Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents changelog and version history

202631 releases

1. Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents 1.5.6Latest

   Nov 5, 2026
   • Added exact edits for Elementor: change a line of code in a large HTML widget, or a sentence in a long text block, without sending the whole widget back. Several edits can be made at once; they all apply or none do, and when a phrase is not found the AI is shown the closest text.
   • Added a full read of one Elementor element, so long HTML and text are no longer cut short when the AI reads them.
   • Added read-only SEO tools: read each post’s SEO title, meta description, focus keywords and indexing, as saved and as search engines see them, or list the posts with SEO issues. They need only permission to read the post, so a Subscriber’s AI can review SEO without editing rights. Works with Rank M…
   • Hardened custom field and setting edits: code a user is not allowed to add, such as scripts, iframes or onclick handlers, is now refused with the reason, as it already was for posts and Elementor.

2. Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents 1.5.5

   Nov 1, 2026
   • Added logo and site icon: 3 abilities to see the site’s logo and icon, and set or remove them from the media library or a web address. A site icon is cut to a 512 × 512 square the way the Customizer does it, keeping the part you name.
   • Added Additional CSS and theme settings: 4 abilities to read and change the site’s custom CSS, and every setting your theme offers in the Customizer, including Astra’s. Each value is checked by the theme’s own rules and saved through the Customizer when published.
   • Added synced pattern tools: see everywhere a pattern is used, turn one use into ordinary blocks, and delete a pattern safely by turning each remaining use into ordinary blocks, so no page loses its content.
   • Added image editing: crop by shape (16:9, square and so on) keeping the part you name, rotate, flip and resize, as a new image or in place with the original kept. Restore an original, and make missing image sizes.
   • Added upload links: the AI gives you a link to upload a file, such as a logo or a photo, straight into your media library. It works only for your account, behind your normal sign-in.
   • Logo, icon, CSS and theme settings wait in the theme draft, so you can preview them before anything goes live, and publishing backs them up for one-step undo.
   • The approval screen, Connect page and AI Agents page now show that each person connects their own AI with their own WordPress account and gets only the abilities their role allows. The AI Agents page opens with a short guide to role-based AI access, which you can dismiss.
   • Team members whose role has abilities get a dashboard widget showing their role, how many abilities their AI gets and three steps to connect, with links to the connect steps and to Your AI Access. Administrators do not get it.
   • Added setup steps for Gemini, Perplexity, Grok and Antigravity to the dashboard’s connect guide, including the plan each app needs to add a custom connector. The Connect page links to the Grok and Antigravity setup guides.
   • After a menu is assigned to a location or a widget is added to an area, the AI now checks the site’s pages and says when the theme does not show it yet, and where to switch it on.
   • WooCommerce, ACF, Yoast SEO, forms and Kadence changes now clear page caches automatically too.
   • On sites that accept SVG files, SVGs added by AI are cleaned of scripts, outside links and CSS that could load files from other sites, and a drawing built to freeze the browser of whoever opens it is refused.
   • Theme checks now use their short-lived sign-in only on this site’s own pages and always remove it when they finish, so a post whose address points to another site (with Page Links To, for example) can no longer receive it.
   • Fixed the role matrix on the AI Agents page offering abilities to roles that cannot use them, such as deleting pages for a Subscriber, or WooCommerce’s own product and order abilities for every role. WordPress still refused those calls, and grants like that are now flagged so you can turn them off.
   • Fixed an agent that was switched off losing its claim to the abilities it owns, which could let two agents own the same ability for a role. Saving now names the agent that already owns an ability.
   • Fixed the MCP Server plugin page showing blank, or letting you click away, before the setup guide appeared on a first visit.
   • Fixed a warning on menu links to a #section of a page.
   • Minor bug fixes in the WordPress MCP Server.

3. Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents 1.5.4

   Oct 28, 2026
   • Added block editor editing: 11 abilities to list, find and read the blocks of any page or post, change one block’s text or settings, and insert, replace, move, duplicate and delete blocks, including patterns and synced patterns. Every other block stays exactly as it was, blocks are only placed wher…
   • Added menus and navigation: 16 abilities to create, rename and delete menus, add, update, remove and reorder menu items, assign menu locations, and edit block-theme Navigation menus, with undo.
   • Added widgets and sidebars: 8 abilities to list widget areas and widgets, and add, update, move and delete widgets, including block widgets.
   • Added shareable preview links: an expiring link lets anyone view a draft without signing in, and can be cancelled at any time.
   • Added a site overview ability that tells the AI how the site is built (theme, page builder, plugins in use, caches) and which tools it may use.
   • Page caches, host caches and CDNs are now cleared automatically after every AI change, so changes show straight away.
   • To keep busy sites fast, the whole page cache is cleared at most once a minute; a changed page is always cleared straight away.
   • When a tool exists but is not switched on for a user’s role, the AI is now told so, and how to turn it on, instead of “unknown tool”.
   • The AI is now told when page content it writes would be saved as one Classic block, and how to write it as editable blocks instead.
   • Fixed REST routes that plugins such as Media File Renamer only offer to signed-in users not being available to AI clients.
   • Fixed write requests made through the REST API arriving without data in plugins that read the request body as JSON.
   • REST routes added by another plugin are now picked up without reactivating it, and a route that is not available to the current user is explained instead of returning “No route was found”.
   • Fixed Kadence headings and buttons failing to insert into an empty column.
   • Fixed tools that take no inputs failing with “input is not of type object” when an AI client connected directly leaves the input out.
   • Minor bug fixes in the WordPress MCP Server.

4. Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents 1.5.3

   Oct 22, 2026
   • Fixed AI clients being disconnected when a token refresh was interrupted by a timeout or restart. A retried refresh now succeeds instead of forcing a reconnect.
   • Fixed AI client replies breaking when another plugin prints PHP notices or warnings during MCP and OAuth requests.
   • The Debug Log now always records failures, even while capture is off, without usernames or IP addresses. Entries carry the gateway’s request ID so a failed call can be traced end to end.
   • AI clients now get a log reference instead of a broken reply when a tool crashes.
   • Troubleshooting: a gateway check that could not be completed is now shown as inconclusive instead of a failure on your site.
   • Minor bug fixes in the WordPress MCP Server.

5. Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents 1.5.2

   Oct 15, 2026
   • Fixed AI clients failing to connect, or not seeing a new agent, on sites using LiteSpeed Cache or another page cache. MCP and OAuth responses are no longer cached.
   • Fixed AI edits removing forms, scripts and styles and dropping backslashes, which broke pages with custom code such as calculators. AI edits to pages, posts, custom content, Elementor, Kadence, Fluent Forms messages and media now follow the same rules as editing by hand: anyone allowed to add HTML…
   • Fixed Kadence block edits damaging links and settings in other blocks on the same page. Pages already affected can be restored from WordPress revisions.
   • Fixed the Kadence duplicate and delete abilities reporting an error even though the change was made.
   • Minor bug fixes in the WordPress MCP Server.

6. Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents 1.5.1

   Oct 8, 2026
   • Improved the Troubleshooting page to show only likely connection problems.
   • Minor bug fixes in the WordPress MCP Server.

7. Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents 1.5.0

   Oct 7, 2026
   • Added support for REST APIs in the WordPress MCP Server.
   • Added a Troubleshooting page.
   • Improved MCP connection reliability with AI providers.
   • Minor bug fixes in the WordPress MCP Server.

8. Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents 1.4.14

   Sep 30, 2026
   • Added theme editing for block themes: templates, template parts, global styles, style variations and patterns.
   • Added theme file editing: read, search and change theme code in a private draft.
   • Every theme change now waits in a draft you can preview before it goes live. Before publishing, the site is checked with the draft applied, publishing backs up first, and every change is rolled back automatically if the site breaks.
   • Improved: AI assistants are now told which inputs each tool requires and why a change was refused, including the closest matching text when wording is not found.
   • Minor Bug Fixes in the WordPress MCP Server

9. Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents 1.4.13

   Sep 23, 2026
   • Added surgical content editing: change part of the text in a post, a custom field or a setting without rewriting the whole thing.
   • Added 8 maintenance abilities covering scheduled events, permalinks, caches, and the site error log.
   • Added Fluent Forms support: 14 abilities for forms, fields, confirmation messages, email notifications and submissions.
   • Minor Bug Fixes in the WordPress MCP Server

10. Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents 1.4.12

    Sep 16, 2026
    • Added 34 site administration abilities covering site settings, plugin management, theme details, and update and Site Health checks.
    • Minor bug fixes in the WordPress MCP Server

11. Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents 1.4.11

    Sep 11, 2026
    • Security and performance improvements to the MCP connection flow.
    • Added SEO post meta update ability for Rank Math.
    • Added product sale schedule date fields to the WooCommerce abilities.

12. Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents 1.4.10

    Sep 4, 2026
    • Fixed: the health endpoint is no longer cacheable. Page and edge caches (e.g. LiteSpeed, Cloudflare) could previously serve a stale “no agent” state, causing a connected client to report “No agent configured” even after an agent was enabled.
    • Minor bug fixes in the WordPress MCP Server

13. Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents 1.4.6

    Sep 4, 2026
    • Kadence integration: Added 17 abilities to the MCP Server for AI clients to read, edit, and build Kadence Blocks pages, including reading nested blocks, block settings, and searching blocks by type or text.
    • Edit Kadence blocks: Update text across 16 fields in 9 block types, styling and responsive attributes across all 59 block types, and duplicate or delete blocks with unique IDs.
    • Build layouts: Insert rows, columns, headings, images, and buttons; create draft pages with pre-built layouts; or build nested row-and-column structures in one request.
    • Added abilities to read and set Kadence per-page theme layout options.
    • Safe editing: MCP Server edits change only the targeted block, preserve the rest of the page, support optional page locks, and return previous and new values for verification.
    • Kadence-compatible markup: Inserted blocks match Kadence editor markup and CSS.
    • Unsupported block types are declined with a duplicate-and-edit option.
    • Minor bug fixes.

14. Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents 1.4.9

    Sep 2, 2026
    • Debug logging framework: a built-in diagnostic log for MCP and OAuth activity.
    • Minor bug fixes in the WordPress MCP Server

15. Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents 1.4.8

    Aug 26, 2026
    • Minor bug fixes in the WordPress MCP Server

16. Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents 1.4.7

    Aug 26, 2026
    • Elementor integration: Added 10 MCP Server abilities to read and edit Elementor pages, posts, and custom post types, including layout elements, text, images, links, widget types, and rendering changes for verification.
    • Elementor editing: Update text, images, links, and selected styling without affecting the rest of the design, with separate tablet/mobile values.
    • Custom post types: Added 19 abilities to read and edit items and custom fields, manage taxonomies, featured images, status, duplication, trash, and restore. Unsupported fields remain read-only with clear reasons.
    • Media uploads: Upload files from public URLs or supplied content, validate the real file type, and use attachment IDs for featured images or Elementor widgets.
    • Duplication: Copies now retain layout, theme settings, taxonomies, and featured images while clearing the canonical URL.
    • Yoast SEO: Added more editable fields, including breadcrumb title, canonical URL, SEO title, focus keyphrase, social/X cards, robots directives, cornerstone content, and schema types.
    • Slugs: Posts, pages, and custom post type slugs can now be edited with warnings about changed URLs and redirects.
    • Minor bug fixes in the WordPress MCP Server.

17. Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents 1.4.5

    Aug 19, 2026
    • ChatGPT is now shown first when connecting a client, with a direct link to the official plugin listing and clearer, more accurate setup steps.
    • Added a warning, shown across the plugin, when the site is only reachable on localhost — AI clients running elsewhere can’t connect to it until it’s made publicly reachable.
    • Refreshed the sign-in (OAuth authorization) screen to match the rest of the plugin’s design.
    • Fixed the connection dialogs occasionally rendering behind the WordPress admin toolbar.
    • Fixed a brief flicker on the dashboard when it first loads.

18. Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents 1.4.4

    Aug 10, 2026
    • Onboarding UI improvements in the MCP Server plugin.

19. Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents 1.4.3

    Aug 6, 2026
    • Minor bug fixes in the MCP Server plugin.

20. Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents 1.4.2

    Jul 31, 2026
    • Redesigned the role & ability editor as a matrix: abilities are grouped by resource down the left, with every role shown as its own column, so you can compare what each role can do without switching roles one at a time. Includes quick select all / clear controls for an entire role or an entire reso…
    • Added a guided onboarding checklist for new installs: register an agent, add the MCP URL to your AI client, and approve the connection, shown on the dashboard until setup is complete.

21. Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents 1.4.1

    Jul 30, 2026
    • New ability — “Update Page”: edits the title and/or content of an existing page.

22. Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents 1.4.0

    Jul 26, 2026
    • New — MCP Server abilities library: 260+ ready-to-use, security-reviewed WordPress abilities exposed as MCP tools, covering core content, users & roles, comments, WooCommerce, Advanced Custom Fields, Yoast SEO, Contact Form 7, WPForms, and Gravity Forms. Plugin-specific abilities activate automatic…
    • All abilities are capability-gated with MCP tool annotations and full input/output JSON schemas, and are accessible only through the governed MCP Server endpoint, never the public REST API.
    • Security hardening: Protected user-meta keys cannot be accessed, role grants require existing caller capabilities, and CSV exports are protected against spreadsheet formula injection. Fixed: Object-level abilities no longer show false capability conflicts in the role & ability editor. Runtime permi…
    • Test Connection: Checks AI-client access and sign-in from both your server and an external location to detect firewall, CDN, and reverse-proxy issues.
    • Troubleshooting guide: Provides common AI-client connection fixes, including copy-paste Apache/Nginx solutions, with likely causes highlighted automatically.
    • Reliability: OAuth and MCP Server endpoints now use Cache-Control: no-store to prevent CDN/edge caching issues that can disrupt AI-client connections.

23. Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents 1.3.1

    Jul 21, 2026
    • Minor fixes and reliability improvements in the MCP Server plugin.

24. Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents 1.3.0

    Jul 15, 2026
    • Execution activity log: a full audit trail of every tool call, filterable by agent, status, or time range, with per-event detail including latency and error context.
    • Dashboard redesign: four focused metrics — Active Agents, Total Executions, Success Rate, and Average Latency — for an at-a-glance view of MCP server health.
    • Activity timeline on the agent overview: the last 5 executions appear inline on each agent overview tab.
    • Denied and unknown-tool calls are now correctly attributed to the responsible agent , so the audit log is never missing an agent name.

25. Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents 1.2.3

    Jul 14, 2026
    • Clearer role & ability editor: a single Select all / Clear all control (instead of separate All and None buttons), role names shown in each Agents summary, and a smoother role & ability layout.
    • Refined the admin/member view switcher to a clearer segmented control.
    • Fixed the support form’s country picker so it no longer shifts the page or scrolls unexpectedly when opened.
    • General UI polish across the agent Registry and connection screens.

26. Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents 1.2.2

    Jul 10, 2026

27. Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents 1.2.1

    Jul 3, 2026

28. Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents 1.2.0

    Jul 1, 2026

29. Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents 1.1.1

    Jun 23, 2026

30. Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents 1.1.0

    Jun 17, 2026

31. Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents 1.0.0

    Jun 17, 2026