Payload

Payload is an open-source, MIT-licensed, TypeScript-native headless CMS and application framework that installs directly into a Next.js /app folder. We rate it 88/100 — it is the best code-first CMS for teams already shipping on Next.js in 2026, and the Figma acquisition on June 17, 2025 has only accelerated its momentum. It is the wrong call only for non-technical content teams who want a point-and-click WYSIWYG out of the box.

What is Payload?

Payload was founded in 2018 by James Mikrut, Elliot DeNolf, and Dan Ribbens out of Grand Rapids, Michigan, shipped its first public beta in January 2021, hit 1.0 in 2022, and raised a $4.7M seed led by Matt Mullenweg and Y Combinator in November 2022. On June 17, 2025 the entire Payload team joined Figma; financial terms were not disclosed, and Payload remains MIT-licensed and fully self-hostable. The GitHub repository sits at roughly 41,900 stars, 96% TypeScript, with active weekly releases through April 2026.

The specific problem Payload solves is the headless-CMS tax: most headless CMSes force you to run a separate Node service, configure a SaaS dashboard remote from your code, and glue the two together with SDKs and webhooks. Payload collapses that stack — you install one npm package, drop a collections config into your existing Next.js app, and get a full admin panel, REST and GraphQL APIs, authentication, uploads, and a TypeScript-typed client on the same deployment. Unlike Sanity or Contentful, there is no external service to reach for at runtime — your database is yours, your server is yours, and your code owns the schema.

Key Features of Payload

• Installs into /app: Payload is the first headless CMS that mounts as a normal Next.js App Router route — no separate server, no separate deploy. npx create-payload-app scaffolds a production-ready admin panel in under 2 minutes.
• Fully typed everything: Define collections in TypeScript and Payload generates typed REST, GraphQL, and local-API clients automatically. No code-gen step to forget, no drift between schema and types.
• Bring your database: Native adapters for PostgreSQL, Neon, MongoDB, and SQLite. Run on a $5 VPS or ship to Vercel/Cloudflare Workers — Payload does not care.
• Drafts, versions, and localization: Built-in document versioning, autosave drafts, scheduled publishing, and localization across 30+ locales — no plugin required.
• Swap any admin component: The admin panel is ordinary React. Replace any field, cell, view, or the whole dashboard by importing your own React component in the config — white-labelling is trivial.
• Granular access control: Document-level and field-level access functions run as regular async TypeScript — you get RBAC, row-level security, and per-field permissions in the same function signature.
• Lexical rich text: Payload 3.0 ships Meta's Lexical editor with blocks, mentions, embeds, and custom nodes — a measurable upgrade over the Slate-based editor in earlier versions.

What Users Say About Payload

Sentiment on the Payload 3.0 Show HN thread is strongly positive on developer experience. Top-voted commenters praise "actual types end-to-end" and call the local API "the feature other CMSes forgot." On r/nextjs the recurring theme is teams replacing Strapi or Directus with Payload and cutting their content backend from two deployments to one. On G2 Payload currently holds a 98% user-satisfaction rating across 123 reviews.

The honest complaints are consistent. First, Payload is unopinionated: there is no marketing-friendly page builder out of the box, so content teams coming from Webflow or WordPress feel the ramp. Second, several HN commenters noted that 2FA for admin users is not enforced by default and must be configured explicitly — a fair criticism the Payload team has acknowledged on their roadmap. Third, the ecosystem is smaller than Sanity's or Strapi's, so obscure integrations often mean writing a plugin rather than installing one.

Payload Pricing

Payload is MIT-licensed and free to self-host forever. Payload Cloud is a fully managed option with a free-for-development Sandbox tier, then usage-based production tiers.

Plan	Price	Key Limits
Self-hosted	$0	MIT-licensed, unlimited projects, unlimited seats, all features — bring your own infrastructure
Cloud Sandbox	$0/mo	1 dev environment, MongoDB Atlas M0, Cloudflare R2, sleeps after inactivity — for dev only
Cloud Standard	From $35/mo	Production workloads, 10 GB DB + 20 GB storage, email included, automated daily backups
Cloud Pro	From $199/mo	Dedicated compute, 100 GB DB, 500 GB storage, point-in-time restore, SSO add-on
Enterprise	Up to ~$833/mo (custom)	Reserved capacity, priority support, custom SLAs, audit logs, HIPAA BAA option

Who Should Use Payload?

Best for: Next.js engineering teams who want a code-first CMS, TypeScript shops that prize type-safety from schema to frontend, agencies building client sites that need full white-labelling, any team whose marketing site already lives in a Next.js monorepo, and anyone replacing Strapi, Directus, or a bespoke Mongoose-plus-admin stack.

Not ideal for: Non-technical content teams who want a drag-and-drop page builder out of the box (look at Webflow or WordPress), teams with no Node.js or TypeScript expertise in-house, and sites with zero dynamic content where a static site generator is simpler.

Pros and Cons

Pros:

• MIT licensed — genuine open source with no SSPL or BSL strings attached, confirmed intact after the Figma acquisition
• Installs as a Next.js App Router route — one deployment, one codebase, one set of types
• End-to-end TypeScript without a code-gen step — schema changes propagate to your frontend automatically
• Bring-your-own database: PostgreSQL, Neon, MongoDB, or SQLite via first-party adapters
• Lexical rich-text editor and block-based layouts ship by default
• 98% user satisfaction on G2 across 123 verified reviews

Cons:

• No drag-and-drop marketing page builder out of the box — content teams need setup work
• 2FA for admin users is opt-in rather than enforced by default
• Ecosystem of third-party plugins is smaller than Strapi or Sanity today
• Cloud pricing can climb quickly for database-heavy workloads — many teams stay self-hosted

Alternatives to Payload

Strapi — the older Node-based open-source CMS with a much bigger marketplace but a less polished TypeScript story. Sanity — SaaS-first, extremely polished editor, but your data lives in Sanity's cloud. Directus — database-first, attaches to an existing Postgres schema rather than defining one, the right pick when you already have tables. Contentful — enterprise staple with the deepest integration catalogue, but priced accordingly. See our developer-tools index for full head-to-head comparisons.

Verdict: Is Payload Worth It?

Yes — for any team shipping on Next.js in 2026, Payload is the fastest path to a typed, self-hostable CMS, and the MIT license plus Figma-backed runway make it a safer long-term bet than it was a year ago. The 88/100 rating reflects a category-leading developer experience offset by three honest gaps: the lack of a native page builder, the opt-in 2FA default, and a smaller plugin ecosystem than the incumbents. If you are already living in TypeScript and Next.js, you will ship faster with Payload than with any other headless CMS on the market today. If your content team is non-technical, pair Payload with a simpler front-end CMS or look at Webflow instead.

Frequently Asked Questions

Is Payload free?

Yes. Payload is MIT-licensed and free to self-host with no feature limits, no seat caps, and no usage caps. Payload Cloud is a managed hosting option with plans starting at $35/month; a free Sandbox tier is available for development.

Is Payload open source?

Yes, fully. Payload is released under the MIT license on GitHub, and the Figma acquisition explicitly committed to keeping the project MIT-licensed and community-driven.

What databases does Payload support?

Official first-party adapters ship for PostgreSQL (including Neon and Supabase), MongoDB, and SQLite. A MySQL adapter is maintained in the community plugins repository.

How does Payload compare to Strapi?

Payload is TypeScript-native and installs directly into a Next.js /app folder, giving end-to-end type safety without a code-gen step. Strapi has a larger plugin marketplace and more community templates but a less polished TypeScript story and requires running a separate Node service.

Did Figma's acquisition change Payload's license?

No. Payload remains MIT-licensed post-acquisition. Figma publicly committed to continued investment in the open-source repository, and day-to-day development continues under the same core team.

Can I use Payload without Next.js?

Yes, but Payload 3.x is optimised for Next.js. You can still use Payload as a standalone Express or Fastify app with its REST and GraphQL APIs, but the App Router integration is the recommended path in 2026.