@payloadcms/plugin-mcp 4.0.0-internal.d28e9fb → 4.0.0-internal.d7d662c

package/src/collections/createApiKeysCollection.ts

@@ -1,373 +0,0 @@
-import type { CollectionConfig, CollectionSlug } from 'payload'
-
-import type { MCPPluginConfig } from '../types.js'
-
-import { toCamelCase } from '../utils/camelCase.js'
-import { createApiKeyFields } from '../utils/createApiKeyFields.js'
-
-export const createAPIKeysCollection = (
-  collections: MCPPluginConfig['collections'],
-  globals: MCPPluginConfig['globals'],
-  customTools: Array<{ description: string; name: string }> = [],
-  experimentalTools: NonNullable<MCPPluginConfig['experimental']>['tools'] = {},
-  pluginOptions: MCPPluginConfig,
-): CollectionConfig => {
-  const customToolsFields = customTools.map((tool) => {
-    const camelCasedName = toCamelCase(tool.name)
-    return {
-      name: camelCasedName,
-      type: 'checkbox' as const,
-      admin: {
-        description: tool.description,
-      },
-      defaultValue: true,
-      label: camelCasedName,
-    }
-  })
-
-  const customResourceFields =
-    pluginOptions.mcp?.resources?.map((resource) => {
-      const camelCasedName = toCamelCase(resource.name)
-      return {
-        name: camelCasedName,
-        type: 'checkbox' as const,
-        admin: {
-          description: resource.description,
-        },
-        defaultValue: true,
-        label: camelCasedName,
-      }
-    }) || []
-
-  const customPromptFields =
-    pluginOptions.mcp?.prompts?.map((prompt) => {
-      const camelCasedName = toCamelCase(prompt.name)
-      return {
-        name: camelCasedName,
-        type: 'checkbox' as const,
-        admin: {
-          description: prompt.description,
-        },
-        defaultValue: true,
-        label: camelCasedName,
-      }
-    }) || []
-
-  const userCollection = pluginOptions.userCollection
-
-  return {
-    slug: 'payload-mcp-api-keys',
-    admin: {
-      description:
-        'API keys control which collections, resources, tools, and prompts MCP clients can access',
-      group: 'MCP',
-      useAsTitle: 'label',
-    },
-    auth: {
-      disableLocalStrategy: true,
-      useAPIKey: true,
-    },
-    fields: [
-      {
-        name: 'user',
-        type: 'relationship',
-        admin: {
-          description: 'The user that the API key is associated with.',
-        },
-        relationTo: userCollection as CollectionSlug,
-        required: true,
-      },
-      {
-        name: 'label',
-        type: 'text',
-        admin: {
-          description: 'A useful label for the API key.',
-        },
-      },
-      {
-        name: 'description',
-        type: 'text',
-        admin: {
-          description: 'The purpose of the API key.',
-        },
-      },
-
-      ...createApiKeyFields({
-        config: collections,
-        configType: 'collection',
-      }),
-
-      ...createApiKeyFields({
-        config: globals,
-        configType: 'global',
-      }),
-
-      ...(customTools.length > 0
-        ? [
-            {
-              type: 'collapsible' as const,
-              admin: {
-                description: 'Manage client access to tools',
-                position: 'sidebar' as const,
-              },
-              fields: [
-                {
-                  name: 'payload-mcp-tool',
-                  type: 'group' as const,
-                  fields: customToolsFields,
-                  label: false as const,
-                },
-              ],
-              label: 'Tools',
-            },
-          ]
-        : []),
-
-      ...(pluginOptions.mcp?.resources && pluginOptions.mcp?.resources.length > 0
-        ? [
-            {
-              type: 'collapsible' as const,
-              admin: {
-                description: 'Manage client access to resources',
-                position: 'sidebar' as const,
-              },
-              fields: [
-                {
-                  name: 'payload-mcp-resource',
-                  type: 'group' as const,
-                  fields: customResourceFields,
-                  label: false as const,
-                },
-              ],
-              label: 'Resources',
-            },
-          ]
-        : []),
-
-      ...(pluginOptions.mcp?.prompts && pluginOptions.mcp?.prompts.length > 0
-        ? [
-            {
-              type: 'collapsible' as const,
-              admin: {
-                description: 'Manage client access to prompts',
-                position: 'sidebar' as const,
-              },
-              fields: [
-                {
-                  name: 'payload-mcp-prompt',
-                  type: 'group' as const,
-                  fields: customPromptFields,
-                  label: false as const,
-                },
-              ],
-              label: 'Prompts',
-            },
-          ]
-        : []),
-
-      // Experimental Tools
-      ...(process.env.NODE_ENV === 'development' &&
-      (experimentalTools?.collections?.enabled ||
-        experimentalTools?.jobs?.enabled ||
-        experimentalTools?.config?.enabled ||
-        experimentalTools?.auth?.enabled)
-        ? [
-            {
-              type: 'collapsible' as const,
-              admin: {
-                description: 'Manage client access to experimental tools',
-                position: 'sidebar' as const,
-              },
-              fields: [
-                ...(experimentalTools?.collections?.enabled
-                  ? [
-                      {
-                        name: 'collections',
-                        type: 'group' as const,
-                        fields: [
-                          {
-                            name: 'find',
-                            type: 'checkbox' as const,
-                            admin: {
-                              description:
-                                'Allow LLMs to find and list Payload collections with optional content and document counts.',
-                            },
-                            defaultValue: false,
-                          },
-                          {
-                            name: 'create',
-                            type: 'checkbox' as const,
-                            admin: {
-                              description:
-                                'Allow LLMs to create new Payload collections with specified fields and configuration.',
-                            },
-                            defaultValue: false,
-                          },
-                          {
-                            name: 'update',
-                            type: 'checkbox' as const,
-                            admin: {
-                              description:
-                                'Allow LLMs to update existing Payload collections with new fields, modifications, or configuration changes.',
-                            },
-                            defaultValue: false,
-                          },
-                          {
-                            name: 'delete',
-                            type: 'checkbox' as const,
-                            admin: {
-                              description:
-                                'Allow LLMs to delete Payload collections and optionally update the configuration.',
-                            },
-                            defaultValue: false,
-                          },
-                        ],
-                      },
-                    ]
-                  : []),
-                ...(experimentalTools?.jobs?.enabled
-                  ? [
-                      {
-                        name: 'jobs',
-                        type: 'group' as const,
-                        fields: [
-                          {
-                            name: 'create',
-                            type: 'checkbox' as const,
-                            admin: {
-                              description:
-                                'Allow LLMs to create new Payload jobs (tasks and workflows) with custom schemas and configuration.',
-                            },
-                            defaultValue: false,
-                          },
-                          {
-                            name: 'run',
-                            type: 'checkbox' as const,
-                            admin: {
-                              description:
-                                'Allow LLMs to execute Payload jobs with custom input data and queue options.',
-                            },
-                            defaultValue: false,
-                          },
-                          {
-                            name: 'update',
-                            type: 'checkbox' as const,
-                            admin: {
-                              description:
-                                'Allow LLMs to update existing Payload jobs with new schemas, configuration, or handler code.',
-                            },
-                            defaultValue: false,
-                          },
-                        ],
-                      },
-                    ]
-                  : []),
-                ...(experimentalTools?.config?.enabled
-                  ? [
-                      {
-                        name: 'config',
-                        type: 'group' as const,
-                        fields: [
-                          {
-                            name: 'find',
-                            type: 'checkbox' as const,
-                            admin: {
-                              description:
-                                'Allow LLMs to read and display a Payload configuration file.',
-                            },
-                            defaultValue: false,
-                          },
-                          {
-                            name: 'update',
-                            type: 'checkbox' as const,
-                            admin: {
-                              description:
-                                'Allow LLMs to update a Payload configuration file with various modifications.',
-                            },
-                            defaultValue: false,
-                          },
-                        ],
-                      },
-                    ]
-                  : []),
-                ...(experimentalTools?.auth?.enabled
-                  ? [
-                      {
-                        name: 'auth',
-                        type: 'group' as const,
-                        fields: [
-                          {
-                            name: 'auth',
-                            type: 'checkbox' as const,
-                            admin: {
-                              description:
-                                'Allow LLMs to check authentication status for a user by setting custom headers. (e.g. {"Authorization": "Bearer <token>"})',
-                            },
-                            defaultValue: false,
-                            label: 'Check Auth Status',
-                          },
-                          {
-                            name: 'login',
-                            type: 'checkbox' as const,
-                            admin: {
-                              description:
-                                'Allow LLMs to authenticate a user with email and password.',
-                            },
-                            defaultValue: false,
-                            label: 'User Login',
-                          },
-                          {
-                            name: 'verify',
-                            type: 'checkbox' as const,
-                            admin: {
-                              description:
-                                'Allow LLMs to verify a user email with a verification token.',
-                            },
-                            defaultValue: false,
-                            label: 'Email Verification',
-                          },
-                          {
-                            name: 'resetPassword',
-                            type: 'checkbox' as const,
-                            admin: {
-                              description:
-                                'Allow LLMs to reset a user password with a reset token.',
-                            },
-                            defaultValue: false,
-                            label: 'Reset Password',
-                          },
-                          {
-                            name: 'forgotPassword',
-                            type: 'checkbox' as const,
-                            admin: {
-                              description: 'Allow LLMs to send a password reset email to a user.',
-                            },
-                            defaultValue: false,
-                            label: 'Forgot Password',
-                          },
-                          {
-                            name: 'unlock',
-                            type: 'checkbox' as const,
-                            admin: {
-                              description:
-                                'Allow LLMs to unlock a user account that has been locked due to failed login attempts.',
-                            },
-                            defaultValue: false,
-                            label: 'Unlock Account',
-                          },
-                        ],
-                      },
-                    ]
-                  : []),
-              ],
-              label: 'Experimental Tools',
-            },
-          ]
-        : []),
-    ],
-    labels: {
-      plural: 'API Keys',
-      singular: 'API Key',
-    },
-  }
-}

package/src/defaults.ts

@@ -1,3 +0,0 @@
-export const defaults = {
-  userCollection: 'users',
-}

package/src/endpoints/mcp.ts

@@ -1,91 +0,0 @@
-import crypto from 'crypto'
-import { type PayloadHandler, type TypedUser, UnauthorizedError, type Where } from 'payload'
-
-import type { MCPAccessSettings, MCPPluginConfig } from '../types.js'
-
-import { createRequestFromPayloadRequest } from '../mcp/createRequest.js'
-import { getMCPHandler } from '../mcp/getMcpHandler.js'
-
-export const initializeMCPHandler = (pluginOptions: MCPPluginConfig) => {
-  const mcpHandler: PayloadHandler = async (req) => {
-    const { payload } = req
-    const MCPOptions = pluginOptions.mcp || {}
-    const MCPHandlerOptions = MCPOptions.handlerOptions || {}
-    const useVerboseLogs = MCPHandlerOptions.verboseLogs ?? false
-
-    req.payloadAPI = 'MCP' as const
-
-    const getDefaultMcpAccessSettings = async (overrideApiKey?: null | string) => {
-      const apiKey =
-        (overrideApiKey ?? req.headers.get('Authorization')?.startsWith('Bearer '))
-          ? req.headers.get('Authorization')?.replace('Bearer ', '').trim()
-          : null
-
-      if (apiKey === null) {
-        throw new UnauthorizedError()
-      }
-
-      const sha256APIKeyIndex = crypto
-        .createHmac('sha256', payload.secret)
-        .update(apiKey || '')
-        .digest('hex')
-
-      const where: Where = {
-        apiKeyIndex: {
-          equals: sha256APIKeyIndex,
-        },
-      }
-
-      const { docs } = await payload.find({
-        collection: 'payload-mcp-api-keys',
-        depth: 1,
-        limit: 1,
-        pagination: false,
-        where,
-      })
-
-      if (docs.length === 0) {
-        throw new UnauthorizedError()
-      }
-
-      if (useVerboseLogs) {
-        payload.logger.info('[payload-mcp] API Key is valid')
-      }
-
-      const user = docs[0]?.user as TypedUser
-      user.collection = pluginOptions.userCollection as string
-      user._strategy = 'mcp-api-key' as const
-
-      return docs[0] as unknown as MCPAccessSettings
-    }
-
-    const mcpAccessSettings = pluginOptions.overrideAuth
-      ? await pluginOptions.overrideAuth(req, getDefaultMcpAccessSettings)
-      : await getDefaultMcpAccessSettings()
-
-    // @modelcontextprotocol/sdk's StreamableHTTPServerTransport uses @hono/node-server's
-    // getRequestListener, which replaces global.Request and global.Response with Hono
-    // custom classes. Unfortunately, we cannot pass overrideGlobalObjects: false because the option is
-    // consumed inside the SDK transport and is not exposed to callers.
-    // Save originals here and restore after the handler resolves so that Next.js
-    // instanceof Response checks on subsequent route handlers keep working.
-    const globals = globalThis as Record<string, unknown>
-    const originalResponse = globals['Response']
-    const originalRequest = globals['Request']
-
-    const handler = getMCPHandler(pluginOptions, mcpAccessSettings, req)
-    const request = createRequestFromPayloadRequest(req)
-
-    try {
-      return await handler(request)
-    } finally {
-      if (globals['Response'] !== originalResponse) {
-        Object.defineProperty(globalThis, 'Response', { value: originalResponse })
-      }
-      if (globals['Request'] !== originalRequest) {
-        Object.defineProperty(globalThis, 'Request', { value: originalRequest })
-      }
-    }
-  }
-  return mcpHandler
-}

package/src/mcp/createRequest.ts

@@ -1,13 +0,0 @@
-import { AuthenticationError, type PayloadRequest } from 'payload'
-
-export const createRequestFromPayloadRequest = (req: PayloadRequest) => {
-  if (!req.url) {
-    throw new AuthenticationError()
-  }
-  return new Request(req.url, {
-    body: req.body,
-    duplex: 'half',
-    headers: req.headers,
-    method: req.method,
-  } as { duplex: 'half' } & RequestInit)
-}