توضیحات
Turn your WordPress site into an MCP server so any logged-in user can connect an AI client with role-based, capability-limited access.
تغییرات این نسخه
1.0.1
Added an optional, dismissible admin notice inviting a WordPress.org review. It appears only to administrators, only after the plugin has been in use for a week and at least one AI client has been connected, and never reappears once dismissed.
1.0.0
Initial release.
OAuth 2.1 authorization (Dynamic Client Registration, PKCE, refresh-token rotation with a grace window) so any MCP client connects by pasting one URL and logging in through the browser.
MCP JSON-RPC endpoint (initialize / tools/list / tools/call / ping) authenticated with per-user bearer tokens.
Core content tools: posts, pages, media, comments, categories, and tags — each gated by the connected user’s own WordPress capabilities and routed through core’s REST controllers.
WooCommerce tools (products, orders, customers, coupons, sales report) that appear automatically when WooCommerce is active, gated by manage_woocommerce.
Automatic tools for every public, REST-enabled custom post type, gated by each type’s own capabilities.
SEO tools (get/set title, meta description, focus keyword, canonical, noindex) when Yoast SEO or Rank Math is active.
Site policy controls: read-only mode, “require human review” publishing, a deletion kill-switch, and per-tool toggles.
Audit log of every tool call with an admin viewer, plus admin diagnostics for OAuth discovery and subdirectory installs.
mcp_connector_tools and mcp_connector_custom_post_types filters for extending the tool catalog.
Security: SSRF protection
Added an optional, dismissible admin notice inviting a WordPress.org review. It appears only to administrators, only after the plugin has been in use for a week and at least one AI client has been connected, and never reappears once dismissed.
1.0.0
Initial release.
OAuth 2.1 authorization (Dynamic Client Registration, PKCE, refresh-token rotation with a grace window) so any MCP client connects by pasting one URL and logging in through the browser.
MCP JSON-RPC endpoint (initialize / tools/list / tools/call / ping) authenticated with per-user bearer tokens.
Core content tools: posts, pages, media, comments, categories, and tags — each gated by the connected user’s own WordPress capabilities and routed through core’s REST controllers.
WooCommerce tools (products, orders, customers, coupons, sales report) that appear automatically when WooCommerce is active, gated by manage_woocommerce.
Automatic tools for every public, REST-enabled custom post type, gated by each type’s own capabilities.
SEO tools (get/set title, meta description, focus keyword, canonical, noindex) when Yoast SEO or Rank Math is active.
Site policy controls: read-only mode, “require human review” publishing, a deletion kill-switch, and per-tool toggles.
Audit log of every tool call with an admin viewer, plus admin diagnostics for OAuth discovery and subdirectory installs.
mcp_connector_tools and mcp_connector_custom_post_types filters for extending the tool catalog.
Security: SSRF protection