# Feature catalog — payloadcms/payload

> Canonical page: https://codevetter.com/unpack/payload/feature-catalog

# Feature catalog — payloadcms/payload

Scanned commit e6cd442f40563b2dd95cebcc6a3ffaa2dbbc68f2 (2026-10-02). Generated by codevetter codevetter 1.15.0 on 2026-10-02.

Source inspection; upstream code and tests were not executed.

The inspected features cover editor workflows, application APIs, authentication, uploads, localization, and background work. Configured schemas determine which entities and capabilities appear. CLI commands provide another operational surface, while optional packages add specialized product functionality. This catalog groups evidenced capabilities and does not claim exhaustive coverage of every package or screen.
- The default admin view registry includes dashboard, account, first-user creation, login, logout, inactivity logout, password recovery/reset, verification, unauthorized, and not-found screens. — [packages/ui/src/views/Root/adminViews.tsx#L36-55](https://github.com/payloadcms/payload/blob/e6cd442f40563b2dd95cebcc6a3ffaa2dbbc68f2/packages/ui/src/views/Root/adminViews.tsx#L36-L55)
- Collection REST endpoints provide count, create, bulk and single deletion, document access, list and single reads, duplicate, version listing/detail/restoration, and bulk or single PATCH updates. — [packages/payload/src/collections/endpoints/index.ts#L25-55](https://github.com/payloadcms/payload/blob/e6cd442f40563b2dd95cebcc6a3ffaa2dbbc68f2/packages/payload/src/collections/endpoints/index.ts#L25-L55) [packages/payload/src/collections/endpoints/index.ts#L63-95](https://github.com/payloadcms/payload/blob/e6cd442f40563b2dd95cebcc6a3ffaa2dbbc68f2/packages/payload/src/collections/endpoints/index.ts#L63-L95)
- Payload exposes Local, REST, and GraphQL APIs; the Next GraphQL POST handler generates a schema from config, applies validation rules, and returns 404 when graphQL.disable is enabled. — [docs/getting-started/concepts.mdx#L59-76](https://github.com/payloadcms/payload/blob/e6cd442f40563b2dd95cebcc6a3ffaa2dbbc68f2/docs/getting-started/concepts.mdx#L59-L76) [packages/next/src/routes/graphql/handler.ts#L98-145](https://github.com/payloadcms/payload/blob/e6cd442f40563b2dd95cebcc6a3ffaa2dbbc68f2/packages/next/src/routes/graphql/handler.ts#L98-L145)
- Local login supports configured email and/or username identities, account locking, optional verified-email enforcement, optional sessions, and opportunistic migration of stored password hashes. — [packages/payload/src/auth/operations/login.ts#L110-155](https://github.com/payloadcms/payload/blob/e6cd442f40563b2dd95cebcc6a3ffaa2dbbc68f2/packages/payload/src/auth/operations/login.ts#L110-L155) [packages/payload/src/auth/operations/login.ts#L206-248](https://github.com/payloadcms/payload/blob/e6cd442f40563b2dd95cebcc6a3ffaa2dbbc68f2/packages/payload/src/auth/operations/login.ts#L206-L248) [packages/payload/src/auth/operations/login.ts#L280-326](https://github.com/payloadcms/payload/blob/e6cd442f40563b2dd95cebcc6a3ffaa2dbbc68f2/packages/payload/src/auth/operations/login.ts#L280-L326)
- Creation supports drafts, autosave versions, localized publication status, and publishing accessible locales; scheduled publishing configuration adds a task during sanitization. — [packages/payload/src/collections/operations/create.ts#L170-194](https://github.com/payloadcms/payload/blob/e6cd442f40563b2dd95cebcc6a3ffaa2dbbc68f2/packages/payload/src/collections/operations/create.ts#L170-L194) [packages/payload/src/collections/operations/create.ts#L400-424](https://github.com/payloadcms/payload/blob/e6cd442f40563b2dd95cebcc6a3ffaa2dbbc68f2/packages/payload/src/collections/operations/create.ts#L400-L424) [packages/payload/src/collections/operations/create.ts#L497-507](https://github.com/payloadcms/payload/blob/e6cd442f40563b2dd95cebcc6a3ffaa2dbbc68f2/packages/payload/src/collections/operations/create.ts#L497-L507) [packages/payload/src/config/sanitize.ts#L547-556](https://github.com/payloadcms/payload/blob/e6cd442f40563b2dd95cebcc6a3ffaa2dbbc68f2/packages/payload/src/config/sanitize.ts#L547-L556)
- Uploads support multipart files, staged upload instructions, URL inputs, and local writes; S3 options additionally expose direct client uploads and signed downloads. — [packages/payload/src/utilities/addDataAndFileToRequest.ts#L35-85](https://github.com/payloadcms/payload/blob/e6cd442f40563b2dd95cebcc6a3ffaa2dbbc68f2/packages/payload/src/utilities/addDataAndFileToRequest.ts#L35-L85) [packages/payload/src/uploads/resolveURLUploadInput.ts#L28-63](https://github.com/payloadcms/payload/blob/e6cd442f40563b2dd95cebcc6a3ffaa2dbbc68f2/packages/payload/src/uploads/resolveURLUploadInput.ts#L28-L63) [packages/storage-s3/src/index.ts#L39-78](https://github.com/payloadcms/payload/blob/e6cd442f40563b2dd95cebcc6a3ffaa2dbbc68f2/packages/storage-s3/src/index.ts#L39-L78)
- Built-in CLI commands cover document/global operations, schema and type/import-map generation, build, migration management, and job execution/scheduling; automatic job crons conditionally schedule and run queues. — [packages/payload/src/config/defaults.ts#L6-43](https://github.com/payloadcms/payload/blob/e6cd442f40563b2dd95cebcc6a3ffaa2dbbc68f2/packages/payload/src/config/defaults.ts#L6-L43) [packages/payload/src/index.ts#L799-850](https://github.com/payloadcms/payload/blob/e6cd442f40563b2dd95cebcc6a3ffaa2dbbc68f2/packages/payload/src/index.ts#L799-L850)
- Documented optional features include Lexical rich text, iframe live preview using postMessage, and plugins for forms, MCP, tenancy, nested documents, redirects, search, Sentry, SEO, Stripe, import/export, and ecommerce. — [docs/rich-text/overview.mdx#L9-30](https://github.com/payloadcms/payload/blob/e6cd442f40563b2dd95cebcc6a3ffaa2dbbc68f2/docs/rich-text/overview.mdx#L9-L30) [docs/live-preview/overview.mdx#L9-13](https://github.com/payloadcms/payload/blob/e6cd442f40563b2dd95cebcc6a3ffaa2dbbc68f2/docs/live-preview/overview.mdx#L9-L13) [docs/plugins/overview.mdx#L47-61](https://github.com/payloadcms/payload/blob/e6cd442f40563b2dd95cebcc6a3ffaa2dbbc68f2/docs/plugins/overview.mdx#L47-L61)

Every claim links to its cited files at the pinned commit. Citations identify source evidence; they do not establish runtime correctness. Independent CodeVetter scan — not reviewed by upstream maintainers.

## Public product links

- [CodeVetter](https://codevetter.com/)
- [Download](https://codevetter.com/download)
- [Documentation](https://codevetter.com/docs/)
- [Source](https://github.com/Codevetter/codevetter)