=== MCPServe - Connector For ChatGPT, Claude & SEO, SEA ===
Tags: mcp, ai, connector, seo, wordpress
Requires at least: 6.5
Requires PHP: 8.0
Stable tag: 3.4.12
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Generate MCP server URLs and connect Claude or ChatGPT to your WordPress site with OAuth and granular site-control permissions.

== Description ==
Your website. Connected to your AI.

MCPServe turns WordPress into a permission-controlled MCP server. Generate a server URL, connect it to a compatible AI client, authorize through WordPress, and manage your site from the conversation.

Ask your assistant to create articles, improve existing page content, update SEO metadata, review advertising landing pages, publish approved drafts, or move obsolete posts to Trash. Each operation respects the selected server permissions and WordPress user capabilities.

The dashboard is a connection management interface: server URLs, OAuth connections, tool permissions, security settings, activity records and connection checks. It does not add a post-composing screen.

Plans: all Pro tools free for seven days; afterwards, Basic tools remain free forever. Pay once to retain Pro. Basic includes browsing posts/pages, draft creation/editing, SEO and GEO page audits, and SEO metadata updates. Publishing, live-body editing, builder/site management and file tools require Pro access.

Features:
* Multiple independent MCP server profiles with copyable URLs.
* OAuth authorization-code flow with S256 PKCE and dynamic client registration.
* WordPress login and explicit authorization consent.
* Scoped tokens, rotating refresh tokens, expiration and revocation.
* Content discovery, creation, editing, publishing, trash and restore tools.
* Live-edit controls, content version checks and revision access.
* SEO metadata adapters, site audits, image uploads and image-alt updates.
* Rendered-page GEO audit for answer clarity, schema, canonical/description duplication and crawlability; Pro site-wide discovery check for robots, XML sitemaps and homepage. Recommendations can be applied with authorized content and SEO tools; no ranking or AI-citation guarantees.
* Short-lived same-site WordPress session for PHP editor validation from MCP OAuth/Bearer connections. WordPress fatal-error checks still revert unsafe edits.
* Pro administrator code scope to edit installed connector/payment plugins when separately enabled, and preview then install a new plugin or theme from supplied source files. New extensions stay inactive.
* Automatic content-hash versions for local theme CSS and JS; supported cache plugin purges on request, with honest reporting when host/CDN caches remain.
* Pro WooCommerce product copy/simple-product price editing and SiteSEO search and Facebook/X preview fields, with confirmation and access checks.
* Native image-block insertion into permitted classic/block posts and pages.
* Administrator full-access preset for supported tools and scopes, with WordPress capabilities and confirmation retained.
* Advertising landing-page analysis and UTM links.
* Per-tool, per-content-type and global permission controls.
* Excluded content IDs, activity retention and rate settings.
* Optional anonymous installation and activity reporting to the MCPServe merchant dashboard.
* Optional Bearer keys and a desktop stdio bridge.

AI reasoning is performed by your chosen AI client. Client availability depends on its plan and features. The plugin does not include AI credits, ad-account APIs, ad spend control or an OpenAI/Anthropic marketplace listing.

== Installation ==
1. Upload the ZIP and activate (or replace the existing fast-mcp-ia plugin).
2. Open MCPServe > MCP Servers.
3. Generate a server link and copy it into your client's custom remote MCP settings.
4. Sign in to WordPress when prompted and authorize access.
5. Enable only the global and server-level permissions you intend to use.

Use an HTTPS WordPress site with pretty permalinks. Create a server profile, copy its URL into a compatible MCP client, then sign in as the assigned WordPress user and review the requested permissions. Some hosts need an explicit route for OAuth discovery at `/.well-known/oauth-authorization-server`. The optional `bridge/fast-mcp-bridge.mjs` supports desktop clients with Node.js 20+ and a private Bearer key. Keep keys secret and revoke unused connections from the plugin dashboard.

== Optional installation statistics ==
The Settings screen offers an unchecked checkbox to share anonymous installation statistics with the configured MCPServe license server over HTTPS. If the administrator opts in, the connector creates a random installation ID and secret, then reports the plugin version, Basic/Trial/Pro plan and time of the last successful MCP tool call. A first report is sent when consent is saved; WordPress cron sends later reports daily when the site receives traffic. It does not report the site URL, post/page content, prompts, tool names, user names or license keys. The HTTP User-Agent is set to MCPServe and the version, without WordPress's default site URL. The server stores a hash of the installation secret and the site-level timestamps. The merchant dashboard shows reported installs, sites seen in the last 30 days and sites using MCP in the last 30 days. These are counts of consenting installations, not a count of every download or unique human user.

Turning the checkbox off stops reporting and requests deletion of the site's installation record. If the server cannot be reached, WordPress cron retries deletion on later days. Reporting is separate from license validation; activating Pro sends the site URL and private license key to the merchant as described on the Plan & license screen. The checkbox does not change permissions, trial length or licensing.

== Changelog ==
= 3.4.12 =
* Added optional, explicit-consent anonymous install and MCP usage reports for merchant statistics. Disabling requests deletion, with retry if the server is unavailable.

= 3.4.11 =
* On the MCPServe merchant website, verify the Store's latest release directly so WordPress updates do not depend on the server reaching its own public REST URL.
* Give distinct errors for an unreachable/invalid release feed and a release that is not newer than the installed connector.

= 3.4.10 =
* Deliver a focused customer ZIP for trial and updates. Remove historical upgrade and validation guides from the installable package; connector features and the seven-day trial remain the same.

= 3.4.9 =
Refresh stale WordPress update notices and resolve the latest merchant release when upgrading. Verify an immutable package URL against the release SHA-256 while retaining compatibility with older Store installations.

= 3.4.8 =
* Corrected expired-trial permissions: Basic connections now advertise and receive only Basic scopes, even when an older profile or token retained Pro selections.
* Hid administrator full access, Pro scopes, Pro tools and Pro global switches from Basic server editors and settings. Existing saved Pro choices remain dormant until paid activation unless the profile is resaved on Basic.
* Limited Basic OAuth consent, refresh tokens, Bearer keys, resource metadata, MCP tool listings and OpenAPI to current-plan permissions. Reconnect AI clients to refresh cached tool lists.

= 3.4.7 =
* Added a separate Pro code scope and global switch for advanced plugin and theme code changes, including protected installed plugins.
* Added preview_extension and create_extension to assemble and install bounded source packages with a preview hash. Newly installed extensions are inactive.
* WordPress core, wp-config.php and credential files remain outside MCP source tools. Existing profiles must enable the code scope and tools, enable the global code switch, and reconnect.

= 3.4.6 =
* Added Basic GEO page audit and Pro site-wide discovery audit using public rendered HTML where available.
* Enabled WordPress PHP editor validation for MCP-authenticated administrators through a temporary same-host session, immediately revoked after validation.
* Versioned all local theme CSS and JS assets by content hash, regardless of enqueue handle, and added known page-cache integrations to the refresh tool.
* Existing profiles must enable geo_audit and geo_site_audit individually, or resave the administrator full-access preset, then reconnect.

= 3.4.5 =
* Added opt-in Pro WooCommerce product discovery, reading and guarded copy/simple-product price editing.
* Added SiteSEO product Facebook and X/Twitter preview metadata editing with Media Library image IDs.
* Existing MCP server profiles must enable the new commerce scope, product type and tools, then reconnect.

= 3.4.4 =
* Added public release checks for Basic, Trial and Pro installations and WordPress dashboard/plugin update alerts.
* Kept SHA-256 verification of connector downloads and a paid-feed fallback for older store installations.

= 3.4.3 =
* Added Pro tools to read, update and restore the standard WordPress login screen design through WordPress hooks.
* Login styling supports Media Library logo/background, colors, logo width and form corners without changing core files or authentication behavior.

= 3.4.2 =
* Replaced repeated full-access notices with a compact per-server control and clearer status.
* Added licensed WordPress update checks and SHA-256-verified package downloads from MCPServe.dev.

= 3.4.1 =
* Added administrator full-access server preset with OAuth reauthorization on changes.
* Added bounded, private chunked JPEG/PNG/GIF/WebP uploads, WordPress media validation, captions and alt text.
* Added native image-block insertion using a post version hash, edit permission and live-edit controls.
* Expanded capability discovery for effective media and global permissions.

= 2.0.0 =
* Replaced SEA Briefs admin workflow with an MCP server management dashboard.
* Added per-server URLs, OAuth discovery, DCR, consent, PKCE and rotating tokens.
* Added existing/live-content editing, trash/restore, revision and taxonomy tools.
* Added granular SEO/media permissions and SEA landing-page analysis.
* Added protected IDs, content hashes, mutation locks and page-builder safeguards.
* Preserved existing content, SEO fields and legacy v1 credentials.

= 1.0.0 =
Initial connector release.

== Version 2.1.0 ==
Product renamed MCPServe. Purchased one-site license required for MCP and OAuth endpoints. Activate under MCPServe > License. One-time price $29 USD; merchant PayPal checkout is managed by the separate MCPServe Store plugin.

== Version 3.0.0 ==
MCPServe — Fast MCP Connector. Seven-day Basic trial with nine tools; Pro unlocks all 44 supported tools. Upgrade at https://mcpserve.dev/?mcpserve_buy=1. One-time price is controlled by the merchant. Site-management writes require Pro, selected scopes, WordPress capabilities, enabled writes/live edits, and explicit confirmation.

== Version 3.1.0 ==
Pro design tools: edit existing Elementor element settings, WPBakery shortcodes and classic content, including permitted header/footer templates. Private restore points and conflict checks. Opt-in theme/plugin file editing through the WordPress editor. White admin logo. 53 supported tools.

== Version 3.2.0 ==
Full Pro access for seven days, then ten Basic tools free forever. A one-time Pro license unlocks all 53 tools without a recurring subscription. Basic includes SEO metadata updates; all permission checks remain enforced. Existing trial timestamps are preserved.

== Version 3.3.0 ==
French and Arabic admin translations, bundled PO/MO catalogs, Arabic RTL layout and translated clipboard/consent messages. English remains the fallback. MCP identifiers and permissions are unchanged.

== Version 3.4.0 ==
Adds homepage structure and capability discovery, accurate effective theme settings, file-edit diagnostics, exact-match patch previews and guarded application, content-hash asset URLs and a limited cache refresh/status check. File writes now distinguish stored state, rollback and public verification. Draft responses normalize zero GMT timestamps and support an optional version hash. Checkout block integrity is checked before content edits. New Pro tools must be enabled in existing server profiles.
