@payloadcms/plugin-mcp 4.0.0-internal.167c7cd → 4.0.0-internal.16f218d

package/dist/endpoint/oauthServer.js

@@ -0,0 +1,361 @@
+import { OAuthErrorCode } from '@modelcontextprotocol/server';
+import { createHash } from 'crypto';
+import { formatAdminURL } from 'payload/shared';
+import { getPluginConfig } from '../utils/getPluginConfig.js';
+import { seal, unseal } from '../utils/seal.js';
+import { getMCPResource } from './oauth.js';
+import { issueLoginToken, refreshLoginToken } from './oauthLoginToken.js';
+/**
+ * Turns Payload into the OAuth authorization server for MCP clients when `oauth.type` is
+ * `'builtin'`. Clients register, the user allows them after logging in to the admin panel, and
+ * the client receives the tokens `issueToken` creates.
+ *
+ * Clients, consent forms, authorization codes, and refresh tokens are encrypted and handed to the
+ * client instead of being stored. Only the default tokens write to the database, to the user's
+ * login sessions.
+ */ export const oauthServerEndpoints = [
+    {
+        disableAuth: true,
+        handler: (req)=>withIssuer(req, (issuer)=>metadataResponse(issuer)),
+        method: 'get',
+        // OpenID discovery is the only metadata location MCP clients check below the issuer's path,
+        // which lets this work under /api without a route at the site root
+        path: '/mcp/oauth/.well-known/openid-configuration'
+    },
+    {
+        disableAuth: true,
+        handler: (req)=>withIssuer(req, ()=>Response.json({
+                    keys: []
+                })),
+        method: 'get',
+        path: '/mcp/oauth/jwks'
+    },
+    {
+        disableAuth: true,
+        handler: (req)=>withIssuer(req, ()=>register(req)),
+        method: 'post',
+        path: '/mcp/oauth/register'
+    },
+    {
+        handler: (req)=>withIssuer(req, ()=>authorize(req)),
+        method: 'get',
+        path: '/mcp/oauth/authorize'
+    },
+    {
+        handler: (req)=>withIssuer(req, ()=>approve(req)),
+        method: 'post',
+        path: '/mcp/oauth/authorize'
+    },
+    {
+        disableAuth: true,
+        handler: (req)=>withIssuer(req, ()=>token(req)),
+        method: 'post',
+        path: '/mcp/oauth/token'
+    }
+];
+/** The authorization server URL, or `undefined` when Payload isn't the authorization server. */ const getIssuer = (req)=>getPluginConfig({
+        config: req.payload.config
+    }).oauth?.type === 'builtin' ? `${getMCPResource({
+        req
+    })}/oauth` : undefined;
+const withIssuer = (req, handler)=>{
+    const issuer = getIssuer(req);
+    return issuer ? handler(issuer) : new Response(null, {
+        status: 404
+    });
+};
+/**
+ * The user logged in to this browser, who can allow MCP clients. Tokens and API keys in the
+ * `Authorization` header can't, or an MCP client could use its access token to approve itself a
+ * new, separate login.
+ */ const getBrowserUser = (req)=>req.headers.has('Authorization') ? null : req.user;
+const metadataResponse = (issuer)=>Response.json({
+        authorization_endpoint: `${issuer}/authorize`,
+        code_challenge_methods_supported: [
+            'S256'
+        ],
+        grant_types_supported: [
+            'authorization_code',
+            'refresh_token'
+        ],
+        // Required by OpenID discovery. No ID tokens are issued.
+        id_token_signing_alg_values_supported: [
+            'RS256'
+        ],
+        issuer,
+        jwks_uri: `${issuer}/jwks`,
+        registration_endpoint: `${issuer}/register`,
+        response_types_supported: [
+            'code'
+        ],
+        subject_types_supported: [
+            'public'
+        ],
+        token_endpoint: `${issuer}/token`,
+        token_endpoint_auth_methods_supported: [
+            'none'
+        ]
+    }, // Not cached, since without `serverURL` its URLs come from the request
+    {
+        headers: {
+            'Access-Control-Allow-Origin': '*',
+            'Cache-Control': 'no-store'
+        }
+    });
+const register = async (req)=>{
+    const { client_name, redirect_uris } = await req.json().catch(()=>({}));
+    if (!Array.isArray(redirect_uris) || !redirect_uris.length || !redirect_uris.every((uri)=>typeof uri === 'string' && URL.canParse(uri) && !uri.includes('#'))) {
+        return Response.json({
+            error: OAuthErrorCode.InvalidRedirectUri
+        }, {
+            status: 400
+        });
+    }
+    const client = {
+        name: typeof client_name === 'string' ? client_name : 'An MCP client',
+        redirectURIs: redirect_uris
+    };
+    return Response.json({
+        client_id: seal({
+            type: 'client',
+            data: client,
+            req
+        }),
+        client_name: client.name,
+        grant_types: [
+            'authorization_code',
+            'refresh_token'
+        ],
+        redirect_uris: client.redirectURIs,
+        response_types: [
+            'code'
+        ],
+        token_endpoint_auth_method: 'none'
+    }, {
+        status: 201
+    });
+};
+const authorize = (req)=>{
+    const url = new URL(req.url);
+    const params = url.searchParams;
+    const clientID = params.get('client_id');
+    const client = unseal({
+        type: 'client',
+        req,
+        value: clientID
+    });
+    const redirectURI = params.get('redirect_uri');
+    // Never redirect to an address the client didn't register
+    if (!client || !redirectURI || !client.redirectURIs.includes(redirectURI)) {
+        return page({
+            content: '<p>Start the sign-in again from your MCP client.</p>',
+            status: 400,
+            title: 'This sign-in link is invalid'
+        });
+    }
+    const state = params.get('state');
+    const codeChallenge = params.get('code_challenge');
+    if (params.get('response_type') !== 'code' || params.get('code_challenge_method') !== 'S256' || !codeChallenge) {
+        return redirect({
+            params: {
+                error: OAuthErrorCode.InvalidRequest,
+                state
+            },
+            redirectURI
+        });
+    }
+    const user = getBrowserUser(req);
+    if (!user) {
+        const loginURL = formatAdminURL({
+            adminRoute: req.payload.config.routes.admin,
+            path: '/login'
+        });
+        return new Response(null, {
+            headers: {
+                Location: `${loginURL}?redirect=${encodeURIComponent(url.pathname + url.search)}`
+            },
+            status: 302
+        });
+    }
+    const consent = {
+        clientID: clientID,
+        codeChallenge,
+        collection: user.collection,
+        redirectURI,
+        state,
+        userID: user.id
+    };
+    return page({
+        content: `<p>It will be able to use this app's MCP tools as ${escapeHTML(String(user.email ?? user.id))}, and you will return to ${escapeHTML(new URL(redirectURI).host || redirectURI)}.</p>
+<form method="post">
+<input name="consent" type="hidden" value="${seal({
+            type: 'consent',
+            data: consent,
+            expiresIn: 20 * 60 * 60,
+            req
+        })}">
+<button name="decision" type="submit" value="allow">Allow</button>
+<button name="decision" type="submit" value="deny">Deny</button>
+</form>`,
+        status: 200,
+        title: `Allow ${client.name} to use your account?`
+    });
+};
+const approve = async (req)=>{
+    const form = new URLSearchParams(await req.text());
+    const consent = unseal({
+        type: 'consent',
+        req,
+        value: form.get('consent')
+    });
+    const user = getBrowserUser(req);
+    // The form is only valid for the user it was shown to
+    if (!consent || user?.id !== consent.userID || user.collection !== consent.collection) {
+        return page({
+            content: '<p>Start the sign-in again from your MCP client.</p>',
+            status: 400,
+            title: 'This sign-in request expired'
+        });
+    }
+    const { clientID, codeChallenge, redirectURI, state } = consent;
+    if (form.get('decision') !== 'allow') {
+        return redirect({
+            params: {
+                error: OAuthErrorCode.AccessDenied,
+                state
+            },
+            redirectURI
+        });
+    }
+    const code = {
+        clientID,
+        codeChallenge,
+        redirectURI,
+        tokens: await getTokenHooks(req).issueToken({
+            req
+        })
+    };
+    return redirect({
+        params: {
+            code: seal({
+                type: 'code',
+                data: code,
+                expiresIn: 60,
+                req
+            }),
+            state
+        },
+        redirectURI
+    });
+};
+const token = async (req)=>{
+    const form = new URLSearchParams(await req.text());
+    const clientID = form.get('client_id');
+    const tokens = clientID && (form.get('grant_type') === 'refresh_token' ? await refresh({
+        clientID,
+        form,
+        req
+    }) : redeemCode({
+        clientID,
+        form,
+        req
+    }));
+    if (!clientID || !tokens) {
+        return Response.json({
+            error: OAuthErrorCode.InvalidGrant
+        }, {
+            status: 400
+        });
+    }
+    return Response.json({
+        access_token: tokens.accessToken,
+        expires_in: tokens.expiresIn,
+        refresh_token: tokens.refreshToken && seal({
+            type: 'refresh',
+            data: {
+                clientID,
+                refreshToken: tokens.refreshToken
+            },
+            req
+        }),
+        token_type: 'Bearer'
+    }, {
+        headers: {
+            'Cache-Control': 'no-store'
+        }
+    });
+};
+const redeemCode = ({ clientID, form, req })=>{
+    const code = unseal({
+        type: 'code',
+        req,
+        value: form.get('code')
+    });
+    if (form.get('grant_type') === 'authorization_code' && code?.clientID === clientID && code.redirectURI === form.get('redirect_uri') && // PKCE: only the client that started the sign-in knows the verifier
+    createHash('sha256').update(form.get('code_verifier') ?? '').digest('base64url') === code.codeChallenge) {
+        return code.tokens;
+    }
+};
+const refresh = async ({ clientID, form, req })=>{
+    const refreshToken = unseal({
+        type: 'refresh',
+        req,
+        value: form.get('refresh_token')
+    });
+    // Only the client a refresh token was issued to can use it
+    if (refreshToken?.clientID === clientID) {
+        return await getTokenHooks(req).refreshToken?.({
+            refreshToken: refreshToken.refreshToken,
+            req
+        });
+    }
+};
+/** `issueToken` and `refreshToken`, or the defaults for Payload login tokens. */ const getTokenHooks = (req)=>{
+    const oauth = getPluginConfig({
+        config: req.payload.config
+    }).oauth;
+    return oauth.issueToken ? {
+        issueToken: oauth.issueToken,
+        refreshToken: oauth.refreshToken
+    } : {
+        issueToken: issueLoginToken,
+        refreshToken: refreshLoginToken
+    };
+};
+const redirect = ({ params, redirectURI })=>{
+    const location = new URL(redirectURI);
+    for (const [key, value] of Object.entries(params)){
+        if (value) {
+            location.searchParams.set(key, value);
+        }
+    }
+    return new Response(null, {
+        headers: {
+            Location: location.href
+        },
+        status: 302
+    });
+};
+const page = ({ content, status, title })=>new Response(`<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>${escapeHTML(title)}</title>
+<style>
+body { font-family: system-ui, sans-serif; margin: 4rem auto; max-width: 32rem; overflow-wrap: anywhere; padding: 0 1rem }
+button { font: inherit; margin-inline-end: 0.5rem; padding: 0.5rem 1rem }
+</style>
+</head>
+<body><h1>${escapeHTML(title)}</h1>${content}</body>
+</html>`, {
+        headers: {
+            // Stop other sites from framing the page to trick users into clicking Allow
+            'Content-Security-Policy': "frame-ancestors 'none'",
+            'Content-Type': 'text/html; charset=utf-8'
+        },
+        status
+    });
+const escapeHTML = (value)=>value.replace(/[&<>"']/g, (character)=>`&#${character.charCodeAt(0)};`);
+
+//# sourceMappingURL=oauthServer.js.map

package/dist/endpoint/oauthServer.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/endpoint/oauthServer.ts"],"sourcesContent":["import type {\n  OAuthClientInformationFull,\n  OAuthTokens,\n  OpenIdProviderDiscoveryMetadata,\n} from '@modelcontextprotocol/server'\nimport type { Endpoint, PayloadHandler, PayloadRequest } from 'payload'\n\nimport { OAuthErrorCode } from '@modelcontextprotocol/server'\nimport { createHash } from 'crypto'\nimport { formatAdminURL } from 'payload/shared'\n\nimport type { MCPBuiltinOAuthConfig, MCPOAuthTokens } from '../types.js'\n\nimport { getPluginConfig } from '../utils/getPluginConfig.js'\nimport { seal, unseal } from '../utils/seal.js'\nimport { getMCPResource } from './oauth.js'\nimport { issueLoginToken, refreshLoginToken } from './oauthLoginToken.js'\n\ntype Client = { name: string; redirectURIs: string[] }\n\ntype Consent = {\n  clientID: string\n  codeChallenge: string\n  collection: string\n  redirectURI: string\n  state: null | string\n  userID: number | string\n}\n\ntype Code = {\n  clientID: string\n  codeChallenge: string\n  redirectURI: string\n  tokens: MCPOAuthTokens\n}\n\ntype RefreshToken = {\n  clientID: string\n  refreshToken: string\n}\n\n/**\n * Turns Payload into the OAuth authorization server for MCP clients when `oauth.type` is\n * `'builtin'`. Clients register, the user allows them after logging in to the admin panel, and\n * the client receives the tokens `issueToken` creates.\n *\n * Clients, consent forms, authorization codes, and refresh tokens are encrypted and handed to the\n * client instead of being stored. Only the default tokens write to the database, to the user's\n * login sessions.\n */\nexport const oauthServerEndpoints: Endpoint[] = [\n  {\n    disableAuth: true,\n    handler: (req) => withIssuer(req, (issuer) => metadataResponse(issuer)),\n    method: 'get',\n    // OpenID discovery is the only metadata location MCP clients check below the issuer's path,\n    // which lets this work under /api without a route at the site root\n    path: '/mcp/oauth/.well-known/openid-configuration',\n  },\n  {\n    disableAuth: true,\n    handler: (req) => withIssuer(req, () => Response.json({ keys: [] })),\n    method: 'get',\n    path: '/mcp/oauth/jwks',\n  },\n  {\n    disableAuth: true,\n    handler: (req) => withIssuer(req, () => register(req)),\n    method: 'post',\n    path: '/mcp/oauth/register',\n  },\n  {\n    handler: (req) => withIssuer(req, () => authorize(req)),\n    method: 'get',\n    path: '/mcp/oauth/authorize',\n  },\n  {\n    handler: (req) => withIssuer(req, () => approve(req)),\n    method: 'post',\n    path: '/mcp/oauth/authorize',\n  },\n  {\n    disableAuth: true,\n    handler: (req) => withIssuer(req, () => token(req)),\n    method: 'post',\n    path: '/mcp/oauth/token',\n  },\n]\n\n/** The authorization server URL, or `undefined` when Payload isn't the authorization server. */\nconst getIssuer = (req: PayloadRequest): string | undefined =>\n  getPluginConfig({ config: req.payload.config }).oauth?.type === 'builtin'\n    ? `${getMCPResource({ req })}/oauth`\n    : undefined\n\nconst withIssuer = (\n  req: PayloadRequest,\n  handler: (issuer: string) => Promise<Response> | Response,\n): Promise<Response> | Response => {\n  const issuer = getIssuer(req)\n  return issuer ? handler(issuer) : new Response(null, { status: 404 })\n}\n\n/**\n * The user logged in to this browser, who can allow MCP clients. Tokens and API keys in the\n * `Authorization` header can't, or an MCP client could use its access token to approve itself a\n * new, separate login.\n */\nconst getBrowserUser = (req: PayloadRequest): PayloadRequest['user'] =>\n  req.headers.has('Authorization') ? null : req.user\n\nconst metadataResponse = (issuer: string): Response =>\n  Response.json(\n    {\n      authorization_endpoint: `${issuer}/authorize`,\n      code_challenge_methods_supported: ['S256'],\n      grant_types_supported: ['authorization_code', 'refresh_token'],\n      // Required by OpenID discovery. No ID tokens are issued.\n      id_token_signing_alg_values_supported: ['RS256'],\n      issuer,\n      jwks_uri: `${issuer}/jwks`,\n      registration_endpoint: `${issuer}/register`,\n      response_types_supported: ['code'],\n      subject_types_supported: ['public'],\n      token_endpoint: `${issuer}/token`,\n      token_endpoint_auth_methods_supported: ['none'],\n    } satisfies OpenIdProviderDiscoveryMetadata,\n    // Not cached, since without `serverURL` its URLs come from the request\n    { headers: { 'Access-Control-Allow-Origin': '*', 'Cache-Control': 'no-store' } },\n  )\n\nconst register: PayloadHandler = async (req) => {\n  const { client_name, redirect_uris } = await req.json!().catch(() => ({}))\n\n  if (\n    !Array.isArray(redirect_uris) ||\n    !redirect_uris.length ||\n    !redirect_uris.every(\n      (uri) => typeof uri === 'string' && URL.canParse(uri) && !uri.includes('#'),\n    )\n  ) {\n    return Response.json({ error: OAuthErrorCode.InvalidRedirectUri }, { status: 400 })\n  }\n\n  const client: Client = {\n    name: typeof client_name === 'string' ? client_name : 'An MCP client',\n    redirectURIs: redirect_uris,\n  }\n\n  return Response.json(\n    {\n      client_id: seal({ type: 'client', data: client, req }),\n      client_name: client.name,\n      grant_types: ['authorization_code', 'refresh_token'],\n      redirect_uris: client.redirectURIs,\n      response_types: ['code'],\n      token_endpoint_auth_method: 'none',\n    } satisfies OAuthClientInformationFull,\n    { status: 201 },\n  )\n}\n\nconst authorize: PayloadHandler = (req) => {\n  const url = new URL(req.url!)\n  const params = url.searchParams\n  const clientID = params.get('client_id')\n  const client = unseal<Client>({ type: 'client', req, value: clientID })\n  const redirectURI = params.get('redirect_uri')\n\n  // Never redirect to an address the client didn't register\n  if (!client || !redirectURI || !client.redirectURIs.includes(redirectURI)) {\n    return page({\n      content: '<p>Start the sign-in again from your MCP client.</p>',\n      status: 400,\n      title: 'This sign-in link is invalid',\n    })\n  }\n\n  const state = params.get('state')\n  const codeChallenge = params.get('code_challenge')\n\n  if (\n    params.get('response_type') !== 'code' ||\n    params.get('code_challenge_method') !== 'S256' ||\n    !codeChallenge\n  ) {\n    return redirect({ params: { error: OAuthErrorCode.InvalidRequest, state }, redirectURI })\n  }\n\n  const user = getBrowserUser(req)\n\n  if (!user) {\n    const loginURL = formatAdminURL({ adminRoute: req.payload.config.routes.admin, path: '/login' })\n\n    return new Response(null, {\n      headers: {\n        Location: `${loginURL}?redirect=${encodeURIComponent(url.pathname + url.search)}`,\n      },\n      status: 302,\n    })\n  }\n\n  const consent: Consent = {\n    clientID: clientID!,\n    codeChallenge,\n    collection: user.collection,\n    redirectURI,\n    state,\n    userID: user.id,\n  }\n\n  return page({\n    content: `<p>It will be able to use this app's MCP tools as ${escapeHTML(String(user.email ?? user.id))}, and you will return to ${escapeHTML(new URL(redirectURI).host || redirectURI)}.</p>\n<form method=\"post\">\n<input name=\"consent\" type=\"hidden\" value=\"${seal({ type: 'consent', data: consent, expiresIn: 20 * 60 * 60, req })}\">\n<button name=\"decision\" type=\"submit\" value=\"allow\">Allow</button>\n<button name=\"decision\" type=\"submit\" value=\"deny\">Deny</button>\n</form>`,\n    status: 200,\n    title: `Allow ${client.name} to use your account?`,\n  })\n}\n\nconst approve: PayloadHandler = async (req) => {\n  const form = new URLSearchParams(await req.text!())\n  const consent = unseal<Consent>({ type: 'consent', req, value: form.get('consent') })\n  const user = getBrowserUser(req)\n\n  // The form is only valid for the user it was shown to\n  if (!consent || user?.id !== consent.userID || user.collection !== consent.collection) {\n    return page({\n      content: '<p>Start the sign-in again from your MCP client.</p>',\n      status: 400,\n      title: 'This sign-in request expired',\n    })\n  }\n\n  const { clientID, codeChallenge, redirectURI, state } = consent\n\n  if (form.get('decision') !== 'allow') {\n    return redirect({ params: { error: OAuthErrorCode.AccessDenied, state }, redirectURI })\n  }\n\n  const code: Code = {\n    clientID,\n    codeChallenge,\n    redirectURI,\n    tokens: await getTokenHooks(req).issueToken({ req }),\n  }\n\n  return redirect({\n    params: { code: seal({ type: 'code', data: code, expiresIn: 60, req }), state },\n    redirectURI,\n  })\n}\n\nconst token: PayloadHandler = async (req) => {\n  const form = new URLSearchParams(await req.text!())\n  const clientID = form.get('client_id')\n  const tokens =\n    clientID &&\n    (form.get('grant_type') === 'refresh_token'\n      ? await refresh({ clientID, form, req })\n      : redeemCode({ clientID, form, req }))\n\n  if (!clientID || !tokens) {\n    return Response.json({ error: OAuthErrorCode.InvalidGrant }, { status: 400 })\n  }\n\n  return Response.json(\n    {\n      access_token: tokens.accessToken,\n      expires_in: tokens.expiresIn,\n      refresh_token:\n        tokens.refreshToken &&\n        seal({\n          type: 'refresh',\n          data: { clientID, refreshToken: tokens.refreshToken } satisfies RefreshToken,\n          req,\n        }),\n      token_type: 'Bearer',\n    } satisfies OAuthTokens,\n    { headers: { 'Cache-Control': 'no-store' } },\n  )\n}\n\nconst redeemCode = ({\n  clientID,\n  form,\n  req,\n}: {\n  clientID: string\n  form: URLSearchParams\n  req: PayloadRequest\n}): MCPOAuthTokens | undefined => {\n  const code = unseal<Code>({ type: 'code', req, value: form.get('code') })\n\n  if (\n    form.get('grant_type') === 'authorization_code' &&\n    code?.clientID === clientID &&\n    code.redirectURI === form.get('redirect_uri') &&\n    // PKCE: only the client that started the sign-in knows the verifier\n    createHash('sha256')\n      .update(form.get('code_verifier') ?? '')\n      .digest('base64url') === code.codeChallenge\n  ) {\n    return code.tokens\n  }\n}\n\nconst refresh = async ({\n  clientID,\n  form,\n  req,\n}: {\n  clientID: string\n  form: URLSearchParams\n  req: PayloadRequest\n}): Promise<MCPOAuthTokens | null | undefined> => {\n  const refreshToken = unseal<RefreshToken>({\n    type: 'refresh',\n    req,\n    value: form.get('refresh_token'),\n  })\n\n  // Only the client a refresh token was issued to can use it\n  if (refreshToken?.clientID === clientID) {\n    return await getTokenHooks(req).refreshToken?.({\n      refreshToken: refreshToken.refreshToken,\n      req,\n    })\n  }\n}\n\n/** `issueToken` and `refreshToken`, or the defaults for Payload login tokens. */\nconst getTokenHooks = (req: PayloadRequest) => {\n  const oauth = getPluginConfig({ config: req.payload.config }).oauth as MCPBuiltinOAuthConfig\n\n  return oauth.issueToken\n    ? { issueToken: oauth.issueToken, refreshToken: oauth.refreshToken }\n    : { issueToken: issueLoginToken, refreshToken: refreshLoginToken }\n}\n\nconst redirect = ({\n  params,\n  redirectURI,\n}: {\n  params: Record<string, null | string>\n  redirectURI: string\n}): Response => {\n  const location = new URL(redirectURI)\n\n  for (const [key, value] of Object.entries(params)) {\n    if (value) {\n      location.searchParams.set(key, value)\n    }\n  }\n\n  return new Response(null, { headers: { Location: location.href }, status: 302 })\n}\n\nconst page = ({\n  content,\n  status,\n  title,\n}: {\n  content: string\n  status: number\n  title: string\n}): Response =>\n  new Response(\n    `<!doctype html>\n<html lang=\"en\">\n<head>\n<meta charset=\"utf-8\">\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n<title>${escapeHTML(title)}</title>\n<style>\nbody { font-family: system-ui, sans-serif; margin: 4rem auto; max-width: 32rem; overflow-wrap: anywhere; padding: 0 1rem }\nbutton { font: inherit; margin-inline-end: 0.5rem; padding: 0.5rem 1rem }\n</style>\n</head>\n<body><h1>${escapeHTML(title)}</h1>${content}</body>\n</html>`,\n    {\n      headers: {\n        // Stop other sites from framing the page to trick users into clicking Allow\n        'Content-Security-Policy': \"frame-ancestors 'none'\",\n        'Content-Type': 'text/html; charset=utf-8',\n      },\n      status,\n    },\n  )\n\nconst escapeHTML = (value: string): string =>\n  value.replace(/[&<>\"']/g, (character) => `&#${character.charCodeAt(0)};`)\n"],"names":["OAuthErrorCode","createHash","formatAdminURL","getPluginConfig","seal","unseal","getMCPResource","issueLoginToken","refreshLoginToken","oauthServerEndpoints","disableAuth","handler","req","withIssuer","issuer","metadataResponse","method","path","Response","json","keys","register","authorize","approve","token","getIssuer","config","payload","oauth","type","undefined","status","getBrowserUser","headers","has","user","authorization_endpoint","code_challenge_methods_supported","grant_types_supported","id_token_signing_alg_values_supported","jwks_uri","registration_endpoint","response_types_supported","subject_types_supported","token_endpoint","token_endpoint_auth_methods_supported","client_name","redirect_uris","catch","Array","isArray","length","every","uri","URL","canParse","includes","error","InvalidRedirectUri","client","name","redirectURIs","client_id","data","grant_types","response_types","token_endpoint_auth_method","url","params","searchParams","clientID","get","value","redirectURI","page","content","title","state","codeChallenge","redirect","InvalidRequest","loginURL","adminRoute","routes","admin","Location","encodeURIComponent","pathname","search","consent","collection","userID","id","escapeHTML","String","email","host","expiresIn","form","URLSearchParams","text","AccessDenied","code","tokens","getTokenHooks","issueToken","refresh","redeemCode","InvalidGrant","access_token","accessToken","expires_in","refresh_token","refreshToken","token_type","update","digest","location","key","Object","entries","set","href","replace","character","charCodeAt"],"mappings":"AAOA,SAASA,cAAc,QAAQ,+BAA8B;AAC7D,SAASC,UAAU,QAAQ,SAAQ;AACnC,SAASC,cAAc,QAAQ,iBAAgB;AAI/C,SAASC,eAAe,QAAQ,8BAA6B;AAC7D,SAASC,IAAI,EAAEC,MAAM,QAAQ,mBAAkB;AAC/C,SAASC,cAAc,QAAQ,aAAY;AAC3C,SAASC,eAAe,EAAEC,iBAAiB,QAAQ,uBAAsB;AAyBzE;;;;;;;;CAQC,GACD,OAAO,MAAMC,uBAAmC;IAC9C;QACEC,aAAa;QACbC,SAAS,CAACC,MAAQC,WAAWD,KAAK,CAACE,SAAWC,iBAAiBD;QAC/DE,QAAQ;QACR,4FAA4F;QAC5F,mEAAmE;QACnEC,MAAM;IACR;IACA;QACEP,aAAa;QACbC,SAAS,CAACC,MAAQC,WAAWD,KAAK,IAAMM,SAASC,IAAI,CAAC;oBAAEC,MAAM,EAAE;gBAAC;QACjEJ,QAAQ;QACRC,MAAM;IACR;IACA;QACEP,aAAa;QACbC,SAAS,CAACC,MAAQC,WAAWD,KAAK,IAAMS,SAAST;QACjDI,QAAQ;QACRC,MAAM;IACR;IACA;QACEN,SAAS,CAACC,MAAQC,WAAWD,KAAK,IAAMU,UAAUV;QAClDI,QAAQ;QACRC,MAAM;IACR;IACA;QACEN,SAAS,CAACC,MAAQC,WAAWD,KAAK,IAAMW,QAAQX;QAChDI,QAAQ;QACRC,MAAM;IACR;IACA;QACEP,aAAa;QACbC,SAAS,CAACC,MAAQC,WAAWD,KAAK,IAAMY,MAAMZ;QAC9CI,QAAQ;QACRC,MAAM;IACR;CACD,CAAA;AAED,8FAA8F,GAC9F,MAAMQ,YAAY,CAACb,MACjBT,gBAAgB;QAAEuB,QAAQd,IAAIe,OAAO,CAACD,MAAM;IAAC,GAAGE,KAAK,EAAEC,SAAS,YAC5D,GAAGvB,eAAe;QAAEM;IAAI,GAAG,MAAM,CAAC,GAClCkB;AAEN,MAAMjB,aAAa,CACjBD,KACAD;IAEA,MAAMG,SAASW,UAAUb;IACzB,OAAOE,SAASH,QAAQG,UAAU,IAAII,SAAS,MAAM;QAAEa,QAAQ;IAAI;AACrE;AAEA;;;;CAIC,GACD,MAAMC,iBAAiB,CAACpB,MACtBA,IAAIqB,OAAO,CAACC,GAAG,CAAC,mBAAmB,OAAOtB,IAAIuB,IAAI;AAEpD,MAAMpB,mBAAmB,CAACD,SACxBI,SAASC,IAAI,CACX;QACEiB,wBAAwB,GAAGtB,OAAO,UAAU,CAAC;QAC7CuB,kCAAkC;YAAC;SAAO;QAC1CC,uBAAuB;YAAC;YAAsB;SAAgB;QAC9D,yDAAyD;QACzDC,uCAAuC;YAAC;SAAQ;QAChDzB;QACA0B,UAAU,GAAG1B,OAAO,KAAK,CAAC;QAC1B2B,uBAAuB,GAAG3B,OAAO,SAAS,CAAC;QAC3C4B,0BAA0B;YAAC;SAAO;QAClCC,yBAAyB;YAAC;SAAS;QACnCC,gBAAgB,GAAG9B,OAAO,MAAM,CAAC;QACjC+B,uCAAuC;YAAC;SAAO;IACjD,GACA,uEAAuE;IACvE;QAAEZ,SAAS;YAAE,+BAA+B;YAAK,iBAAiB;QAAW;IAAE;AAGnF,MAAMZ,WAA2B,OAAOT;IACtC,MAAM,EAAEkC,WAAW,EAAEC,aAAa,EAAE,GAAG,MAAMnC,IAAIO,IAAI,GAAI6B,KAAK,CAAC,IAAO,CAAA,CAAC,CAAA;IAEvE,IACE,CAACC,MAAMC,OAAO,CAACH,kBACf,CAACA,cAAcI,MAAM,IACrB,CAACJ,cAAcK,KAAK,CAClB,CAACC,MAAQ,OAAOA,QAAQ,YAAYC,IAAIC,QAAQ,CAACF,QAAQ,CAACA,IAAIG,QAAQ,CAAC,OAEzE;QACA,OAAOtC,SAASC,IAAI,CAAC;YAAEsC,OAAOzD,eAAe0D,kBAAkB;QAAC,GAAG;YAAE3B,QAAQ;QAAI;IACnF;IAEA,MAAM4B,SAAiB;QACrBC,MAAM,OAAOd,gBAAgB,WAAWA,cAAc;QACtDe,cAAcd;IAChB;IAEA,OAAO7B,SAASC,IAAI,CAClB;QACE2C,WAAW1D,KAAK;YAAEyB,MAAM;YAAUkC,MAAMJ;YAAQ/C;QAAI;QACpDkC,aAAaa,OAAOC,IAAI;QACxBI,aAAa;YAAC;YAAsB;SAAgB;QACpDjB,eAAeY,OAAOE,YAAY;QAClCI,gBAAgB;YAAC;SAAO;QACxBC,4BAA4B;IAC9B,GACA;QAAEnC,QAAQ;IAAI;AAElB;AAEA,MAAMT,YAA4B,CAACV;IACjC,MAAMuD,MAAM,IAAIb,IAAI1C,IAAIuD,GAAG;IAC3B,MAAMC,SAASD,IAAIE,YAAY;IAC/B,MAAMC,WAAWF,OAAOG,GAAG,CAAC;IAC5B,MAAMZ,SAAStD,OAAe;QAAEwB,MAAM;QAAUjB;QAAK4D,OAAOF;IAAS;IACrE,MAAMG,cAAcL,OAAOG,GAAG,CAAC;IAE/B,0DAA0D;IAC1D,IAAI,CAACZ,UAAU,CAACc,eAAe,CAACd,OAAOE,YAAY,CAACL,QAAQ,CAACiB,cAAc;QACzE,OAAOC,KAAK;YACVC,SAAS;YACT5C,QAAQ;YACR6C,OAAO;QACT;IACF;IAEA,MAAMC,QAAQT,OAAOG,GAAG,CAAC;IACzB,MAAMO,gBAAgBV,OAAOG,GAAG,CAAC;IAEjC,IACEH,OAAOG,GAAG,CAAC,qBAAqB,UAChCH,OAAOG,GAAG,CAAC,6BAA6B,UACxC,CAACO,eACD;QACA,OAAOC,SAAS;YAAEX,QAAQ;gBAAEX,OAAOzD,eAAegF,cAAc;gBAAEH;YAAM;YAAGJ;QAAY;IACzF;IAEA,MAAMtC,OAAOH,eAAepB;IAE5B,IAAI,CAACuB,MAAM;QACT,MAAM8C,WAAW/E,eAAe;YAAEgF,YAAYtE,IAAIe,OAAO,CAACD,MAAM,CAACyD,MAAM,CAACC,KAAK;YAAEnE,MAAM;QAAS;QAE9F,OAAO,IAAIC,SAAS,MAAM;YACxBe,SAAS;gBACPoD,UAAU,GAAGJ,SAAS,UAAU,EAAEK,mBAAmBnB,IAAIoB,QAAQ,GAAGpB,IAAIqB,MAAM,GAAG;YACnF;YACAzD,QAAQ;QACV;IACF;IAEA,MAAM0D,UAAmB;QACvBnB,UAAUA;QACVQ;QACAY,YAAYvD,KAAKuD,UAAU;QAC3BjB;QACAI;QACAc,QAAQxD,KAAKyD,EAAE;IACjB;IAEA,OAAOlB,KAAK;QACVC,SAAS,CAAC,kDAAkD,EAAEkB,WAAWC,OAAO3D,KAAK4D,KAAK,IAAI5D,KAAKyD,EAAE,GAAG,yBAAyB,EAAEC,WAAW,IAAIvC,IAAImB,aAAauB,IAAI,IAAIvB,aAAa;;2CAEjJ,EAAErE,KAAK;YAAEyB,MAAM;YAAWkC,MAAM0B;YAASQ,WAAW,KAAK,KAAK;YAAIrF;QAAI,GAAG;;;OAG7G,CAAC;QACJmB,QAAQ;QACR6C,OAAO,CAAC,MAAM,EAAEjB,OAAOC,IAAI,CAAC,qBAAqB,CAAC;IACpD;AACF;AAEA,MAAMrC,UAA0B,OAAOX;IACrC,MAAMsF,OAAO,IAAIC,gBAAgB,MAAMvF,IAAIwF,IAAI;IAC/C,MAAMX,UAAUpF,OAAgB;QAAEwB,MAAM;QAAWjB;QAAK4D,OAAO0B,KAAK3B,GAAG,CAAC;IAAW;IACnF,MAAMpC,OAAOH,eAAepB;IAE5B,sDAAsD;IACtD,IAAI,CAAC6E,WAAWtD,MAAMyD,OAAOH,QAAQE,MAAM,IAAIxD,KAAKuD,UAAU,KAAKD,QAAQC,UAAU,EAAE;QACrF,OAAOhB,KAAK;YACVC,SAAS;YACT5C,QAAQ;YACR6C,OAAO;QACT;IACF;IAEA,MAAM,EAAEN,QAAQ,EAAEQ,aAAa,EAAEL,WAAW,EAAEI,KAAK,EAAE,GAAGY;IAExD,IAAIS,KAAK3B,GAAG,CAAC,gBAAgB,SAAS;QACpC,OAAOQ,SAAS;YAAEX,QAAQ;gBAAEX,OAAOzD,eAAeqG,YAAY;gBAAExB;YAAM;YAAGJ;QAAY;IACvF;IAEA,MAAM6B,OAAa;QACjBhC;QACAQ;QACAL;QACA8B,QAAQ,MAAMC,cAAc5F,KAAK6F,UAAU,CAAC;YAAE7F;QAAI;IACpD;IAEA,OAAOmE,SAAS;QACdX,QAAQ;YAAEkC,MAAMlG,KAAK;gBAAEyB,MAAM;gBAAQkC,MAAMuC;gBAAML,WAAW;gBAAIrF;YAAI;YAAIiE;QAAM;QAC9EJ;IACF;AACF;AAEA,MAAMjD,QAAwB,OAAOZ;IACnC,MAAMsF,OAAO,IAAIC,gBAAgB,MAAMvF,IAAIwF,IAAI;IAC/C,MAAM9B,WAAW4B,KAAK3B,GAAG,CAAC;IAC1B,MAAMgC,SACJjC,YACC4B,CAAAA,KAAK3B,GAAG,CAAC,kBAAkB,kBACxB,MAAMmC,QAAQ;QAAEpC;QAAU4B;QAAMtF;IAAI,KACpC+F,WAAW;QAAErC;QAAU4B;QAAMtF;IAAI,EAAC;IAExC,IAAI,CAAC0D,YAAY,CAACiC,QAAQ;QACxB,OAAOrF,SAASC,IAAI,CAAC;YAAEsC,OAAOzD,eAAe4G,YAAY;QAAC,GAAG;YAAE7E,QAAQ;QAAI;IAC7E;IAEA,OAAOb,SAASC,IAAI,CAClB;QACE0F,cAAcN,OAAOO,WAAW;QAChCC,YAAYR,OAAON,SAAS;QAC5Be,eACET,OAAOU,YAAY,IACnB7G,KAAK;YACHyB,MAAM;YACNkC,MAAM;gBAAEO;gBAAU2C,cAAcV,OAAOU,YAAY;YAAC;YACpDrG;QACF;QACFsG,YAAY;IACd,GACA;QAAEjF,SAAS;YAAE,iBAAiB;QAAW;IAAE;AAE/C;AAEA,MAAM0E,aAAa,CAAC,EAClBrC,QAAQ,EACR4B,IAAI,EACJtF,GAAG,EAKJ;IACC,MAAM0F,OAAOjG,OAAa;QAAEwB,MAAM;QAAQjB;QAAK4D,OAAO0B,KAAK3B,GAAG,CAAC;IAAQ;IAEvE,IACE2B,KAAK3B,GAAG,CAAC,kBAAkB,wBAC3B+B,MAAMhC,aAAaA,YACnBgC,KAAK7B,WAAW,KAAKyB,KAAK3B,GAAG,CAAC,mBAC9B,oEAAoE;IACpEtE,WAAW,UACRkH,MAAM,CAACjB,KAAK3B,GAAG,CAAC,oBAAoB,IACpC6C,MAAM,CAAC,iBAAiBd,KAAKxB,aAAa,EAC7C;QACA,OAAOwB,KAAKC,MAAM;IACpB;AACF;AAEA,MAAMG,UAAU,OAAO,EACrBpC,QAAQ,EACR4B,IAAI,EACJtF,GAAG,EAKJ;IACC,MAAMqG,eAAe5G,OAAqB;QACxCwB,MAAM;QACNjB;QACA4D,OAAO0B,KAAK3B,GAAG,CAAC;IAClB;IAEA,2DAA2D;IAC3D,IAAI0C,cAAc3C,aAAaA,UAAU;QACvC,OAAO,MAAMkC,cAAc5F,KAAKqG,YAAY,GAAG;YAC7CA,cAAcA,aAAaA,YAAY;YACvCrG;QACF;IACF;AACF;AAEA,+EAA+E,GAC/E,MAAM4F,gBAAgB,CAAC5F;IACrB,MAAMgB,QAAQzB,gBAAgB;QAAEuB,QAAQd,IAAIe,OAAO,CAACD,MAAM;IAAC,GAAGE,KAAK;IAEnE,OAAOA,MAAM6E,UAAU,GACnB;QAAEA,YAAY7E,MAAM6E,UAAU;QAAEQ,cAAcrF,MAAMqF,YAAY;IAAC,IACjE;QAAER,YAAYlG;QAAiB0G,cAAczG;IAAkB;AACrE;AAEA,MAAMuE,WAAW,CAAC,EAChBX,MAAM,EACNK,WAAW,EAIZ;IACC,MAAM4C,WAAW,IAAI/D,IAAImB;IAEzB,KAAK,MAAM,CAAC6C,KAAK9C,MAAM,IAAI+C,OAAOC,OAAO,CAACpD,QAAS;QACjD,IAAII,OAAO;YACT6C,SAAShD,YAAY,CAACoD,GAAG,CAACH,KAAK9C;QACjC;IACF;IAEA,OAAO,IAAItD,SAAS,MAAM;QAAEe,SAAS;YAAEoD,UAAUgC,SAASK,IAAI;QAAC;QAAG3F,QAAQ;IAAI;AAChF;AAEA,MAAM2C,OAAO,CAAC,EACZC,OAAO,EACP5C,MAAM,EACN6C,KAAK,EAKN,GACC,IAAI1D,SACF,CAAC;;;;;OAKE,EAAE2E,WAAWjB,OAAO;;;;;;UAMjB,EAAEiB,WAAWjB,OAAO,KAAK,EAAED,QAAQ;OACtC,CAAC,EACJ;QACE1C,SAAS;YACP,4EAA4E;YAC5E,2BAA2B;YAC3B,gBAAgB;QAClB;QACAF;IACF;AAGJ,MAAM8D,aAAa,CAACrB,QAClBA,MAAMmD,OAAO,CAAC,YAAY,CAACC,YAAc,CAAC,EAAE,EAAEA,UAAUC,UAAU,CAAC,GAAG,CAAC,CAAC"}

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import type { AuthorizedMCP, MCPPluginConfig, SanitizedMCPPluginConfig } from './types.js';
+import type { AuthorizedMCP, MCPBuiltinOAuthConfig, MCPExternalOAuthConfig, MCPOAuthConfig, MCPOAuthTokens, MCPPluginConfig, SanitizedMCPPluginConfig } from './types.js';
 declare module 'payload' {
     interface PayloadRequestAPI {
         MCP: true;
@@ -7,8 +7,16 @@ declare module 'payload' {
         /** After the plugin's `plugin` callback runs, `options` holds the sanitized config. */
         '@payloadcms/plugin-mcp': MCPPluginConfig;
     }
+    interface RequestContext {
+        /** Set on MCP requests before they're authenticated. */
+        mcp?: {
+            /** The MCP endpoint's address, which OAuth access tokens for MCP are issued for. */
+            resource: string;
+        };
+    }
 }
-export type { AuthorizedMCP, MCPPluginConfig, SanitizedMCPPluginConfig };
+export type { AuthorizedMCP, MCPBuiltinOAuthConfig, MCPExternalOAuthConfig, MCPOAuthConfig, MCPOAuthTokens, MCPPluginConfig, SanitizedMCPPluginConfig, };
 export { defineCollectionTool, defineGlobalTool, definePrompt, defineTool } from './defineTool.js';
+export { oauthProtectedResourceHandler } from './endpoint/oauth.js';
 export declare const mcpPlugin: (options: MCPPluginConfig) => import("payload").Plugin;
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAA;AAK1F,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAiB,iBAAiB;QAChC,GAAG,EAAE,IAAI,CAAA;KACV;IACD,UAAU,iBAAiB;QACzB,uFAAuF;QACvF,wBAAwB,EAAE,eAAe,CAAA;KAC1C;CACF;AAED,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,wBAAwB,EAAE,CAAA;AAExE,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAElG,eAAO,MAAM,SAAS,wDAiCpB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,aAAa,EACb,qBAAqB,EACrB,sBAAsB,EACtB,cAAc,EACd,cAAc,EACd,eAAe,EACf,wBAAwB,EACzB,MAAM,YAAY,CAAA;AAOnB,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAiB,iBAAiB;QAChC,GAAG,EAAE,IAAI,CAAA;KACV;IACD,UAAU,iBAAiB;QACzB,uFAAuF;QACvF,wBAAwB,EAAE,eAAe,CAAA;KAC1C;IACD,UAAiB,cAAc;QAC7B,wDAAwD;QACxD,GAAG,CAAC,EAAE;YACJ,oFAAoF;YACpF,QAAQ,EAAE,MAAM,CAAA;SACjB,CAAA;KACF;CACF;AAED,YAAY,EACV,aAAa,EACb,qBAAqB,EACrB,sBAAsB,EACtB,cAAc,EACd,cAAc,EACd,eAAe,EACf,wBAAwB,GACzB,CAAA;AAED,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAClG,OAAO,EAAE,6BAA6B,EAAE,MAAM,qBAAqB,CAAA;AAEnE,eAAO,MAAM,SAAS,wDA0CpB,CAAA"}

package/dist/index.js

@@ -1,7 +1,10 @@
 import { definePlugin } from 'payload';
 import { mcpEndpoint } from './endpoint/index.js';
+import { oauthProtectedResourceEndpoint } from './endpoint/oauth.js';
+import { oauthServerEndpoints } from './endpoint/oauthServer.js';
 import { sanitizeMCPConfig } from './mcp/sanitizeMCPConfig.js';
 export { defineCollectionTool, defineGlobalTool, definePrompt, defineTool } from './defineTool.js';
+export { oauthProtectedResourceHandler } from './endpoint/oauth.js';
 export const mcpPlugin = definePlugin({
     slug: '@payloadcms/plugin-mcp',
     order: 10,
@@ -23,8 +26,10 @@ export const mcpPlugin = definePlugin({
             ...config,
             endpoints: [
                 ...config.endpoints ?? [],
-                // Payload prefixes /api, so the full path is /api/mcp.
+                // Payload prefixes /api, so the full path is /api/mcp. getAuthorizedMCP authenticates the
+                // request with dev auto-login turned off, so Payload doesn't authenticate it first.
                 {
+                    disableAuth: true,
                     handler: mcpEndpoint,
                     method: 'post',
                     path: '/mcp'
@@ -32,6 +37,7 @@ export const mcpPlugin = definePlugin({
                 // Streamable HTTP's optional server=>client GET stream. We don't offer
                 // one, so answer 405 per spec-— clients then skip it cleanly
                 {
+                    disableAuth: true,
                     handler: ()=>new Response(null, {
                             headers: {
                                 Allow: 'POST'
@@ -40,7 +46,14 @@ export const mcpPlugin = definePlugin({
                         }),
                     method: 'get',
                     path: '/mcp'
-                }
+                },
+                {
+                    disableAuth: true,
+                    handler: oauthProtectedResourceEndpoint,
+                    method: 'get',
+                    path: '/mcp/oauth-protected-resource'
+                },
+                ...oauthServerEndpoints
             ]
         };
     }

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import { definePlugin } from 'payload'\n\nimport type { AuthorizedMCP, MCPPluginConfig, SanitizedMCPPluginConfig } from './types.js'\n\nimport { mcpEndpoint } from './endpoint/index.js'\nimport { sanitizeMCPConfig } from './mcp/sanitizeMCPConfig.js'\n\ndeclare module 'payload' {\n  export interface PayloadRequestAPI {\n    MCP: true\n  }\n  interface RegisteredPlugins {\n    /** After the plugin's `plugin` callback runs, `options` holds the sanitized config. */\n    '@payloadcms/plugin-mcp': MCPPluginConfig\n  }\n}\n\nexport type { AuthorizedMCP, MCPPluginConfig, SanitizedMCPPluginConfig }\n\nexport { defineCollectionTool, defineGlobalTool, definePrompt, defineTool } from './defineTool.js'\n\nexport const mcpPlugin = definePlugin<MCPPluginConfig>({\n  slug: '@payloadcms/plugin-mcp',\n  order: 10,\n  plugin: ({ config, options, plugins }) => {\n    const pluginConfig = sanitizeMCPConfig({ config, pluginConfig: options })\n\n    // Stash the sanitized config on plugin options so `getPluginConfig()` reads it.\n    const registered = plugins['@payloadcms/plugin-mcp']\n    if (registered) {\n      // @ts-expect-error\n      registered.sanitizedOptions = pluginConfig as unknown as typeof registered.options\n    }\n\n    if (pluginConfig.disabled) {\n      return config\n    }\n\n    return {\n      ...config,\n      endpoints: [\n        ...(config.endpoints ?? []),\n        // Payload prefixes /api, so the full path is /api/mcp.\n        { handler: mcpEndpoint, method: 'post', path: '/mcp' },\n        // Streamable HTTP's optional server=>client GET stream. We don't offer\n        // one, so answer 405 per spec-— clients then skip it cleanly\n        {\n          handler: () => new Response(null, { headers: { Allow: 'POST' }, status: 405 }),\n          method: 'get',\n          path: '/mcp',\n        },\n      ],\n    }\n  },\n})\n"],"names":["definePlugin","mcpEndpoint","sanitizeMCPConfig","defineCollectionTool","defineGlobalTool","definePrompt","defineTool","mcpPlugin","slug","order","plugin","config","options","plugins","pluginConfig","registered","sanitizedOptions","disabled","endpoints","handler","method","path","Response","headers","Allow","status"],"mappings":"AAAA,SAASA,YAAY,QAAQ,UAAS;AAItC,SAASC,WAAW,QAAQ,sBAAqB;AACjD,SAASC,iBAAiB,QAAQ,6BAA4B;AAc9D,SAASC,oBAAoB,EAAEC,gBAAgB,EAAEC,YAAY,EAAEC,UAAU,QAAQ,kBAAiB;AAElG,OAAO,MAAMC,YAAYP,aAA8B;IACrDQ,MAAM;IACNC,OAAO;IACPC,QAAQ,CAAC,EAAEC,MAAM,EAAEC,OAAO,EAAEC,OAAO,EAAE;QACnC,MAAMC,eAAeZ,kBAAkB;YAAES;YAAQG,cAAcF;QAAQ;QAEvE,gFAAgF;QAChF,MAAMG,aAAaF,OAAO,CAAC,yBAAyB;QACpD,IAAIE,YAAY;YACd,mBAAmB;YACnBA,WAAWC,gBAAgB,GAAGF;QAChC;QAEA,IAAIA,aAAaG,QAAQ,EAAE;YACzB,OAAON;QACT;QAEA,OAAO;YACL,GAAGA,MAAM;YACTO,WAAW;mBACLP,OAAOO,SAAS,IAAI,EAAE;gBAC1B,uDAAuD;gBACvD;oBAAEC,SAASlB;oBAAamB,QAAQ;oBAAQC,MAAM;gBAAO;gBACrD,uEAAuE;gBACvE,6DAA6D;gBAC7D;oBACEF,SAAS,IAAM,IAAIG,SAAS,MAAM;4BAAEC,SAAS;gCAAEC,OAAO;4BAAO;4BAAGC,QAAQ;wBAAI;oBAC5EL,QAAQ;oBACRC,MAAM;gBACR;aACD;QACH;IACF;AACF,GAAE"}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import { definePlugin } from 'payload'\n\nimport type {\n  AuthorizedMCP,\n  MCPBuiltinOAuthConfig,\n  MCPExternalOAuthConfig,\n  MCPOAuthConfig,\n  MCPOAuthTokens,\n  MCPPluginConfig,\n  SanitizedMCPPluginConfig,\n} from './types.js'\n\nimport { mcpEndpoint } from './endpoint/index.js'\nimport { oauthProtectedResourceEndpoint } from './endpoint/oauth.js'\nimport { oauthServerEndpoints } from './endpoint/oauthServer.js'\nimport { sanitizeMCPConfig } from './mcp/sanitizeMCPConfig.js'\n\ndeclare module 'payload' {\n  export interface PayloadRequestAPI {\n    MCP: true\n  }\n  interface RegisteredPlugins {\n    /** After the plugin's `plugin` callback runs, `options` holds the sanitized config. */\n    '@payloadcms/plugin-mcp': MCPPluginConfig\n  }\n  export interface RequestContext {\n    /** Set on MCP requests before they're authenticated. */\n    mcp?: {\n      /** The MCP endpoint's address, which OAuth access tokens for MCP are issued for. */\n      resource: string\n    }\n  }\n}\n\nexport type {\n  AuthorizedMCP,\n  MCPBuiltinOAuthConfig,\n  MCPExternalOAuthConfig,\n  MCPOAuthConfig,\n  MCPOAuthTokens,\n  MCPPluginConfig,\n  SanitizedMCPPluginConfig,\n}\n\nexport { defineCollectionTool, defineGlobalTool, definePrompt, defineTool } from './defineTool.js'\nexport { oauthProtectedResourceHandler } from './endpoint/oauth.js'\n\nexport const mcpPlugin = definePlugin<MCPPluginConfig>({\n  slug: '@payloadcms/plugin-mcp',\n  order: 10,\n  plugin: ({ config, options, plugins }) => {\n    const pluginConfig = sanitizeMCPConfig({ config, pluginConfig: options })\n\n    // Stash the sanitized config on plugin options so `getPluginConfig()` reads it.\n    const registered = plugins['@payloadcms/plugin-mcp']\n    if (registered) {\n      // @ts-expect-error\n      registered.sanitizedOptions = pluginConfig\n    }\n\n    if (pluginConfig.disabled) {\n      return config\n    }\n\n    return {\n      ...config,\n      endpoints: [\n        ...(config.endpoints ?? []),\n        // Payload prefixes /api, so the full path is /api/mcp. getAuthorizedMCP authenticates the\n        // request with dev auto-login turned off, so Payload doesn't authenticate it first.\n        { disableAuth: true, handler: mcpEndpoint, method: 'post', path: '/mcp' },\n        // Streamable HTTP's optional server=>client GET stream. We don't offer\n        // one, so answer 405 per spec-— clients then skip it cleanly\n        {\n          disableAuth: true,\n          handler: () => new Response(null, { headers: { Allow: 'POST' }, status: 405 }),\n          method: 'get',\n          path: '/mcp',\n        },\n        {\n          disableAuth: true,\n          handler: oauthProtectedResourceEndpoint,\n          method: 'get',\n          path: '/mcp/oauth-protected-resource',\n        },\n        ...oauthServerEndpoints,\n      ],\n    }\n  },\n})\n"],"names":["definePlugin","mcpEndpoint","oauthProtectedResourceEndpoint","oauthServerEndpoints","sanitizeMCPConfig","defineCollectionTool","defineGlobalTool","definePrompt","defineTool","oauthProtectedResourceHandler","mcpPlugin","slug","order","plugin","config","options","plugins","pluginConfig","registered","sanitizedOptions","disabled","endpoints","disableAuth","handler","method","path","Response","headers","Allow","status"],"mappings":"AAAA,SAASA,YAAY,QAAQ,UAAS;AAYtC,SAASC,WAAW,QAAQ,sBAAqB;AACjD,SAASC,8BAA8B,QAAQ,sBAAqB;AACpE,SAASC,oBAAoB,QAAQ,4BAA2B;AAChE,SAASC,iBAAiB,QAAQ,6BAA4B;AA6B9D,SAASC,oBAAoB,EAAEC,gBAAgB,EAAEC,YAAY,EAAEC,UAAU,QAAQ,kBAAiB;AAClG,SAASC,6BAA6B,QAAQ,sBAAqB;AAEnE,OAAO,MAAMC,YAAYV,aAA8B;IACrDW,MAAM;IACNC,OAAO;IACPC,QAAQ,CAAC,EAAEC,MAAM,EAAEC,OAAO,EAAEC,OAAO,EAAE;QACnC,MAAMC,eAAeb,kBAAkB;YAAEU;YAAQG,cAAcF;QAAQ;QAEvE,gFAAgF;QAChF,MAAMG,aAAaF,OAAO,CAAC,yBAAyB;QACpD,IAAIE,YAAY;YACd,mBAAmB;YACnBA,WAAWC,gBAAgB,GAAGF;QAChC;QAEA,IAAIA,aAAaG,QAAQ,EAAE;YACzB,OAAON;QACT;QAEA,OAAO;YACL,GAAGA,MAAM;YACTO,WAAW;mBACLP,OAAOO,SAAS,IAAI,EAAE;gBAC1B,0FAA0F;gBAC1F,oFAAoF;gBACpF;oBAAEC,aAAa;oBAAMC,SAAStB;oBAAauB,QAAQ;oBAAQC,MAAM;gBAAO;gBACxE,uEAAuE;gBACvE,6DAA6D;gBAC7D;oBACEH,aAAa;oBACbC,SAAS,IAAM,IAAIG,SAAS,MAAM;4BAAEC,SAAS;gCAAEC,OAAO;4BAAO;4BAAGC,QAAQ;wBAAI;oBAC5EL,QAAQ;oBACRC,MAAM;gBACR;gBACA;oBACEH,aAAa;oBACbC,SAASrB;oBACTsB,QAAQ;oBACRC,MAAM;gBACR;mBACGtB;aACJ;QACH;IACF;AACF,GAAE"}

package/dist/mcp/buildMcpServer.d.ts

@@ -1,5 +1,5 @@
+import type { PayloadRequest } from 'payload';
 import { McpServer } from '@modelcontextprotocol/server';
-import { type PayloadRequest } from 'payload';
 import type { AuthorizedMCP, SanitizedMCPPluginConfig } from '../types.js';
 /**
  * Serving-entry-agnostic core: registers every authorized MCP item onto a fresh
@@ -9,7 +9,7 @@ import type { AuthorizedMCP, SanitizedMCPPluginConfig } from '../types.js';
  *
  * `req` is the request context handlers see. For HTTP it's the live
  * `PayloadRequest` derived from the incoming HTTP request; for stdio it's a
- * synthesized one built via `createLocalReq`.
+ * synthesized one built via `createPayloadRequest`.
  */
 export declare const buildMcpServer: ({ authorizedMCP, pluginConfig, req, }: {
     authorizedMCP: AuthorizedMCP;

package/dist/mcp/buildMcpServer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"buildMcpServer.d.ts","sourceRoot":"","sources":["../../src/mcp/buildMcpServer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAsB,MAAM,8BAA8B,CAAA;AAC5E,OAAO,EAAY,KAAK,cAAc,EAAE,MAAM,SAAS,CAAA;AAGvD,OAAO,KAAK,EACV,aAAa,EAMb,wBAAwB,EAEzB,MAAM,aAAa,CAAA;AAKpB;;;;;;;;;GASG;AACH,eAAO,MAAM,cAAc,0CAIxB;IACD,aAAa,EAAE,aAAa,CAAA;IAC5B,YAAY,EAAE,wBAAwB,CAAA;IACtC,GAAG,EAAE,cAAc,CAAA;CACpB,KAAG,SAkNH,CAAA"}
+{"version":3,"file":"buildMcpServer.d.ts","sourceRoot":"","sources":["../../src/mcp/buildMcpServer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAE7C,OAAO,EAAE,SAAS,EAAsB,MAAM,8BAA8B,CAAA;AAG5E,OAAO,KAAK,EACV,aAAa,EAMb,wBAAwB,EAEzB,MAAM,aAAa,CAAA;AAKpB;;;;;;;;;GASG;AACH,eAAO,MAAM,cAAc,0CAIxB;IACD,aAAa,EAAE,aAAa,CAAA;IAC5B,YAAY,EAAE,wBAAwB,CAAA;IACtC,GAAG,EAAE,cAAc,CAAA;CACpB,KAAG,SAgNH,CAAA"}

package/dist/mcp/buildMcpServer.js

@@ -1,6 +1,5 @@
 import { McpServer } from '@modelcontextprotocol/server';
-import { APIError } from 'payload';
-import { z } from 'zod';
+import { APIError, strictObject, z } from 'payload';
 import { getLogger } from '../utils/getLogger.js';
 import { toStandardSchema } from '../utils/toStandardSchema.js';
 /**
@@ -11,8 +10,9 @@ import { toStandardSchema } from '../utils/toStandardSchema.js';
  *
  * `req` is the request context handlers see. For HTTP it's the live
  * `PayloadRequest` derived from the incoming HTTP request; for stdio it's a
- * synthesized one built via `createLocalReq`.
+ * synthesized one built via `createPayloadRequest`.
  */ export const buildMcpServer = ({ authorizedMCP, pluginConfig, req })=>{
+    z.config(z.locales.en());
     const serverOptions = pluginConfig.mcp?.serverOptions || {};
     const server = new McpServer({
         name: 'Payload MCP Server',
@@ -40,20 +40,19 @@ import { toStandardSchema } from '../utils/toStandardSchema.js';
     };
     /**
    * Runs a collection/global tool call:
-   * - reads `collectionSlug` / `globalSlug` from the input
+   * - reads `slug` from the input
    * - runs access control: errors if `authorizedMCP.items` has no entry for this tool + slug
    * - runs the tool handler and finalizes its response
    */ const callEntityTool = async ({ input, item, serverContext })=>{
         const entity = item.type === 'collectionTool' ? 'collection' : 'global';
-        const slugKey = item.type === 'collectionTool' ? 'collectionSlug' : 'globalSlug';
         const toolInput = input ?? {};
-        const slug = toolInput[slugKey];
+        const slug = toolInput.slug;
         if (!slug) {
             return {
                 content: [
                     {
                         type: 'text',
-                        text: `Error: "${item.mcpName}" requires ${slugKey}. Use getConfigInfo to inspect ${entity} slugs.`
+                        text: `Error: "${item.mcpName}" requires slug. Use getConfigInfo to inspect ${entity} slugs.`
                     }
                 ],
                 isError: true
@@ -79,10 +78,10 @@ import { toStandardSchema } from '../utils/toStandardSchema.js';
         };
         const response = await (match.type === 'collectionTool' ? match.tool.handler({
             ...handlerArgs,
-            collectionSlug: slug
+            slug
         }) : match.tool.handler({
             ...handlerArgs,
-            globalSlug: slug
+            slug
         }));
         return finalizeToolResponse({
             input: toolInput,
@@ -103,7 +102,6 @@ import { toStandardSchema } from '../utils/toStandardSchema.js';
                         }
                         registeredEntityTools.add(item.mcpName);
                         const inputSchema = withSlugInput({
-                            name: item.type === 'collectionTool' ? 'collectionSlug' : 'globalSlug',
                             input: item.tool.input
                         });
                         server.registerTool(item.mcpName, {
@@ -189,33 +187,47 @@ import { toStandardSchema } from '../utils/toStandardSchema.js';
     }
     return server;
 };
-const withSlugInput = ({ name, input })=>{
-    const description = name === 'collectionSlug' ? 'The collection slug' : 'The global slug';
-    const slugSchema = z.string().describe(description);
+const withSlugInput = ({ input })=>{
+    const description = 'The target slug.';
+    const slugSchema = z.string().check(z.describe(description));
     if (!input) {
-        return z.object({
-            [name]: slugSchema
+        return strictObject({
+            slug: slugSchema
         });
     }
-    if (input instanceof z.ZodObject) {
-        return input.extend({
-            [name]: slugSchema
+    if (typeof input === 'object' && input !== null && '~standard' in input) {
+        const schema = input['~standard'].jsonSchema.input({
+            target: 'draft-2020-12'
+        });
+        const properties = schema.properties;
+        if (properties?.slug) {
+            return input;
+        }
+        return addSlugToJSONSchema({
+            description,
+            schema
         });
     }
-    const schema = input;
+    return addSlugToJSONSchema({
+        description,
+        schema: input
+    });
+};
+const addSlugToJSONSchema = ({ description, schema })=>{
+    const objectSchema = schema;
     return {
-        ...schema,
+        ...objectSchema,
         type: 'object',
         properties: {
-            ...schema.properties,
-            [name]: {
+            ...objectSchema.properties,
+            slug: {
                 type: 'string',
                 description
             }
         },
         required: Array.from(new Set([
-            name,
-            ...schema.required ?? []
+            'slug',
+            ...objectSchema.required ?? []
         ]))
     };
 };