@payloadcms/plugin-mcp 4.0.0-internal.1f9ae9a → 4.0.0-internal.2fddfc0

package/dist/mcp/buildMcpServer.js

@@ -1,14 +1,8 @@
 import { McpServer } from '@modelcontextprotocol/server';
-import { APIError, configToJSONSchema } from 'payload';
-import { toCamelCase } from '../utils/camelCase.js';
+import { APIError } from 'payload';
+import { z } from 'zod';
 import { getLogger } from '../utils/getLogger.js';
-import { getCollectionVirtualFieldNames, getGlobalVirtualFieldNames } from '../utils/getVirtualFieldNames.js';
-import { removeVirtualFieldsFromSchema } from '../utils/schemaConversion/removeVirtualFieldsFromSchema.js';
 import { toStandardSchema } from '../utils/toStandardSchema.js';
-/** `findPosts`, `updateSiteSettings` — auto-prefixed wire name for collection/global tools. */ const wireName = (key, slug)=>{
-    const camel = toCamelCase(slug);
-    return `${key}${camel.charAt(0).toUpperCase()}${camel.slice(1)}`;
-};
 /**
  * Transport-agnostic core: registers every authorized MCP item onto a fresh
  * `McpServer` and returns it. The caller is responsible for picking a transport
@@ -36,72 +30,85 @@ import { toStandardSchema } from '../utils/toStandardSchema.js';
         const { doc: _doc, ...rest } = overridden;
         return rest;
     };
-    const configSchema = configToJSONSchema(req.payload.config, req.payload.db.defaultIDType, req.i18n, {
-        forceInlineBlocks: true
-    });
+    /**
+   * Runs a collection/global tool call:
+   * - reads `collectionSlug` / `globalSlug` from the input
+   * - runs access control: errors if `authorizedMCP.items` has no entry for this tool + slug
+   * - runs the tool handler and finalizes its response
+   */ const callEntityTool = async ({ input, item, serverContext })=>{
+        const entity = item.type === 'collectionTool' ? 'collection' : 'global';
+        const slugKey = item.type === 'collectionTool' ? 'collectionSlug' : 'globalSlug';
+        const toolInput = input ?? {};
+        const slug = toolInput[slugKey];
+        if (!slug) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: `Error: "${item.mcpName}" requires ${slugKey}. Use getConfigInfo to inspect ${entity} slugs.`
+                    }
+                ],
+                isError: true
+            };
+        }
+        const match = authorizedMCP.items.find((candidate)=>candidate.type === item.type && candidate.mcpName === item.mcpName && (candidate.type === 'collectionTool' ? candidate.collectionSlug === slug : candidate.type === 'globalTool' && candidate.globalSlug === slug));
+        if (!match) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: `Error: MCP access to "${item.mcpName}" is not enabled for ${entity} "${slug}"`
+                    }
+                ],
+                isError: true
+            };
+        }
+        const handlerArgs = {
+            authorizedMCP,
+            input: toolInput,
+            req,
+            serverContext
+        };
+        const response = await (match.type === 'collectionTool' ? match.tool.handler({
+            ...handlerArgs,
+            collectionSlug: slug
+        }) : match.tool.handler({
+            ...handlerArgs,
+            globalSlug: slug
+        }));
+        return finalizeToolResponse(response, match.tool.overrideResponse);
+    };
     try {
+        const registeredEntityTools = new Set();
         for (const item of authorizedMCP.items){
             switch(item.type){
                 case 'collectionTool':
-                    {
-                        const tool = item.tool;
-                        const name = wireName(item.key, item.collectionSlug);
-                        let inputSchema = tool.input;
-                        if (typeof inputSchema === 'function') {
-                            const raw = configSchema.definitions?.[item.collectionSlug];
-                            if (!raw) {
-                                throw new APIError(`Collection schema not found for slug: ${item.collectionSlug}`, 500);
-                            }
-                            const collectionSchema = removeVirtualFieldsFromSchema(JSON.parse(JSON.stringify(raw)), getCollectionVirtualFieldNames(req.payload.config, item.collectionSlug));
-                            inputSchema = inputSchema({
-                                collectionSchema
-                            });
-                        }
-                        server.registerTool(name, {
-                            description: tool.description,
-                            inputSchema: inputSchema ? toStandardSchema(inputSchema) : undefined
-                        }, async (input, ctx)=>finalizeToolResponse(await tool.handler({
-                                authorizedMCP,
-                                collectionSlug: item.collectionSlug,
-                                input: input ?? {},
-                                req,
-                                serverContext: ctx
-                            }), tool.overrideResponse));
-                        logger.info(`✅ Tool: ${name} Registered.`);
-                        break;
-                    }
                 case 'globalTool':
                     {
-                        const tool = item.tool;
-                        const name = wireName(item.key, item.globalSlug);
-                        let inputSchema = tool.input;
-                        if (typeof inputSchema === 'function') {
-                            const raw = configSchema.definitions?.[item.globalSlug];
-                            if (!raw) {
-                                throw new APIError(`Global schema not found for slug: ${item.globalSlug}`, 500);
-                            }
-                            const globalSchema = removeVirtualFieldsFromSchema(JSON.parse(JSON.stringify(raw)), getGlobalVirtualFieldNames(req.payload.config, item.globalSlug));
-                            inputSchema = inputSchema({
-                                globalSchema
-                            });
+                        if (registeredEntityTools.has(item.mcpName)) {
+                            break;
                         }
-                        server.registerTool(name, {
-                            description: tool.description,
-                            inputSchema: inputSchema ? toStandardSchema(inputSchema) : undefined
-                        }, async (input, ctx)=>finalizeToolResponse(await tool.handler({
-                                authorizedMCP,
-                                globalSlug: item.globalSlug,
-                                input: input ?? {},
-                                req,
+                        registeredEntityTools.add(item.mcpName);
+                        const inputSchema = withSlugInput({
+                            name: item.type === 'collectionTool' ? 'collectionSlug' : 'globalSlug',
+                            input: item.tool.input
+                        });
+                        server.registerTool(item.mcpName, {
+                            annotations: item.tool.annotations,
+                            description: item.tool.description,
+                            inputSchema: toStandardSchema(inputSchema)
+                        }, async (input, ctx)=>callEntityTool({
+                                input,
+                                item,
                                 serverContext: ctx
-                            }), tool.overrideResponse));
-                        logger.info(`✅ Tool: ${name} Registered.`);
+                            }));
+                        logger.info(`✅ Tool: ${item.mcpName} Registered.`);
                         break;
                     }
                 case 'prompt':
                     {
                         const prompt = item.prompt;
-                        server.registerPrompt(item.key, {
+                        server.registerPrompt(item.mcpName, {
                             argsSchema: prompt.argsSchema ? toStandardSchema(prompt.argsSchema) : undefined,
                             description: prompt.description,
                             title: prompt.title
@@ -116,7 +123,7 @@ import { toStandardSchema } from '../utils/toStandardSchema.js';
                 case 'resource':
                     {
                         const resource = item.resource;
-                        server.registerResource(item.key, // @ts-expect-error - Overload type ambiguity (string OR ResourceTemplate is valid)
+                        server.registerResource(item.mcpName, // @ts-expect-error - Overload type ambiguity (string OR ResourceTemplate is valid)
                         resource.uri, {
                             description: resource.description,
                             mimeType: resource.mimeType,
@@ -140,7 +147,8 @@ import { toStandardSchema } from '../utils/toStandardSchema.js';
                 case 'tool':
                     {
                         const tool = item.tool;
-                        server.registerTool(item.key, {
+                        server.registerTool(item.mcpName, {
+                            annotations: tool.annotations,
                             description: tool.description,
                             inputSchema: tool.input ? toStandardSchema(tool.input) : undefined
                         }, async (input, ctx)=>finalizeToolResponse(await tool.handler({
@@ -149,7 +157,7 @@ import { toStandardSchema } from '../utils/toStandardSchema.js';
                                 req,
                                 serverContext: ctx
                             }), tool.overrideResponse));
-                        logger.info(`✅ Tool: ${item.key} Registered.`);
+                        logger.info(`✅ Tool: ${item.mcpName} Registered.`);
                         break;
                     }
             }
@@ -159,5 +167,35 @@ import { toStandardSchema } from '../utils/toStandardSchema.js';
     }
     return server;
 };
+const withSlugInput = ({ name, input })=>{
+    const description = name === 'collectionSlug' ? 'The collection slug' : 'The global slug';
+    const slugSchema = z.string().describe(description);
+    if (!input) {
+        return z.object({
+            [name]: slugSchema
+        });
+    }
+    if (input instanceof z.ZodObject) {
+        return input.extend({
+            [name]: slugSchema
+        });
+    }
+    const schema = input;
+    return {
+        ...schema,
+        type: 'object',
+        properties: {
+            ...schema.properties,
+            [name]: {
+                type: 'string',
+                description
+            }
+        },
+        required: Array.from(new Set([
+            name,
+            ...schema.required ?? []
+        ]))
+    };
+};
 
 //# sourceMappingURL=buildMcpServer.js.map

package/dist/mcp/buildMcpServer.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/mcp/buildMcpServer.ts"],"sourcesContent":["import { McpServer, type ServerContext } from '@modelcontextprotocol/server'\nimport { APIError, configToJSONSchema, type PayloadRequest } from 'payload'\n\nimport type {\n  AuthorizedMCP,\n  JsonSchemaType,\n  MCPResponseOverride,\n  MCPToolResponse,\n  SanitizedMCPPluginConfig,\n} from '../types.js'\n\nimport { toCamelCase } from '../utils/camelCase.js'\nimport { getLogger } from '../utils/getLogger.js'\nimport {\n  getCollectionVirtualFieldNames,\n  getGlobalVirtualFieldNames,\n} from '../utils/getVirtualFieldNames.js'\nimport { removeVirtualFieldsFromSchema } from '../utils/schemaConversion/removeVirtualFieldsFromSchema.js'\nimport { toStandardSchema } from '../utils/toStandardSchema.js'\n\n/** `findPosts`, `updateSiteSettings` — auto-prefixed wire name for collection/global tools. */\nconst wireName = (key: string, slug: string): string => {\n  const camel = toCamelCase(slug)\n  return `${key}${camel.charAt(0).toUpperCase()}${camel.slice(1)}`\n}\n\n/**\n * Transport-agnostic core: registers every authorized MCP item onto a fresh\n * `McpServer` and returns it. The caller is responsible for picking a transport\n * (`WebStandardStreamableHTTPServerTransport`, `StdioServerTransport`, …) and\n * calling `server.connect(transport)`.\n *\n * `req` is the request context handlers see. For HTTP it's the live\n * `PayloadRequest` derived from the incoming HTTP request; for stdio it's a\n * synthesized one built via `createLocalReq`.\n */\nexport const buildMcpServer = ({\n  authorizedMCP,\n  pluginConfig,\n  req,\n}: {\n  authorizedMCP: AuthorizedMCP\n  pluginConfig: SanitizedMCPPluginConfig\n  req: PayloadRequest\n}): McpServer => {\n  const serverOptions = pluginConfig.mcp?.serverOptions || {}\n  const server = new McpServer(\n    { name: 'Payload MCP Server', version: '1.0.0', ...serverOptions.serverInfo },\n    serverOptions.options,\n  )\n\n  const logger = getLogger({ payload: req.payload })\n\n  /**\n   * Wrap a tool handler's response with the tool's `overrideResponse`, then\n   * strip the internal `doc` field so it doesn't leak onto the wire.\n   */\n  const finalizeToolResponse = (\n    response: MCPToolResponse,\n    overrideResponse?: MCPResponseOverride,\n  ): MCPToolResponse => {\n    const overridden = overrideResponse?.(response, response.doc ?? {}, req) ?? response\n    const { doc: _doc, ...rest } = overridden\n    return rest\n  }\n\n  const configSchema = configToJSONSchema(\n    req.payload.config,\n    req.payload.db.defaultIDType,\n    req.i18n,\n    { forceInlineBlocks: true },\n  ) as JsonSchemaType\n\n  try {\n    for (const item of authorizedMCP.items) {\n      switch (item.type) {\n        case 'collectionTool': {\n          const tool = item.tool\n          const name = wireName(item.key, item.collectionSlug)\n          let inputSchema = tool.input\n          if (typeof inputSchema === 'function') {\n            const raw = configSchema.definitions?.[item.collectionSlug]\n            if (!raw) {\n              throw new APIError(\n                `Collection schema not found for slug: ${item.collectionSlug}`,\n                500,\n              )\n            }\n            const collectionSchema = removeVirtualFieldsFromSchema(\n              JSON.parse(JSON.stringify(raw)) as JsonSchemaType,\n              getCollectionVirtualFieldNames(req.payload.config, item.collectionSlug),\n            )\n            inputSchema = inputSchema({ collectionSchema })\n          }\n          server.registerTool(\n            name,\n            {\n              description: tool.description,\n              inputSchema: inputSchema ? toStandardSchema(inputSchema) : undefined,\n            },\n            async (input: unknown, ctx: ServerContext) =>\n              finalizeToolResponse(\n                await tool.handler({\n                  authorizedMCP,\n                  collectionSlug: item.collectionSlug,\n                  input: (input ?? {}) as Record<string, unknown>,\n                  req,\n                  serverContext: ctx,\n                }),\n                tool.overrideResponse,\n              ),\n          )\n          logger.info(`✅ Tool: ${name} Registered.`)\n          break\n        }\n        case 'globalTool': {\n          const tool = item.tool\n          const name = wireName(item.key, item.globalSlug)\n          let inputSchema = tool.input\n          if (typeof inputSchema === 'function') {\n            const raw = configSchema.definitions?.[item.globalSlug]\n            if (!raw) {\n              throw new APIError(`Global schema not found for slug: ${item.globalSlug}`, 500)\n            }\n            const globalSchema = removeVirtualFieldsFromSchema(\n              JSON.parse(JSON.stringify(raw)) as JsonSchemaType,\n              getGlobalVirtualFieldNames(req.payload.config, item.globalSlug),\n            )\n\n            inputSchema = inputSchema({ globalSchema })\n          }\n          server.registerTool(\n            name,\n            {\n              description: tool.description,\n              inputSchema: inputSchema ? toStandardSchema(inputSchema) : undefined,\n            },\n            async (input: unknown, ctx: ServerContext) =>\n              finalizeToolResponse(\n                await tool.handler({\n                  authorizedMCP,\n                  globalSlug: item.globalSlug,\n                  input: (input ?? {}) as Record<string, unknown>,\n                  req,\n                  serverContext: ctx,\n                }),\n                tool.overrideResponse,\n              ),\n          )\n          logger.info(`✅ Tool: ${name} Registered.`)\n          break\n        }\n        case 'prompt': {\n          const prompt = item.prompt\n          server.registerPrompt(\n            item.key,\n            {\n              argsSchema: prompt.argsSchema ? toStandardSchema(prompt.argsSchema) : undefined,\n              description: prompt.description,\n              title: prompt.title,\n            },\n            async (input: unknown, ctx: ServerContext) =>\n              prompt.handler({\n                input: (input ?? {}) as Record<string, unknown>,\n                req,\n                serverContext: ctx,\n              }),\n          )\n          logger.info(`✅ Prompt: ${prompt.title} Registered.`)\n          break\n        }\n        case 'resource': {\n          const resource = item.resource\n          server.registerResource(\n            item.key,\n            // @ts-expect-error - Overload type ambiguity (string OR ResourceTemplate is valid)\n            resource.uri,\n            {\n              description: resource.description,\n              mimeType: resource.mimeType,\n              title: resource.title,\n            },\n            // Static URIs call (uri, ctx); ResourceTemplates call (uri, params, ctx).\n            // The rest-params shape lets us collect either signature uniformly.\n            async (...sdkArgs: unknown[]) => {\n              const ctx = sdkArgs[sdkArgs.length - 1] as ServerContext\n              const uri = sdkArgs[0] as URL\n              const params = (sdkArgs.length > 2 ? sdkArgs[1] : {}) as Record<string, string>\n              return resource.handler({ params, req, serverContext: ctx, uri })\n            },\n          )\n          logger.info(`✅ Resource: ${resource.title} Registered.`)\n          break\n        }\n        case 'tool': {\n          const tool = item.tool\n          server.registerTool(\n            item.key,\n            {\n              description: tool.description,\n              inputSchema: tool.input ? toStandardSchema(tool.input) : undefined,\n            },\n            async (input: unknown, ctx: ServerContext) =>\n              finalizeToolResponse(\n                await tool.handler({\n                  authorizedMCP,\n                  input: (input ?? {}) as Record<string, unknown>,\n                  req,\n                  serverContext: ctx,\n                }),\n                tool.overrideResponse,\n              ),\n          )\n          logger.info(`✅ Tool: ${item.key} Registered.`)\n          break\n        }\n      }\n    }\n  } catch (error) {\n    throw new APIError(`Error initializing MCP handler: ${String(error)}`, 500)\n  }\n\n  return server\n}\n"],"names":["McpServer","APIError","configToJSONSchema","toCamelCase","getLogger","getCollectionVirtualFieldNames","getGlobalVirtualFieldNames","removeVirtualFieldsFromSchema","toStandardSchema","wireName","key","slug","camel","charAt","toUpperCase","slice","buildMcpServer","authorizedMCP","pluginConfig","req","serverOptions","mcp","server","name","version","serverInfo","options","logger","payload","finalizeToolResponse","response","overrideResponse","overridden","doc","_doc","rest","configSchema","config","db","defaultIDType","i18n","forceInlineBlocks","item","items","type","tool","collectionSlug","inputSchema","input","raw","definitions","collectionSchema","JSON","parse","stringify","registerTool","description","undefined","ctx","handler","serverContext","info","globalSlug","globalSchema","prompt","registerPrompt","argsSchema","title","resource","registerResource","uri","mimeType","sdkArgs","length","params","error","String"],"mappings":"AAAA,SAASA,SAAS,QAA4B,+BAA8B;AAC5E,SAASC,QAAQ,EAAEC,kBAAkB,QAA6B,UAAS;AAU3E,SAASC,WAAW,QAAQ,wBAAuB;AACnD,SAASC,SAAS,QAAQ,wBAAuB;AACjD,SACEC,8BAA8B,EAC9BC,0BAA0B,QACrB,mCAAkC;AACzC,SAASC,6BAA6B,QAAQ,6DAA4D;AAC1G,SAASC,gBAAgB,QAAQ,+BAA8B;AAE/D,6FAA6F,GAC7F,MAAMC,WAAW,CAACC,KAAaC;IAC7B,MAAMC,QAAQT,YAAYQ;IAC1B,OAAO,GAAGD,MAAME,MAAMC,MAAM,CAAC,GAAGC,WAAW,KAAKF,MAAMG,KAAK,CAAC,IAAI;AAClE;AAEA;;;;;;;;;CASC,GACD,OAAO,MAAMC,iBAAiB,CAAC,EAC7BC,aAAa,EACbC,YAAY,EACZC,GAAG,EAKJ;IACC,MAAMC,gBAAgBF,aAAaG,GAAG,EAAED,iBAAiB,CAAC;IAC1D,MAAME,SAAS,IAAItB,UACjB;QAAEuB,MAAM;QAAsBC,SAAS;QAAS,GAAGJ,cAAcK,UAAU;IAAC,GAC5EL,cAAcM,OAAO;IAGvB,MAAMC,SAASvB,UAAU;QAAEwB,SAAST,IAAIS,OAAO;IAAC;IAEhD;;;GAGC,GACD,MAAMC,uBAAuB,CAC3BC,UACAC;QAEA,MAAMC,aAAaD,mBAAmBD,UAAUA,SAASG,GAAG,IAAI,CAAC,GAAGd,QAAQW;QAC5E,MAAM,EAAEG,KAAKC,IAAI,EAAE,GAAGC,MAAM,GAAGH;QAC/B,OAAOG;IACT;IAEA,MAAMC,eAAelC,mBACnBiB,IAAIS,OAAO,CAACS,MAAM,EAClBlB,IAAIS,OAAO,CAACU,EAAE,CAACC,aAAa,EAC5BpB,IAAIqB,IAAI,EACR;QAAEC,mBAAmB;IAAK;IAG5B,IAAI;QACF,KAAK,MAAMC,QAAQzB,cAAc0B,KAAK,CAAE;YACtC,OAAQD,KAAKE,IAAI;gBACf,KAAK;oBAAkB;wBACrB,MAAMC,OAAOH,KAAKG,IAAI;wBACtB,MAAMtB,OAAOd,SAASiC,KAAKhC,GAAG,EAAEgC,KAAKI,cAAc;wBACnD,IAAIC,cAAcF,KAAKG,KAAK;wBAC5B,IAAI,OAAOD,gBAAgB,YAAY;4BACrC,MAAME,MAAMb,aAAac,WAAW,EAAE,CAACR,KAAKI,cAAc,CAAC;4BAC3D,IAAI,CAACG,KAAK;gCACR,MAAM,IAAIhD,SACR,CAAC,sCAAsC,EAAEyC,KAAKI,cAAc,EAAE,EAC9D;4BAEJ;4BACA,MAAMK,mBAAmB5C,8BACvB6C,KAAKC,KAAK,CAACD,KAAKE,SAAS,CAACL,OAC1B5C,+BAA+Bc,IAAIS,OAAO,CAACS,MAAM,EAAEK,KAAKI,cAAc;4BAExEC,cAAcA,YAAY;gCAAEI;4BAAiB;wBAC/C;wBACA7B,OAAOiC,YAAY,CACjBhC,MACA;4BACEiC,aAAaX,KAAKW,WAAW;4BAC7BT,aAAaA,cAAcvC,iBAAiBuC,eAAeU;wBAC7D,GACA,OAAOT,OAAgBU,MACrB7B,qBACE,MAAMgB,KAAKc,OAAO,CAAC;gCACjB1C;gCACA6B,gBAAgBJ,KAAKI,cAAc;gCACnCE,OAAQA,SAAS,CAAC;gCAClB7B;gCACAyC,eAAeF;4BACjB,IACAb,KAAKd,gBAAgB;wBAG3BJ,OAAOkC,IAAI,CAAC,CAAC,QAAQ,EAAEtC,KAAK,YAAY,CAAC;wBACzC;oBACF;gBACA,KAAK;oBAAc;wBACjB,MAAMsB,OAAOH,KAAKG,IAAI;wBACtB,MAAMtB,OAAOd,SAASiC,KAAKhC,GAAG,EAAEgC,KAAKoB,UAAU;wBAC/C,IAAIf,cAAcF,KAAKG,KAAK;wBAC5B,IAAI,OAAOD,gBAAgB,YAAY;4BACrC,MAAME,MAAMb,aAAac,WAAW,EAAE,CAACR,KAAKoB,UAAU,CAAC;4BACvD,IAAI,CAACb,KAAK;gCACR,MAAM,IAAIhD,SAAS,CAAC,kCAAkC,EAAEyC,KAAKoB,UAAU,EAAE,EAAE;4BAC7E;4BACA,MAAMC,eAAexD,8BACnB6C,KAAKC,KAAK,CAACD,KAAKE,SAAS,CAACL,OAC1B3C,2BAA2Ba,IAAIS,OAAO,CAACS,MAAM,EAAEK,KAAKoB,UAAU;4BAGhEf,cAAcA,YAAY;gCAAEgB;4BAAa;wBAC3C;wBACAzC,OAAOiC,YAAY,CACjBhC,MACA;4BACEiC,aAAaX,KAAKW,WAAW;4BAC7BT,aAAaA,cAAcvC,iBAAiBuC,eAAeU;wBAC7D,GACA,OAAOT,OAAgBU,MACrB7B,qBACE,MAAMgB,KAAKc,OAAO,CAAC;gCACjB1C;gCACA6C,YAAYpB,KAAKoB,UAAU;gCAC3Bd,OAAQA,SAAS,CAAC;gCAClB7B;gCACAyC,eAAeF;4BACjB,IACAb,KAAKd,gBAAgB;wBAG3BJ,OAAOkC,IAAI,CAAC,CAAC,QAAQ,EAAEtC,KAAK,YAAY,CAAC;wBACzC;oBACF;gBACA,KAAK;oBAAU;wBACb,MAAMyC,SAAStB,KAAKsB,MAAM;wBAC1B1C,OAAO2C,cAAc,CACnBvB,KAAKhC,GAAG,EACR;4BACEwD,YAAYF,OAAOE,UAAU,GAAG1D,iBAAiBwD,OAAOE,UAAU,IAAIT;4BACtED,aAAaQ,OAAOR,WAAW;4BAC/BW,OAAOH,OAAOG,KAAK;wBACrB,GACA,OAAOnB,OAAgBU,MACrBM,OAAOL,OAAO,CAAC;gCACbX,OAAQA,SAAS,CAAC;gCAClB7B;gCACAyC,eAAeF;4BACjB;wBAEJ/B,OAAOkC,IAAI,CAAC,CAAC,UAAU,EAAEG,OAAOG,KAAK,CAAC,YAAY,CAAC;wBACnD;oBACF;gBACA,KAAK;oBAAY;wBACf,MAAMC,WAAW1B,KAAK0B,QAAQ;wBAC9B9C,OAAO+C,gBAAgB,CACrB3B,KAAKhC,GAAG,EACR,mFAAmF;wBACnF0D,SAASE,GAAG,EACZ;4BACEd,aAAaY,SAASZ,WAAW;4BACjCe,UAAUH,SAASG,QAAQ;4BAC3BJ,OAAOC,SAASD,KAAK;wBACvB,GACA,0EAA0E;wBAC1E,oEAAoE;wBACpE,OAAO,GAAGK;4BACR,MAAMd,MAAMc,OAAO,CAACA,QAAQC,MAAM,GAAG,EAAE;4BACvC,MAAMH,MAAME,OAAO,CAAC,EAAE;4BACtB,MAAME,SAAUF,QAAQC,MAAM,GAAG,IAAID,OAAO,CAAC,EAAE,GAAG,CAAC;4BACnD,OAAOJ,SAAST,OAAO,CAAC;gCAAEe;gCAAQvD;gCAAKyC,eAAeF;gCAAKY;4BAAI;wBACjE;wBAEF3C,OAAOkC,IAAI,CAAC,CAAC,YAAY,EAAEO,SAASD,KAAK,CAAC,YAAY,CAAC;wBACvD;oBACF;gBACA,KAAK;oBAAQ;wBACX,MAAMtB,OAAOH,KAAKG,IAAI;wBACtBvB,OAAOiC,YAAY,CACjBb,KAAKhC,GAAG,EACR;4BACE8C,aAAaX,KAAKW,WAAW;4BAC7BT,aAAaF,KAAKG,KAAK,GAAGxC,iBAAiBqC,KAAKG,KAAK,IAAIS;wBAC3D,GACA,OAAOT,OAAgBU,MACrB7B,qBACE,MAAMgB,KAAKc,OAAO,CAAC;gCACjB1C;gCACA+B,OAAQA,SAAS,CAAC;gCAClB7B;gCACAyC,eAAeF;4BACjB,IACAb,KAAKd,gBAAgB;wBAG3BJ,OAAOkC,IAAI,CAAC,CAAC,QAAQ,EAAEnB,KAAKhC,GAAG,CAAC,YAAY,CAAC;wBAC7C;oBACF;YACF;QACF;IACF,EAAE,OAAOiE,OAAO;QACd,MAAM,IAAI1E,SAAS,CAAC,gCAAgC,EAAE2E,OAAOD,QAAQ,EAAE;IACzE;IAEA,OAAOrD;AACT,EAAC"}
+{"version":3,"sources":["../../src/mcp/buildMcpServer.ts"],"sourcesContent":["import { McpServer, type ServerContext } from '@modelcontextprotocol/server'\nimport { APIError, type PayloadRequest } from 'payload'\nimport { z } from 'zod'\n\nimport type {\n  AuthorizedMCP,\n  CollectionMCPItem,\n  GlobalMCPItem,\n  JsonSchemaType,\n  MCPResponseOverride,\n  MCPToolResponse,\n  SanitizedMCPPluginConfig,\n  ToolInputSchema,\n} from '../types.js'\n\nimport { getLogger } from '../utils/getLogger.js'\nimport { toStandardSchema } from '../utils/toStandardSchema.js'\n\n/**\n * Transport-agnostic core: registers every authorized MCP item onto a fresh\n * `McpServer` and returns it. The caller is responsible for picking a transport\n * (`WebStandardStreamableHTTPServerTransport`, `StdioServerTransport`, …) and\n * calling `server.connect(transport)`.\n *\n * `req` is the request context handlers see. For HTTP it's the live\n * `PayloadRequest` derived from the incoming HTTP request; for stdio it's a\n * synthesized one built via `createLocalReq`.\n */\nexport const buildMcpServer = ({\n  authorizedMCP,\n  pluginConfig,\n  req,\n}: {\n  authorizedMCP: AuthorizedMCP\n  pluginConfig: SanitizedMCPPluginConfig\n  req: PayloadRequest\n}): McpServer => {\n  const serverOptions = pluginConfig.mcp?.serverOptions || {}\n  const server = new McpServer(\n    { name: 'Payload MCP Server', version: '1.0.0', ...serverOptions.serverInfo },\n    serverOptions.options,\n  )\n\n  const logger = getLogger({ payload: req.payload })\n\n  /**\n   * Wrap a tool handler's response with the tool's `overrideResponse`, then\n   * strip the internal `doc` field so it doesn't leak onto the wire.\n   */\n  const finalizeToolResponse = (\n    response: MCPToolResponse,\n    overrideResponse?: MCPResponseOverride,\n  ): MCPToolResponse => {\n    const overridden = overrideResponse?.(response, response.doc ?? {}, req) ?? response\n    const { doc: _doc, ...rest } = overridden\n    return rest\n  }\n\n  /**\n   * Runs a collection/global tool call:\n   * - reads `collectionSlug` / `globalSlug` from the input\n   * - runs access control: errors if `authorizedMCP.items` has no entry for this tool + slug\n   * - runs the tool handler and finalizes its response\n   */\n  const callEntityTool = async ({\n    input,\n    item,\n    serverContext,\n  }: {\n    input: unknown\n    item: CollectionMCPItem | GlobalMCPItem\n    serverContext: ServerContext\n  }): Promise<MCPToolResponse> => {\n    const entity = item.type === 'collectionTool' ? 'collection' : 'global'\n    const slugKey = item.type === 'collectionTool' ? 'collectionSlug' : 'globalSlug'\n    const toolInput = (input ?? {}) as Record<string, unknown>\n    const slug = toolInput[slugKey] as string | undefined\n\n    if (!slug) {\n      return {\n        content: [\n          {\n            type: 'text',\n            text: `Error: \"${item.mcpName}\" requires ${slugKey}. Use getConfigInfo to inspect ${entity} slugs.`,\n          },\n        ],\n        isError: true,\n      }\n    }\n\n    const match = authorizedMCP.items.find(\n      (candidate): candidate is CollectionMCPItem | GlobalMCPItem =>\n        candidate.type === item.type &&\n        candidate.mcpName === item.mcpName &&\n        (candidate.type === 'collectionTool'\n          ? candidate.collectionSlug === slug\n          : candidate.type === 'globalTool' && candidate.globalSlug === slug),\n    )\n\n    if (!match) {\n      return {\n        content: [\n          {\n            type: 'text',\n            text: `Error: MCP access to \"${item.mcpName}\" is not enabled for ${entity} \"${slug}\"`,\n          },\n        ],\n        isError: true,\n      }\n    }\n\n    const handlerArgs = {\n      authorizedMCP,\n      input: toolInput,\n      req,\n      serverContext,\n    }\n    const response = await (match.type === 'collectionTool'\n      ? match.tool.handler({ ...handlerArgs, collectionSlug: slug })\n      : match.tool.handler({ ...handlerArgs, globalSlug: slug }))\n\n    return finalizeToolResponse(response, match.tool.overrideResponse)\n  }\n\n  try {\n    const registeredEntityTools = new Set<string>()\n\n    for (const item of authorizedMCP.items) {\n      switch (item.type) {\n        case 'collectionTool':\n        case 'globalTool': {\n          if (registeredEntityTools.has(item.mcpName)) {\n            break\n          }\n          registeredEntityTools.add(item.mcpName)\n\n          const inputSchema = withSlugInput({\n            name: item.type === 'collectionTool' ? 'collectionSlug' : 'globalSlug',\n            input: item.tool.input,\n          })\n\n          server.registerTool(\n            item.mcpName,\n            {\n              annotations: item.tool.annotations,\n              description: item.tool.description,\n              inputSchema: toStandardSchema(inputSchema),\n            },\n            async (input: unknown, ctx: ServerContext) =>\n              callEntityTool({ input, item, serverContext: ctx }),\n          )\n          logger.info(`✅ Tool: ${item.mcpName} Registered.`)\n          break\n        }\n        case 'prompt': {\n          const prompt = item.prompt\n          server.registerPrompt(\n            item.mcpName,\n            {\n              argsSchema: prompt.argsSchema ? toStandardSchema(prompt.argsSchema) : undefined,\n              description: prompt.description,\n              title: prompt.title,\n            },\n            async (input: unknown, ctx: ServerContext) =>\n              prompt.handler({\n                input: (input ?? {}) as Record<string, unknown>,\n                req,\n                serverContext: ctx,\n              }),\n          )\n          logger.info(`✅ Prompt: ${prompt.title} Registered.`)\n          break\n        }\n        case 'resource': {\n          const resource = item.resource\n          server.registerResource(\n            item.mcpName,\n            // @ts-expect-error - Overload type ambiguity (string OR ResourceTemplate is valid)\n            resource.uri,\n            {\n              description: resource.description,\n              mimeType: resource.mimeType,\n              title: resource.title,\n            },\n            // Static URIs call (uri, ctx); ResourceTemplates call (uri, params, ctx).\n            // The rest-params shape lets us collect either signature uniformly.\n            async (...sdkArgs: unknown[]) => {\n              const ctx = sdkArgs[sdkArgs.length - 1] as ServerContext\n              const uri = sdkArgs[0] as URL\n              const params = (sdkArgs.length > 2 ? sdkArgs[1] : {}) as Record<string, string>\n              return resource.handler({ params, req, serverContext: ctx, uri })\n            },\n          )\n          logger.info(`✅ Resource: ${resource.title} Registered.`)\n          break\n        }\n        case 'tool': {\n          const tool = item.tool\n          server.registerTool(\n            item.mcpName,\n            {\n              annotations: tool.annotations,\n              description: tool.description,\n              inputSchema: tool.input ? toStandardSchema(tool.input) : undefined,\n            },\n            async (input: unknown, ctx: ServerContext) =>\n              finalizeToolResponse(\n                await tool.handler({\n                  authorizedMCP,\n                  input: (input ?? {}) as Record<string, unknown>,\n                  req,\n                  serverContext: ctx,\n                }),\n                tool.overrideResponse,\n              ),\n          )\n          logger.info(`✅ Tool: ${item.mcpName} Registered.`)\n          break\n        }\n      }\n    }\n  } catch (error) {\n    throw new APIError(`Error initializing MCP handler: ${String(error)}`, 500)\n  }\n\n  return server\n}\n\nconst withSlugInput = ({\n  name,\n  input,\n}: {\n  input?: ToolInputSchema\n  name: 'collectionSlug' | 'globalSlug'\n}): ToolInputSchema => {\n  const description = name === 'collectionSlug' ? 'The collection slug' : 'The global slug'\n  const slugSchema = z.string().describe(description)\n\n  if (!input) {\n    return z.object({ [name]: slugSchema })\n  }\n\n  if (input instanceof z.ZodObject) {\n    return input.extend({ [name]: slugSchema })\n  }\n\n  const schema = input as {\n    properties?: Record<string, JsonSchemaType>\n    required?: string[]\n  } & JsonSchemaType\n\n  return {\n    ...schema,\n    type: 'object',\n    properties: {\n      ...schema.properties,\n      [name]: {\n        type: 'string',\n        description,\n      },\n    },\n    required: Array.from(new Set([name, ...(schema.required ?? [])])),\n  }\n}\n"],"names":["McpServer","APIError","z","getLogger","toStandardSchema","buildMcpServer","authorizedMCP","pluginConfig","req","serverOptions","mcp","server","name","version","serverInfo","options","logger","payload","finalizeToolResponse","response","overrideResponse","overridden","doc","_doc","rest","callEntityTool","input","item","serverContext","entity","type","slugKey","toolInput","slug","content","text","mcpName","isError","match","items","find","candidate","collectionSlug","globalSlug","handlerArgs","tool","handler","registeredEntityTools","Set","has","add","inputSchema","withSlugInput","registerTool","annotations","description","ctx","info","prompt","registerPrompt","argsSchema","undefined","title","resource","registerResource","uri","mimeType","sdkArgs","length","params","error","String","slugSchema","string","describe","object","ZodObject","extend","schema","properties","required","Array","from"],"mappings":"AAAA,SAASA,SAAS,QAA4B,+BAA8B;AAC5E,SAASC,QAAQ,QAA6B,UAAS;AACvD,SAASC,CAAC,QAAQ,MAAK;AAavB,SAASC,SAAS,QAAQ,wBAAuB;AACjD,SAASC,gBAAgB,QAAQ,+BAA8B;AAE/D;;;;;;;;;CASC,GACD,OAAO,MAAMC,iBAAiB,CAAC,EAC7BC,aAAa,EACbC,YAAY,EACZC,GAAG,EAKJ;IACC,MAAMC,gBAAgBF,aAAaG,GAAG,EAAED,iBAAiB,CAAC;IAC1D,MAAME,SAAS,IAAIX,UACjB;QAAEY,MAAM;QAAsBC,SAAS;QAAS,GAAGJ,cAAcK,UAAU;IAAC,GAC5EL,cAAcM,OAAO;IAGvB,MAAMC,SAASb,UAAU;QAAEc,SAAST,IAAIS,OAAO;IAAC;IAEhD;;;GAGC,GACD,MAAMC,uBAAuB,CAC3BC,UACAC;QAEA,MAAMC,aAAaD,mBAAmBD,UAAUA,SAASG,GAAG,IAAI,CAAC,GAAGd,QAAQW;QAC5E,MAAM,EAAEG,KAAKC,IAAI,EAAE,GAAGC,MAAM,GAAGH;QAC/B,OAAOG;IACT;IAEA;;;;;GAKC,GACD,MAAMC,iBAAiB,OAAO,EAC5BC,KAAK,EACLC,IAAI,EACJC,aAAa,EAKd;QACC,MAAMC,SAASF,KAAKG,IAAI,KAAK,mBAAmB,eAAe;QAC/D,MAAMC,UAAUJ,KAAKG,IAAI,KAAK,mBAAmB,mBAAmB;QACpE,MAAME,YAAaN,SAAS,CAAC;QAC7B,MAAMO,OAAOD,SAAS,CAACD,QAAQ;QAE/B,IAAI,CAACE,MAAM;YACT,OAAO;gBACLC,SAAS;oBACP;wBACEJ,MAAM;wBACNK,MAAM,CAAC,QAAQ,EAAER,KAAKS,OAAO,CAAC,WAAW,EAAEL,QAAQ,+BAA+B,EAAEF,OAAO,OAAO,CAAC;oBACrG;iBACD;gBACDQ,SAAS;YACX;QACF;QAEA,MAAMC,QAAQhC,cAAciC,KAAK,CAACC,IAAI,CACpC,CAACC,YACCA,UAAUX,IAAI,KAAKH,KAAKG,IAAI,IAC5BW,UAAUL,OAAO,KAAKT,KAAKS,OAAO,IACjCK,CAAAA,UAAUX,IAAI,KAAK,mBAChBW,UAAUC,cAAc,KAAKT,OAC7BQ,UAAUX,IAAI,KAAK,gBAAgBW,UAAUE,UAAU,KAAKV,IAAG;QAGvE,IAAI,CAACK,OAAO;YACV,OAAO;gBACLJ,SAAS;oBACP;wBACEJ,MAAM;wBACNK,MAAM,CAAC,sBAAsB,EAAER,KAAKS,OAAO,CAAC,qBAAqB,EAAEP,OAAO,EAAE,EAAEI,KAAK,CAAC,CAAC;oBACvF;iBACD;gBACDI,SAAS;YACX;QACF;QAEA,MAAMO,cAAc;YAClBtC;YACAoB,OAAOM;YACPxB;YACAoB;QACF;QACA,MAAMT,WAAW,MAAOmB,CAAAA,MAAMR,IAAI,KAAK,mBACnCQ,MAAMO,IAAI,CAACC,OAAO,CAAC;YAAE,GAAGF,WAAW;YAAEF,gBAAgBT;QAAK,KAC1DK,MAAMO,IAAI,CAACC,OAAO,CAAC;YAAE,GAAGF,WAAW;YAAED,YAAYV;QAAK,EAAC;QAE3D,OAAOf,qBAAqBC,UAAUmB,MAAMO,IAAI,CAACzB,gBAAgB;IACnE;IAEA,IAAI;QACF,MAAM2B,wBAAwB,IAAIC;QAElC,KAAK,MAAMrB,QAAQrB,cAAciC,KAAK,CAAE;YACtC,OAAQZ,KAAKG,IAAI;gBACf,KAAK;gBACL,KAAK;oBAAc;wBACjB,IAAIiB,sBAAsBE,GAAG,CAACtB,KAAKS,OAAO,GAAG;4BAC3C;wBACF;wBACAW,sBAAsBG,GAAG,CAACvB,KAAKS,OAAO;wBAEtC,MAAMe,cAAcC,cAAc;4BAChCxC,MAAMe,KAAKG,IAAI,KAAK,mBAAmB,mBAAmB;4BAC1DJ,OAAOC,KAAKkB,IAAI,CAACnB,KAAK;wBACxB;wBAEAf,OAAO0C,YAAY,CACjB1B,KAAKS,OAAO,EACZ;4BACEkB,aAAa3B,KAAKkB,IAAI,CAACS,WAAW;4BAClCC,aAAa5B,KAAKkB,IAAI,CAACU,WAAW;4BAClCJ,aAAa/C,iBAAiB+C;wBAChC,GACA,OAAOzB,OAAgB8B,MACrB/B,eAAe;gCAAEC;gCAAOC;gCAAMC,eAAe4B;4BAAI;wBAErDxC,OAAOyC,IAAI,CAAC,CAAC,QAAQ,EAAE9B,KAAKS,OAAO,CAAC,YAAY,CAAC;wBACjD;oBACF;gBACA,KAAK;oBAAU;wBACb,MAAMsB,SAAS/B,KAAK+B,MAAM;wBAC1B/C,OAAOgD,cAAc,CACnBhC,KAAKS,OAAO,EACZ;4BACEwB,YAAYF,OAAOE,UAAU,GAAGxD,iBAAiBsD,OAAOE,UAAU,IAAIC;4BACtEN,aAAaG,OAAOH,WAAW;4BAC/BO,OAAOJ,OAAOI,KAAK;wBACrB,GACA,OAAOpC,OAAgB8B,MACrBE,OAAOZ,OAAO,CAAC;gCACbpB,OAAQA,SAAS,CAAC;gCAClBlB;gCACAoB,eAAe4B;4BACjB;wBAEJxC,OAAOyC,IAAI,CAAC,CAAC,UAAU,EAAEC,OAAOI,KAAK,CAAC,YAAY,CAAC;wBACnD;oBACF;gBACA,KAAK;oBAAY;wBACf,MAAMC,WAAWpC,KAAKoC,QAAQ;wBAC9BpD,OAAOqD,gBAAgB,CACrBrC,KAAKS,OAAO,EACZ,mFAAmF;wBACnF2B,SAASE,GAAG,EACZ;4BACEV,aAAaQ,SAASR,WAAW;4BACjCW,UAAUH,SAASG,QAAQ;4BAC3BJ,OAAOC,SAASD,KAAK;wBACvB,GACA,0EAA0E;wBAC1E,oEAAoE;wBACpE,OAAO,GAAGK;4BACR,MAAMX,MAAMW,OAAO,CAACA,QAAQC,MAAM,GAAG,EAAE;4BACvC,MAAMH,MAAME,OAAO,CAAC,EAAE;4BACtB,MAAME,SAAUF,QAAQC,MAAM,GAAG,IAAID,OAAO,CAAC,EAAE,GAAG,CAAC;4BACnD,OAAOJ,SAASjB,OAAO,CAAC;gCAAEuB;gCAAQ7D;gCAAKoB,eAAe4B;gCAAKS;4BAAI;wBACjE;wBAEFjD,OAAOyC,IAAI,CAAC,CAAC,YAAY,EAAEM,SAASD,KAAK,CAAC,YAAY,CAAC;wBACvD;oBACF;gBACA,KAAK;oBAAQ;wBACX,MAAMjB,OAAOlB,KAAKkB,IAAI;wBACtBlC,OAAO0C,YAAY,CACjB1B,KAAKS,OAAO,EACZ;4BACEkB,aAAaT,KAAKS,WAAW;4BAC7BC,aAAaV,KAAKU,WAAW;4BAC7BJ,aAAaN,KAAKnB,KAAK,GAAGtB,iBAAiByC,KAAKnB,KAAK,IAAImC;wBAC3D,GACA,OAAOnC,OAAgB8B,MACrBtC,qBACE,MAAM2B,KAAKC,OAAO,CAAC;gCACjBxC;gCACAoB,OAAQA,SAAS,CAAC;gCAClBlB;gCACAoB,eAAe4B;4BACjB,IACAX,KAAKzB,gBAAgB;wBAG3BJ,OAAOyC,IAAI,CAAC,CAAC,QAAQ,EAAE9B,KAAKS,OAAO,CAAC,YAAY,CAAC;wBACjD;oBACF;YACF;QACF;IACF,EAAE,OAAOkC,OAAO;QACd,MAAM,IAAIrE,SAAS,CAAC,gCAAgC,EAAEsE,OAAOD,QAAQ,EAAE;IACzE;IAEA,OAAO3D;AACT,EAAC;AAED,MAAMyC,gBAAgB,CAAC,EACrBxC,IAAI,EACJc,KAAK,EAIN;IACC,MAAM6B,cAAc3C,SAAS,mBAAmB,wBAAwB;IACxE,MAAM4D,aAAatE,EAAEuE,MAAM,GAAGC,QAAQ,CAACnB;IAEvC,IAAI,CAAC7B,OAAO;QACV,OAAOxB,EAAEyE,MAAM,CAAC;YAAE,CAAC/D,KAAK,EAAE4D;QAAW;IACvC;IAEA,IAAI9C,iBAAiBxB,EAAE0E,SAAS,EAAE;QAChC,OAAOlD,MAAMmD,MAAM,CAAC;YAAE,CAACjE,KAAK,EAAE4D;QAAW;IAC3C;IAEA,MAAMM,SAASpD;IAKf,OAAO;QACL,GAAGoD,MAAM;QACThD,MAAM;QACNiD,YAAY;YACV,GAAGD,OAAOC,UAAU;YACpB,CAACnE,KAAK,EAAE;gBACNkB,MAAM;gBACNyB;YACF;QACF;QACAyB,UAAUC,MAAMC,IAAI,CAAC,IAAIlC,IAAI;YAACpC;eAAUkE,OAAOE,QAAQ,IAAI,EAAE;SAAE;IACjE;AACF"}

package/dist/mcp/builtin/collections/authTools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authTools.d.ts","sourceRoot":"","sources":["../../../../src/mcp/builtin/collections/authTools.ts"],"names":[],"mappings":"AAiCA,eAAO,MAAM,kBAAkB,4CAoC7B,CAAA;AAEF,eAAO,MAAM,4BAA4B,4CAgCvC,CAAA;AAEF,eAAO,MAAM,mBAAmB,4CA0C9B,CAAA;AAEF,eAAO,MAAM,2BAA2B,4CA4BtC,CAAA;AAEF,eAAO,MAAM,oBAAoB,4CAyB/B,CAAA;AAEF,eAAO,MAAM,oBAAoB,4CA0B/B,CAAA"}
+{"version":3,"file":"authTools.d.ts","sourceRoot":"","sources":["../../../../src/mcp/builtin/collections/authTools.ts"],"names":[],"mappings":"AAiCA,eAAO,MAAM,kBAAkB,4CAqC7B,CAAA;AAEF,eAAO,MAAM,4BAA4B,4CAuCvC,CAAA;AAEF,eAAO,MAAM,mBAAmB,4CAiD9B,CAAA;AAEF,eAAO,MAAM,2BAA2B,4CAmCtC,CAAA;AAEF,eAAO,MAAM,oBAAoB,4CAgC/B,CAAA;AAEF,eAAO,MAAM,oBAAoB,4CAiC/B,CAAA"}

package/dist/mcp/builtin/collections/authTools.js

@@ -22,9 +22,16 @@ const wrapError = (name)=>({ collectionSlug, message })=>{
         };
     };
 export const authCollectionTool = defineCollectionTool({
+    annotations: {
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: false,
+        readOnlyHint: true,
+        title: 'Check Auth Status'
+    },
     description: 'Checks authentication status for the current user.',
     input: z.object({
-        headers: z.string().describe('Optional JSON string containing custom headers to send with the authentication request').optional()
+        headers: z.record(z.string(), z.string()).describe('Optional custom headers to send with the authentication request').optional()
     })
 }).handler(async ({ collectionSlug, input, req })=>{
     const logger = getLogger({
@@ -33,11 +40,7 @@ export const authCollectionTool = defineCollectionTool({
     try {
         let authHeaders = new Headers();
         if (input.headers) {
-            try {
-                authHeaders = new Headers(JSON.parse(input.headers));
-            } catch  {
-                logger.warn(`Invalid headers JSON for auth: ${input.headers}, using empty headers`);
-            }
+            authHeaders = new Headers(input.headers);
         }
         const result = await req.payload.auth({
             headers: authHeaders
@@ -61,6 +64,13 @@ export const authCollectionTool = defineCollectionTool({
     }
 });
 export const forgotPasswordCollectionTool = defineCollectionTool({
+    annotations: {
+        destructiveHint: false,
+        idempotentHint: false,
+        openWorldHint: true,
+        readOnlyHint: false,
+        title: 'Forgot Password'
+    },
     description: 'Sends a password reset email to a user.',
     input: z.object({
         disableEmail: z.boolean().describe('Whether to disable sending the email (for testing)').optional().default(false),
@@ -99,6 +109,13 @@ export const forgotPasswordCollectionTool = defineCollectionTool({
     }
 });
 export const loginCollectionTool = defineCollectionTool({
+    annotations: {
+        destructiveHint: false,
+        idempotentHint: false,
+        openWorldHint: false,
+        readOnlyHint: false,
+        title: 'User Login'
+    },
     description: 'Authenticates a user with email and password.',
     input: z.object({
         depth: z.number().int().min(0).max(10).describe('Depth of population for relationships').optional().default(0),
@@ -139,6 +156,13 @@ export const loginCollectionTool = defineCollectionTool({
     }
 });
 export const resetPasswordCollectionTool = defineCollectionTool({
+    annotations: {
+        destructiveHint: false,
+        idempotentHint: false,
+        openWorldHint: false,
+        readOnlyHint: false,
+        title: 'Reset Password'
+    },
     description: 'Resets a user password with a reset token.',
     input: z.object({
         password: z.string().describe('The new password for the user'),
@@ -176,6 +200,13 @@ export const resetPasswordCollectionTool = defineCollectionTool({
     }
 });
 export const unlockCollectionTool = defineCollectionTool({
+    annotations: {
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: false,
+        readOnlyHint: false,
+        title: 'Unlock Account'
+    },
     description: 'Unlocks a user account that has been locked due to failed login attempts.',
     input: z.object({
         email: emailSchema
@@ -213,6 +244,13 @@ export const unlockCollectionTool = defineCollectionTool({
     }
 });
 export const verifyCollectionTool = defineCollectionTool({
+    annotations: {
+        destructiveHint: false,
+        idempotentHint: false,
+        openWorldHint: false,
+        readOnlyHint: false,
+        title: 'Email Verification'
+    },
     description: 'Verifies a user email with a verification token.',
     input: z.object({
         token: z.string().describe('The verification token sent to the user email')

package/dist/mcp/builtin/collections/authTools.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/mcp/builtin/collections/authTools.ts"],"sourcesContent":["import { z } from 'zod'\n\nimport type { MCPToolResponse } from '../../../types.js'\n\nimport { defineCollectionTool } from '../../../defineTool.js'\nimport { getLogger } from '../../../utils/getLogger.js'\n\n/**\n * Auth tools surfaced under `collections.<auth-collection>.tools`. Opt-in: they\n * default off (an LLM with `login` access can probe passwords; not something\n * to expose by default). Enable in plugin config via `tools: { login: true }`\n * (or `{ description: '...' }`).\n *\n * `auth` (check current token) doesn't actually depend on the collection at\n * runtime — `payload.auth({ headers })` is global — but it's grouped under the\n * users collection so all auth-shaped tools live in one place.\n */\n\nconst emailSchema = z.string().email().describe('The user email address')\n\nconst wrapError =\n  (name: string) =>\n  ({ collectionSlug, message }: { collectionSlug: string; message: string }): MCPToolResponse => {\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `❌ **Error in ${name}** on ${collectionSlug}: ${message}`,\n        },\n      ],\n    }\n  }\n\nexport const authCollectionTool = defineCollectionTool({\n  description: 'Checks authentication status for the current user.',\n  input: z.object({\n    headers: z\n      .string()\n      .describe(\n        'Optional JSON string containing custom headers to send with the authentication request',\n      )\n      .optional(),\n  }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    let authHeaders = new Headers()\n    if (input.headers) {\n      try {\n        authHeaders = new Headers(JSON.parse(input.headers) as Record<string, string>)\n      } catch {\n        logger.warn(`Invalid headers JSON for auth: ${input.headers}, using empty headers`)\n      }\n    }\n    const result = await req.payload.auth({ headers: authHeaders })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Authentication Status\\n\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: result as unknown as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in auth tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('auth')({ collectionSlug, message: errorMessage })\n  }\n})\n\nexport const forgotPasswordCollectionTool = defineCollectionTool({\n  description: 'Sends a password reset email to a user.',\n  input: z.object({\n    disableEmail: z\n      .boolean()\n      .describe('Whether to disable sending the email (for testing)')\n      .optional()\n      .default(false),\n    email: emailSchema,\n  }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.forgotPassword({\n      collection: collectionSlug,\n      data: { email: input.email },\n      disableEmail: input.disableEmail,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Forgot Password Email Sent\\n\\n**Collection:** ${collectionSlug}\\n**Email:** ${input.email}\\n\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: { result } as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in forgotPassword tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('forgotPassword')({ collectionSlug, message: errorMessage })\n  }\n})\n\nexport const loginCollectionTool = defineCollectionTool({\n  description: 'Authenticates a user with email and password.',\n  input: z.object({\n    depth: z\n      .number()\n      .int()\n      .min(0)\n      .max(10)\n      .describe('Depth of population for relationships')\n      .optional()\n      .default(0),\n    email: emailSchema,\n    password: z.string().describe('The user password'),\n    showHiddenFields: z\n      .boolean()\n      .describe('Whether to show hidden fields in the response')\n      .optional()\n      .default(false),\n  }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.login({\n      collection: collectionSlug,\n      data: { email: input.email, password: input.password },\n      depth: input.depth,\n      showHiddenFields: input.showHiddenFields,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Login Successful\\n\\n**User:** ${input.email}\\n**Collection:** ${collectionSlug}\\n\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: result as unknown as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in login tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('login')({ collectionSlug, message: errorMessage })\n  }\n})\n\nexport const resetPasswordCollectionTool = defineCollectionTool({\n  description: 'Resets a user password with a reset token.',\n  input: z.object({\n    password: z.string().describe('The new password for the user'),\n    token: z.string().describe('The password reset token sent to the user email'),\n  }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.resetPassword({\n      collection: collectionSlug,\n      data: { password: input.password, token: input.token },\n      overrideAccess: true,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Password Reset Successful\\n\\n**Collection:** ${collectionSlug}\\n\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: result as unknown as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in resetPassword tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('resetPassword')({ collectionSlug, message: errorMessage })\n  }\n})\n\nexport const unlockCollectionTool = defineCollectionTool({\n  description: 'Unlocks a user account that has been locked due to failed login attempts.',\n  input: z.object({ email: emailSchema }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.unlock({\n      collection: collectionSlug,\n      data: { email: input.email },\n      overrideAccess: true,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Account Unlocked\\n\\n**Collection:** ${collectionSlug}\\n**Email:** ${input.email}\\n**Result:** ${result ? 'Success' : 'Failed'}`,\n        },\n      ],\n      doc: { result } as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in unlock tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('unlock')({ collectionSlug, message: errorMessage })\n  }\n})\n\nexport const verifyCollectionTool = defineCollectionTool({\n  description: 'Verifies a user email with a verification token.',\n  input: z.object({\n    token: z.string().describe('The verification token sent to the user email'),\n  }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.verifyEmail({\n      collection: collectionSlug,\n      token: input.token,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Email Verification Successful\\n\\n**Collection:** ${collectionSlug}\\n**Result:** ${result ? 'Success' : 'Failed'}`,\n        },\n      ],\n      doc: { result } as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in verify tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('verify')({ collectionSlug, message: errorMessage })\n  }\n})\n"],"names":["z","defineCollectionTool","getLogger","emailSchema","string","email","describe","wrapError","name","collectionSlug","message","content","type","text","authCollectionTool","description","input","object","headers","optional","handler","req","logger","payload","authHeaders","Headers","JSON","parse","warn","result","auth","stringify","doc","error","errorMessage","Error","forgotPasswordCollectionTool","disableEmail","boolean","default","forgotPassword","collection","data","loginCollectionTool","depth","number","int","min","max","password","showHiddenFields","login","resetPasswordCollectionTool","token","resetPassword","overrideAccess","unlockCollectionTool","unlock","verifyCollectionTool","verifyEmail"],"mappings":"AAAA,SAASA,CAAC,QAAQ,MAAK;AAIvB,SAASC,oBAAoB,QAAQ,yBAAwB;AAC7D,SAASC,SAAS,QAAQ,8BAA6B;AAEvD;;;;;;;;;CASC,GAED,MAAMC,cAAcH,EAAEI,MAAM,GAAGC,KAAK,GAAGC,QAAQ,CAAC;AAEhD,MAAMC,YACJ,CAACC,OACD,CAAC,EAAEC,cAAc,EAAEC,OAAO,EAA+C;QACvE,OAAO;YACLC,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,aAAa,EAAEL,KAAK,MAAM,EAAEC,eAAe,EAAE,EAAEC,SAAS;gBACjE;aACD;QACH;IACF;AAEF,OAAO,MAAMI,qBAAqBb,qBAAqB;IACrDc,aAAa;IACbC,OAAOhB,EAAEiB,MAAM,CAAC;QACdC,SAASlB,EACNI,MAAM,GACNE,QAAQ,CACP,0FAEDa,QAAQ;IACb;AACF,GAAGC,OAAO,CAAC,OAAO,EAAEX,cAAc,EAAEO,KAAK,EAAEK,GAAG,EAAE;IAC9C,MAAMC,SAASpB,UAAU;QAAEqB,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,IAAIC,cAAc,IAAIC;QACtB,IAAIT,MAAME,OAAO,EAAE;YACjB,IAAI;gBACFM,cAAc,IAAIC,QAAQC,KAAKC,KAAK,CAACX,MAAME,OAAO;YACpD,EAAE,OAAM;gBACNI,OAAOM,IAAI,CAAC,CAAC,+BAA+B,EAAEZ,MAAME,OAAO,CAAC,qBAAqB,CAAC;YACpF;QACF;QACA,MAAMW,SAAS,MAAMR,IAAIE,OAAO,CAACO,IAAI,CAAC;YAAEZ,SAASM;QAAY;QAC7D,OAAO;YACLb,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,uCAAuC,EAAEa,KAAKK,SAAS,CAACF,QAAQ,QAAQ,CAAC;gBAClF;aACD;YACDG,KAAKH;QACP;IACF,EAAE,OAAOI,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMvB,OAAO,GAAG;QAC9DY,OAAOW,KAAK,CAAC,CAAC,sBAAsB,EAAExB,eAAe,EAAE,EAAEyB,cAAc;QACvE,OAAO3B,UAAU,QAAQ;YAAEE;YAAgBC,SAASwB;QAAa;IACnE;AACF,GAAE;AAEF,OAAO,MAAME,+BAA+BnC,qBAAqB;IAC/Dc,aAAa;IACbC,OAAOhB,EAAEiB,MAAM,CAAC;QACdoB,cAAcrC,EACXsC,OAAO,GACPhC,QAAQ,CAAC,sDACTa,QAAQ,GACRoB,OAAO,CAAC;QACXlC,OAAOF;IACT;AACF,GAAGiB,OAAO,CAAC,OAAO,EAAEX,cAAc,EAAEO,KAAK,EAAEK,GAAG,EAAE;IAC9C,MAAMC,SAASpB,UAAU;QAAEqB,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMM,SAAS,MAAMR,IAAIE,OAAO,CAACiB,cAAc,CAAC;YAC9CC,YAAYhC;YACZiC,MAAM;gBAAErC,OAAOW,MAAMX,KAAK;YAAC;YAC3BgC,cAAcrB,MAAMqB,YAAY;QAClC;QACA,OAAO;YACL1B,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,gDAAgD,EAAEJ,eAAe,aAAa,EAAEO,MAAMX,KAAK,CAAC,gBAAgB,EAAEqB,KAAKK,SAAS,CAACF,QAAQ,QAAQ,CAAC;gBACvJ;aACD;YACDG,KAAK;gBAAEH;YAAO;QAChB;IACF,EAAE,OAAOI,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMvB,OAAO,GAAG;QAC9DY,OAAOW,KAAK,CAAC,CAAC,gCAAgC,EAAExB,eAAe,EAAE,EAAEyB,cAAc;QACjF,OAAO3B,UAAU,kBAAkB;YAAEE;YAAgBC,SAASwB;QAAa;IAC7E;AACF,GAAE;AAEF,OAAO,MAAMS,sBAAsB1C,qBAAqB;IACtDc,aAAa;IACbC,OAAOhB,EAAEiB,MAAM,CAAC;QACd2B,OAAO5C,EACJ6C,MAAM,GACNC,GAAG,GACHC,GAAG,CAAC,GACJC,GAAG,CAAC,IACJ1C,QAAQ,CAAC,yCACTa,QAAQ,GACRoB,OAAO,CAAC;QACXlC,OAAOF;QACP8C,UAAUjD,EAAEI,MAAM,GAAGE,QAAQ,CAAC;QAC9B4C,kBAAkBlD,EACfsC,OAAO,GACPhC,QAAQ,CAAC,iDACTa,QAAQ,GACRoB,OAAO,CAAC;IACb;AACF,GAAGnB,OAAO,CAAC,OAAO,EAAEX,cAAc,EAAEO,KAAK,EAAEK,GAAG,EAAE;IAC9C,MAAMC,SAASpB,UAAU;QAAEqB,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMM,SAAS,MAAMR,IAAIE,OAAO,CAAC4B,KAAK,CAAC;YACrCV,YAAYhC;YACZiC,MAAM;gBAAErC,OAAOW,MAAMX,KAAK;gBAAE4C,UAAUjC,MAAMiC,QAAQ;YAAC;YACrDL,OAAO5B,MAAM4B,KAAK;YAClBM,kBAAkBlC,MAAMkC,gBAAgB;QAC1C;QACA,OAAO;YACLvC,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,gCAAgC,EAAEG,MAAMX,KAAK,CAAC,kBAAkB,EAAEI,eAAe,gBAAgB,EAAEiB,KAAKK,SAAS,CAACF,QAAQ,QAAQ,CAAC;gBAC5I;aACD;YACDG,KAAKH;QACP;IACF,EAAE,OAAOI,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMvB,OAAO,GAAG;QAC9DY,OAAOW,KAAK,CAAC,CAAC,uBAAuB,EAAExB,eAAe,EAAE,EAAEyB,cAAc;QACxE,OAAO3B,UAAU,SAAS;YAAEE;YAAgBC,SAASwB;QAAa;IACpE;AACF,GAAE;AAEF,OAAO,MAAMkB,8BAA8BnD,qBAAqB;IAC9Dc,aAAa;IACbC,OAAOhB,EAAEiB,MAAM,CAAC;QACdgC,UAAUjD,EAAEI,MAAM,GAAGE,QAAQ,CAAC;QAC9B+C,OAAOrD,EAAEI,MAAM,GAAGE,QAAQ,CAAC;IAC7B;AACF,GAAGc,OAAO,CAAC,OAAO,EAAEX,cAAc,EAAEO,KAAK,EAAEK,GAAG,EAAE;IAC9C,MAAMC,SAASpB,UAAU;QAAEqB,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMM,SAAS,MAAMR,IAAIE,OAAO,CAAC+B,aAAa,CAAC;YAC7Cb,YAAYhC;YACZiC,MAAM;gBAAEO,UAAUjC,MAAMiC,QAAQ;gBAAEI,OAAOrC,MAAMqC,KAAK;YAAC;YACrDE,gBAAgB;QAClB;QACA,OAAO;YACL5C,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,+CAA+C,EAAEJ,eAAe,gBAAgB,EAAEiB,KAAKK,SAAS,CAACF,QAAQ,QAAQ,CAAC;gBAC3H;aACD;YACDG,KAAKH;QACP;IACF,EAAE,OAAOI,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMvB,OAAO,GAAG;QAC9DY,OAAOW,KAAK,CAAC,CAAC,+BAA+B,EAAExB,eAAe,EAAE,EAAEyB,cAAc;QAChF,OAAO3B,UAAU,iBAAiB;YAAEE;YAAgBC,SAASwB;QAAa;IAC5E;AACF,GAAE;AAEF,OAAO,MAAMsB,uBAAuBvD,qBAAqB;IACvDc,aAAa;IACbC,OAAOhB,EAAEiB,MAAM,CAAC;QAAEZ,OAAOF;IAAY;AACvC,GAAGiB,OAAO,CAAC,OAAO,EAAEX,cAAc,EAAEO,KAAK,EAAEK,GAAG,EAAE;IAC9C,MAAMC,SAASpB,UAAU;QAAEqB,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMM,SAAS,MAAMR,IAAIE,OAAO,CAACkC,MAAM,CAAC;YACtChB,YAAYhC;YACZiC,MAAM;gBAAErC,OAAOW,MAAMX,KAAK;YAAC;YAC3BkD,gBAAgB;QAClB;QACA,OAAO;YACL5C,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,sCAAsC,EAAEJ,eAAe,aAAa,EAAEO,MAAMX,KAAK,CAAC,cAAc,EAAEwB,SAAS,YAAY,UAAU;gBAC1I;aACD;YACDG,KAAK;gBAAEH;YAAO;QAChB;IACF,EAAE,OAAOI,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMvB,OAAO,GAAG;QAC9DY,OAAOW,KAAK,CAAC,CAAC,wBAAwB,EAAExB,eAAe,EAAE,EAAEyB,cAAc;QACzE,OAAO3B,UAAU,UAAU;YAAEE;YAAgBC,SAASwB;QAAa;IACrE;AACF,GAAE;AAEF,OAAO,MAAMwB,uBAAuBzD,qBAAqB;IACvDc,aAAa;IACbC,OAAOhB,EAAEiB,MAAM,CAAC;QACdoC,OAAOrD,EAAEI,MAAM,GAAGE,QAAQ,CAAC;IAC7B;AACF,GAAGc,OAAO,CAAC,OAAO,EAAEX,cAAc,EAAEO,KAAK,EAAEK,GAAG,EAAE;IAC9C,MAAMC,SAASpB,UAAU;QAAEqB,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMM,SAAS,MAAMR,IAAIE,OAAO,CAACoC,WAAW,CAAC;YAC3ClB,YAAYhC;YACZ4C,OAAOrC,MAAMqC,KAAK;QACpB;QACA,OAAO;YACL1C,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,mDAAmD,EAAEJ,eAAe,cAAc,EAAEoB,SAAS,YAAY,UAAU;gBAC5H;aACD;YACDG,KAAK;gBAAEH;YAAO;QAChB;IACF,EAAE,OAAOI,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMvB,OAAO,GAAG;QAC9DY,OAAOW,KAAK,CAAC,CAAC,wBAAwB,EAAExB,eAAe,EAAE,EAAEyB,cAAc;QACzE,OAAO3B,UAAU,UAAU;YAAEE;YAAgBC,SAASwB;QAAa;IACrE;AACF,GAAE"}
+{"version":3,"sources":["../../../../src/mcp/builtin/collections/authTools.ts"],"sourcesContent":["import { z } from 'zod'\n\nimport type { MCPToolResponse } from '../../../types.js'\n\nimport { defineCollectionTool } from '../../../defineTool.js'\nimport { getLogger } from '../../../utils/getLogger.js'\n\n/**\n * Auth tools surfaced under `collections.<auth-collection>.tools`. Opt-in: they\n * default off (an LLM with `login` access can probe passwords; not something\n * to expose by default). Enable in plugin config via `tools: { login: true }`\n * (or `{ description: '...' }`).\n *\n * `auth` (check current token) doesn't actually depend on the collection at\n * runtime — `payload.auth({ headers })` is global — but it's grouped under the\n * users collection so all auth-shaped tools live in one place.\n */\n\nconst emailSchema = z.string().email().describe('The user email address')\n\nconst wrapError =\n  (name: string) =>\n  ({ collectionSlug, message }: { collectionSlug: string; message: string }): MCPToolResponse => {\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `❌ **Error in ${name}** on ${collectionSlug}: ${message}`,\n        },\n      ],\n    }\n  }\n\nexport const authCollectionTool = defineCollectionTool({\n  annotations: {\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n    readOnlyHint: true,\n    title: 'Check Auth Status',\n  },\n  description: 'Checks authentication status for the current user.',\n  input: z.object({\n    headers: z\n      .record(z.string(), z.string())\n      .describe('Optional custom headers to send with the authentication request')\n      .optional(),\n  }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    let authHeaders = new Headers()\n    if (input.headers) {\n      authHeaders = new Headers(input.headers)\n    }\n    const result = await req.payload.auth({ headers: authHeaders })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Authentication Status\\n\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: result as unknown as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in auth tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('auth')({ collectionSlug, message: errorMessage })\n  }\n})\n\nexport const forgotPasswordCollectionTool = defineCollectionTool({\n  annotations: {\n    destructiveHint: false,\n    idempotentHint: false,\n    openWorldHint: true,\n    readOnlyHint: false,\n    title: 'Forgot Password',\n  },\n  description: 'Sends a password reset email to a user.',\n  input: z.object({\n    disableEmail: z\n      .boolean()\n      .describe('Whether to disable sending the email (for testing)')\n      .optional()\n      .default(false),\n    email: emailSchema,\n  }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.forgotPassword({\n      collection: collectionSlug,\n      data: { email: input.email },\n      disableEmail: input.disableEmail,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Forgot Password Email Sent\\n\\n**Collection:** ${collectionSlug}\\n**Email:** ${input.email}\\n\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: { result } as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in forgotPassword tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('forgotPassword')({ collectionSlug, message: errorMessage })\n  }\n})\n\nexport const loginCollectionTool = defineCollectionTool({\n  annotations: {\n    destructiveHint: false,\n    idempotentHint: false,\n    openWorldHint: false,\n    readOnlyHint: false,\n    title: 'User Login',\n  },\n  description: 'Authenticates a user with email and password.',\n  input: z.object({\n    depth: z\n      .number()\n      .int()\n      .min(0)\n      .max(10)\n      .describe('Depth of population for relationships')\n      .optional()\n      .default(0),\n    email: emailSchema,\n    password: z.string().describe('The user password'),\n    showHiddenFields: z\n      .boolean()\n      .describe('Whether to show hidden fields in the response')\n      .optional()\n      .default(false),\n  }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.login({\n      collection: collectionSlug,\n      data: { email: input.email, password: input.password },\n      depth: input.depth,\n      showHiddenFields: input.showHiddenFields,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Login Successful\\n\\n**User:** ${input.email}\\n**Collection:** ${collectionSlug}\\n\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: result as unknown as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in login tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('login')({ collectionSlug, message: errorMessage })\n  }\n})\n\nexport const resetPasswordCollectionTool = defineCollectionTool({\n  annotations: {\n    destructiveHint: false,\n    idempotentHint: false,\n    openWorldHint: false,\n    readOnlyHint: false,\n    title: 'Reset Password',\n  },\n  description: 'Resets a user password with a reset token.',\n  input: z.object({\n    password: z.string().describe('The new password for the user'),\n    token: z.string().describe('The password reset token sent to the user email'),\n  }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.resetPassword({\n      collection: collectionSlug,\n      data: { password: input.password, token: input.token },\n      overrideAccess: true,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Password Reset Successful\\n\\n**Collection:** ${collectionSlug}\\n\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: result as unknown as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in resetPassword tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('resetPassword')({ collectionSlug, message: errorMessage })\n  }\n})\n\nexport const unlockCollectionTool = defineCollectionTool({\n  annotations: {\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n    readOnlyHint: false,\n    title: 'Unlock Account',\n  },\n  description: 'Unlocks a user account that has been locked due to failed login attempts.',\n  input: z.object({ email: emailSchema }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.unlock({\n      collection: collectionSlug,\n      data: { email: input.email },\n      overrideAccess: true,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Account Unlocked\\n\\n**Collection:** ${collectionSlug}\\n**Email:** ${input.email}\\n**Result:** ${result ? 'Success' : 'Failed'}`,\n        },\n      ],\n      doc: { result } as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in unlock tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('unlock')({ collectionSlug, message: errorMessage })\n  }\n})\n\nexport const verifyCollectionTool = defineCollectionTool({\n  annotations: {\n    destructiveHint: false,\n    idempotentHint: false,\n    openWorldHint: false,\n    readOnlyHint: false,\n    title: 'Email Verification',\n  },\n  description: 'Verifies a user email with a verification token.',\n  input: z.object({\n    token: z.string().describe('The verification token sent to the user email'),\n  }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.verifyEmail({\n      collection: collectionSlug,\n      token: input.token,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Email Verification Successful\\n\\n**Collection:** ${collectionSlug}\\n**Result:** ${result ? 'Success' : 'Failed'}`,\n        },\n      ],\n      doc: { result } as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in verify tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('verify')({ collectionSlug, message: errorMessage })\n  }\n})\n"],"names":["z","defineCollectionTool","getLogger","emailSchema","string","email","describe","wrapError","name","collectionSlug","message","content","type","text","authCollectionTool","annotations","destructiveHint","idempotentHint","openWorldHint","readOnlyHint","title","description","input","object","headers","record","optional","handler","req","logger","payload","authHeaders","Headers","result","auth","JSON","stringify","doc","error","errorMessage","Error","forgotPasswordCollectionTool","disableEmail","boolean","default","forgotPassword","collection","data","loginCollectionTool","depth","number","int","min","max","password","showHiddenFields","login","resetPasswordCollectionTool","token","resetPassword","overrideAccess","unlockCollectionTool","unlock","verifyCollectionTool","verifyEmail"],"mappings":"AAAA,SAASA,CAAC,QAAQ,MAAK;AAIvB,SAASC,oBAAoB,QAAQ,yBAAwB;AAC7D,SAASC,SAAS,QAAQ,8BAA6B;AAEvD;;;;;;;;;CASC,GAED,MAAMC,cAAcH,EAAEI,MAAM,GAAGC,KAAK,GAAGC,QAAQ,CAAC;AAEhD,MAAMC,YACJ,CAACC,OACD,CAAC,EAAEC,cAAc,EAAEC,OAAO,EAA+C;QACvE,OAAO;YACLC,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,aAAa,EAAEL,KAAK,MAAM,EAAEC,eAAe,EAAE,EAAEC,SAAS;gBACjE;aACD;QACH;IACF;AAEF,OAAO,MAAMI,qBAAqBb,qBAAqB;IACrDc,aAAa;QACXC,iBAAiB;QACjBC,gBAAgB;QAChBC,eAAe;QACfC,cAAc;QACdC,OAAO;IACT;IACAC,aAAa;IACbC,OAAOtB,EAAEuB,MAAM,CAAC;QACdC,SAASxB,EACNyB,MAAM,CAACzB,EAAEI,MAAM,IAAIJ,EAAEI,MAAM,IAC3BE,QAAQ,CAAC,mEACToB,QAAQ;IACb;AACF,GAAGC,OAAO,CAAC,OAAO,EAAElB,cAAc,EAAEa,KAAK,EAAEM,GAAG,EAAE;IAC9C,MAAMC,SAAS3B,UAAU;QAAE4B,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,IAAIC,cAAc,IAAIC;QACtB,IAAIV,MAAME,OAAO,EAAE;YACjBO,cAAc,IAAIC,QAAQV,MAAME,OAAO;QACzC;QACA,MAAMS,SAAS,MAAML,IAAIE,OAAO,CAACI,IAAI,CAAC;YAAEV,SAASO;QAAY;QAC7D,OAAO;YACLpB,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,uCAAuC,EAAEsB,KAAKC,SAAS,CAACH,QAAQ,QAAQ,CAAC;gBAClF;aACD;YACDI,KAAKJ;QACP;IACF,EAAE,OAAOK,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAM5B,OAAO,GAAG;QAC9DmB,OAAOS,KAAK,CAAC,CAAC,sBAAsB,EAAE7B,eAAe,EAAE,EAAE8B,cAAc;QACvE,OAAOhC,UAAU,QAAQ;YAAEE;YAAgBC,SAAS6B;QAAa;IACnE;AACF,GAAE;AAEF,OAAO,MAAME,+BAA+BxC,qBAAqB;IAC/Dc,aAAa;QACXC,iBAAiB;QACjBC,gBAAgB;QAChBC,eAAe;QACfC,cAAc;QACdC,OAAO;IACT;IACAC,aAAa;IACbC,OAAOtB,EAAEuB,MAAM,CAAC;QACdmB,cAAc1C,EACX2C,OAAO,GACPrC,QAAQ,CAAC,sDACToB,QAAQ,GACRkB,OAAO,CAAC;QACXvC,OAAOF;IACT;AACF,GAAGwB,OAAO,CAAC,OAAO,EAAElB,cAAc,EAAEa,KAAK,EAAEM,GAAG,EAAE;IAC9C,MAAMC,SAAS3B,UAAU;QAAE4B,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMG,SAAS,MAAML,IAAIE,OAAO,CAACe,cAAc,CAAC;YAC9CC,YAAYrC;YACZsC,MAAM;gBAAE1C,OAAOiB,MAAMjB,KAAK;YAAC;YAC3BqC,cAAcpB,MAAMoB,YAAY;QAClC;QACA,OAAO;YACL/B,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,gDAAgD,EAAEJ,eAAe,aAAa,EAAEa,MAAMjB,KAAK,CAAC,gBAAgB,EAAE8B,KAAKC,SAAS,CAACH,QAAQ,QAAQ,CAAC;gBACvJ;aACD;YACDI,KAAK;gBAAEJ;YAAO;QAChB;IACF,EAAE,OAAOK,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAM5B,OAAO,GAAG;QAC9DmB,OAAOS,KAAK,CAAC,CAAC,gCAAgC,EAAE7B,eAAe,EAAE,EAAE8B,cAAc;QACjF,OAAOhC,UAAU,kBAAkB;YAAEE;YAAgBC,SAAS6B;QAAa;IAC7E;AACF,GAAE;AAEF,OAAO,MAAMS,sBAAsB/C,qBAAqB;IACtDc,aAAa;QACXC,iBAAiB;QACjBC,gBAAgB;QAChBC,eAAe;QACfC,cAAc;QACdC,OAAO;IACT;IACAC,aAAa;IACbC,OAAOtB,EAAEuB,MAAM,CAAC;QACd0B,OAAOjD,EACJkD,MAAM,GACNC,GAAG,GACHC,GAAG,CAAC,GACJC,GAAG,CAAC,IACJ/C,QAAQ,CAAC,yCACToB,QAAQ,GACRkB,OAAO,CAAC;QACXvC,OAAOF;QACPmD,UAAUtD,EAAEI,MAAM,GAAGE,QAAQ,CAAC;QAC9BiD,kBAAkBvD,EACf2C,OAAO,GACPrC,QAAQ,CAAC,iDACToB,QAAQ,GACRkB,OAAO,CAAC;IACb;AACF,GAAGjB,OAAO,CAAC,OAAO,EAAElB,cAAc,EAAEa,KAAK,EAAEM,GAAG,EAAE;IAC9C,MAAMC,SAAS3B,UAAU;QAAE4B,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMG,SAAS,MAAML,IAAIE,OAAO,CAAC0B,KAAK,CAAC;YACrCV,YAAYrC;YACZsC,MAAM;gBAAE1C,OAAOiB,MAAMjB,KAAK;gBAAEiD,UAAUhC,MAAMgC,QAAQ;YAAC;YACrDL,OAAO3B,MAAM2B,KAAK;YAClBM,kBAAkBjC,MAAMiC,gBAAgB;QAC1C;QACA,OAAO;YACL5C,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,gCAAgC,EAAES,MAAMjB,KAAK,CAAC,kBAAkB,EAAEI,eAAe,gBAAgB,EAAE0B,KAAKC,SAAS,CAACH,QAAQ,QAAQ,CAAC;gBAC5I;aACD;YACDI,KAAKJ;QACP;IACF,EAAE,OAAOK,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAM5B,OAAO,GAAG;QAC9DmB,OAAOS,KAAK,CAAC,CAAC,uBAAuB,EAAE7B,eAAe,EAAE,EAAE8B,cAAc;QACxE,OAAOhC,UAAU,SAAS;YAAEE;YAAgBC,SAAS6B;QAAa;IACpE;AACF,GAAE;AAEF,OAAO,MAAMkB,8BAA8BxD,qBAAqB;IAC9Dc,aAAa;QACXC,iBAAiB;QACjBC,gBAAgB;QAChBC,eAAe;QACfC,cAAc;QACdC,OAAO;IACT;IACAC,aAAa;IACbC,OAAOtB,EAAEuB,MAAM,CAAC;QACd+B,UAAUtD,EAAEI,MAAM,GAAGE,QAAQ,CAAC;QAC9BoD,OAAO1D,EAAEI,MAAM,GAAGE,QAAQ,CAAC;IAC7B;AACF,GAAGqB,OAAO,CAAC,OAAO,EAAElB,cAAc,EAAEa,KAAK,EAAEM,GAAG,EAAE;IAC9C,MAAMC,SAAS3B,UAAU;QAAE4B,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMG,SAAS,MAAML,IAAIE,OAAO,CAAC6B,aAAa,CAAC;YAC7Cb,YAAYrC;YACZsC,MAAM;gBAAEO,UAAUhC,MAAMgC,QAAQ;gBAAEI,OAAOpC,MAAMoC,KAAK;YAAC;YACrDE,gBAAgB;QAClB;QACA,OAAO;YACLjD,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,+CAA+C,EAAEJ,eAAe,gBAAgB,EAAE0B,KAAKC,SAAS,CAACH,QAAQ,QAAQ,CAAC;gBAC3H;aACD;YACDI,KAAKJ;QACP;IACF,EAAE,OAAOK,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAM5B,OAAO,GAAG;QAC9DmB,OAAOS,KAAK,CAAC,CAAC,+BAA+B,EAAE7B,eAAe,EAAE,EAAE8B,cAAc;QAChF,OAAOhC,UAAU,iBAAiB;YAAEE;YAAgBC,SAAS6B;QAAa;IAC5E;AACF,GAAE;AAEF,OAAO,MAAMsB,uBAAuB5D,qBAAqB;IACvDc,aAAa;QACXC,iBAAiB;QACjBC,gBAAgB;QAChBC,eAAe;QACfC,cAAc;QACdC,OAAO;IACT;IACAC,aAAa;IACbC,OAAOtB,EAAEuB,MAAM,CAAC;QAAElB,OAAOF;IAAY;AACvC,GAAGwB,OAAO,CAAC,OAAO,EAAElB,cAAc,EAAEa,KAAK,EAAEM,GAAG,EAAE;IAC9C,MAAMC,SAAS3B,UAAU;QAAE4B,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMG,SAAS,MAAML,IAAIE,OAAO,CAACgC,MAAM,CAAC;YACtChB,YAAYrC;YACZsC,MAAM;gBAAE1C,OAAOiB,MAAMjB,KAAK;YAAC;YAC3BuD,gBAAgB;QAClB;QACA,OAAO;YACLjD,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,sCAAsC,EAAEJ,eAAe,aAAa,EAAEa,MAAMjB,KAAK,CAAC,cAAc,EAAE4B,SAAS,YAAY,UAAU;gBAC1I;aACD;YACDI,KAAK;gBAAEJ;YAAO;QAChB;IACF,EAAE,OAAOK,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAM5B,OAAO,GAAG;QAC9DmB,OAAOS,KAAK,CAAC,CAAC,wBAAwB,EAAE7B,eAAe,EAAE,EAAE8B,cAAc;QACzE,OAAOhC,UAAU,UAAU;YAAEE;YAAgBC,SAAS6B;QAAa;IACrE;AACF,GAAE;AAEF,OAAO,MAAMwB,uBAAuB9D,qBAAqB;IACvDc,aAAa;QACXC,iBAAiB;QACjBC,gBAAgB;QAChBC,eAAe;QACfC,cAAc;QACdC,OAAO;IACT;IACAC,aAAa;IACbC,OAAOtB,EAAEuB,MAAM,CAAC;QACdmC,OAAO1D,EAAEI,MAAM,GAAGE,QAAQ,CAAC;IAC7B;AACF,GAAGqB,OAAO,CAAC,OAAO,EAAElB,cAAc,EAAEa,KAAK,EAAEM,GAAG,EAAE;IAC9C,MAAMC,SAAS3B,UAAU;QAAE4B,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMG,SAAS,MAAML,IAAIE,OAAO,CAACkC,WAAW,CAAC;YAC3ClB,YAAYrC;YACZiD,OAAOpC,MAAMoC,KAAK;QACpB;QACA,OAAO;YACL/C,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,mDAAmD,EAAEJ,eAAe,cAAc,EAAEwB,SAAS,YAAY,UAAU;gBAC5H;aACD;YACDI,KAAK;gBAAEJ;YAAO;QAChB;IACF,EAAE,OAAOK,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAM5B,OAAO,GAAG;QAC9DmB,OAAOS,KAAK,CAAC,CAAC,wBAAwB,EAAE7B,eAAe,EAAE,EAAE8B,cAAc;QACzE,OAAOhC,UAAU,UAAU;YAAEE;YAAgBC,SAAS6B;QAAa;IACrE;AACF,GAAE"}

package/dist/mcp/builtin/collections/countTool.d.ts

@@ -0,0 +1,2 @@
+export declare const countDocumentsTool: import("../../../types.js").CollectionTool;
+//# sourceMappingURL=countTool.d.ts.map

package/dist/mcp/builtin/collections/countTool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"countTool.d.ts","sourceRoot":"","sources":["../../../../src/mcp/builtin/collections/countTool.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,kBAAkB,4CA8D7B,CAAA"}

package/dist/mcp/builtin/collections/countTool.js

@@ -0,0 +1,69 @@
+import { z } from 'zod';
+import { defaultAccess } from '../../../defaultAccess.js';
+import { defineCollectionTool } from '../../../defineTool.js';
+import { getLogger } from '../../../utils/getLogger.js';
+import { localAPIDefaults } from '../../../utils/localAPIDefaults.js';
+import { whereSchema } from '../../../utils/whereSchema.js';
+const DEFAULT_DESCRIPTION = 'Count documents in any collection by passing the collection slug and optional where clause.';
+export const countDocumentsTool = defineCollectionTool({
+    access: (args)=>defaultAccess(args) && Boolean(args.permissions?.collections?.[args.collectionSlug]?.read),
+    annotations: {
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: false,
+        readOnlyHint: true,
+        title: 'Count Documents'
+    },
+    description: DEFAULT_DESCRIPTION,
+    input: z.object({
+        locale: z.string().describe('Optional: locale code to count documents in').optional(),
+        trash: z.boolean().describe('Optional: include soft-deleted documents when trash is enabled on the collection').optional(),
+        where: whereSchema.describe('Optional: where clause for filtering. Use field names with Payload operators, and/or arrays for grouping. Example: {"title":{"contains":"test"}}').optional()
+    })
+}).handler(async ({ authorizedMCP, collectionSlug, input, req })=>{
+    const payload = req.payload;
+    const logger = getLogger({
+        payload
+    });
+    const { locale, trash, where } = input;
+    logger.info(`Counting documents in collection: ${collectionSlug}`);
+    try {
+        const result = await payload.count({
+            collection: collectionSlug,
+            req,
+            ...localAPIDefaults(authorizedMCP),
+            ...locale ? {
+                locale
+            } : {},
+            ...trash !== undefined ? {
+                trash
+            } : {},
+            ...where ? {
+                where
+            } : {}
+        });
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `Collection "${collectionSlug}" contains ${result.totalDocs} matching documents.\n\`\`\`json\n${JSON.stringify(result)}\n\`\`\``
+                }
+            ],
+            doc: result
+        };
+    } catch (error) {
+        const errorMessage = error instanceof Error ? error.message : 'Unknown error';
+        logger.error(`Error counting documents in ${collectionSlug}: ${errorMessage}`);
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `❌ **Error counting documents in collection "${collectionSlug}":** ${errorMessage}`
+                }
+            ],
+            isError: true
+        };
+    }
+});
+
+//# sourceMappingURL=countTool.js.map

package/dist/mcp/builtin/collections/countTool.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/mcp/builtin/collections/countTool.ts"],"sourcesContent":["import { z } from 'zod'\n\nimport { defaultAccess } from '../../../defaultAccess.js'\nimport { defineCollectionTool } from '../../../defineTool.js'\nimport { getLogger } from '../../../utils/getLogger.js'\nimport { localAPIDefaults } from '../../../utils/localAPIDefaults.js'\nimport { whereSchema } from '../../../utils/whereSchema.js'\n\nconst DEFAULT_DESCRIPTION =\n  'Count documents in any collection by passing the collection slug and optional where clause.'\n\nexport const countDocumentsTool = defineCollectionTool({\n  access: (args) =>\n    defaultAccess(args) && Boolean(args.permissions?.collections?.[args.collectionSlug]?.read),\n  annotations: {\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n    readOnlyHint: true,\n    title: 'Count Documents',\n  },\n  description: DEFAULT_DESCRIPTION,\n  input: z.object({\n    locale: z.string().describe('Optional: locale code to count documents in').optional(),\n    trash: z\n      .boolean()\n      .describe('Optional: include soft-deleted documents when trash is enabled on the collection')\n      .optional(),\n    where: whereSchema\n      .describe(\n        'Optional: where clause for filtering. Use field names with Payload operators, and/or arrays for grouping. Example: {\"title\":{\"contains\":\"test\"}}',\n      )\n      .optional(),\n  }),\n}).handler(async ({ authorizedMCP, collectionSlug, input, req }) => {\n  const payload = req.payload\n  const logger = getLogger({ payload })\n  const { locale, trash, where } = input\n\n  logger.info(`Counting documents in collection: ${collectionSlug}`)\n\n  try {\n    const result = await payload.count({\n      collection: collectionSlug,\n      req,\n      ...localAPIDefaults(authorizedMCP),\n      ...(locale ? { locale } : {}),\n      ...(trash !== undefined ? { trash } : {}),\n      ...(where ? { where } : {}),\n    })\n\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `Collection \"${collectionSlug}\" contains ${result.totalDocs} matching documents.\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: result,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error counting documents in ${collectionSlug}: ${errorMessage}`)\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `❌ **Error counting documents in collection \"${collectionSlug}\":** ${errorMessage}`,\n        },\n      ],\n      isError: true,\n    }\n  }\n})\n"],"names":["z","defaultAccess","defineCollectionTool","getLogger","localAPIDefaults","whereSchema","DEFAULT_DESCRIPTION","countDocumentsTool","access","args","Boolean","permissions","collections","collectionSlug","read","annotations","destructiveHint","idempotentHint","openWorldHint","readOnlyHint","title","description","input","object","locale","string","describe","optional","trash","boolean","where","handler","authorizedMCP","req","payload","logger","info","result","count","collection","undefined","content","type","text","totalDocs","JSON","stringify","doc","error","errorMessage","Error","message","isError"],"mappings":"AAAA,SAASA,CAAC,QAAQ,MAAK;AAEvB,SAASC,aAAa,QAAQ,4BAA2B;AACzD,SAASC,oBAAoB,QAAQ,yBAAwB;AAC7D,SAASC,SAAS,QAAQ,8BAA6B;AACvD,SAASC,gBAAgB,QAAQ,qCAAoC;AACrE,SAASC,WAAW,QAAQ,gCAA+B;AAE3D,MAAMC,sBACJ;AAEF,OAAO,MAAMC,qBAAqBL,qBAAqB;IACrDM,QAAQ,CAACC,OACPR,cAAcQ,SAASC,QAAQD,KAAKE,WAAW,EAAEC,aAAa,CAACH,KAAKI,cAAc,CAAC,EAAEC;IACvFC,aAAa;QACXC,iBAAiB;QACjBC,gBAAgB;QAChBC,eAAe;QACfC,cAAc;QACdC,OAAO;IACT;IACAC,aAAaf;IACbgB,OAAOtB,EAAEuB,MAAM,CAAC;QACdC,QAAQxB,EAAEyB,MAAM,GAAGC,QAAQ,CAAC,+CAA+CC,QAAQ;QACnFC,OAAO5B,EACJ6B,OAAO,GACPH,QAAQ,CAAC,oFACTC,QAAQ;QACXG,OAAOzB,YACJqB,QAAQ,CACP,oJAEDC,QAAQ;IACb;AACF,GAAGI,OAAO,CAAC,OAAO,EAAEC,aAAa,EAAEnB,cAAc,EAAES,KAAK,EAAEW,GAAG,EAAE;IAC7D,MAAMC,UAAUD,IAAIC,OAAO;IAC3B,MAAMC,SAAShC,UAAU;QAAE+B;IAAQ;IACnC,MAAM,EAAEV,MAAM,EAAEI,KAAK,EAAEE,KAAK,EAAE,GAAGR;IAEjCa,OAAOC,IAAI,CAAC,CAAC,kCAAkC,EAAEvB,gBAAgB;IAEjE,IAAI;QACF,MAAMwB,SAAS,MAAMH,QAAQI,KAAK,CAAC;YACjCC,YAAY1B;YACZoB;YACA,GAAG7B,iBAAiB4B,cAAc;YAClC,GAAIR,SAAS;gBAAEA;YAAO,IAAI,CAAC,CAAC;YAC5B,GAAII,UAAUY,YAAY;gBAAEZ;YAAM,IAAI,CAAC,CAAC;YACxC,GAAIE,QAAQ;gBAAEA;YAAM,IAAI,CAAC,CAAC;QAC5B;QAEA,OAAO;YACLW,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,YAAY,EAAE9B,eAAe,WAAW,EAAEwB,OAAOO,SAAS,CAAC,kCAAkC,EAAEC,KAAKC,SAAS,CAACT,QAAQ,QAAQ,CAAC;gBACxI;aACD;YACDU,KAAKV;QACP;IACF,EAAE,OAAOW,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMG,OAAO,GAAG;QAC9DhB,OAAOa,KAAK,CAAC,CAAC,4BAA4B,EAAEnC,eAAe,EAAE,EAAEoC,cAAc;QAC7E,OAAO;YACLR,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,4CAA4C,EAAE9B,eAAe,KAAK,EAAEoC,cAAc;gBAC3F;aACD;YACDG,SAAS;QACX;IACF;AACF,GAAE"}

package/dist/mcp/builtin/collections/countVersionsTool.d.ts

@@ -0,0 +1,2 @@
+export declare const countVersionsTool: import("../../../types.js").CollectionTool;
+//# sourceMappingURL=countVersionsTool.d.ts.map

package/dist/mcp/builtin/collections/countVersionsTool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"countVersionsTool.d.ts","sourceRoot":"","sources":["../../../../src/mcp/builtin/collections/countVersionsTool.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,iBAAiB,4CA0D5B,CAAA"}

package/dist/mcp/builtin/collections/countVersionsTool.js

@@ -0,0 +1,65 @@
+import { z } from 'zod';
+import { defaultAccess } from '../../../defaultAccess.js';
+import { defineCollectionTool } from '../../../defineTool.js';
+import { getLogger } from '../../../utils/getLogger.js';
+import { localAPIDefaults } from '../../../utils/localAPIDefaults.js';
+import { whereSchema } from '../../../utils/whereSchema.js';
+const DEFAULT_DESCRIPTION = 'Count document versions in any version-enabled collection by passing the collection slug and optional where clause.';
+export const countVersionsTool = defineCollectionTool({
+    access: (args)=>defaultAccess(args) && Boolean(args.permissions?.collections?.[args.collectionSlug]?.readVersions),
+    annotations: {
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: false,
+        readOnlyHint: true,
+        title: 'Count Versions'
+    },
+    description: DEFAULT_DESCRIPTION,
+    input: z.object({
+        locale: z.string().describe('Optional: locale code to count versions in').optional(),
+        where: whereSchema.describe('Optional: where clause for filtering versions. Version document fields are usually under "version". Example: {"version.title":{"contains":"test"}}').optional()
+    })
+}).handler(async ({ authorizedMCP, collectionSlug, input, req })=>{
+    const payload = req.payload;
+    const logger = getLogger({
+        payload
+    });
+    const { locale, where } = input;
+    logger.info(`Counting versions in collection: ${collectionSlug}`);
+    try {
+        const result = await payload.countVersions({
+            collection: collectionSlug,
+            req,
+            ...localAPIDefaults(authorizedMCP),
+            ...locale ? {
+                locale
+            } : {},
+            ...where ? {
+                where
+            } : {}
+        });
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `Collection "${collectionSlug}" contains ${result.totalDocs} matching versions.\n\`\`\`json\n${JSON.stringify(result)}\n\`\`\``
+                }
+            ],
+            doc: result
+        };
+    } catch (error) {
+        const errorMessage = error instanceof Error ? error.message : 'Unknown error';
+        logger.error(`Error counting versions in ${collectionSlug}: ${errorMessage}`);
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `❌ **Error counting versions in collection "${collectionSlug}":** ${errorMessage}`
+                }
+            ],
+            isError: true
+        };
+    }
+});
+
+//# sourceMappingURL=countVersionsTool.js.map