Title: Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents Author: miniOrange Published: 4 juin 2026 Last modified: 8 octobre 2026 --- Recherche d’extensions ![](https://ps.w.org/miniorange-secure-mcp-server/assets/banner-772x250.png?rev= 3650858) ![](https://ps.w.org/miniorange-secure-mcp-server/assets/icon-256x256.png?rev=3623101) # Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents Par [miniOrange](https://profiles.wordpress.org/cyberlord92/) [Télécharger](https://downloads.wordpress.org/plugin/miniorange-secure-mcp-server.1.5.1.zip) * [Détails](https://fr.wordpress.org/plugins/miniorange-secure-mcp-server/#description) * [Avis](https://fr.wordpress.org/plugins/miniorange-secure-mcp-server/#reviews) * [Installation](https://fr.wordpress.org/plugins/miniorange-secure-mcp-server/#installation) * [Développement](https://fr.wordpress.org/plugins/miniorange-secure-mcp-server/#developers) [Support](https://wordpress.org/support/plugin/miniorange-secure-mcp-server/) ## Description **[miniOrange Secure MCP Server ](https://plugins.miniorange.com/mcp-server-ai-policy-enforcement-wordpress)** is a complete WordPress MCP server plugin that turns your WordPress site into a fully working Model Context Protocol (MCP) server. Once installed, you can connect Claude to WordPress, connect ChatGPT to WordPress, or link any MCP-compatible AI in just 2 minutes. Ask AI to write blog posts, edit Elementor and Kadence page layouts, manage custom post types and their custom fields, upload media, update WooCommerce products, manage Yoast SEO, moderate comments, handle contact form submissions, and much more, all through simple chat. With Governed REST API Access, AI can even use REST endpoints from your other plugins, under the same permissions. Unlike other WordPress MCP server plugins that give AI full admin access, we put you in complete control. Role-based AI permissions, Turn each tool on or off, self- hosted OAuth 2.1 login, and full activity logs are all included, with no restrictions. ### Quick Links [Official Website](https://plugins.miniorange.com/mcp-server-ai-policy-enforcement-wordpress) | [ChatGpt Setup Guide](https://plugins.miniorange.com/setup-chatgpt-to-wordpress-abilities-api-using-mcp) | [Claude Setup Guide](https://plugins.miniorange.com/connect-wordpress-with-claude-mcp-guide) | [Documentation](https://plugins.miniorange.com/mcp-server-documentation) | [Book a Demo](https://plugins.miniorange.com/mcp-server-ai-policy-enforcement-wordpress#demo-form) ### Key Features of the Secure WordPress MCP Server Built security-first, so you can let AI work on a live site with confidence: * **426 MCP tools in 26 categories** – WordPress core, WooCommerce, Yoast SEO, Rank Math, Advanced Custom Fields, Elementor, Kadence, Contact Form 7, WPForms, Gravity Forms, Fluent Forms and more. * **Governed REST API access** – AI can use any WordPress REST endpoint, including those from your other plugins, with route-by-route, role-based permissions. * **Agent Registry** – decide, per WordPress role, exactly which tools an AI agent can use. * **Self-hosted OAuth 2.1 with PKCE** – the AI never sees your WordPress password. * **Every call checked against WordPress capabilities** – an AI can never do more than its user can do in wp-admin. * **Full audit log** – every call, allowed or refused, is recorded. * **Safe theme and code editing** – changes go to a draft, are syntax-checked and previewed, and publish with automatic backup and rollback. * **Built-in troubleshooting** – a Troubleshooting page finds out why an AI client can’t connect and tells you what to fix. Everything runs on your own server. No third-party relay sits between your AI client and your site. ### How to Install the WordPress MCP Server (2 Minutes) 1. Log in to your WordPress admin dashboard. 2. Go to **Plugins Add New**. 3. Search for **Secure MCP Server**. 4. Click **Install Now**, then **Activate**. #### Create Your First AI Agent 1. Open **Secure MCP Server** from the WordPress admin sidebar. 2. Click **Register your first agent**. 3. Enter an agent name and click **Next**. 4. Choose which abilities each user role can use, then click **Create & Continue**. 5. Click **Continue**. You’ll see **Connect your AI client**. #### How to Connect ChatGPT to WordPress 1. Under **Connect your AI client**, select **ChatGPT**. A setup panel opens. 2. Copy **Your Site URL** from the panel. 3. Click the **MCP Server for WordPress** link in the panel. It opens the app in ChatGPT. 4. Click **Install Plugin**. 5. Enter your WordPress Site URL and click **Continue**. 6. Click **Allow Access**. Now start chatting with your site through ChatGPT. Full guide: [Set up ChatGPT with WordPress using MCP](https://plugins.miniorange.com/setup-chatgpt-to-wordpress-abilities-api-using-mcp) #### How to Connect Claude to WordPress 1. Under **Connect your AI client**, select **Claude**. A setup panel opens. 2. Open the connector page **miniOrange MCP for WordPress** and click **Connect**. 3. Enter your site’s address. You’ll land on the sign-in gateway — paste your site’s URL there. 4. Log in with your WordPress account and click **Allow access**. Your approved tools now appear in Claude – start chatting with your site. Full guide: [Connect WordPress with Claude using MCP](https://plugins.miniorange.com/connect-wordpress-with-claude-mcp-guide) **Video: Connect Claude to WordPress Using Secure MCP Server** #### Connect Gemini, Cursor, Windsurf & Any MCP Client The plugin follows the open Model Context Protocol standard, so it works with Gemini, Cursor, Windsurf, and any MCP-compatible client. Connect several AI clients at once, each with its own permissions and audit trail. Your MCP server endpoint: **https://gateway.miniorange.ai/v2/mcp** ### What Your AI Agent Can Do 426 tools in 26 categories. Integration tools appear only when the related plugin is active. **WordPress Content** * **Posts & Pages (56 tools)** – Create, publish, schedule, duplicate, set templates and featured images, trash and restore. * **Categories, Tags & Media (40 tools)** – Manage taxonomies, upload media from a URL or file, update alt text and captions. * **Revisions (9 tools)** – List, compare and restore revisions and autosaves. * **Comments (21 tools)** – Moderate, reply, search, mark spam and view counts. * **Custom Post Types & Fields (19 tools)** – Discover any custom post type and edit its items, terms and fields. * **Content Find & Replace (6 tools)** – Change part of a post, custom field or setting without rewriting it. **Users & Site Management** * **Users & Roles (38 tools)** – Create users, assign roles, update profiles, send password reset links. * **Settings, Plugins, Themes & Updates (34 tools)** – Site title, tagline, homepage, timezone, plugin activation and updates, auto-updates, site health. * **Maintenance (8 tools)** – Clear caches, refresh permalinks, run cron events, read the error log. * **Theme Editing (32 tools)** – Block templates, global styles, patterns and theme files, with draft, preview, publish and restore. **Plugin Integrations** * **WooCommerce (41 tools)** – Products, orders, refunds, customers, coupons and sales reports. * **Advanced Custom Fields (25 tools)** – Field groups, repeaters, flexible content, relationships, options pages. * **Yoast SEO & Rank Math (15 tools)** – SEO titles, meta descriptions, focus keywords, canonicals, schema, Open Graph. * **Forms & Leads (54 tools)** – Contact Form 7 (Flamingo), WPForms, Gravity Forms and Fluent Forms entries, with CSV export. * **Elementor (10 tools)** – Read, edit, style, move and duplicate Elementor elements * **Divi 4 & Divi 5** – Read and edit Divi Builder layouts, modules, text, images and styling. * **Kadence Blocks (18 tools)** – Build Kadence pages, insert rows, columns, headings, buttons and images. **Governed REST API Access: Go Beyond Built-in Tools** AI can use any WordPress REST API endpoint – core, WooCommerce, Yoast or any other plugin – with no plugin update needed. * **Read-only by default** – a new AI agent can read posts, pages and media; any write needs your approval. * **Granular control** – allow each route and method (read or write) per user role, all logged. * **Site-wide write switches** – turn all create, update or delete REST calls off for the whole site in one click. * **Dangerous routes stay blocked** – plugin and theme installs, activations, batch and blueprint-import routes can never be granted. **WooCommerce MCP Server** Run your store through chat. Create and update products, attributes, categories and tags. Look up, create and update orders, change order status, add order notes and issue refunds. Manage customers, view purchase history and customer segments, and create or update coupons. Get sales, orders, products, customers, coupon usage and top-seller reports. **SEO MCP: Yoast SEO & Rank Math** Bulk-update SEO titles and meta descriptions, set focus keywords, mark cornerstone content, and control robots meta, advanced robots directives, canonical URLs, breadcrumb titles and sitemap inclusion. Manage Open Graph, Twitter/X cards and schema types. Rank Math SEO metadata is supported too. **Advanced Custom Fields (ACF) MCP** Read and update any ACF field value, in bulk or one at a time. Work with repeater rows, flexible content layouts, relationship fields and options pages. Create field groups, add fields, update location rules, check conditional logic, and validate a value before it is saved. You can also search posts by ACF field value. **Page Builder MCP: Elementor, Divi & Kadence** **Elementor:** read a page layout, change element text, images, links and styling without breaking the design, move, duplicate or delete elements, look up widget schemas and preview the rendered result. **Divi 4 & Divi 5:** read Divi Builder layouts and update modules, text, images, links and styling through chat, without opening the visual builder. **Kadence Blocks:** build new Kadence layout pages, insert rows, columns, headings, buttons, icons and images, update block text and styling, and set page layout options. #### Forms & Leads MCP Work with **Contact Form 7** (via Flamingo), **WPForms**, **Gravity Forms** and ** Fluent Forms**. List forms and fields, read and count entries, mark them read or unread, trash, restore or delete them, and **export entries as CSV**. Inspect form settings and notifications, and for Fluent Forms you can create, update and test notifications and confirmations. **Safe Theme & Code Editing** AI can now edit your theme safely: * Edit block templates, template parts, global styles, style variations and patterns. * Read, search and edit theme files – PHP, CSS, JavaScript and theme.json. * **Nothing touches the live site directly.** Every change goes into one private draft. * PHP is checked for syntax errors, JSON for validity, and templates for broken blocks before a change is accepted. * Preview the draft, and test that the site still loads before it goes live. * Publishing takes an **automatic backup**. If the site fails, **everything rolls back automatically**. * Undo any publish later with one restore. **Site Management & Maintenance** Update site title, tagline, homepage, posts page, timezone and privacy page. List, activate, deactivate and update plugins and set auto-updates. Check WordPress core, plugin and theme updates, site health and server information. Clear caches, refresh permalinks, inspect and run scheduled (cron) events, and read the site error log to troubleshoot problems. #### Smart Content Editing * **Find & replace** inside posts, custom fields and settings – change one sentence without rewriting the whole page. * **Page lock** – edits are refused if the page changed after the AI read it. * **Revision restore** – roll back any post to an earlier version. **Agent Registry: Role-Based Access for Every AI Agent** The **Agent Registry** controls what each AI agent may do. * Create named agent policies that map WordPress roles to allowed tools. * Tools outside a role’s grant are hidden from the AI client and cannot be called. * Turn an agent on or off without losing its configuration. * Revoke an AI client’s access instantly. * Use the role/ability matrix editor to manage everything in one place. So an editor’s AI can write content but cannot install plugins, and a shop manager’s AI can update orders but cannot touch site settings. **Troubleshooting: Find Out Why an AI Client Can’t Connect** If an AI client can’t reach your site or sees no tools, open the **Troubleshooting** tab. The plugin checks your site and the connection from outside, and shows only the problems that are likely to be real. * Each problem is explained in plain language, with who can fix it and the exact change to make. * Detects firewall, CDN, caching and reverse-proxy issues, and servers that strip the Authorization header. * Copy-paste Apache and Nginx fixes for the most common causes. * **Copy for support** gives you a redacted report to send to our team. ### Three Layers of Security on Every Call 1. **The connection is a real WordPress user.** OAuth 2.1 (PKCE) tokens are bound to the user who approved the connection and to your site. Expired, revoked or wrong- site tokens are refused. 2. **Role-scoped AI grants.** Only the tools allowed for that role through the agent Registry are visible and callable. 3. **WordPress capability checks.** Each call is checked exactly like wp-admin, down to the individual post, page, comment Plus: * **Per-tool on/off toggles** for every tool. * **Prompt-injection detection** and **behavioral anomaly detection**. * **Rate limits and quotas** per AI client. * **Data rules & DLP** that mask emails, phone numbers and secrets. * **Human-in-the-loop approval** for sensitive actions. * **Destructive actions need confirmation**, and every tool tells the AI client whether it is read-only or destructive. * **Activity audit log** that records the user, AI identity, client, tool, outcome and time, filterable by agent, status, tool, user and date. **Dashboard & Monitoring** See active agents, executions, success rate and latency at a glance. Members can open « Your AI Access » to see which tools their role allows and how to connect. ### Example Prompts * « Write a blog post about our summer sale, add it to the News category and schedule it for Monday 9 AM. » * « Find all products under ₹500 and put them on a 20% sale until Sunday. » * « Write meta descriptions for every post that doesn’t have one. » * « Export this month’s Gravity Forms entries as CSV. » * « Change the footer text in my theme, preview it, then publish. » * « Why aren’t my scheduled posts publishing? Check cron and the error log. » * « Use the REST API to list this week’s bookings from my booking plugin. » #### Need Help? Ask in the [support forum](https://wordpress.org/support/plugin/miniorange-secure-mcp-server/)– our team responds quickly. For private or enterprise questions, email **info@xecurify. com** or use the **Contact Support** button inside the plugin. ## Captures d’écrans [⌊Onboarding quick-start guide for registering your first AI agent.⌉⌊Onboarding quick-start guide for registering your first AI agent.⌉[ Onboarding quick-start guide for registering your first AI agent. [⌊AI Agents list with role-based policies and ability packs.⌉⌊AI Agents list with role-based policies and ability packs.⌉[ AI Agents list with role-based policies and ability packs. [⌊Agent overview showing configuration and recent activity.⌉⌊Agent overview showing configuration and recent activity.⌉[ Agent overview showing configuration and recent activity. [⌊Activity log filterable by agent, status, ability, user and date.⌉⌊Activity log filterable by agent, status, ability, user and date.⌉[ Activity log filterable by agent, status, ability, user and date. [⌊Connect to AI – setup for ChatGPT, Claude and other MCP clients.⌉⌊Connect to AI– setup for ChatGPT, Claude and other MCP clients.⌉[ Connect to AI – setup for ChatGPT, Claude and other MCP clients. [⌊MCP Server dashboard with active agents, executions, success rate and latency.⌉⌊ MCP Server dashboard with active agents, executions, success rate and latency.⌉[ MCP Server dashboard with active agents, executions, success rate and latency. [⌊"Your AI Access" view showing a member's allowed tools and how to connect.⌉⌊"Your AI Access" view showing a member's allowed tools and how to connect.⌉[ « Your AI Access » view showing a member’s allowed tools and how to connect. ## Installation #### Requirements * WordPress 6.9 or newer (Abilities API required) * PHP 7.4 or higher (PHP 8.0+ recommended) * HTTPS enabled (for OAuth login) #### From your WordPress dashboard 1. Go to **Plugins Add New Plugin**. 2. Search for **miniOrange Secure MCP Server**. 3. Click **Install Now**, then **Activate**. 4. Open **Secure MCP Server** from the admin sidebar and click **Register your first agent**. 5. Name the agent, set ability access by user role, and click **Create & Continue**. 6. Under **Connect your AI client**, choose Claude, ChatGPT or another client and follow the setup panel. 7. Sign in to WordPress and click **Allow Access**. Done! #### Manual installation 1. Download the plugin zip. 2. Go to **Plugins Add New Upload Plugin** and upload the zip. 3. Activate the plugin and continue from step 4 above. ## FAQ ### What is an MCP server for WordPress? MCP (Model Context Protocol) is an open standard that lets AI assistants use tools. This plugin makes your WordPress site an MCP server, so AI clients like Claude and ChatGPT can safely read and update your site through tools you control. ### Which AI clients are supported? Claude, ChatGPT, Gemini, Cursor, Grok, Windsurf and any MCP-compatible client. ### How many tools are included? 426 tools in 26 categories, covering WordPress core, WooCommerce, Yoast SEO, Rank Math, Advanced Custom Fields, Elementor, Divi, Kadence, Contact Form 7, WPForms, Gravity Forms, Fluent Forms, theme editing and site maintenance. Integration tools appear only when the related plugin is active. ### Is it safe to give AI access to my WordPress site? Yes. Access uses self-hosted OAuth 2.1 with PKCE, so the AI never sees your password. Every call is limited by role through the agent Registry, checked against WordPress capabilities, rate-limited and logged. You can require human approval for sensitive actions and mask sensitive data. ### Can the AI do more than my WordPress user can? No. Every tool runs as the WordPress user who approved the connection, and every call is checked against that user’s capabilities exactly as in wp-admin. ### Can AI use the REST API of my other plugins? Yes. AI can discover and call any WordPress REST route, including those from WooCommerce, Yoast and other plugins, with no plugin update needed. A new agent starts with read- only access to core WordPress content. Writes and routes outside it need an explicit, per-role grant, and you can switch off all create, update or delete REST calls for the whole site. Plugin and theme install, activate, batch and blueprint-import routes are always blocked. ### Can AI break my theme or site? Theme changes never touch the live site directly. They go into a draft, PHP is syntax- checked and JSON validated, and you can preview the draft. Publishing takes a backup and rolls back automatically if the site fails to load, and you can restore any earlier publish. ### Does it work with WooCommerce? Yes. 41 tools cover products, attributes, orders, order notes, refunds, customers, coupons and sales reports. ### Does it work with Yoast SEO and Rank Math? Yes. 14 Yoast SEO tools cover titles, meta descriptions, focus keywords, cornerstone content, robots, canonicals, breadcrumbs, Open Graph, Twitter/X cards, schema and sitemaps. Rank Math SEO metadata is also supported. ### Does it support Advanced Custom Fields (ACF)? Yes. 25 ACF tools cover field values, repeaters, flexible content, relationships, options pages, field groups and location rules. ### Does it support Elementor, Divi and Kadence? Yes. Elementor (10 tools), Divi 3 and Divi 4, and Kadence Blocks (18 tools) are supported, so AI can read, edit, style and build layouts. ### Which form plugins are supported? Contact Form 7 (with Flamingo for submissions), WPForms, Gravity Forms and Fluent Forms, including CSV export of entries. ### Can I disable specific tools? Yes. Every tool has a global on/off toggle, and the agent Registry controls tools per role. Developers can also limit exposed tools with the `MOSMCP_EXPOSED_PREFIXES` constant. ### How do I revoke an AI client’s access? Click **Revoke** in the agent Registry. Access ends immediately. ### Can I connect multiple AI clients at the same time? Yes. Connect as many as you need, each with separate permissions and its own audit trail. ### What happens if an AI edit goes wrong? Page lock blocks edits to content that changed after the AI read it, post revisions can be restored, theme changes publish with automatic backup and rollback, and destructive actions require confirmation. ### Does my data go through a third-party server? No. The MCP server and OAuth server run on your own WordPress site. Your AI client connects directly to your site. ### Why does my AI client say it cannot reach my site? AI clients need a public HTTPS URL. Sites on localhost or behind a firewall cannot be reached. Also make sure your CDN or cache is not caching the MCP endpoint. Open the **Troubleshooting** tab in Secure MCP Server to run a connection test; it lists the likely causes with the fix for each. ### Do I need to know how to code? No. Install, follow the onboarding checklist, and paste one URL into your AI client. ## Avis ![](https://secure.gravatar.com/avatar/da1134b29266a4dc5cc2ca623e8039908b8a861a4639c954666ce69f118c29b5? s=60&d=retro&r=g) ### 󠀁[One of the best-built WordPress plugins I’ve used!](https://wordpress.org/support/topic/one-of-the-best-built-wordpress-plugins-ive-used/)󠁿 [Ask Adam](https://profiles.wordpress.org/jackofall1232/) 8 octobre 2026 I've worked with and developed quite a few WordPress plugins, and miniOrange Secure MCP Server is genuinely one of the better-built plugins I've encountered.The plugin gives ChatGPT and other AI clients access to WordPress through MCP without turning WordPress into a bloated mess. The interface is clean, the permissions and abilities are well organized, and the built-in diagnostics are unusually useful.I ran into a particularly difficult connection problem where my website worked normally and the plugin's local tests passed, but the external MCP gateway received 403 errors. After extensive troubleshooting, the problem turned out to be a stale DNS A record pointing to an older IP from my hosting provider. The old IP could still serve the website normally, which made the problem extremely difficult to spot.miniOrange support worked through the issue with me, provided detailed technical troubleshooting steps, and when I explained the eventual root cause, they passed the scenario to their development team so they could consider improving the diagnostic tools for other users who encounter the same edge case.That's exactly the kind of response I like to see from a developer.The plugin itself is powerful without being unnecessarily bloated, the MCP implementation works extremely well, and the support has been excellent. Highly recommended if you want to connect WordPress to ChatGPT or another MCP-compatible AI client. ![](https://secure.gravatar.com/avatar/74428458fcfb5252af3562c66f61b70f42c980becf58d8b62a82d0f5eb39b551? s=60&d=retro&r=g) ### 󠀁[Excellent product and Support](https://wordpress.org/support/topic/excellent-product-and-support-118/)󠁿 [shubhita](https://profiles.wordpress.org/shubhita/) 30 septembre 2026 This is an excellent MCP server—very smooth and easy to connect. The support team is also fantastic and always ready to assist whenever needed. A special mention to Vedansh, who helped me sail through the entire process so easily. Really appreciate the prompt and helpful support. Highly recommended! ![](https://secure.gravatar.com/avatar/de170834a7b1e65559d9c978deb449efebb3f4c79f36e2d697b1a51d0a638247? s=60&d=retro&r=g) ### 󠀁[WooCommerce MCP features for our WordPress automation work](https://wordpress.org/support/topic/woocommerce-mcp-features-for-our-wordpress-automation-work/)󠁿 [Sphere Plugins](https://profiles.wordpress.org/emptyopssphere/) 24 septembre 2026 I recently tried this plugin and spent some time testing the WooCommerce MCP features for our WordPress automation work. we checked the product management features in detail, including creating and managing both simple and variable products. Attributes like color and size can be managed, and variations can also be handled individually with their own price and stock. we tested these features with different product setups and everything worked as expected. In our current automation setup, plugin installation and activation is handled manually, so we haven't tested that part yet. Other than that, the WooCommerce MCP features worked well for us and we are planning to continue testing it for our automation workflows. ![](https://secure.gravatar.com/avatar/41b5a931f9cb1b3e5ca265301ce4594ff5c9627f68f16b3ebdfc22702fe26be7? s=60&d=retro&r=g) ### 󠀁[Great Support!](https://wordpress.org/support/topic/great-support-6751/)󠁿 [ctuckercgtglobal](https://profiles.wordpress.org/ctuckercgtglobal/) 21 septembre 2026 Vedansh was awesome and helped me fix a connection issue I had. As far as the plugin goes, it is a great tool for marketing! Using it to write blogs and update SEO. Excited to see what I can do. They also told me mention any suggestions or ideas and they can try to improve the plugin! Awesome service! ![](https://secure.gravatar.com/avatar/2b3e58290c24631bfc9b492a387bc30143c4dfb57464817be5d6170604dfc3db? s=60&d=retro&r=g) ### 󠀁[Working AI Bot Connector For WordPress](https://wordpress.org/support/topic/working-ai-bot-connector-for-wordpress/)󠁿 [peteaugusta](https://profiles.wordpress.org/peteaugusta/) 16 septembre 2026 So far this has been a great plugin connecting ChatGPT to WordPress. I have ChatGPT doing a lot of edits and audits across my sites. Makes short work of page meta and even alt image descriptions based on what the images actually look like. You might need help for some CPT integrations, but the dev is very responsive to helping. ![](https://secure.gravatar.com/avatar/ca81fbf71a3145c42f95a4eae847a3f0f3206a3ecec8e93e561268cf337dfa65? s=60&d=retro&r=g) ### 󠀁[Nice support from the team](https://wordpress.org/support/topic/nice-support-from-the-team/)󠁿 [thevylinoteam](https://profiles.wordpress.org/thevylinoteam/) 10 septembre 2026 am very grateful for the team's outstanding support. They are extremely professional, prompt with their responses, and dedicated to helping users. I highly recommend this plugin to anyone considering it. [ Lire les 8 avis ](https://wordpress.org/support/plugin/miniorange-secure-mcp-server/reviews/) ## Contributeurs/contributrices & développeurs/développeuses « Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents » est un logiciel libre. Les personnes suivantes ont contribué à cette extension. Contributeurs * [ miniOrange ](https://profiles.wordpress.org/cyberlord92/) [Traduisez « Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents » dans votre langue.](https://translate.wordpress.org/projects/wp-plugins/miniorange-secure-mcp-server) ### Le développement vous intéresse ? [Parcourir le code](https://plugins.trac.wordpress.org/browser/miniorange-secure-mcp-server/), consulter le [SVN dépôt](https://plugins.svn.wordpress.org/miniorange-secure-mcp-server/), ou s’inscrire au [journal de développement](https://plugins.trac.wordpress.org/log/miniorange-secure-mcp-server/) par [RSS](https://plugins.trac.wordpress.org/log/miniorange-secure-mcp-server/?limit=100&mode=stop_on_copy&format=rss). ## Journal des modifications #### 1.5.1 * Improved the Troubleshooting page to show only likely connection problems. * Minor bug fixes in the WordPress MCP Server. #### 1.5.0 * Added support for REST APIs in the WordPress MCP Server. * Added a Troubleshooting page. * Improved MCP connection reliability with AI providers. * Minor bug fixes in the WordPress MCP Server. #### 1.4.14 * Added theme editing for block themes: templates, template parts, global styles, style variations and patterns. * Added theme file editing: read, search and change theme code in a private draft. * Every theme change now waits in a draft you can preview before it goes live. Before publishing, the site is checked with the draft applied, publishing backs up first, and every change is rolled back automatically if the site breaks. * Improved: AI assistants are now told which inputs each tool requires and why a change was refused, including the closest matching text when wording is not found. * Minor Bug Fixes in the WordPress MCP Server #### 1.4.13 * Added surgical content editing: change part of the text in a post, a custom field or a setting without rewriting the whole thing. * Added 8 maintenance abilities covering scheduled events, permalinks, caches, and the site error log. * Added Fluent Forms support: 14 abilities for forms, fields, confirmation messages, email notifications and submissions. * Minor Bug Fixes in the WordPress MCP Server #### 1.4.12 * Added 34 site administration abilities covering site settings, plugin management, theme details, and update and Site Health checks. * Minor bug fixes in the WordPress MCP Server #### 1.4.11 * Security and performance improvements to the MCP connection flow. * Added SEO post meta update ability for Rank Math. * Added product sale schedule date fields to the WooCommerce abilities. #### 1.4.10 * Fixed: the health endpoint is no longer cacheable. Page and edge caches (e.g. LiteSpeed, Cloudflare) could previously serve a stale « no agent » state, causing a connected client to report « No agent configured » even after an agent was enabled. * Minor bug fixes in the WordPress MCP Server #### 1.4.9 * Debug logging framework: a built-in diagnostic log for MCP and OAuth activity. * Minor bug fixes in the WordPress MCP Server #### 1.4.8 * Minor bug fixes in the WordPress MCP Server #### 1.4.7 * Elementor integration: Added 10 MCP Server abilities to read and edit Elementor pages, posts, and custom post types, including layout elements, text, images, links, widget types, and rendering changes for verification. * Elementor editing: Update text, images, links, and selected styling without affecting the rest of the design, with separate tablet/mobile values. * Custom post types: Added 19 abilities to read and edit items and custom fields, manage taxonomies, featured images, status, duplication, trash, and restore. Unsupported fields remain read-only with clear reasons. * Media uploads: Upload files from public URLs or supplied content, validate the real file type, and use attachment IDs for featured images or Elementor widgets. * Duplication: Copies now retain layout, theme settings, taxonomies, and featured images while clearing the canonical URL. * Yoast SEO: Added more editable fields, including breadcrumb title, canonical URL, SEO title, focus keyphrase, social/X cards, robots directives, cornerstone content, and schema types. * Slugs: Posts, pages, and custom post type slugs can now be edited with warnings about changed URLs and redirects. * Minor bug fixes in the WordPress MCP Server. #### 1.4.6 * Kadence integration: Added 17 abilities to the MCP Server for AI clients to read, edit, and build Kadence Blocks pages, including reading nested blocks, block settings, and searching blocks by type or text. * Edit Kadence blocks: Update text across 16 fields in 9 block types, styling and responsive attributes across all 59 block types, and duplicate or delete blocks with unique IDs. * Build layouts: Insert rows, columns, headings, images, and buttons; create draft pages with pre-built layouts; or build nested row-and-column structures in one request. * Added abilities to read and set Kadence per-page theme layout options. * Safe editing: MCP Server edits change only the targeted block, preserve the rest of the page, support optional page locks, and return previous and new values for verification. * Kadence-compatible markup: Inserted blocks match Kadence editor markup and CSS. * Unsupported block types are declined with a duplicate-and-edit option. * Minor bug fixes. #### 1.4.5 * ChatGPT is now shown first when connecting a client, with a direct link to the official plugin listing and clearer, more accurate setup steps. * Added a warning, shown across the plugin, when the site is only reachable on localhost — AI clients running elsewhere can’t connect to it until it’s made publicly reachable. * Refreshed the sign-in (OAuth authorization) screen to match the rest of the plugin’s design. * Fixed the connection dialogs occasionally rendering behind the WordPress admin toolbar. * Fixed a brief flicker on the dashboard when it first loads. #### 1.4.4 * Onboarding UI improvements in the MCP Server plugin. #### 1.4.3 * Minor bug fixes in the MCP Server plugin. #### 1.4.2 * Redesigned the role & ability editor as a matrix: abilities are grouped by resource down the left, with every role shown as its own column, so you can compare what each role can do without switching roles one at a time. Includes quick select all / clear controls for an entire role or an entire resource category. * Added a guided onboarding checklist for new installs: register an agent, add the MCP URL to your AI client, and approve the connection, shown on the dashboard until setup is complete. #### 1.4.1 * New ability — « Update Page »: edits the title and/or content of an existing page. #### 1.4.0 * New — MCP Server abilities library: 260+ ready-to-use, security-reviewed WordPress abilities exposed as MCP tools, covering core content, users & roles, comments, WooCommerce, Advanced Custom Fields, Yoast SEO, Contact Form 7, WPForms, and Gravity Forms. Plugin-specific abilities activate automatically when available. * All abilities are capability-gated with MCP tool annotations and full input/output JSON schemas, and are accessible only through the governed MCP Server endpoint, never the public REST API. * Security hardening: Protected user-meta keys cannot be accessed, role grants require existing caller capabilities, and CSV exports are protected against spreadsheet formula injection. Fixed: Object-level abilities no longer show false capability conflicts in the role & ability editor. Runtime permission checks remain unchanged. * Test Connection: Checks AI-client access and sign-in from both your server and an external location to detect firewall, CDN, and reverse-proxy issues. * Troubleshooting guide: Provides common AI-client connection fixes, including copy-paste Apache/Nginx solutions, with likely causes highlighted automatically. * Reliability: OAuth and MCP Server endpoints now use Cache-Control: no-store to prevent CDN/edge caching issues that can disrupt AI-client connections. #### 1.3.1 * Minor fixes and reliability improvements in the MCP Server plugin. #### 1.3.0 * Execution activity log: a full audit trail of every tool call, filterable by agent, status, or time range, with per-event detail including latency and error context. * Dashboard redesign: four focused metrics — Active Agents, Total Executions, Success Rate, and Average Latency — for an at-a-glance view of MCP server health. * Activity timeline on the agent overview: the last 5 executions appear inline on each agent overview tab. * Denied and unknown-tool calls are now correctly attributed to the responsible agent , so the audit log is never missing an agent name. #### 1.2.3 * Clearer role & ability editor: a single Select all / Clear all control (instead of separate All and None buttons), role names shown in each Agents summary, and a smoother role & ability layout. * Refined the admin/member view switcher to a clearer segmented control. * Fixed the support form’s country picker so it no longer shifts the page or scrolls unexpectedly when opened. * General UI polish across the agent Registry and connection screens. #### 1.2.2 * Agent Registry is now role-based: grant abilities to each WordPress role, with live capability-conflict detection. A request receives the abilities its user’s role(s) are granted across all enabled agents. * Added a « My AI Access » member view so any logged-in user can see the tools available to their role, with an admin/member view switcher for administrators. * Rebuilt agent create/edit as full-screen pages (guided create wizard ending in a connection step); removed the cramped modal editor. * Existing agents are migrated automatically and keep working; review each one to scope its abilities per role. * Support and deactivation-feedback emails now include the customer’s email address in the subject line. * Added a Settings link to the plugin’s row on the Plugins page. #### 1.2.1 * Added a floating Contact Support button, available throughout the admin app. * Added a Setup Guide link in the toolbar for quick access to the connection guide. * Redesigned the deactivation feedback prompt with a clearer, on-brand layout, guided reason selection, and the option to get help instead of deactivating. #### 1.2.0 * Added agents Registry: a new admin screen to view and manage all non-human identity( AI client) registrations, including OAuth client details and token status. * Added per-ability toggle to enable or disable individual abilities from being exposed as MCP tools. * Revamped the plugin UI. #### 1.1.1 * Added in-plugin support form and deactivation feedback modal. #### 1.1.0 * Added a remote MCP server endpoint that exposes registered abilities as MCP tools. * Added a self-hosted OAuth 2.1 authorization server with Dynamic Client Registration, PKCE, and discovery metadata so ChatGPT and Claude can connect. #### 1.0.0 * Initial release: read-only viewer for abilities registered through the WordPress Abilities API. ## Méta * Version **1.5.1** * Dernière mise à jour **il y a 5 jours** * Installations actives **5 000+** * Version de WordPress ** 6.9 ou plus ** * Testé jusqu’à **7.1.3** * Version de PHP ** 7.4 ou plus ** * Langue * [English (US)](https://wordpress.org/plugins/miniorange-secure-mcp-server/) * Étiquettes * [AI](https://fr.wordpress.org/plugins/tags/ai/)[ChatGPT](https://fr.wordpress.org/plugins/tags/chatgpt/) [Claude](https://fr.wordpress.org/plugins/tags/claude/)[mcp](https://fr.wordpress.org/plugins/tags/mcp/) [mcp-server](https://fr.wordpress.org/plugins/tags/mcp-server/) * [Vue avancée](https://fr.wordpress.org/plugins/miniorange-secure-mcp-server/advanced/) ## Évaluations 5 sur 5 étoiles. * [ 8 avis à 5 étoiles ](https://wordpress.org/support/plugin/miniorange-secure-mcp-server/reviews/?filter=5) * [ 0 avis à 4 étoile ](https://wordpress.org/support/plugin/miniorange-secure-mcp-server/reviews/?filter=4) * [ 0 avis à 3 étoile ](https://wordpress.org/support/plugin/miniorange-secure-mcp-server/reviews/?filter=3) * [ 0 avis à 2 étoile ](https://wordpress.org/support/plugin/miniorange-secure-mcp-server/reviews/?filter=2) * [ 0 avis à 1 étoile ](https://wordpress.org/support/plugin/miniorange-secure-mcp-server/reviews/?filter=1) [Votre avis](https://wordpress.org/support/plugin/miniorange-secure-mcp-server/reviews/#new-post) [Tout voir](https://wordpress.org/support/plugin/miniorange-secure-mcp-server/reviews/) ## Contributeurs * [ miniOrange ](https://profiles.wordpress.org/cyberlord92/) ## Support Demandes résolues ces deux derniers mois : 2 sur 3 [Voir le forum de support](https://wordpress.org/support/plugin/miniorange-secure-mcp-server/)