (RFC 9728) at `/api/mcp/oauth-protected-resource`.
+ * The OAuth challenge links here, so MCP clients find the authorization server without setup.
+ */
+export declare const oauthProtectedResourceEndpoint: PayloadHandler;
+/**
+ * Serves the same metadata for clients that ignore the challenge's link and only look at
+ * `/.well-known/oauth-protected-resource`. Mount it at the site root, e.g. in Next.js at
+ * `app/.well-known/oauth-protected-resource/[[...path]]/route.ts`:
+ *
+ * ```ts
+ * import config from '@payload-config'
+ * import { oauthProtectedResourceHandler } from '@payloadcms/plugin-mcp'
+ *
+ * export const GET = oauthProtectedResourceHandler(config)
+ * ```
+ */
+export declare const oauthProtectedResourceHandler: (config: Promise<SanitizedConfig> | SanitizedConfig) => (request: Request) => Promise<Response>;
+/**
+ * Answers an unauthenticated MCP request with a challenge linking to the protected resource
+ * metadata, which starts the client's OAuth flow.
+ */
+export declare const oauthChallenge: ({ req }: {
+    req: PayloadRequest;
+}) => Response;
+/**
+ * The MCP endpoint's address, as advertised in the metadata's `resource`. The metadata link and
+ * the built-in authorization server's issuer are based on it. Clients send it when they sign in,
+ * and authorization servers that support it put it in the access token's audience.
+ */
+export declare const getMCPResource: ({ req }: {
+    req: PayloadRequest;
+}) => string;
+//# sourceMappingURL=oauth.d.ts.map

package/dist/endpoint/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../src/endpoint/oauth.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AAW9E;;;GAGG;AACH,eAAO,MAAM,8BAA8B,EAAE,cAAsD,CAAA;AAEnG;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,6BAA6B,WAC/B,OAAO,CAAC,eAAe,CAAC,GAAG,eAAe,eACnC,OAAO,KAAG,OAAO,CAAC,QAAQ,CAGtC,CAAA;AAEN;;;GAGG;AACH,eAAO,MAAM,cAAc,YAAa;IAAE,GAAG,EAAE,cAAc,CAAA;CAAE,KAAG,QAcjE,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,cAAc,YAAa;IAAE,GAAG,EAAE,cAAc,CAAA;CAAE,KAAG,MASjE,CAAA"}

package/dist/endpoint/oauth.js

@@ -0,0 +1,96 @@
+import { bearerAuthChallengeResponse, OAuthError, OAuthErrorCode } from '@modelcontextprotocol/server';
+import { createPayloadRequest, getPayload } from 'payload';
+import { getPluginConfig } from '../utils/getPluginConfig.js';
+/**
+ * Serves the OAuth protected resource metadata (RFC 9728) at `/api/mcp/oauth-protected-resource`.
+ * The OAuth challenge links here, so MCP clients find the authorization server without setup.
+ */ export const oauthProtectedResourceEndpoint = (req)=>getMetadataResponse({
+        req
+    });
+/**
+ * Serves the same metadata for clients that ignore the challenge's link and only look at
+ * `/.well-known/oauth-protected-resource`. Mount it at the site root, e.g. in Next.js at
+ * `app/.well-known/oauth-protected-resource/[[...path]]/route.ts`:
+ *
+ * ```ts
+ * import config from '@payload-config'
+ * import { oauthProtectedResourceHandler } from '@payloadcms/plugin-mcp'
+ *
+ * export const GET = oauthProtectedResourceHandler(config)
+ * ```
+ */ export const oauthProtectedResourceHandler = (config)=>async (request)=>getMetadataResponse({
+            req: await createPayloadRequest({
+                payload: await getPayload({
+                    config
+                }),
+                req: request
+            })
+        });
+/**
+ * Answers an unauthenticated MCP request with a challenge linking to the protected resource
+ * metadata, which starts the client's OAuth flow.
+ */ export const oauthChallenge = ({ req })=>{
+    const { oauth } = getPluginConfig({
+        config: req.payload.config
+    });
+    const response = bearerAuthChallengeResponse(new OAuthError(OAuthErrorCode.InvalidToken, req.t('error:unauthorized')), {
+        requiredScopes: oauth?.type === 'external' ? oauth.scopes : undefined,
+        resourceMetadataUrl: `${getMCPResource({
+            req
+        })}/oauth-protected-resource`
+    });
+    // Lets browser-based MCP clients read the challenge, when Payload's `cors` setting allows them
+    response.headers.set('Access-Control-Expose-Headers', 'WWW-Authenticate');
+    return response;
+};
+/**
+ * The MCP endpoint's address, as advertised in the metadata's `resource`. The metadata link and
+ * the built-in authorization server's issuer are based on it. Clients send it when they sign in,
+ * and authorization servers that support it put it in the access token's audience.
+ */ export const getMCPResource = ({ req })=>{
+    const { config } = req.payload;
+    const resource = getPluginConfig({
+        config
+    }).oauth?.resource;
+    if (typeof resource === 'function') {
+        return resource({
+            req
+        });
+    }
+    return resource ?? new URL(`${config.routes.api}/mcp`, config.serverURL || req.url).href;
+};
+const getMetadataResponse = async ({ req })=>{
+    const { config } = req.payload;
+    const { oauth } = getPluginConfig({
+        config
+    });
+    if (!oauth) {
+        return new Response(null, {
+            status: 404
+        });
+    }
+    const resource = getMCPResource({
+        req
+    });
+    return Response.json({
+        authorization_servers: oauth.type === 'builtin' ? [
+            `${resource}/oauth`
+        ] : typeof oauth.authorizationServers === 'function' ? await oauth.authorizationServers({
+            req
+        }) : oauth.authorizationServers,
+        bearer_methods_supported: [
+            'header'
+        ],
+        resource,
+        scopes_supported: oauth.type === 'external' ? oauth.scopes : undefined
+    }, // Public document, readable by browser-based MCP clients on any origin. Not cached, since its
+    // URLs can depend on the request.
+    {
+        headers: {
+            'Access-Control-Allow-Origin': '*',
+            'Cache-Control': 'no-store'
+        }
+    });
+};
+
+//# sourceMappingURL=oauth.js.map

package/dist/endpoint/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/endpoint/oauth.ts"],"sourcesContent":["import type { OAuthProtectedResourceMetadata } from '@modelcontextprotocol/server'\nimport type { PayloadHandler, PayloadRequest, SanitizedConfig } from 'payload'\n\nimport {\n  bearerAuthChallengeResponse,\n  OAuthError,\n  OAuthErrorCode,\n} from '@modelcontextprotocol/server'\nimport { createPayloadRequest, getPayload } from 'payload'\n\nimport { getPluginConfig } from '../utils/getPluginConfig.js'\n\n/**\n * Serves the OAuth protected resource metadata (RFC 9728) at `/api/mcp/oauth-protected-resource`.\n * The OAuth challenge links here, so MCP clients find the authorization server without setup.\n */\nexport const oauthProtectedResourceEndpoint: PayloadHandler = (req) => getMetadataResponse({ req })\n\n/**\n * Serves the same metadata for clients that ignore the challenge's link and only look at\n * `/.well-known/oauth-protected-resource`. Mount it at the site root, e.g. in Next.js at\n * `app/.well-known/oauth-protected-resource/[[...path]]/route.ts`:\n *\n * ```ts\n * import config from '@payload-config'\n * import { oauthProtectedResourceHandler } from '@payloadcms/plugin-mcp'\n *\n * export const GET = oauthProtectedResourceHandler(config)\n * ```\n */\nexport const oauthProtectedResourceHandler =\n  (config: Promise<SanitizedConfig> | SanitizedConfig) =>\n  async (request: Request): Promise<Response> =>\n    getMetadataResponse({\n      req: await createPayloadRequest({ payload: await getPayload({ config }), req: request }),\n    })\n\n/**\n * Answers an unauthenticated MCP request with a challenge linking to the protected resource\n * metadata, which starts the client's OAuth flow.\n */\nexport const oauthChallenge = ({ req }: { req: PayloadRequest }): Response => {\n  const { oauth } = getPluginConfig({ config: req.payload.config })\n  const response = bearerAuthChallengeResponse(\n    new OAuthError(OAuthErrorCode.InvalidToken, req.t('error:unauthorized')),\n    {\n      requiredScopes: oauth?.type === 'external' ? oauth.scopes : undefined,\n      resourceMetadataUrl: `${getMCPResource({ req })}/oauth-protected-resource`,\n    },\n  )\n\n  // Lets browser-based MCP clients read the challenge, when Payload's `cors` setting allows them\n  response.headers.set('Access-Control-Expose-Headers', 'WWW-Authenticate')\n\n  return response\n}\n\n/**\n * The MCP endpoint's address, as advertised in the metadata's `resource`. The metadata link and\n * the built-in authorization server's issuer are based on it. Clients send it when they sign in,\n * and authorization servers that support it put it in the access token's audience.\n */\nexport const getMCPResource = ({ req }: { req: PayloadRequest }): string => {\n  const { config } = req.payload\n  const resource = getPluginConfig({ config }).oauth?.resource\n\n  if (typeof resource === 'function') {\n    return resource({ req })\n  }\n\n  return resource ?? new URL(`${config.routes.api}/mcp`, config.serverURL || req.url).href\n}\n\nconst getMetadataResponse = async ({ req }: { req: PayloadRequest }): Promise<Response> => {\n  const { config } = req.payload\n  const { oauth } = getPluginConfig({ config })\n\n  if (!oauth) {\n    return new Response(null, { status: 404 })\n  }\n\n  const resource = getMCPResource({ req })\n\n  return Response.json(\n    {\n      authorization_servers:\n        oauth.type === 'builtin'\n          ? [`${resource}/oauth`]\n          : typeof oauth.authorizationServers === 'function'\n            ? await oauth.authorizationServers({ req })\n            : oauth.authorizationServers,\n      bearer_methods_supported: ['header'],\n      resource,\n      scopes_supported: oauth.type === 'external' ? oauth.scopes : undefined,\n    } satisfies OAuthProtectedResourceMetadata,\n    // Public document, readable by browser-based MCP clients on any origin. Not cached, since its\n    // URLs can depend on the request.\n    { headers: { 'Access-Control-Allow-Origin': '*', 'Cache-Control': 'no-store' } },\n  )\n}\n"],"names":["bearerAuthChallengeResponse","OAuthError","OAuthErrorCode","createPayloadRequest","getPayload","getPluginConfig","oauthProtectedResourceEndpoint","req","getMetadataResponse","oauthProtectedResourceHandler","config","request","payload","oauthChallenge","oauth","response","InvalidToken","t","requiredScopes","type","scopes","undefined","resourceMetadataUrl","getMCPResource","headers","set","resource","URL","routes","api","serverURL","url","href","Response","status","json","authorization_servers","authorizationServers","bearer_methods_supported","scopes_supported"],"mappings":"AAGA,SACEA,2BAA2B,EAC3BC,UAAU,EACVC,cAAc,QACT,+BAA8B;AACrC,SAASC,oBAAoB,EAAEC,UAAU,QAAQ,UAAS;AAE1D,SAASC,eAAe,QAAQ,8BAA6B;AAE7D;;;CAGC,GACD,OAAO,MAAMC,iCAAiD,CAACC,MAAQC,oBAAoB;QAAED;IAAI,GAAE;AAEnG;;;;;;;;;;;CAWC,GACD,OAAO,MAAME,gCACX,CAACC,SACD,OAAOC,UACLH,oBAAoB;YAClBD,KAAK,MAAMJ,qBAAqB;gBAAES,SAAS,MAAMR,WAAW;oBAAEM;gBAAO;gBAAIH,KAAKI;YAAQ;QACxF,GAAE;AAEN;;;CAGC,GACD,OAAO,MAAME,iBAAiB,CAAC,EAAEN,GAAG,EAA2B;IAC7D,MAAM,EAAEO,KAAK,EAAE,GAAGT,gBAAgB;QAAEK,QAAQH,IAAIK,OAAO,CAACF,MAAM;IAAC;IAC/D,MAAMK,WAAWf,4BACf,IAAIC,WAAWC,eAAec,YAAY,EAAET,IAAIU,CAAC,CAAC,wBAClD;QACEC,gBAAgBJ,OAAOK,SAAS,aAAaL,MAAMM,MAAM,GAAGC;QAC5DC,qBAAqB,GAAGC,eAAe;YAAEhB;QAAI,GAAG,yBAAyB,CAAC;IAC5E;IAGF,+FAA+F;IAC/FQ,SAASS,OAAO,CAACC,GAAG,CAAC,iCAAiC;IAEtD,OAAOV;AACT,EAAC;AAED;;;;CAIC,GACD,OAAO,MAAMQ,iBAAiB,CAAC,EAAEhB,GAAG,EAA2B;IAC7D,MAAM,EAAEG,MAAM,EAAE,GAAGH,IAAIK,OAAO;IAC9B,MAAMc,WAAWrB,gBAAgB;QAAEK;IAAO,GAAGI,KAAK,EAAEY;IAEpD,IAAI,OAAOA,aAAa,YAAY;QAClC,OAAOA,SAAS;YAAEnB;QAAI;IACxB;IAEA,OAAOmB,YAAY,IAAIC,IAAI,GAAGjB,OAAOkB,MAAM,CAACC,GAAG,CAAC,IAAI,CAAC,EAAEnB,OAAOoB,SAAS,IAAIvB,IAAIwB,GAAG,EAAEC,IAAI;AAC1F,EAAC;AAED,MAAMxB,sBAAsB,OAAO,EAAED,GAAG,EAA2B;IACjE,MAAM,EAAEG,MAAM,EAAE,GAAGH,IAAIK,OAAO;IAC9B,MAAM,EAAEE,KAAK,EAAE,GAAGT,gBAAgB;QAAEK;IAAO;IAE3C,IAAI,CAACI,OAAO;QACV,OAAO,IAAImB,SAAS,MAAM;YAAEC,QAAQ;QAAI;IAC1C;IAEA,MAAMR,WAAWH,eAAe;QAAEhB;IAAI;IAEtC,OAAO0B,SAASE,IAAI,CAClB;QACEC,uBACEtB,MAAMK,IAAI,KAAK,YACX;YAAC,GAAGO,SAAS,MAAM,CAAC;SAAC,GACrB,OAAOZ,MAAMuB,oBAAoB,KAAK,aACpC,MAAMvB,MAAMuB,oBAAoB,CAAC;YAAE9B;QAAI,KACvCO,MAAMuB,oBAAoB;QAClCC,0BAA0B;YAAC;SAAS;QACpCZ;QACAa,kBAAkBzB,MAAMK,IAAI,KAAK,aAAaL,MAAMM,MAAM,GAAGC;IAC/D,GACA,8FAA8F;IAC9F,kCAAkC;IAClC;QAAEG,SAAS;YAAE,+BAA+B;YAAK,iBAAiB;QAAW;IAAE;AAEnF"}

package/dist/endpoint/oauthLoginToken.d.ts

@@ -0,0 +1,21 @@
+import type { PayloadRequest } from 'payload';
+import type { MCPOAuthTokens } from '../types.js';
+/**
+ * The default `issueToken`: a Payload login token, sealed so it only works for MCP, where
+ * `authenticateLoginToken` unseals it. Otherwise an MCP client could use it as the user's admin
+ * panel login. When the collection uses sessions, the client also gets a refresh token.
+ */
+export declare const issueLoginToken: ({ req, }: {
+    req: PayloadRequest;
+}) => Promise<MCPOAuthTokens>;
+/** The default `refreshToken`. Payload logs out the session when a refresh token is reused. */
+export declare const refreshLoginToken: ({ refreshToken, req, }: {
+    refreshToken: string;
+    req: PayloadRequest;
+}) => Promise<MCPOAuthTokens | null>;
+/** Finds the user of an MCP request's access token from `issueLoginToken`. */
+export declare const authenticateLoginToken: ({ req, token, }: {
+    req: PayloadRequest;
+    token: string;
+}) => Promise<PayloadRequest['user']>;
+//# sourceMappingURL=oauthLoginToken.d.ts.map

package/dist/endpoint/oauthLoginToken.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauthLoginToken.d.ts","sourceRoot":"","sources":["../../src/endpoint/oauthLoginToken.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAI7C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAIjD;;;;GAIG;AACH,eAAO,MAAM,eAAe,aAEzB;IACD,GAAG,EAAE,cAAc,CAAA;CACpB,KAAG,OAAO,CAAC,cAAc,CA6BzB,CAAA;AAED,+FAA+F;AAC/F,eAAO,MAAM,iBAAiB,2BAG3B;IACD,YAAY,EAAE,MAAM,CAAA;IACpB,GAAG,EAAE,cAAc,CAAA;CACpB,KAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAUhC,CAAA;AAED,8EAA8E;AAC9E,eAAO,MAAM,sBAAsB,oBAGhC;IACD,GAAG,EAAE,cAAc,CAAA;IACnB,KAAK,EAAE,MAAM,CAAA;CACd,KAAG,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAajC,CAAA"}

package/dist/endpoint/oauthLoginToken.js

@@ -0,0 +1,79 @@
+import { APIError, createAuthToken, executeAuthStrategies, redeemRefreshToken } from 'payload';
+import { seal, unseal } from '../utils/seal.js';
+/**
+ * The default `issueToken`: a Payload login token, sealed so it only works for MCP, where
+ * `authenticateLoginToken` unseals it. Otherwise an MCP client could use it as the user's admin
+ * panel login. When the collection uses sessions, the client also gets a refresh token.
+ */ export const issueLoginToken = async ({ req })=>{
+    const collectionConfig = req.payload.collections[req.user.collection].config;
+    if (collectionConfig.auth.disableLocalStrategy) {
+        throw new APIError(`MCP clients can't get Payload login tokens for the "${collectionConfig.slug}" collection because its local strategy is disabled. Pass oauth.issueToken to the MCP plugin.`);
+    }
+    // The full document, like the one a password login starts its session on
+    const user = await req.payload.db.findOne({
+        collection: collectionConfig.slug,
+        req,
+        where: {
+            id: {
+                equals: req.user.id
+            }
+        }
+    });
+    const { refreshToken, token } = await createAuthToken({
+        collectionConfig,
+        email: user.email,
+        req,
+        shouldCreateRefreshToken: true,
+        user
+    });
+    return {
+        accessToken: sealLoginToken({
+            req,
+            token
+        }),
+        expiresIn: collectionConfig.auth.tokenExpiration,
+        refreshToken
+    };
+};
+/** The default `refreshToken`. Payload logs out the session when a refresh token is reused. */ export const refreshLoginToken = async ({ refreshToken, req })=>{
+    const refreshed = await redeemRefreshToken({
+        refreshToken,
+        req
+    });
+    return refreshed && {
+        accessToken: sealLoginToken({
+            req,
+            token: refreshed.token
+        }),
+        expiresIn: refreshed.collectionConfig.auth.tokenExpiration,
+        refreshToken: refreshed.refreshToken
+    };
+};
+/** Finds the user of an MCP request's access token from `issueLoginToken`. */ export const authenticateLoginToken = async ({ req, token })=>{
+    const loginToken = unseal({
+        type: 'access',
+        req,
+        value: token
+    });
+    if (!loginToken) {
+        return null;
+    }
+    const headers = new Headers({
+        Authorization: `JWT ${loginToken.token}`,
+        DisableAutologin: 'true'
+    });
+    return (await executeAuthStrategies({
+        headers,
+        payload: req.payload,
+        req
+    })).user;
+};
+const sealLoginToken = ({ req, token })=>seal({
+        type: 'access',
+        data: {
+            token
+        },
+        req
+    });
+
+//# sourceMappingURL=oauthLoginToken.js.map

package/dist/endpoint/oauthLoginToken.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/endpoint/oauthLoginToken.ts"],"sourcesContent":["import type { PayloadRequest } from 'payload'\n\nimport { APIError, createAuthToken, executeAuthStrategies, redeemRefreshToken } from 'payload'\n\nimport type { MCPOAuthTokens } from '../types.js'\n\nimport { seal, unseal } from '../utils/seal.js'\n\n/**\n * The default `issueToken`: a Payload login token, sealed so it only works for MCP, where\n * `authenticateLoginToken` unseals it. Otherwise an MCP client could use it as the user's admin\n * panel login. When the collection uses sessions, the client also gets a refresh token.\n */\nexport const issueLoginToken = async ({\n  req,\n}: {\n  req: PayloadRequest\n}): Promise<MCPOAuthTokens> => {\n  const collectionConfig = req.payload.collections[req.user!.collection]!.config\n\n  if (collectionConfig.auth.disableLocalStrategy) {\n    throw new APIError(\n      `MCP clients can't get Payload login tokens for the \"${collectionConfig.slug}\" collection because its local strategy is disabled. Pass oauth.issueToken to the MCP plugin.`,\n    )\n  }\n\n  // The full document, like the one a password login starts its session on\n  const user = (await req.payload.db.findOne<NonNullable<PayloadRequest['user']>>({\n    collection: collectionConfig.slug,\n    req,\n    where: { id: { equals: req.user!.id } },\n  }))!\n\n  const { refreshToken, token } = await createAuthToken({\n    collectionConfig,\n    email: user.email!,\n    req,\n    shouldCreateRefreshToken: true,\n    user,\n  })\n\n  return {\n    accessToken: sealLoginToken({ req, token }),\n    expiresIn: collectionConfig.auth.tokenExpiration,\n    refreshToken,\n  }\n}\n\n/** The default `refreshToken`. Payload logs out the session when a refresh token is reused. */\nexport const refreshLoginToken = async ({\n  refreshToken,\n  req,\n}: {\n  refreshToken: string\n  req: PayloadRequest\n}): Promise<MCPOAuthTokens | null> => {\n  const refreshed = await redeemRefreshToken({ refreshToken, req })\n\n  return (\n    refreshed && {\n      accessToken: sealLoginToken({ req, token: refreshed.token }),\n      expiresIn: refreshed.collectionConfig.auth.tokenExpiration,\n      refreshToken: refreshed.refreshToken,\n    }\n  )\n}\n\n/** Finds the user of an MCP request's access token from `issueLoginToken`. */\nexport const authenticateLoginToken = async ({\n  req,\n  token,\n}: {\n  req: PayloadRequest\n  token: string\n}): Promise<PayloadRequest['user']> => {\n  const loginToken = unseal<{ token: string }>({ type: 'access', req, value: token })\n\n  if (!loginToken) {\n    return null\n  }\n\n  const headers = new Headers({\n    Authorization: `JWT ${loginToken.token}`,\n    DisableAutologin: 'true',\n  })\n\n  return (await executeAuthStrategies({ headers, payload: req.payload, req })).user\n}\n\nconst sealLoginToken = ({ req, token }: { req: PayloadRequest; token: string }): string =>\n  seal({ type: 'access', data: { token }, req })\n"],"names":["APIError","createAuthToken","executeAuthStrategies","redeemRefreshToken","seal","unseal","issueLoginToken","req","collectionConfig","payload","collections","user","collection","config","auth","disableLocalStrategy","slug","db","findOne","where","id","equals","refreshToken","token","email","shouldCreateRefreshToken","accessToken","sealLoginToken","expiresIn","tokenExpiration","refreshLoginToken","refreshed","authenticateLoginToken","loginToken","type","value","headers","Headers","Authorization","DisableAutologin","data"],"mappings":"AAEA,SAASA,QAAQ,EAAEC,eAAe,EAAEC,qBAAqB,EAAEC,kBAAkB,QAAQ,UAAS;AAI9F,SAASC,IAAI,EAAEC,MAAM,QAAQ,mBAAkB;AAE/C;;;;CAIC,GACD,OAAO,MAAMC,kBAAkB,OAAO,EACpCC,GAAG,EAGJ;IACC,MAAMC,mBAAmBD,IAAIE,OAAO,CAACC,WAAW,CAACH,IAAII,IAAI,CAAEC,UAAU,CAAC,CAAEC,MAAM;IAE9E,IAAIL,iBAAiBM,IAAI,CAACC,oBAAoB,EAAE;QAC9C,MAAM,IAAIf,SACR,CAAC,oDAAoD,EAAEQ,iBAAiBQ,IAAI,CAAC,6FAA6F,CAAC;IAE/K;IAEA,yEAAyE;IACzE,MAAML,OAAQ,MAAMJ,IAAIE,OAAO,CAACQ,EAAE,CAACC,OAAO,CAAsC;QAC9EN,YAAYJ,iBAAiBQ,IAAI;QACjCT;QACAY,OAAO;YAAEC,IAAI;gBAAEC,QAAQd,IAAII,IAAI,CAAES,EAAE;YAAC;QAAE;IACxC;IAEA,MAAM,EAAEE,YAAY,EAAEC,KAAK,EAAE,GAAG,MAAMtB,gBAAgB;QACpDO;QACAgB,OAAOb,KAAKa,KAAK;QACjBjB;QACAkB,0BAA0B;QAC1Bd;IACF;IAEA,OAAO;QACLe,aAAaC,eAAe;YAAEpB;YAAKgB;QAAM;QACzCK,WAAWpB,iBAAiBM,IAAI,CAACe,eAAe;QAChDP;IACF;AACF,EAAC;AAED,6FAA6F,GAC7F,OAAO,MAAMQ,oBAAoB,OAAO,EACtCR,YAAY,EACZf,GAAG,EAIJ;IACC,MAAMwB,YAAY,MAAM5B,mBAAmB;QAAEmB;QAAcf;IAAI;IAE/D,OACEwB,aAAa;QACXL,aAAaC,eAAe;YAAEpB;YAAKgB,OAAOQ,UAAUR,KAAK;QAAC;QAC1DK,WAAWG,UAAUvB,gBAAgB,CAACM,IAAI,CAACe,eAAe;QAC1DP,cAAcS,UAAUT,YAAY;IACtC;AAEJ,EAAC;AAED,4EAA4E,GAC5E,OAAO,MAAMU,yBAAyB,OAAO,EAC3CzB,GAAG,EACHgB,KAAK,EAIN;IACC,MAAMU,aAAa5B,OAA0B;QAAE6B,MAAM;QAAU3B;QAAK4B,OAAOZ;IAAM;IAEjF,IAAI,CAACU,YAAY;QACf,OAAO;IACT;IAEA,MAAMG,UAAU,IAAIC,QAAQ;QAC1BC,eAAe,CAAC,IAAI,EAAEL,WAAWV,KAAK,EAAE;QACxCgB,kBAAkB;IACpB;IAEA,OAAO,AAAC,CAAA,MAAMrC,sBAAsB;QAAEkC;QAAS3B,SAASF,IAAIE,OAAO;QAAEF;IAAI,EAAC,EAAGI,IAAI;AACnF,EAAC;AAED,MAAMgB,iBAAiB,CAAC,EAAEpB,GAAG,EAAEgB,KAAK,EAA0C,GAC5EnB,KAAK;QAAE8B,MAAM;QAAUM,MAAM;YAAEjB;QAAM;QAAGhB;IAAI"}

package/dist/endpoint/oauthServer.d.ts

@@ -0,0 +1,12 @@
+import type { Endpoint } from 'payload';
+/**
+ * Turns Payload into the OAuth authorization server for MCP clients when `oauth.type` is
+ * `'builtin'`. Clients register, the user allows them after logging in to the admin panel, and
+ * the client receives the tokens `issueToken` creates.
+ *
+ * Clients, consent forms, authorization codes, and refresh tokens are encrypted and handed to the
+ * client instead of being stored. Only the default tokens write to the database, to the user's
+ * login sessions.
+ */
+export declare const oauthServerEndpoints: Endpoint[];
+//# sourceMappingURL=oauthServer.d.ts.map

package/dist/endpoint/oauthServer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauthServer.d.ts","sourceRoot":"","sources":["../../src/endpoint/oauthServer.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,QAAQ,EAAkC,MAAM,SAAS,CAAA;AAoCvE;;;;;;;;GAQG;AACH,eAAO,MAAM,oBAAoB,EAAE,QAAQ,EAqC1C,CAAA"}