{"id":261898,"date":"2025-12-08T10:33:05","date_gmt":"2025-12-08T10:33:05","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/easy-visual-mcp\/"},"modified":"2026-05-21T16:24:18","modified_gmt":"2026-05-21T16:24:18","slug":"stifli-flex-mcp","status":"publish","type":"plugin","link":"https:\/\/pt.wordpress.org\/plugins\/stifli-flex-mcp\/","author":23219905,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"3.3.4","stable_tag":"3.3.4","tested":"7.0","requires":"5.8","requires_php":"7.4","requires_plugins":null,"header_name":"StifLi Flex MCP - MCP Server with undo for ChatGPT, Claude & Gemini","header_author":"estebandestifli","header_description":"Transform your WordPress site into a Model Context Protocol (MCP) server. Expose 116 tools (54 WordPress, 61 WooCommerce, 1 Core) that AI agents like ChatGPT, Claude, and LibreChat can use to manage your WordPress and WooCommerce site via JSON-RPC 2.0.","assets_banners_color":"344fc9","last_updated":"2026-05-21 16:24:18","external_support_url":"","external_repository_url":"","donate_link":"https:\/\/github.com\/estebanstifli\/stifli-flex-mcp","header_plugin_uri":"https:\/\/github.com\/estebanstifli\/stifli-flex-mcp","header_author_uri":"","rating":5,"author_block_rating":0,"active_installs":1000,"downloads":16933,"num_ratings":4,"support_threads":9,"support_threads_resolved":9,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"1.0.3":{"tag":"1.0.3","author":"estebandezafra","date":"2025-12-08 10:32:56"},"1.0.4":{"tag":"1.0.4","author":"estebandezafra","date":"2026-01-07 09:26:08"},"1.0.5":{"tag":"1.0.5","author":"estebandezafra","date":"2026-02-01 04:10:51"},"2.0.1":{"tag":"2.0.1","author":"estebandezafra","date":"2026-02-04 05:00:29"},"2.0.2":{"tag":"2.0.2","author":"estebandezafra","date":"2026-02-11 09:09:11"},"2.0.3":{"tag":"2.0.3","author":"estebandezafra","date":"2026-02-12 09:20:58"},"2.1.0":{"tag":"2.1.0","author":"estebandezafra","date":"2026-02-25 16:32:31"},"2.2.0":{"tag":"2.2.0","author":"estebandezafra","date":"2026-03-06 20:53:31"},"3.0.1":{"tag":"3.0.1","author":"estebandezafra","date":"2026-03-26 14:40:09"},"3.0.2":{"tag":"3.0.2","author":"estebandezafra","date":"2026-04-07 19:38:53"},"3.0.3":{"tag":"3.0.3","author":"estebandezafra","date":"2026-04-08 05:53:50"},"3.1.0":{"tag":"3.1.0","author":"estebandezafra","date":"2026-04-08 11:05:48"},"3.1.1":{"tag":"3.1.1","author":"estebandezafra","date":"2026-04-09 10:17:31"},"3.1.2":{"tag":"3.1.2","author":"estebandezafra","date":"2026-04-11 08:26:16"},"3.1.3":{"tag":"3.1.3","author":"estebandezafra","date":"2026-04-13 08:27:31"},"3.1.4":{"tag":"3.1.4","author":"estebandezafra","date":"2026-04-16 14:52:15"},"3.1.5":{"tag":"3.1.5","author":"estebandezafra","date":"2026-04-17 08:52:53"},"3.2.0":{"tag":"3.2.0","author":"estebandezafra","date":"2026-04-23 09:36:02"},"3.2.1":{"tag":"3.2.1","author":"estebandezafra","date":"2026-04-26 17:21:30"},"3.2.6":{"tag":"3.2.6","author":"estebandezafra","date":"2026-04-30 20:03:54"},"3.2.7":{"tag":"3.2.7","author":"estebandezafra","date":"2026-05-02 06:14:18"},"3.2.8":{"tag":"3.2.8","author":"estebandezafra","date":"2026-05-04 19:41:49"},"3.2.9":{"tag":"3.2.9","author":"estebandezafra","date":"2026-05-07 10:38:39"},"3.3.1":{"tag":"3.3.1","author":"estebandezafra","date":"2026-05-10 09:41:27"},"3.3.2":{"tag":"3.3.2","author":"estebandezafra","date":"2026-05-11 10:34:46"},"3.3.3":{"tag":"3.3.3","author":"estebandezafra","date":"2026-05-18 04:41:02"},"3.3.4":{"tag":"3.3.4","author":"estebandezafra","date":"2026-05-21 16:24:18"}},"upgrade_notice":[],"ratings":{"1":0,"2":0,"3":0,"4":0,"5":4},"assets_icons":{"icon-256x256.png":{"filename":"icon-256x256.png","revision":3434192,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3503853,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3503853,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.3","1.0.4","1.0.5","2.0.1","2.0.2","2.0.3","2.1.0","2.2.0","3.0.1","3.0.2","3.0.3","3.1.0","3.1.1","3.1.2","3.1.3","3.1.4","3.1.5","3.2.0","3.2.1","3.2.6","3.2.7","3.2.8","3.2.9","3.3.1","3.3.2","3.3.3","3.3.4"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3519948,"resolution":"1","location":"assets","locale":"","width":1209,"height":828},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3519948,"resolution":"2","location":"assets","locale":"","width":1257,"height":900},"screenshot-3.png":{"filename":"screenshot-3.png","revision":3519948,"resolution":"3","location":"assets","locale":"","width":1234,"height":922},"screenshot-4.png":{"filename":"screenshot-4.png","revision":3519948,"resolution":"4","location":"assets","locale":"","width":1021,"height":786},"screenshot-5.png":{"filename":"screenshot-5.png","revision":3519948,"resolution":"5","location":"assets","locale":"","width":1458,"height":783},"screenshot-6.png":{"filename":"screenshot-6.png","revision":3519948,"resolution":"6","location":"assets","locale":"","width":1455,"height":848},"screenshot-7.png":{"filename":"screenshot-7.png","revision":3519948,"resolution":"7","location":"assets","locale":"","width":1465,"height":770}},"screenshots":{"1":"AI Copilot - Floating assistant inside the WordPress editor with quick actions","2":"AI Chat Agent - Chat with AI directly from WordPress admin","3":"AI Chat Agent - Settings and provider configuration","4":"MCP Server - Endpoint URLs and authentication setup","5":"MCP Server - Tool profiles management","6":"MCP Server - WordPress and WooCommerce tools management","7":"MCP Server - Plugin Integrations"}},"plugin_section":[],"plugin_tags":[216196,229563,222885,242115,231325],"plugin_category":[],"plugin_contributors":[238115],"plugin_business_model":[],"class_list":["post-261898","plugin","type-plugin","status-publish","hentry","plugin_tags-chatgpt","plugin_tags-claude","plugin_tags-copilot","plugin_tags-mcp","plugin_tags-woocommerce-ai","plugin_contributors-estebandezafra","plugin_committers-estebandezafra"],"banners":{"banner":"https:\/\/ps.w.org\/stifli-flex-mcp\/assets\/banner-772x250.png?rev=3503853","banner_2x":"https:\/\/ps.w.org\/stifli-flex-mcp\/assets\/banner-1544x500.png?rev=3503853","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/stifli-flex-mcp\/assets\/icon-256x256.png?rev=3434192","icon_2x":"https:\/\/ps.w.org\/stifli-flex-mcp\/assets\/icon-256x256.png?rev=3434192","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/stifli-flex-mcp\/assets\/screenshot-1.png?rev=3519948","caption":"AI Copilot - Floating assistant inside the WordPress editor with quick actions"},{"src":"https:\/\/ps.w.org\/stifli-flex-mcp\/assets\/screenshot-2.png?rev=3519948","caption":"AI Chat Agent - Chat with AI directly from WordPress admin"},{"src":"https:\/\/ps.w.org\/stifli-flex-mcp\/assets\/screenshot-3.png?rev=3519948","caption":"AI Chat Agent - Settings and provider configuration"},{"src":"https:\/\/ps.w.org\/stifli-flex-mcp\/assets\/screenshot-4.png?rev=3519948","caption":"MCP Server - Endpoint URLs and authentication setup"},{"src":"https:\/\/ps.w.org\/stifli-flex-mcp\/assets\/screenshot-5.png?rev=3519948","caption":"MCP Server - Tool profiles management"},{"src":"https:\/\/ps.w.org\/stifli-flex-mcp\/assets\/screenshot-6.png?rev=3519948","caption":"MCP Server - WordPress and WooCommerce tools management"},{"src":"https:\/\/ps.w.org\/stifli-flex-mcp\/assets\/screenshot-7.png?rev=3519948","caption":"MCP Server - Plugin Integrations"}],"raw_content":"<!--section=description-->\n<p><strong>StifLi Flex MCP<\/strong> is the most secure MCP Server for WordPress with built-in Undo. Connect ChatGPT, Claude Desktop, Gemini, and other MCP clients safely, roll back changes when needed, and manage your site through natural conversation without losing control.<\/p>\n\n<p>Three powerful MCP and AI tools in one plugin:<\/p>\n\n<ol>\n<li><strong>MCP Server<\/strong> \u2014 Connect ChatGPT, Claude Desktop, or any MCP client directly to your site<\/li>\n<li><strong>AI Copilot<\/strong> \u2014 A floating assistant inside the Gutenberg and Classic editors that writes, rewrites, and optimizes your content in real time<\/li>\n<li><strong>AI Chat Agent<\/strong> \u2014 A full conversational interface to manage posts, WooCommerce, settings, and more<\/li>\n<\/ol>\n\n<p><strong>\ud83c\udfac Video: Claude to WordPress MCP Connector in 1 Minute<\/strong><\/p>\n\n<p>https:\/\/youtu.be\/AcmvwRzoOSM<\/p>\n\n<p><strong>\ud83d\udcda Documentation<\/strong><\/p>\n\n<p>https:\/\/andromedanova.com\/stifli-flex-mcp.html<\/p>\n\n<p>Released in December 2025, <strong>StifLi Flex MCP<\/strong> was the first MCP plugin for WordPress and remains the most complete WordPress MCP platform for ChatGPT, Claude Desktop, and other MCP clients.\nIt starts with 117+ built-in MCP tools, and with supported integrations such as All Sources Images, Stifli Backup Tools, AiPatch Security Scanner, Notification for Telegram, WPCode, Code Snippets, Woody Snippets, Advanced Custom Fields, Yoast SEO, Rank Math, WPForms, Gravity Forms, Forminator, and The Events Calendar, it can exceed 200 total tools depending on the plugins you install.<\/p>\n\n<p><strong>\ud83d\udce1 MCP Server \u2014 Connect ChatGPT, Claude Desktop, and Other MCP Clients<\/strong><\/p>\n\n<p>StifLi Flex MCP includes a full standards-compliant MCP server for WordPress, so ChatGPT, Claude Desktop, LibreChat, and other MCP clients can connect directly to your site and use real WordPress tools through OAuth 2.1.<\/p>\n\n<ul>\n<li><strong>ChatGPT<\/strong> \u2014 Connect through Apps &amp; Connectors with OAuth 2.1 authentication<\/li>\n<li><strong>Claude Desktop<\/strong> \u2014 Connect through Connectors with automatic OAuth flow<\/li>\n<li><strong>LibreChat and other MCP clients<\/strong> \u2014 Use the same MCP endpoint and discovery flow<\/li>\n<li><strong>Zero shared secrets<\/strong> \u2014 No custom API keys or passwords for external MCP clients<\/li>\n<li><strong>Standards-based<\/strong> \u2014 Automatic discovery, registration, and authentication with OAuth 2.1, PKCE, RFC 9728, RFC 8414, and RFC 7591<\/li>\n<\/ul>\n\n<p>Just copy the SSE URL from the Settings page, paste it into ChatGPT, Claude Desktop, or another MCP client, and authorize.<\/p>\n\n<p><strong>\u270d\ufe0f AI Copilot \u2014 Your Writing Assistant Inside the Editor<\/strong><\/p>\n\n<p>The AI Copilot lives as a floating widget right inside the WordPress post and page editor. It understands the full context of what you're editing \u2014 title, content, categories, tags, featured image, and even WooCommerce product fields \u2014 and helps you write better, faster.<\/p>\n\n<ul>\n<li><strong>Rewrite, expand, or optimize content<\/strong> \u2014 Ask the Copilot to improve your text and it applies the changes directly into the editor<\/li>\n<li><strong>One-click quick actions<\/strong> \u2014 \"\u26a1 Optimize content\", \"\ud83c\udff7\ufe0f Generate tags\", \"\ud83d\udcdd Write excerpt\", \"\ud83d\uddbc\ufe0f Generate image\" \u2014 one tap, instant results<\/li>\n<li><strong>Real-time editing<\/strong> \u2014 The Copilot sets titles, excerpts, tags, slugs, and categories directly in the editor. No copy-pasting<\/li>\n<li><strong>Content block operations<\/strong> \u2014 Insert, update, replace, or delete Gutenberg blocks through conversation<\/li>\n<li><strong>Visual feedback<\/strong> \u2014 Changed fields and blocks are highlighted with a green border so you always see what the AI modified<\/li>\n<li><strong>Keep or Undo<\/strong> \u2014 Every change shows a floating banner: keep it or undo with a single click. You stay in control<\/li>\n<li><strong>Image generation<\/strong> \u2014 Ask the Copilot to generate an image and it sets it as the featured image or inserts it as a block, automatically<\/li>\n<li><strong>Works with Gutenberg and Classic Editor<\/strong> \u2014 Full support for both editors<\/li>\n<li><strong>Context-aware<\/strong> \u2014 The Copilot reads your current post content, blocks, metadata, and editor state to give relevant suggestions<\/li>\n<li><strong>WooCommerce-aware<\/strong> \u2014 When editing a product, the Copilot sees prices, stock, SKU, attributes, and product type<\/li>\n<\/ul>\n\n<p>Choose OpenAI (GPT-5.4), Anthropic (Claude 4.6 Opus\/Sonnet), or Google (Gemini 3.1 Pro\/Flash), and optionally use WordPress AI Client connectors like OpenRouter and Mistral when installed. No complex setup \u2014 just your API key or connector credentials.<\/p>\n\n<p><strong>\ud83d\udca1 What Can You Do With the Copilot?<\/strong><\/p>\n\n<p>Here are just a few examples of what you can ask while editing a post or page:<\/p>\n\n<ul>\n<li>\u270f\ufe0f \"Rewrite the introduction to sound more professional and engaging\"<\/li>\n<li>\ud83d\udcca \"Add a comparison table below the second paragraph with pros and cons\"<\/li>\n<li>\ud83d\uddbc\ufe0f \"Generate an image that illustrates the idea in paragraph four and insert it right above\"<\/li>\n<li>\ud83d\udcdd \"Write a compelling meta description and set it as the excerpt\"<\/li>\n<li>\ud83d\uded2 \"Update the product short description to highlight free shipping and set the sale price to $19.99\"<\/li>\n<\/ul>\n\n<p>The Copilot reads your full content, understands context, and applies changes directly in the editor \u2014 no copy-pasting, no switching tabs.<\/p>\n\n<p><strong>\ud83e\udd16 AI Chat Agent \u2014 Your WordPress AI Assistant<\/strong><\/p>\n\n<p>The built-in AI Chat Agent gives you a powerful conversational interface to manage your entire WordPress site:<\/p>\n\n<ul>\n<li><strong>Talk to your site<\/strong> \u2014 \"Show me the last 5 orders\", \"Create a blog post about SEO tips\", \"What plugins are installed?\"<\/li>\n<li><strong>Multi-provider<\/strong> \u2014 Built-in OpenAI (GPT-5.4, GPT-5.3), Anthropic (Claude 4.6 Opus\/Sonnet, Claude 4.5 Haiku), Google (Gemini 3.1 Pro, Gemini 3 Flash) + optional WordPress AI Client connectors (OpenRouter, Mistral)<\/li>\n<li><strong>117+ MCP tools at its disposal<\/strong> \u2014 The AI agent can read posts, create content, manage WooCommerce products, check orders, update settings, and much more<\/li>\n<li><strong>Smart suggestions<\/strong> \u2014 After each response, get contextual follow-up suggestions<\/li>\n<li><strong>Conversation history<\/strong> \u2014 Auto-saved across sessions with multi-tab support<\/li>\n<li><strong>Safe by design<\/strong> \u2014 Choose \"Always Allow\" or \"Ask User\" mode for tool execution confirmations<\/li>\n<li><strong>Advanced tuning<\/strong> \u2014 Control temperature, max tokens, top_p, system prompts<\/li>\n<\/ul>\n\n<p><strong>\ud83d\udca1 What Can You Do With It?<\/strong><\/p>\n\n<p>Here are just a few examples of what you can ask your AI agent:<\/p>\n\n<ul>\n<li>\ud83d\udcdd \"Write a 500-word blog post about healthy eating and publish it as draft\"<\/li>\n<li>\ud83d\uded2 \"Show me today's WooCommerce orders and their total revenue\"<\/li>\n<li>\ud83d\udd0d \"What are the top 10 most commented posts on my site?\"<\/li>\n<li>\ud83d\udcca \"List all products with stock below 5 units\"<\/li>\n<li>\ud83c\udfa8 \"Generate a hero image for my latest blog post about technology\"<\/li>\n<\/ul>\n\n<p>The AI agent understands context, chains multiple operations, and works with your site's real data in real time.<\/p>\n\n<p><strong>\ud83c\udfa8 AI Image &amp; Video Generation<\/strong><\/p>\n\n<p>Generate stunning images and videos directly from your AI agent or the dedicated Multimedia Settings page:<\/p>\n\n<ul>\n<li><strong>Image Generation<\/strong> \u2014 \"Generate a hero image for my blog post about AI\" using OpenAI (GPT Image family + DALL\u00b7E 2\/3) or Google Gemini (Gemini Image + Imagen 4)<\/li>\n<li><strong>Video Generation<\/strong> \u2014 \"Create a 5-second product showcase video\" using OpenAI Sora or Google Veo 2\/3<\/li>\n<\/ul>\n\n<p><strong>\ud83e\udde9 Code Snippet Management \u2014 Design and Develop Through Conversation<\/strong><\/p>\n\n<p>Create, edit, activate, and manage code snippets on your WordPress site entirely through AI \u2014 no manual coding required. Compatible with the three most popular snippet plugins: <strong>WPCode<\/strong>, <strong>Code Snippets<\/strong>, and <strong>Woody Code Snippets<\/strong>.<\/p>\n\n<ul>\n<li><strong>Add functionality instantly<\/strong> \u2014 \"Add a PHP snippet that redirects users after login based on their role\"<\/li>\n<li><strong>Custom CSS on demand<\/strong> \u2014 \"Create a CSS snippet that hides the sidebar on mobile devices\"<\/li>\n<li><strong>JavaScript injection<\/strong> \u2014 \"Add a JS snippet that shows a sticky banner with a 10% discount code\"<\/li>\n<li><strong>Full lifecycle management<\/strong> \u2014 List, create, edit, activate, deactivate, and delete snippets from conversation<\/li>\n<li><strong>Safe by design<\/strong> \u2014 PHP code is sanitized automatically, removing stray <code>&lt;?php<\/code> tags and markdown artifacts from AI-generated output<\/li>\n<\/ul>\n\n<p>This opens up powerful possibilities: customize your theme's appearance, add tracking scripts, inject schema markup for SEO, modify WooCommerce checkout behavior, add custom shortcodes \u2014 all through natural language. Ask your AI agent to build it, test it, and activate it, without ever touching a code editor.<\/p>\n\n<p><strong>\ud83e\udde0 WordPress Abilities Integration<\/strong> (WordPress 6.9+)<\/p>\n\n<p>Automatically discover and import abilities registered by other plugins into your AI agent's toolkit. If a plugin supports the WordPress Abilities API, StifLi Flex MCP can detect, import, and expose it as an AI tool \u2014 zero configuration needed.<\/p>\n\n<p><strong>\u23f0 Automation Tasks \u2014 Let AI Work While You Sleep<\/strong><\/p>\n\n<p>Schedule AI-powered tasks to run automatically on your WordPress site:<\/p>\n\n<ul>\n<li><strong>Scheduled Tasks<\/strong> \u2014 Create daily, weekly, or monthly automated workflows<\/li>\n<li><strong>Templates<\/strong> \u2014 Quick-start with pre-built templates (Daily Sales Report, Trending Article, Weekly Summary)<\/li>\n<li><strong>Smart Scheduling<\/strong> \u2014 Flexible presets from \"Every hour\" to \"Monthly\" with custom times and timezones<\/li>\n<li><strong>Detected Tools Mode<\/strong> \u2014 AI automatically identifies which tools are needed, saving tokens significantly<\/li>\n<li><strong>Output Actions<\/strong> \u2014 Send results via email, webhook, draft post, or custom hooks<\/li>\n<li><strong>Execution Logs<\/strong> \u2014 Full history with token usage, duration, and detailed results<\/li>\n<\/ul>\n\n<p><strong>\ud83c\udfaf Event Automations \u2014 Trigger AI on WordPress Events<\/strong><\/p>\n\n<p>Run AI workflows automatically when specific events happen<\/p>\n\n<p><strong>\u23ea Roll Back \u2014 The Only MCP Server With Undo<\/strong><\/p>\n\n<p>Mistakes happen. You asked ChatGPT to update your landing page and the result isn't what you expected? No problem \u2014 <strong>roll back the change with one click<\/strong> and your site is restored instantly.<\/p>\n\n<p>StifLi Flex MCP is the <strong>only MCP server for WordPress that tracks every change and lets you undo it<\/strong>. Every modification made by any AI \u2014 whether from ChatGPT, Claude Desktop, the built-in Chat Agent, the Copilot, or automated tasks \u2014 is recorded with a full before\/after snapshot.<\/p>\n\n<ul>\n<li><strong>One-click Undo<\/strong> \u2014 Roll back any change from the Logs &amp; Roll Back page in your admin panel<\/li>\n<li><strong>Redo support<\/strong> \u2014 Changed your mind? Re-apply a rolled-back change just as easily<\/li>\n<li><strong>Session rollback<\/strong> \u2014 Undo an entire AI conversation's changes at once, in the correct order<\/li>\n<li><strong>Full audit trail<\/strong> \u2014 See exactly what was changed, when, by whom, and from which source<\/li>\n<li><strong>Works across everything<\/strong> \u2014 Posts, pages, products, orders, options, menus, media, code snippets, and more<\/li>\n<li><strong>AI-accessible<\/strong> \u2014 Your AI agent can also query and rollback changes through dedicated tools<\/li>\n<\/ul>\n\n<p>\ud83d\udca1 Real-world examples:<\/p>\n\n<ul>\n<li>\ud83d\uded2 \"ChatGPT updated all my product prices but used the wrong currency \u2014 roll it back!\"<\/li>\n<li>\ud83d\udcdd \"Claude rewrote my About page and I prefer the original \u2014 undo!\"<\/li>\n<li>\u2699\ufe0f \"An automation changed my site settings at 3 AM \u2014 I can see exactly what happened and revert it\"<\/li>\n<li>\ud83c\udfa8 \"The AI-generated image doesn't match my brand \u2014 remove it and restore the previous one\"<\/li>\n<li>\ud83d\udd17 \"I told the AI to delete a menu item by mistake \u2014 bring it back!\"<\/li>\n<\/ul>\n\n<p><strong>\ud83d\udee1\ufe0f Security \u2014 OAuth 2.1 Built In<\/strong><\/p>\n\n<p>StifLi Flex MCP uses <strong>OAuth 2.1 with PKCE<\/strong> \u2014 the latest industry-standard security protocol \u2014 to authenticate external AI clients. No API keys to copy, no passwords to share. Just paste the URL, authorize once, and you're connected.<\/p>\n\n<ul>\n<li><strong>OAuth 2.1 with PKCE (S256)<\/strong> \u2014 The most modern and secure authentication standard, used by Google, Microsoft, and GitHub<\/li>\n<li><strong>Dynamic Client Registration (RFC 7591)<\/strong> \u2014 AI clients register automatically, no manual setup needed<\/li>\n<li><strong>Auto-discovery (RFC 9728 + RFC 8414)<\/strong> \u2014 Clients find your server's auth endpoints automatically<\/li>\n<li><strong>Token auto-refresh<\/strong> \u2014 Sessions stay active for up to 90 days without re-authorization<\/li>\n<li><strong>Application Passwords fallback<\/strong> \u2014 Still supported for advanced setups and legacy clients<\/li>\n<li>Per-tool capability checks linked to WordPress roles<\/li>\n<li>Profile-based tool restrictions (8 predefined profiles + custom)<\/li>\n<li>Tool execution confirmations in AI Chat Agent<\/li>\n<\/ul>\n\n<p><strong>\ud83d\udccb Tool Profiles<\/strong><\/p>\n\n<ul>\n<li>WordPress Read Only \u2014 safe read-only access<\/li>\n<li>WordPress Full Management \u2014 complete CRUD operations<\/li>\n<li>WooCommerce Read Only \u2014 query store data<\/li>\n<li>WooCommerce Store Management \u2014 products, orders, coupons<\/li>\n<li>Complete E-commerce \u2014 all WooCommerce tools<\/li>\n<li>Complete Site \u2014 all 117+ tools enabled<\/li>\n<li>Safe Mode \u2014 non-sensitive reads only<\/li>\n<li>Development\/Debug \u2014 diagnostic tools<\/li>\n<\/ul>\n\n<p><strong>\ud83c\udf10 Supported AI Platforms<\/strong><\/p>\n\n<p>StifLi Flex MCP integrates with:<\/p>\n\n<p><strong>Built-in AI Chat Agent + WordPress AI Client connectors:<\/strong>\n* OpenAI \u2014 GPT-5.4, GPT-5.3, GPT-5.4 Mini\n* Anthropic Claude \u2014 Opus, Sonnet, Haiku\n* Google Gemini \u2014 Pro, Flash, Flash-Lite\n* OpenRouter and Mistral \u2014 via WordPress AI Client connectors (when installed)<\/p>\n\n<p><strong>MCP Server (External Clients via OAuth 2.1):<\/strong>\n* Claude Desktop, ChatGPT, LibreChat, Cursor, Cline, Roo Code, Windsurf, Claude Code<\/p>\n\n<p><strong>Cloud &amp; Local Providers (via MCP clients):<\/strong>\n* Groq, Azure OpenAI, AWS Bedrock\n* Ollama, LM Studio, self-hosted solutions<\/p>\n\n<p><strong>\ud83d\udcd0 MCP Spec Compliance<\/strong><\/p>\n\n<p>StifLi Flex MCP implements the <a href=\"https:\/\/modelcontextprotocol.io\/specification\/2025-11-25\/\">Model Context Protocol (MCP) 2025-11-25 specification<\/a> for lifecycle and tool operations over JSON-RPC 2.0, while keeping legacy SSE compatibility for older MCP clients.<\/p>\n\n<h3>External Services<\/h3>\n\n<p>This plugin connects to third-party AI services to power the AI Chat Agent, AI Copilot, image generation, and video generation features. <strong>No data is transmitted until you explicitly configure an API key and initiate a request.<\/strong><\/p>\n\n<p><strong>What data is sent:<\/strong> Your WordPress content (post text, metadata, product details) as included in AI prompts, and MCP tool execution results when using the MCP server with external AI clients.<\/p>\n\n<p><strong>When data is sent:<\/strong> Only when you have configured an API key for a provider AND actively send a message to the AI agent or Copilot, or when an external MCP client makes an authenticated request to the MCP server endpoint.<\/p>\n\n<p><strong>Supported services and their policies:<\/strong><\/p>\n\n<ul>\n<li><p><strong>OpenAI<\/strong> \u2014 Used for GPT models (AI Chat Agent, AI Copilot), GPT Image \/ DALL\u00b7E (image generation), and Sora (video generation)\n<a href=\"https:\/\/openai.com\/policies\/terms-of-use\">Terms of Use<\/a> | <a href=\"https:\/\/openai.com\/policies\/privacy-policy\">Privacy Policy<\/a><\/p><\/li>\n<li><p><strong>Anthropic Claude<\/strong> \u2014 Used for Claude AI models (AI Chat Agent, AI Copilot)\n<a href=\"https:\/\/www.anthropic.com\/legal\/consumer-terms\">Terms of Service<\/a> | <a href=\"https:\/\/www.anthropic.com\/legal\/privacy\">Privacy Policy<\/a><\/p><\/li>\n<li><p><strong>Google Gemini<\/strong> \u2014 Used for Gemini AI models (AI Chat Agent, AI Copilot), Gemini Image + Imagen 4 (image generation), and Veo 2\/3 (video generation)\n<a href=\"https:\/\/ai.google.dev\/terms\">Terms of Service<\/a> | <a href=\"https:\/\/policies.google.com\/privacy\">Privacy Policy<\/a><\/p><\/li>\n<\/ul>\n\n<p>When using the MCP server with external AI clients (ChatGPT, Claude Desktop, LibreChat, etc.), API requests are made by the AI client's backend servers to your WordPress MCP endpoint. The plugin itself does not send data to third parties in this scenario \u2014 the external MCP client initiates all communication.<\/p>\n\n<!--section=installation-->\n<h4>Quick Start (AI Copilot)<\/h4>\n\n<ol>\n<li>Upload the <code>stifli-flex-mcp<\/code> folder to <code>\/wp-content\/plugins\/<\/code> or install from the WordPress plugin directory<\/li>\n<li>Activate the plugin<\/li>\n<li>Go to <strong>StifLi Flex MCP \u2192 AI Copilot<\/strong> and make sure it\u2019s enabled<\/li>\n<li>Go to <strong>StifLi Flex MCP \u2192 AI Chat Agent \u2192 Settings<\/strong> and enter your API key<\/li>\n<li>Open any post or page in the editor \u2014 the Copilot widget appears automatically<\/li>\n<li>Start writing with AI!<\/li>\n<\/ol>\n\n<h4>Quick Start (AI Chat Agent)<\/h4>\n\n<ol>\n<li>Go to <strong>StifLi Flex MCP \u2192 AI Chat Agent<\/strong><\/li>\n<li>Open the <strong>Settings<\/strong> tab and select your AI provider (OpenAI, Claude, Gemini, or installed WordPress AI Client connectors like OpenRouter\/Mistral)<\/li>\n<li>Enter your API key<\/li>\n<li>Start chatting!<\/li>\n<\/ol>\n\n<p>That's it \u2014 no external tools, no complex configuration. Your AI agent is ready.<\/p>\n\n<h4>Optional: MCP Server for External Clients<\/h4>\n\n<p>If you also want to connect external AI clients (ChatGPT, Claude Desktop, LibreChat):<\/p>\n\n<ol>\n<li>Go to <strong>StifLi Flex MCP \u2192 MCP Server<\/strong><\/li>\n<li>Copy the SSE URL shown on the Settings page<\/li>\n<li>Paste it in your AI client:\n\n<ul>\n<li><strong>Claude Desktop:<\/strong> Customize \u2192 Connectors \u2192 Add custom connector \u2192 Paste the URL<\/li>\n<li><strong>ChatGPT:<\/strong> Settings \u2192 Apps &amp; Connectors \u2192 Advanced settings \u2192 Enable Developer mode \u2192 Create app \u2192 Paste the URL \u2192 Choose OAuth<\/li>\n<\/ul><\/li>\n<li>A browser window will open \u2014 log in to WordPress and click \"Authorize\"<\/li>\n<li>Done! Your AI client can now manage your WordPress site<\/li>\n<\/ol>\n\n<p>No API keys, no passwords \u2014 OAuth 2.1 handles everything securely and automatically.<\/p>\n\n<!--section=faq-->\n<dl>\n<dt id=\"what%20is%20the%20ai%20copilot%3F\"><h3>What is the AI Copilot?<\/h3><\/dt>\n<dd><p>The AI Copilot is a floating assistant that appears inside the WordPress editor (Gutenberg or Classic). It reads the context of what you\u2019re editing and helps you write, rewrite, optimize, generate tags, create excerpts, and even generate images \u2014 all without leaving the editor. Every change can be undone with one click.<\/p><\/dd>\n<dt id=\"how%20is%20the%20copilot%20different%20from%20the%20chat%20agent%3F\"><h3>How is the Copilot different from the Chat Agent?<\/h3><\/dt>\n<dd><p>The <strong>Copilot<\/strong> lives inside the post\/page editor and is focused on writing and content editing. It works directly with the editor fields (title, content blocks, excerpt, tags, etc.).<\/p>\n\n<p>The <strong>Chat Agent<\/strong> is a standalone admin page where you can manage your entire WordPress site through conversation \u2014 create posts, manage WooCommerce orders, check settings, install plugins, and more.<\/p>\n\n<p>Both use the same AI provider and API key.<\/p><\/dd>\n<dt id=\"how%20do%20i%20set%20up%20the%20ai%20chat%20agent%3F\"><h3>How do I set up the AI Chat Agent?<\/h3><\/dt>\n<dd><ol>\n<li>Go to StifLi Flex MCP \u2192 AI Chat Agent \u2192 Settings<\/li>\n<li>Choose your AI provider (OpenAI, Claude, Gemini, or installed WordPress AI Client connectors like OpenRouter\/Mistral)<\/li>\n<li>Enter your API key (you get this from your AI provider's website)<\/li>\n<li>Go to the Chat tab and start talking!<\/li>\n<\/ol><\/dd>\n<dt id=\"which%20ai%20provider%20should%20i%20use%3F\"><h3>Which AI provider should I use?<\/h3><\/dt>\n<dd><p>OpenAI, Claude, and Gemini all work great, and you can also use OpenRouter or Mistral via WordPress AI Client connectors. Here's a quick comparison:<\/p>\n\n<ul>\n<li><strong>OpenAI (GPT-4o \/ GPT-4.5)<\/strong> \u2014 Best overall balance of speed and quality<\/li>\n<li><strong>Claude (Opus \/ Sonnet)<\/strong> \u2014 Excellent at understanding complex instructions and writing<\/li>\n<li><strong>Gemini (2.5 Pro \/ Flash)<\/strong> \u2014 Great value, fast responses<\/li>\n<\/ul>\n\n<p>You can switch providers at any time from the Settings tab.<\/p><\/dd>\n<dt id=\"what%20can%20the%20ai%20agent%20do%20with%20my%20site%3F\"><h3>What can the AI agent do with my site?<\/h3><\/dt>\n<dd><p>The agent has access to 117+ tools covering:<\/p>\n\n<ul>\n<li><strong>Content<\/strong> \u2014 Create, edit, delete posts, pages, and comments<\/li>\n<li><strong>Media<\/strong> \u2014 Upload, list, and manage images and files<\/li>\n<li><strong>AI Generation<\/strong> \u2014 Generate images (DALL\u00b7E, Imagen) and videos (Sora, Veo) with AI<\/li>\n<li><strong>WooCommerce<\/strong> \u2014 Products, orders, coupons, customers, shipping, taxes<\/li>\n<li><strong>Taxonomies<\/strong> \u2014 Categories, tags, custom taxonomies<\/li>\n<li><strong>Settings<\/strong> \u2014 Site options, menus, navigation<\/li>\n<li><strong>System<\/strong> \u2014 Plugins, themes, site health<\/li>\n<\/ul>\n\n<p>You control which tools are available through Profiles.<\/p><\/dd>\n<dt id=\"is%20it%20safe%20to%20let%20ai%20manage%20my%20site%3F\"><h3>Is it safe to let AI manage my site?<\/h3><\/dt>\n<dd><p>Yes, with multiple layers of protection:<\/p>\n\n<ul>\n<li><strong>OAuth 2.1 with PKCE<\/strong> \u2014 Industry-standard secure authentication for external AI clients, no shared passwords<\/li>\n<li><strong>Tool confirmations<\/strong> \u2014 In \"Ask User\" mode, you approve every action before it executes<\/li>\n<li><strong>Permission checks<\/strong> \u2014 Every tool verifies WordPress capabilities before running  <\/li>\n<li><strong>Profiles<\/strong> \u2014 Restrict which tools are available (e.g., \"Read Only\" profiles)<\/li>\n<li><strong>Token management<\/strong> \u2014 Revoke access for any client instantly from the admin panel<\/li>\n<\/ul><\/dd>\n<dt id=\"what%20is%20mcp%3F\"><h3>What is MCP?<\/h3><\/dt>\n<dd><p>Model Context Protocol (MCP) is a standard for connecting AI agents to data sources and tools. This plugin implements an MCP server so external AI clients like ChatGPT or Claude Desktop can discover and use your WordPress tools. This is in addition to the built-in AI Chat Agent.<\/p><\/dd>\n<dt id=\"does%20this%20work%20with%20woocommerce%3F\"><h3>Does this work with WooCommerce?<\/h3><\/dt>\n<dd><p>Yes! The plugin includes 61 WooCommerce tools. They activate automatically when WooCommerce is installed. Ask your AI agent \"Show me today's orders\" and it just works.<\/p><\/dd>\n<dt id=\"can%20i%20create%20my%20own%20tools%3F\"><h3>Can I create my own tools?<\/h3><\/dt>\n<dd><p>Absolutely! Go to <strong>MCP Server \u2192 Custom Tools<\/strong> and create PHP-powered tools that expose any plugin's functionality to your AI agent. Built-in examples included.<\/p><\/dd>\n<dt id=\"what%20happens%20if%20the%20ai%20makes%20a%20mistake%3F\"><h3>What happens if the AI makes a mistake?<\/h3><\/dt>\n<dd><p>No worries \u2014 StifLi Flex MCP is the only MCP server with a built-in <strong>Roll Back<\/strong> system. Every change made by any AI (ChatGPT, Claude, the Chat Agent, Copilot, or automations) is tracked with a full before\/after snapshot. Go to <strong>Logs &amp; Roll Back<\/strong> in your admin panel and undo any change with one click. You can even roll back an entire session at once.<\/p><\/dd>\n<dt id=\"can%20the%20ai%20generate%20images%3F\"><h3>Can the AI generate images?<\/h3><\/dt>\n<dd><p>Yes! The <code>wp_generate_image<\/code> tool supports multiple providers:<\/p>\n\n<ul>\n<li><strong>OpenAI<\/strong> \u2014 gpt-image-1 (default), gpt-image-1.5, gpt-image-2, gpt-image-1-mini, DALL\u00b7E 3, DALL\u00b7E 2<\/li>\n<li><strong>Google Gemini<\/strong> \u2014 gemini-2.5-flash-image (default), gemini-3.1-flash-image-preview, gemini-3-pro-image-preview, Imagen 4<\/li>\n<\/ul>\n\n<p>Just ask your AI agent \"Generate an image of...\" or configure defaults in <strong>StifLi Flex MCP \u2192 Multimedia Settings \u2192 Images<\/strong>.<\/p><\/dd>\n<dt id=\"can%20the%20ai%20generate%20videos%3F\"><h3>Can the AI generate videos?<\/h3><\/dt>\n<dd><p>Yes! The <code>wp_generate_video<\/code> tool supports:<\/p>\n\n<ul>\n<li><strong>OpenAI Sora<\/strong> \u2014 Text-to-video and image-to-video generation<\/li>\n<li><strong>Google Veo<\/strong> \u2014 Veo 2 and Veo 3 models<\/li>\n<\/ul>\n\n<p>Video generation runs asynchronously in the background. Configure providers and API keys in <strong>StifLi Flex MCP \u2192 Multimedia Settings \u2192 Videos<\/strong>.<\/p><\/dd>\n<dt id=\"where%20do%20i%20configure%20api%20keys%20for%20image%2Fvideo%20generation%3F\"><h3>Where do I configure API keys for image\/video generation?<\/h3><\/dt>\n<dd><p>Go to <strong>StifLi Flex MCP \u2192 Multimedia Settings<\/strong>. API keys are shared between the Images and Videos tabs \u2014 enter your OpenAI or Gemini key once and it works for both.<\/p><\/dd>\n<dt id=\"what%20are%20wordpress%20abilities%3F\"><h3>What are WordPress Abilities?<\/h3><\/dt>\n<dd><p>WordPress 6.9 introduced the Abilities API, letting plugins register standardized capabilities. If you have plugins that support Abilities, StifLi Flex MCP can auto-discover and import them from <strong>MCP Server \u2192 Abilities<\/strong> tab.<\/p><\/dd>\n<dt id=\"how%20do%20i%20connect%20chatgpt%20or%20claude%20desktop%3F\"><h3>How do I connect ChatGPT or Claude Desktop?<\/h3><\/dt>\n<dd><p>It takes less than a minute:<\/p>\n\n<ol>\n<li>Go to <strong>StifLi Flex MCP \u2192 MCP Server<\/strong> and copy the SSE URL<\/li>\n<li>Paste it in your AI client:\n\n<ul>\n<li><strong>Claude Desktop:<\/strong> Customize \u2192 Connectors \u2192 Add custom connector<\/li>\n<li><strong>ChatGPT:<\/strong> Settings \u2192 Apps &amp; Connectors \u2192 Advanced settings \u2192 Enable Developer mode \u2192 Create app \u2192 Paste the URL \u2192 Choose OAuth<\/li>\n<\/ul><\/li>\n<li>Authorize when the browser window opens (you only need to do this once)<\/li>\n<\/ol>\n\n<p>The plugin uses OAuth 2.1 \u2014 no API keys or passwords needed. Your session stays active for up to 90 days.<\/p><\/dd>\n<dt id=\"oauth%20works%20but%20claude%2Fchatgpt%20says%20%22authorization%20failed%22\"><h3>OAuth works but Claude\/ChatGPT says \"Authorization failed\"<\/h3><\/dt>\n<dd><p>This is usually caused by Cloudflare's \"Block AI Bots\" setting (enabled by default on new domains) or similar WAF rules from Sucuri, Wordfence, SiteGround, WP Engine, etc.<\/p>\n\n<p><strong>What happens:<\/strong> The OAuth consent screen works fine (it runs in your browser), but after the token exchange, the AI backend servers (Anthropic, OpenAI) try to reach your MCP endpoint \u2014 and the firewall blocks them as bot traffic, returning a 403 before the request ever reaches WordPress.<\/p>\n\n<p><strong>How to confirm:<\/strong> Check your firewall logs. You'll see the OAuth\/token requests succeed but subsequent MCP requests from Anthropic or OpenAI IPs are blocked.<\/p>\n\n<p><strong>Option 1 \u2014 Disable AI bot blocking:<\/strong><\/p>\n\n<ul>\n<li><strong>Cloudflare:<\/strong> Dashboard \u2192 Security \u2192 Settings \u2192 turn off \"Block AI Bots\". Note: this is all-or-nothing \u2014 you cannot allow only Anthropic\/OpenAI while blocking others.<\/li>\n<li><strong>Sucuri \/ Wordfence \/ other WAFs:<\/strong> Whitelist the AI provider's IP ranges or user agents (e.g., <code>python-httpx<\/code> for Anthropic, <code>ChatGPT-User<\/code> for OpenAI).<\/li>\n<\/ul>\n\n<p><strong>Option 2 \u2014 Use Application Passwords (bypasses the firewall):<\/strong><\/p>\n\n<p>If you cannot change your firewall settings, use WordPress Application Passwords instead of OAuth. This connects directly from Claude Desktop on your machine, bypassing the AI provider's proxy entirely:<\/p>\n\n<ol>\n<li>Go to <strong>Users \u2192 Your Profile<\/strong> in WordPress admin<\/li>\n<li>Scroll to <strong>Application Passwords<\/strong> section<\/li>\n<li>Enter a name (e.g., \"Claude Desktop\") and click <strong>Add New Application Password<\/strong><\/li>\n<li>Copy the generated password (shown only once)<\/li>\n<li>In <code>claude_desktop_config.json<\/code>, configure the MCP server with your username and the application password as HTTP Basic Auth headers<\/li>\n<\/ol>\n\n<p>This method works even behind strict firewalls because all requests come from your own computer.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>3.3.4<\/h4>\n\n<ul>\n<li>Improvement: Various improvements and content updates in the plugin documentation and onboarding resources.<\/li>\n<\/ul>\n\n<h4>3.3.3<\/h4>\n\n<ul>\n<li>Improvement: Upgraded the Abilities admin table with sortable columns, row selection, and bulk actions (enable, disable, remove).<\/li>\n<li>Improvement: Upgraded Discover Abilities with category filtering and bulk import actions for selected or visible abilities.<\/li>\n<li>Improvement: Added a dedicated bulk abilities backend action and reused shared import\/category normalization logic.<\/li>\n<li>Fix: Moved the OAuth global reset action to the visible Connected Clients area in MCP Server Settings and removed duplicate placement.<\/li>\n<li>Fix: Hardened <code>wp_update_nav_menu_item<\/code> updates with a safer merge flow that preserves existing values unless explicitly changed.<\/li>\n<\/ul>\n\n<h4>3.3.2<\/h4>\n\n<ul>\n<li>Fixed: <code>wp_create_post<\/code> and <code>wp_update_post<\/code> now correctly apply <code>post_category<\/code> and <code>tax_input<\/code> (including <code>post_tag<\/code>) when creating or updating posts.<\/li>\n<\/ul>\n\n<h4>3.3.1<\/h4>\n\n<ul>\n<li>Improvement: Enhanced \"Alternative: Application Passwords\" with in-page generation from MCP Server Settings (no navigation to profile required).<\/li>\n<\/ul>\n\n<h4>3.3.0<\/h4>\n\n<ul>\n<li>New: Compatibility with The Events Calendar plugin, including integrated event tools for listing, reading, creating\/updating, and trashing events and related entities.<\/li>\n<\/ul>\n\n<h4>3.2.9<\/h4>\n\n<ul>\n<li>Improvement: Updated image generation model catalog in Multimedia Settings. Added new OpenAI and Gemini image models while keeping previous models available for user selection.<\/li>\n<li>Improvement: Set default image models to cost-effective options (<code>gpt-image-1<\/code> and <code>gemini-2.5-flash-image<\/code>) and refreshed pricing guidance in the UI.<\/li>\n<li>New tools: <code>wc_get_variation<\/code>, <code>wc_batch_update_variations<\/code>, <code>wc_get_product_attributes<\/code>, <code>wc_get_attribute_terms<\/code>, <code>wc_create_product_attribute<\/code>, <code>wc_set_product_attributes<\/code>, <code>wc_get_coupon<\/code>, <code>wc_get_coupon_count<\/code>, <code>wc_empty_coupon_trash<\/code>.<\/li>\n<li>Tool improvements: <code>wp_get_taxonomies<\/code> (slug\/name\/label output), <code>wp_get_term_meta<\/code> (structured payload with secret redaction), <code>wc_get_product_variations<\/code> (normalized variation rows), <code>wc_update_product_variation<\/code> (ownership validation), <code>wc_delete_product_variation<\/code> (ownership validation), <code>wc_get_coupons<\/code> (status filtering, including trash), <code>wc_delete_coupon<\/code> (clear trash vs permanent outcome), <code>wc_get_coupon_count<\/code> (status-based counting, including trash).<\/li>\n<\/ul>\n\n<h4>3.2.8<\/h4>\n\n<ul>\n<li>Improvement: Official compatibility update for WordPress 7.0 with WordPress AI Client integration in AI Chat Agent.<\/li>\n<li>Improvement: Improved compatibility with external AI Client connectors such as OpenRouter and Mistral (plus any installed AI Client provider).<\/li>\n<\/ul>\n\n<h4>3.2.7<\/h4>\n\n<ul>\n<li>Improvement: Updated MCP protocol reference and compatibility to the 2025-11-25 specification.<\/li>\n<li>Improvement: Improved <code>wp_generate_image<\/code> reliability with async task handling plus safer media persistence\/post-processing.<\/li>\n<li>Improvement: Improved <code>wp_generate_video<\/code> reliability with async task handling, atomic file save, and background metadata processing.<\/li>\n<\/ul>\n\n<h4>3.2.6<\/h4>\n\n<ul>\n<li>New: Expanded <code>mcp_ping<\/code> with optional diagnostics (<code>diagnostics<\/code>, <code>timeout_sec<\/code>) to surface site URL, REST endpoint, HTTPS state, DNS resolution, and lightweight reachability checks without forcing remote calls by default.<\/li>\n<li>New: Upgraded <code>wp_get_posts<\/code>, <code>wp_get_post<\/code>, <code>wp_get_comments<\/code>, <code>wp_get_users<\/code>, <code>search<\/code>, <code>wc_get_products<\/code>, and <code>wc_get_orders<\/code> with richer optional outputs and standardized <code>include_pagination<\/code> metadata wrappers.<\/li>\n<li>New: Added opt-in enrichment flags for common read tools, including author, featured media, taxonomy context, avatar\/registration data, product images\/categories\/attributes, and order item or totals summaries.<\/li>\n<li>New: Improved <code>search<\/code> and <code>fetch<\/code> with broader filters, query-param support, custom request\/response headers, and targeted remote inspection controls (<code>head_only<\/code>, <code>include_headers<\/code>, <code>extract_text<\/code>, <code>max_bytes<\/code>, <code>timeout_sec<\/code>).<\/li>\n<\/ul>\n\n<h4>3.2.5<\/h4>\n\n<ul>\n<li>New: The AI Chat Agent token usage panel now shows three separate bars for billable input tokens, cached tokens, and output tokens.<\/li>\n<li>Improvement: Normalized token accounting across OpenAI, Claude, and Gemini providers so the three bars reflect provider-specific cache semantics more truthfully.<\/li>\n<li>New: Upgraded <code>wp_get_site_health<\/code> into a richer site audit tool with selectable depth levels (<code>0<\/code> basic, <code>1<\/code> medium, <code>2<\/code> deep) to balance diagnostic detail and timeout risk.<\/li>\n<\/ul>\n\n<h4>3.2.4<\/h4>\n\n<ul>\n<li>New: Added <code>wp_get_plugin_settings<\/code> to inspect plugin-related <code>wp_options<\/code> by <code>plugin_slug<\/code>\/prefixes with prepared SQL + limit controls and strict recursive redaction of secrets\/tokens\/passwords.<\/li>\n<li>New: Generalized term tools - added <code>wp_update_term<\/code> and extended <code>wp_create_term<\/code>\/<code>wp_delete_term<\/code> with optional slug\/parent\/description plus per-taxonomy capability checks (existing <code>wp_*_category<\/code> and <code>wp_*_tag<\/code> tools kept as aliases).<\/li>\n<\/ul>\n\n<h4>3.2.3<\/h4>\n\n<ul>\n<li>New: Generalized term tools \u2014 added <code>wp_update_term<\/code> and extended <code>wp_create_term<\/code>\/<code>wp_delete_term<\/code> with optional slug\/parent\/description plus per-taxonomy capability checks (existing <code>wp_*_category<\/code> and <code>wp_*_tag<\/code> tools kept as aliases).<\/li>\n<li>New: Term meta tools <code>wp_get_term_meta<\/code> (with secret redaction), <code>wp_update_term_meta<\/code>, <code>wp_delete_term_meta<\/code>.<\/li>\n<li>New: <code>wp_reorder_menu_items<\/code> tool to batch-update <code>menu_order<\/code>\/<code>parent<\/code> for navigation menu items in one call (with one-click rollback).<\/li>\n<li>Security: <code>wp_create_post<\/code>\/<code>wp_update_post<\/code> now validate <code>post_type<\/code> exists and is public\/show_ui, enforce post-type-aware capabilities, and require <code>edit_others_posts<\/code> cap when assigning a different <code>post_author<\/code>.<\/li>\n<li>Infrastructure: New DB migration seeds the new tools into existing installs and attaches them to the \"WordPress Full Management\" profile.<\/li>\n<\/ul>\n\n<h4>3.2.2<\/h4>\n\n<ul>\n<li>Security: Added centralized recursive secret redaction for MCP outputs.<\/li>\n<li>Security: Applied redaction to sensitive reads (<code>wp_get_option<\/code>, <code>wp_get_settings<\/code>, <code>wp_get_post_meta<\/code>, <code>wp_get_user_meta<\/code>) and masked email\/IP fields in <code>wp_get_comments<\/code>.<\/li>\n<li>Security: Hardened <code>wp_update_option<\/code> and <code>wp_update_settings<\/code> with hard denylist, sensitive-pattern blocking, and optional allowlist via <code>sflmcp_writable_options<\/code>.<\/li>\n<li>Security: Removed <code>wp_delete_option<\/code> tool (destructive operation without reliable undo), including migration cleanup for existing installs.<\/li>\n<li>Security: Hardened <code>wp_upload_image_from_url<\/code> with SSRF protection (private\/reserved IP blocking), HTTPS requirement, 20MB limit (filterable), MIME allowlist, and image validation.<\/li>\n<li>New: Added <code>wp_set_featured_image<\/code> tool and support for <code>featured_media<\/code> in <code>wp_create_post<\/code> and <code>wp_update_post<\/code>.<\/li>\n<li>OAuth: Dynamic client registration now returns HTTP 500 on DB insert failures, logs internal DB errors, and avoids exposing SQL internals.<\/li>\n<li>Infrastructure: Added <code>sflmcp_db_version<\/code> upgrade flow for versioned DB migrations.<\/li>\n<\/ul>\n\n<h4>3.2.1<\/h4>\n\n<ul>\n<li>fix bug<\/li>\n<\/ul>\n\n<h4>3.2.0<\/h4>\n\n<ul>\n<li><strong>\ud83d\uddc2\ufe0f Tools UI overhaul<\/strong> \u2014 Tools are now organized into collapsible category groups with expand\/collapse controls, read\/write mode badges, and token count per category for easier management<\/li>\n<li><strong>\ud83e\udde9 New \"Plugins\" tab<\/strong> \u2014 Dedicated integrations hub with 12 pre-loaded plugin integrations ready to connect:\n\n<ul>\n<li><strong>All Sources Images<\/strong> \u2014 Find stock images and generate AI images; set featured or inline images in posts <em>(Recommended)<\/em><\/li>\n<li><strong>AiPatch Security Scanner<\/strong> \u2014 AI-powered security auditing and vulnerability scanning <em>(Recommended)<\/em><\/li>\n<li><strong>Notification for Telegram<\/strong> \u2014 Send Telegram notifications from MCP tools<\/li>\n<li><strong>WPCode<\/strong> \u2014 Manage code snippets (insert headers\/footers) via AI<\/li>\n<li><strong>Code Snippets<\/strong> \u2014 Create, activate, and manage PHP\/CSS\/JS snippets via AI<\/li>\n<li><strong>Woody Snippets<\/strong> \u2014 Alternative snippet provider with full snippet_* tool support<\/li>\n<li><strong>Advanced Custom Fields (ACF)<\/strong> \u2014 Read and update ACF fields and field groups<\/li>\n<li><strong>Yoast SEO<\/strong> \u2014 Read and update Yoast metadata; trigger reindexing<\/li>\n<li><strong>Rank Math<\/strong> \u2014 Manage Rank Math SEO metadata and head output<\/li>\n<li><strong>WPForms<\/strong> \u2014 List forms and read form entries<\/li>\n<li><strong>Gravity Forms<\/strong> \u2014 List forms, read entries, and update submissions<\/li>\n<li><strong>Forminator<\/strong> \u2014 List forms and read form entries<\/li>\n<\/ul><\/li>\n<\/ul>\n\n<h4>3.1.5<\/h4>\n\n<ul>\n<li>Fixed: OAuth re-authorization crash when reconnecting previously authorized clients (ChatGPT, Claude Desktop) <\/li>\n<\/ul>\n\n<h4>3.1.4<\/h4>\n\n<ul>\n<li><strong>\ud83c\udf10 WebMCP \u2014 Browser AI (Beta)<\/strong> \u2014 Use Chrome's built-in Gemini Nano to edit posts directly, no API key needed!<\/li>\n<li>Note: Beta feature \u2014 Gemini Nano is a compact on-device model with limited reasoning; works best for simple editing tasks<\/li>\n<\/ul>\n\n<h4>3.1.3<\/h4>\n\n<ul>\n<li>Fixed: Minor bug fixes and stability improvements<\/li>\n<\/ul>\n\n<h4>3.1.2<\/h4>\n\n<ul>\n<li><strong>\u23ea Roll Back \u2014 Undo Any AI Change Instantly!<\/strong><\/li>\n<li>New: Full change tracking \u2014 every modification by ChatGPT, Claude, AI Chat Agent, Copilot, or automations is recorded<\/li>\n<li>New: One-click rollback \u2014 undo any change from the Logs &amp; Roll Back admin page<\/li>\n<li>New: Redo support \u2014 re-apply a rolled-back change if you change your mind<\/li>\n<li>New: Session rollback \u2014 undo all changes from an entire AI conversation at once (LIFO order)<\/li>\n<li>New: Before\/after snapshots \u2014 see exactly what changed with full state comparison<\/li>\n<li>New: Source tracking \u2014 every change shows where it came from (MCP Connection, Chat Agent, Copilot, Automation, Event, WP Admin)<\/li>\n<li>New: 5 MCP tools \u2014 <code>mcp_get_changelog<\/code>, <code>mcp_get_change_detail<\/code>, <code>mcp_rollback_change<\/code>, <code>mcp_redo_change<\/code>, <code>mcp_rollback_session<\/code><\/li>\n<li>New: Changelog admin page with filters, search, detail modal, CSV export, and automatic purge<\/li>\n<li>New: Works across 60+ mutating tools \u2014 posts, pages, products, orders, options, menus, media, snippets, and more<\/li>\n<li>New: File backup &amp; restore \u2014 even deleted media files can be recovered<\/li>\n<li>Improved: The only MCP server for WordPress with built-in undo capabilities<\/li>\n<\/ul>\n\n<h4>3.1.1<\/h4>\n\n<ul>\n<li>Compatibility: Tested with WordPress 7.0 RC<\/li>\n<\/ul>\n\n<h4>3.1.0<\/h4>\n\n<ul>\n<li><strong>\ud83d\udd10 OAuth 2.1 Authentication<\/strong> \u2014 Connect ChatGPT, Claude Desktop, and any MCP client with one click!<\/li>\n<li>New: Full OAuth 2.1 implementation with PKCE (S256) \u2014 the most secure authentication standard<\/li>\n<li>New: Dynamic Client Registration (RFC 7591) \u2014 AI clients register automatically, zero manual setup<\/li>\n<li>New: Auto-discovery via RFC 9728 (Protected Resource Metadata) and RFC 8414 (Authorization Server Metadata)<\/li>\n<li>New: Automatic token refresh \u2014 sessions stay active for up to 90 days without re-authorization<\/li>\n<li>New: Auto-approve for returning clients \u2014 authorize once, connect instantly on future sessions<\/li>\n<li>New: Simplified Settings page \u2014 just copy the URL and paste it in your AI client<\/li>\n<li>New: \"View More Details\" panel with connected clients, active tokens, and troubleshooting<\/li>\n<li>New: One-click client deletion and token revocation from the admin panel<\/li>\n<li>Improved: No more API keys or passwords needed for external AI clients<\/li>\n<li>Improved: Full compatibility with Claude Desktop Connectors and ChatGPT Apps &amp; Connectors<\/li>\n<li>Improved: Standards-compliant OpenID Connect discovery fallback for maximum client compatibility<\/li>\n<li>Security: PKCE S256 challenge on every authorization flow<\/li>\n<li>Security: Short-lived authorization codes (10 min) with single-use enforcement<\/li>\n<li>Security: Access tokens expire in 24 hours, refresh tokens in 90 days<\/li>\n<li>Security: Application Passwords still supported as fallback for advanced setups<\/li>\n<\/ul>\n\n<h4>3.0.3<\/h4>\n\n<ul>\n<li>Fixed: MCP Server connection with Claude Desktop and other SSE-based clients now works correctly<\/li>\n<li>Fixed: Scheduled automation tasks running more frequently than configured and producing intermittent errors<\/li>\n<\/ul>\n\n<h4>3.0.2<\/h4>\n\n<ul>\n<li><strong>\ud83e\udde9 Code Snippets Management<\/strong> \u2014 7 new MCP tools for managing code snippets directly from AI agents!<\/li>\n<li>New: snippet_list, snippet_get, snippet_create, snippet_update, snippet_delete, snippet_activate, snippet_deactivate tools<\/li>\n<li>New: Multi-provider support \u2014 compatible with WPCode, Code Snippets (v2\/v3), and Woody Code Snippets plugins<\/li>\n<li>New: Automatic provider detection \u2014 seamlessly works with whichever snippet plugin is installed<\/li>\n<li>New: LLM-friendly input normalization \u2014 maps common AI output variants for code_type, location, and scope parameters<\/li>\n<li>New: PHP code sanitization \u2014 automatically strips <code>&lt;?php<\/code>, <code>?&gt;<\/code> tags and markdown code fences from AI-generated code<\/li>\n<li>New: Code Snippets v3.x full namespace support \u2014 resolves namespaced functions and classes automatically<\/li>\n<li>New: Woody Code Snippets scope mapping \u2014 translates locations to Woody's dual scope\/location system<\/li>\n<li>Security: Rate limiting (30 requests\/minute per IP) on MCP endpoints to prevent abuse<\/li>\n<li>Security: SSRF protection on fetch tool \u2014 blocks requests to private\/reserved IP ranges (127.x, 10.x, 172.16.x, 192.168.x)<\/li>\n<li>Improved: Snippet tools added to WordPress Full Management profile (auto-migrated for existing installs)<\/li>\n<\/ul>\n\n<h4>3.0.1<\/h4>\n\n<ul>\n<li><strong>\u270d\ufe0f AI Copilot \u2014 New floating writing assistant for the WordPress editor!<\/strong><\/li>\n<li>New: AI Copilot widget available inside the Gutenberg and Classic editors<\/li>\n<li>New: Quick action chips \u2014 Optimize content, Generate tags, Write excerpt, Generate image<\/li>\n<li>New: Direct editing \u2014 the Copilot sets titles, excerpts, tags, categories, and slugs in the editor<\/li>\n<li>New: Block operations \u2014 insert, update, replace, and delete Gutenberg blocks through conversation<\/li>\n<li>New: Visual feedback \u2014 green highlight on changed fields and blocks with auto-dismiss<\/li>\n<li>New: Keep\/Undo banner on every AI change for full user control<\/li>\n<li>New: Image generation workflow \u2014 generate an image and set it as featured or insert as block<\/li>\n<li>New: AI Copilot settings page with enable\/disable toggle and tools mode selection<\/li>\n<li>New: Full context awareness \u2014 reads post content, blocks, metadata, and WooCommerce product fields<\/li>\n<\/ul>\n\n<h4>2.2.2<\/h4>\n\n<ul>\n<li><strong>\ud83d\udcca Token Usage Bars<\/strong> \u2014 Real-time speedometer-style token bars in the AI Chat Agent showing input, output, and cached tokens per interaction.<\/li>\n<\/ul>\n\n<h4>2.2.1<\/h4>\n\n<ul>\n<li><strong>\ud83e\udd16 Updated AI Models for All Providers<\/strong> \u2014 Refreshed the full model catalog across OpenAI, Anthropic (Claude), and Google Gemini.<\/li>\n<li>New: OpenAI GPT-5.4 series \u2014 GPT-5.4 Pro, GPT-5.4, GPT-5.4 Mini, GPT-5.4 Nano (1M context, Computer Use support)<\/li>\n<li>New: OpenAI GPT-5.3 and GPT-5.3 Mini added as stable production models<\/li>\n<li>New: Anthropic Claude Sonnet 4.6 and Claude Opus 4.6 (1M context, 128K output, Extended Thinking)<\/li>\n<li>New: Anthropic Claude Sonnet 4.5, Claude Opus 4.5, and Claude Haiku 4.5<\/li>\n<li>New: Google Gemini 3.1 Pro, Gemini 3 Flash, and Gemini 3.1 Flash-Lite (latest generation)<\/li>\n<li>Updated: Google Gemini 2.5 Pro, Flash, and Flash-Lite remain as stable production models<\/li>\n<li>Updated: Default models changed \u2014 GPT-5.4 (OpenAI), Claude Sonnet 4.6 (Claude), Gemini 3 Flash (Gemini)<\/li>\n<li>Removed: Deprecated models \u2014 GPT-5 Nano, Gemini 2.0 Flash\/Flash-Lite, older Claude 3.x aliases<\/li>\n<\/ul>\n\n<h4>2.2.0<\/h4>\n\n<ul>\n<li><strong>\ud83c\udd95 AI Image Generation<\/strong> \u2014 Generate images directly from your AI agent using <code>wp_generate_image<\/code>!<\/li>\n<li><strong>\ud83c\udd95 AI Video Generation<\/strong> \u2014 Generate videos with <code>wp_generate_video<\/code> using cutting-edge AI models!<\/li>\n<li>New: wp_generate_image tool with multi-provider support (OpenAI gpt-image-1, DALL\u00b7E 2\/3, Google Gemini Imagen 4)<\/li>\n<li>New: wp_generate_video tool with multi-provider support (OpenAI Sora, Google Veo 2\/3)<\/li>\n<li>New: Multimedia Settings admin page with dedicated Images and Videos tabs<\/li>\n<li>New: Post-processing options \u2014 auto-save generated media to Media Library, auto-insert into posts<\/li>\n<li>New: Configurable default providers, models, image sizes, and quality settings<\/li>\n<\/ul>\n\n<h4>2.1.0<\/h4>\n\n<ul>\n<li><strong>\ud83c\udd95 Automation Tasks<\/strong> \u2014 Schedule AI tasks to run automatically on a recurring basis!<\/li>\n<li><strong>\ud83c\udd95 Event Automations<\/strong> \u2014 Trigger AI workflows when WordPress events occur (new post, new user, etc.)<\/li>\n<li>New: Automation Tasks admin with create, edit, duplicate, delete, and run-now functionality<\/li>\n<li>New: 4 schedule presets (hourly, daily, weekly, monthly) with custom time and timezone support<\/li>\n<li>New: Pre-built automation templates (Daily Sales Report, Trending Article, Weekly Summary, and more)<\/li>\n<li>New: \"Detected Tools\" mode \u2014 AI identifies required tools during test, saves tokens significantly<\/li>\n<li>New: Output actions \u2014 Email, Webhook, Draft Post, or Custom Hook<\/li>\n<li>New: Execution Logs tab with full history, token usage, and detailed results<\/li>\n<li>New: Event Automations with WordPress triggers (post published, user registered, comment posted)<\/li>\n<li>New: Conditional logic for event triggers (post type, status, category filters)<\/li>\n<li>New: Dynamic placeholders in prompts (<code>{{post.title}}<\/code>, <code>{{user.email}}<\/code>, etc.)<\/li>\n<li>New: Rate limiting per automation to prevent runaway executions<\/li>\n<li>New: Test mode for event automations \u2014 preview AI response with real trigger data<\/li>\n<li>New: Tools count display in AI Chat Agent header with quick configure link<\/li>\n<li>Improved: Cron tasks now execute with proper user permissions (task creator or admin fallback)<\/li>\n<li>Improved: Complete log entry format fixes for database consistency<\/li>\n<li>Improved: Database migration for automation logs table columns<\/li>\n<li>Technical: New tables <code>wp_sflmcp_automation_tasks<\/code>, <code>wp_sflmcp_automation_logs<\/code>, <code>wp_sflmcp_event_automations<\/code>, <code>wp_sflmcp_event_logs<\/code>, <code>wp_sflmcp_event_triggers<\/code><\/li>\n<\/ul>\n\n<h4>2.0.3<\/h4>\n\n<ul>\n<li>** Encrypted API Keys** - API keys are now stored encrypted (AES-256-CBC) in the database for improved security<\/li>\n<li>** Prompt Caching (Claude)** - Enabled Anthropic prompt caching on system prompt and tools, reducing token usage and latency on repeated requests<\/li>\n<li>** Provider Usage Logging** - Real-time logging of input\/output\/cached tokens for Claude, OpenAI, and Gemini<\/li>\n<li>** Rate Limit Awareness** - Captures and logs rate limit headers from all three providers for better diagnostics on 429 errors<\/li>\n<li>New: Conversation history trimming with configurable \"Max Tool Cycles in History\" setting to control payload size<\/li>\n<li>New: Smart trim algorithm with safe cut points \u2014 never orphans tool_result references<\/li>\n<li>New: API key visibility toggle (eye icon) in chat settings<\/li>\n<li>New: Token estimation utilities (<code>estimateTokensFromString<\/code>, <code>estimateTokensFromJson<\/code>)<\/li>\n<li>Improved: Auto-save on all chat settings (removed manual \"Save Settings\" button)<\/li>\n<li>Improved: Compact request logging \u2014 summaries instead of full body dumps, reducing log noise<\/li>\n<li>Improved: HTTP request layer now returns headers and status code alongside body (<code>make_request_with_meta<\/code>)<\/li>\n<li>Improved: JSON encoding with <code>JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE<\/code> for cleaner payloads<\/li>\n<\/ul>\n\n<h4>2.0.2<\/h4>\n\n<ul>\n<li><strong>\ud83c\udd95 WordPress Abilities Integration<\/strong> (WordPress 6.9+) - Auto-discover and import abilities from other plugins!<\/li>\n<li>New: Abilities tab in admin (appears only on WordPress 6.9+)<\/li>\n<li>New: Discover button to scan all registered abilities from themes\/plugins<\/li>\n<li>New: Import, enable\/disable, and delete individual abilities<\/li>\n<li>New: Abilities exposed as MCP tools (ability_* prefix) for AI agents<\/li>\n<li>New: Database table wp_sflmcp_abilities for persistent ability storage<\/li>\n<li>Improved: Plugin description updated to reflect 117+ tools<\/li>\n<li>Improved: Admin menu reordered \u2014 AI Chat Agent first, MCP Server second  <\/li>\n<li>Improved: Renamed \"AI Chat\" to \"AI Chat Agent\" across the UI<\/li>\n<li>Technical: Uses wp_get_abilities(), wp_get_ability(), $ability-&gt;execute() APIs<\/li>\n<\/ul>\n\n<h4>2.0.1<\/h4>\n\n<ul>\n<li><strong>\ud83c\udd95 Built-in AI Chat Client<\/strong> - Chat with AI directly from your WordPress admin panel!<\/li>\n<li>New: Multi-provider support - OpenAI, Claude (Anthropic), and Google Gemini<\/li>\n<li>New: Support for latest models including GPT-4.5, Claude 4 Opus\/Sonnet, Gemini 2.5 Pro\/Flash<\/li>\n<li>New: Smart suggestion chips that appear after AI responses<\/li>\n<li>New: Conversation history auto-saved per user (7-day retention)<\/li>\n<li>New: Stop button to cancel AI responses mid-generation<\/li>\n<li>New: Tool permission modes - \"Always Allow\" or \"Ask User\" for confirmations<\/li>\n<li>New: Advanced settings tab with temperature, max tokens, top_p, frequency\/presence penalty<\/li>\n<li>New: Customizable system prompt for AI behavior<\/li>\n<li>New: Tool display options (Full details, Compact, or Hidden)<\/li>\n<li>New: Multilingual suggestions - AI responds in the same language you use<\/li>\n<li>Improved: Sequential tool execution for better reliability across all providers<\/li>\n<li>Improved: Claude 4.5 model compatibility (temperature\/top_p handling)<\/li>\n<li>Improved: Gemini API message format conversion<\/li>\n<li>Fixed: Claude multiple tool_use error handling<\/li>\n<li>Fixed: Gemini \"content\" vs \"parts\" API format issue<\/li>\n<\/ul>\n\n<h4>1.0.5<\/h4>\n\n<ul>\n<li><strong>New: Custom Tools<\/strong> - Turn any WordPress plugin into an AI tool! Copy-paste examples included, no coding expertise required.<\/li>\n<li>New: Custom Tools management tab with code editor, enable\/disable toggle, and built-in examples<\/li>\n<li>New: Pre-built Custom Tool examples (WooCommerce product lookup, CF7 forms, Yoast SEO, WP Super Cache)<\/li>\n<li>New: Custom Tools support input schemas for structured AI interactions<\/li>\n<li>Improved: All admin styles externalized for WordPress.org compliance<\/li>\n<li>Fix: Resolved object persistence issue in PHP 8.1+ causing 404 errors on API endpoints<\/li>\n<li>Fix: Deferred WooCommerce detection to ensure tools load correctly regardless of plugin load order<\/li>\n<li>Fix: WooCommerce module dispatch now correctly handles tool routing<\/li>\n<\/ul>\n\n<h4>1.0.4<\/h4>\n\n<ul>\n<li>New: Debug logging system with dedicated log file (wp-content\/uploads\/sflmcp-logs\/)<\/li>\n<li>New: Logs tab in admin UI to enable\/disable logging and view debug logs<\/li>\n<li>New: Clear logs and refresh functionality from admin panel<\/li>\n<li>New: \"WordPress Full Management\" profile now active by default on fresh installs<\/li>\n<li>Security: Log directory protected with .htaccess and index.php<\/li>\n<\/ul>\n\n<h4>1.0.3<\/h4>\n\n<ul>\n<li>Security: Replaced custom token authentication with WordPress Application Passwords<\/li>\n<li>Security: Removed wp_set_current_user calls for compliance with WordPress.org guidelines<\/li>\n<li>Removed: User management tools (wp_create_user, wp_update_user, wp_delete_user)<\/li>\n<li>Removed: Customer management tools (wc_get_customers, wc_create_customer, wc_update_customer, wc_delete_customer)<\/li>\n<li>Updated: Settings page now guides users to create Application Passwords<\/li>\n<li>Improved: Authentication uses native WordPress security features<\/li>\n<\/ul>\n\n<h4>1.0.0<\/h4>\n\n<ul>\n<li>Initial public release<\/li>\n<li>55 WordPress management tools (posts, pages, comments, media, taxonomies, options)<\/li>\n<li>61 WooCommerce tools (products, orders, coupons, shipping, taxes, webhooks)<\/li>\n<li>Profile-based tool management with 8 predefined profiles<\/li>\n<li>WordPress Application Passwords authentication<\/li>\n<li>JSON-RPC 2.0 compliant REST API endpoint<\/li>\n<li>Server-Sent Events (SSE) support for real-time streaming<\/li>\n<li>Full internationalization support (i18n\/l10n ready)<\/li>\n<li>Granular permission control per tool<\/li>\n<li>Profile import\/export functionality<\/li>\n<li>Compatible with ChatGPT Custom Connectors, Claude Desktop, LibreChat<\/li>\n<\/ul>","raw_excerpt":"The most secure MCP Server for WordPress with Undo, plus AI Copilot &amp; Chat Agent. ChatGPT, Claude, Gemini, OpenRouter &amp; Mistral.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/pt.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/261898","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pt.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/pt.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/pt.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=261898"}],"author":[{"embeddable":true,"href":"https:\/\/pt.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/estebandezafra"}],"wp:attachment":[{"href":"https:\/\/pt.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=261898"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/pt.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=261898"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/pt.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=261898"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/pt.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=261898"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/pt.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=261898"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/pt.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=261898"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}