CodeVetter · Repo Unpack · Feature catalog
strapi/strapi
The inspected surfaces support model-driven APIs, browser editing, publication/localization, identity management, and media operations. Optional GraphQL and licensed editorial capabilities extend the base CMS. CLI commands cover application operation and data movement, while MCP provides a separate authenticated automation surface. These eight capability groups describe the inspected implementation; the bounded inventory is not an exhaustive screen or route catalog.
- Generated REST routes distinguish singular single types from plural collection types and expose read/write operations with request/response schemas. The GraphQL plugin builds a Content API schema and initializes Apollo only when that schema is nonempty.
- Content Manager registers a navigation entry and content-manager/* routes for collection lists, single/collection editing, cloning, list/edit/component configuration, permission errors, history, and preview. Document action UI exposes save and publish shortcut hints.
- Content-Type Builder exposes admin endpoints to list, inspect, create, update, and delete content types and create components. Mutation routes combine admin permission policies with isDevelopmentMode middleware.
- Document Service supports create, clone, update, delete, count, and reads; publish/unpublish/discardDraft are exposed only for draft-and-publish types. Localized operations apply a default locale, and multi-locale lookup accepts '*' to avoid selecting a single locale.
- Users & Permissions provides local login/registration and provider callbacks. Login rejects disabled providers, invalid passwords, unconfirmed accounts when confirmation is required, and blocked users; refresh mode supports session responses, while session-list tests specify authentication and current-session display behavior.
- Media permissions cover upload, crop/details/replace/delete, download, copy-link, and view configuration. Provider adapters support streams or buffers; inspected implementations include local filesystem storage, AWS S3 SDK integration, and Cloudinary stream/chunked uploads.
- Review Workflows and Content Releases expose their runtime modules under separate EE feature checks, retaining content types when disabled. Audit Logs routes/controllers require both admin.auditLogs.enabled and the audit-logs license feature; contributor docs describe filtered CSV export with read/export permissions.
- CLI factories cover admin-user management, configuration dump/restore, diagnostics, generation, build/develop/start, import/export/transfer, OpenAPI, and cloud commands; exports support tar or unpacked directories. Automation also includes configured cron tasks, event-driven webhooks, and MCP tool/prompt/resource registration.