Changelog

Hardened authorization checks on post listing, Elementor, Ultimate Addons for Elementor and media upload tools. Unpublished posts are only listed to users who can edit them, and write tools now verify that the caller may act on the specific post.

A new MCP > Context page where you write AGENTS.md (how the site is built and the rules for agents) and CHANGELOG.md. Connected agents read these first, as server instructions on connect, through the Read Site Context tool and as MCP resources. It is off by default. Reconnect your client after editing, and do not store secrets in these documents.

Thirty-four new store management tools: delete products, variations, coupons, categories and tags (trashed by default), manage product categories, tags, global attributes and terms, read and update store settings, tax rates, shipping zones and methods, and payment gateways, and create or update products with categories, tags and attributes. Keys, tokens and passwords are always masked.

Install a plugin from WordPress.org or an HTTPS .zip URL, update it, or delete it. A plugin must be deactivated before it can be deleted. Administrators only.

Six tools for block themes: Read Global Styles, Update Global Styles (colors, typography, spacing, block styles or a theme style variation), List Templates, Read Template, Create Template and Update Template for templates and template parts such as header and footer. Custom CSS cannot be set through these tools.

Eight tools for classic themes: Read Sidebars, Update Sidebar, Read Widget Types, Read Widgets, Read Widget, Create Widget, Update Widget (change settings, move or reorder) and Delete Widget (to Inactive Widgets, or permanently).

Six diagnostics tools: Read Site Health, List Cron Events, Inspect Cron Event, Run Cron Event, Unschedule Cron Event and Read Error Log with secrets redacted. New cron events cannot be scheduled, and the plugin's own maintenance tasks cannot be removed.

Upload / Install Theme installs a theme your AI generated (sent as theme files) or a theme .zip, optionally replacing an existing copy and activating it. It uses WordPress's own theme installer.

New Custom Post Types group with Read Post Types, Read CPT Items, Create CPT Item, Update CPT Item and Delete CPT Item (moves to trash). Works with any public, non-built-in post type. All five are off by default. Contributed by @dulaj44 in #43.

Settings, Connection and About Us quick links under the plugin name on the Plugins screen, plus a new MCP → About Us page.

Create User and Update User tools for adding accounts and changing a user's email, display name, role or password.

New Themes group with Read Themes and Switch Theme tools.

Update Site Info (title, tagline, admin email) and Update Permalink Structure tools.

Activate Plugin and Deactivate Plugin tools. The plugin refuses to deactivate itself.

Nine new tools for managing WordPress navigation menus and menu items.

New Read Post tool to fetch a single post in any status with full content.

Permission-denied results were incorrectly logged as successful in the audit log.

Add Menu Item no longer accepts mismatched post type object IDs.

One-click Claude Connector sign-in with OAuth 2.1 authorization — no manual config required.

Analytics and Performance Dashboard showing requests, tool usage and response times.

Configuration Generator with live config building, download buttons and a one-click Cursor connector.

Addressed an authenticated access-control vulnerability affecting edit/delete post tools, with object-level permission checks.

Direct base64 file upload for media with optional MIME type hints.

11 Elementor Advanced Design Tools for high-fidelity design workflows.

WPForms (12 tools), Contact Form 7 (10 tools) and Gravity Forms (18 tools) ability suites.

Ultimate Addons for Elementor support with 45 tools for widgets and templates.

Built-in native MCP server implementation and a new MCP > Connection settings page with multi-client config tabs.

Application Password and API key authentication.

15 WooCommerce tools covering products, orders, coupons and customers.

Yoast SEO abilities for managing title, description and keyphrase.

Initial Elementor abilities and a modular ability architecture.