Payload: Content management system

Learn how Payload provides a TypeScript backend, configurable content models, an admin panel and APIs for Next.js applications and headless websites.

Updated 8 September 2026

What Payload provides

Payload is an open-source TypeScript system that supplies backend capabilities for Next.js applications. A configuration defines the data model and produces an administration panel, APIs, authentication and access controls. Its documented use cases include content management, internal tools and digital asset management.

For a product site, developers can define structured case studies and give editors a matching interface. The content model is maintained in code while the content itself is edited through the admin panel.

Data access and frontend choices

Payload provides REST, GraphQL and server-side data access, with database and storage integration. The CMS can support a custom frontend rather than dictating one visual template.

A shared data model can serve a website and an internal application, but those consumers may need different permissions. Define which fields each audience can read or change before exposing the API.

What a Payload project still needs

Plan deployment, database migrations, file storage and recovery together. Generating an admin panel does not eliminate the need to operate the data it manages.

Test permissions with editor and visitor accounts, not only an administrator. A preview that works for a developer can conceal missing access rules or content that should not be public.

How DNSTrace.dev detects Payload

Detection reads the final HTTPS response and the first bytes of its markup. One matching signal is reported as strong evidence; two or more independent signals are reported as confirmed.

x-powered-by naming Payload — Payload adds its name to the header, often combined with the framework, as in Next.js, Payload.

What a detection proves

The response was produced by an application running Payload.

What it does not prove

The version, the database behind it, or the host. Payload can be removed from the header, so absence proves nothing.

Common questions about Payload

Is Payload only a visual page builder?

No. Payload provides configurable backend and CMS capabilities, including an admin panel and APIs. A project defines its content model and builds the frontend experience it needs.

Why does Payload appear next to Next.js?

Payload commonly runs inside a Next.js application, so both names arrive in one x-powered-by value. DNSTrace.dev reports them as separate detections because they are separate pieces of software.

Is the admin panel detectable?

Not from the home document. DNSTrace.dev reads the response for the requested hostname only and does not probe admin paths.

Application framework