Royal MCP · Version history
Royal MCP changelog and version history
- Latest version
- 1.5.15
- Nov 6, 2026 (3 days ago)
- Releases
- 63
- since 2026
- In the last year
- 63
- about one every 5 days
- Tested up to
- WordPress 7.1.4
- PHP 7.4 or later
202663 releases
Royal MCP 1.5.15Latest
- New: MailPoet tools manage lists, subscribers and newsletter drafts, send tests, read stats, and schedule a send confirmed with the exact recipient count.
- New: Relevanssi tools search with its ranking, show index status and search totals, reindex a post, and change synonyms and stopwords with undo.
- New: Ninja Forms and Fluent Forms tools list and read forms and their entries.
- New: wp_get_posts and wp_get_pages return each item’s last-modified date and accept orderby, order and modified_after.
- New: wp_get_term, wp_get_menu_item, wp_get_theme_mod and wp_get_widget read a single item.
- New: wp_get_php_errors lists recent PHP fatal errors with credentials hidden, recorded while “Record PHP fatal errors” is on in Settings.
- New: Connected Clients lists Application Password sign-ins, with Block, Allow again and Delete.
- New: any tool that changes the site can be switched off for browser-agent connections in Settings.
- New: raif_set_bot_policies sets Royal AI Firewall policies for many bots at once, with a preview and one undo.
- New: wc_update_order_status accepts send_emails: false to change an order’s status without sending WooCommerce emails.
- Enhancement: undo leaves later edits alone for WooCommerce, comments, widgets, theme mods, custom CSS, permalinks, redirects and custom fields unless forced.
- Enhancement: redirection_create_redirect and redirection_update_redirect accept dry_run and return an undo token.
- Enhancement: Elementor undo clears the page cache and does not run while the page is open in the Elementor editor.
- Enhancement: ACF field writes and Elementor edits update the post’s last-modified date.
- Enhancement: the Activity Log shows which user and AI client made each call.
- Enhancement: the sign-in page explains why an AI app’s details could not be loaded.
- Enhancement: the settings self-check shows when more than one copy of the MCP Adapter is installed.
- Enhancement: elementor_apply_template_to_page applies only published or private templates unless include_unpublished is set.
- Enhancement: wp_get_pages without a sort or parent lists every page, child pages included, in one list by title A to Z.
- Fix: acf_update_field reports success when a group or repeater field saves.
- Fix: redirection_update_redirect applies every change, including switching a redirect off, and redirection_list_groups lists every group.
- Fix: updraftplus_get_backup_status shows a backup that is still starting as in progress.
- Fix: undo of a newly added custom field removes it, and undo of a menu item title change keeps the item’s position.
- Fix: Yoast SEO undo removes fields the change added and restores noindex settings exactly.
- Fix: large numbers in tool replies keep their exact value.
- Fix: cf7_list_submissions returns an error for a form ID that does not exist.
- Security: Contact Form 7, Ninja Forms and Fluent Forms entries hide names, emails, phone numbers, addresses and other personal details by default.
- Security: Redirection tools refuse redirects that would send your admin or sign-in pages elsewhere.
- Security: wp_upload_media_from_url follows at most 3 redirects and only over https after the first request.
- Security: changing or clearing the fixed OAuth client ID signs out the AI apps that used the old one.
Royal MCP 1.5.14
- New: Royal MCP recognises other MCP plugins on the site, including ones with their own sign-in, and keeps answering at its own addresses beside them.
- New: the API key can be turned off on the Settings screen.
- Enhancement: AI clients that were connected earlier also sign in at Royal MCP’s own address.
- Enhancement: wp_get_plugins and wp_get_themes show which updates are available.
- Enhancement: wp_delete_page and wp_delete_post_meta can be undone, and every new API key is recorded in the Activity Log.
- Enhancement: undo leaves later edits alone on Elementor pages, Divi image and template changes and deleted post meta.
- Enhancement: replace text, replace image and the page outline work with Elementor 4 widgets.
- Fix: saving the settings screen never changes the API key, and the Enabled switch changes only when you tick or untick it.
- Fix: Elementor page data and other JSON saved with wp_update_post_meta is stored exactly as sent.
- Fix: wp_replace_text_in_blocks changes text and attribute values only, never tag or attribute names.
- Fix: gp_get_blocked_ips lists every GuardPress block, including permanent and range blocks.
- Security: changing or resetting a password signs that user out of every connected AI app.
- Security: the OAuth Client Secret is stored only as a hash, and a fixed OAuth client signs in only to the addresses listed in OAuth Redirect URIs.
- Security: an AI app you reject stays rejected, and the public server card no longer lists the plugins your site runs.
- Security: the X-Royal-MCP-API-Key header no longer signs in; send the key as Authorization: Bearer instead.
Royal MCP 1.5.13
- New: site owners can keep chosen plugin options out of plugin settings replies.
- Enhancement: UpdraftPlus backups are identified by backup_id instead of the backup nonce.
- Enhancement: wp_update_widget accepts classic widget settings in the form wp_get_widgets returns them.
- Fix: saving settings never changes the API key, and every new key is recorded in the activity log.
- Fix: a tool that a site removes from the tool list can no longer be called by name.
- Security: keys, tokens and passwords that other plugins store are hidden in every tool response.
- Security: the post editing tools no longer change code snippets or pending Customizer changes.
- Security: an AI client that registers again keeps the access level it had.
Royal MCP 1.5.12
- New: AI clients sign in at Royal MCP’s own address, so Claude and ChatGPT connect even when another plugin answers the site’s usual sign-in addresses.
- New: a sign-in self-check names any plugin that answers part of Royal MCP’s sign-in and shows how to fix it, including Rank Math’s built-in MCP sign-in.
- New: wp_security_triage, a read-only checklist of must-use plugins, unlisted plugin folders, recent plugin changes and users with extra capabilities.
- New: wp_clone_post_as_draft copies a post or page into a new draft, so changes to published content can be prepared in drafts-only mode.
- New: wp_get_mcp_coexistence lists the other MCP servers on the site and which plugin answers each shared sign-in address.
- New: wp_revoke_preview_links ends every preview link for a post.
- Enhancement: undo for wp_create_post and wp_create_page moves the new post to the trash.
- Enhancement: Royal MCP tools carry their own categories, annotations and output schemas on the WordPress Abilities API and the MCP Adapter.
- Enhancement: calls through the WordPress Abilities API and other MCP servers are rate limited per user, like calls to Royal MCP’s own endpoint.
- Enhancement: wp_get_pages and wp_search can list drafts and other statuses the signed-in user may read, and wp_add_post_terms accepts term names and slugs.
- Enhancement: wp_create_menu_item links any post type or taxonomy that the Menus screen offers.
- Enhancement: TablePress CSV exports write cells that start with =, +, -, @ as plain text.
- Enhancement: WPForms form details include the number of input boxes a visitor sees.
- Enhancement: Royal MCP keeps its MCP Adapter server off while classes from two different copies of the adapter are loaded.
- Enhancement: while Royal MCP is switched off, its abilities are not offered to other MCP servers at all.
- Fix: undo of wp_reorder_menu_items keeps nested menu items under their parents.
- Fix: WP-CLI changes to drafts-only mode and access levels are recorded in the activity log.
- Fix: expired undo snapshots, sessions and tokens are cleaned up daily on every site.
- Fix: WooCommerce and Complianz tools answer that the plugin is not active, instead of a permission error, when it is missing.
- Fix: WooCommerce product prices and stock values are checked before saving, and order status changes no longer accept refunded.
- Fix: read abilities with only optional arguments run over a plain GET on the WordPress Abilities API.
- Fix: wp_count_terms, elementor_list_local_templates and the Royal AI Firewall reads return their data on the Abilities API and the MCP Adapter.
- Security: WooCommerce, Elementor template, comment moderation, custom CSS and preview link tools check the signed-in user’s rights on each item.
- Security: wp_get_post and wp_get_page return the stored source only to users who can edit the post.
- Security: Elementor edits that would remove markup the signed-in user may not save are refused.
- Security: on multisite networks, Royal AI Firewall, LiteSpeed and W3 Total Cache tools need a network administrator.
Royal MCP 1.5.11
- New: Complianz integration with seven tools for the consent setup, cookies, banner texts and legal documents, with undo for text edits.
- New: plugin developers can add their own tools to Royal MCP with two filters, described in the developer guide on royalplugins.com.
- Enhancement: wp_get_plugins lists must-use plugins and drop-ins, with a type and last-modified date for every plugin.
- Enhancement: wp_get_users and wp_get_user return each user’s registration date and any capabilities granted beyond their roles.
- Enhancement: WooCommerce coupon lists page with totals, and order lists filter by date.
- Enhancement: site owners can add fields such as customer emails to order, customer and user replies with three filters.
- Enhancement: tools added by other plugins follow read-only mode, drafts-only mode and each connection’s access level.
- Enhancement: every list tool keeps its page size between one and its maximum.
- Enhancement: Royal MCP tools are listed on Royal MCP’s own MCP Adapter server instead of the adapter’s default server.
- Enhancement: the Redirection tools refuse to redirect the home page, sign-in, wp-admin or the REST API unless the call asks for it explicitly.
- Enhancement: the royal_mcp_access_token_ttl filter receives the user and client each token is issued to.
- Fix: MonsterInsights report tools return the overview, top pages, traffic sources and search queries on every connection.
- Fix: switching Royal MCP off also stops calls through the WordPress Abilities API and the MCP Adapter, and those calls are logged.
- Action required: if a connection sends the API key in the X-Royal-MCP-API-Key header, switch it to Authorization: Bearer; the old header is deprecated.
Royal MCP 1.5.10
- New: TablePress integration with six tools to list, read, create, copy and export tables and change cells, with undo.
- New: Code Snippets integration with five tools to list, read, deactivate and rename snippets.
- New: WPCode integration with three read-only tools for snippets, their code and their last error.
- New: settings for who can connect AI clients and who can use tools from other MCP servers; both default to Administrators only, so sites where editors connect should choose Editors and above.
- Enhancement: WooCommerce product, customer and variation lists page with totals, and products filter by IDs, SKU and stock status.
- Enhancement: credential settings with one-word names and credential ACF fields are hidden from AI clients.
- Enhancement: the Allowlisted plugin options setting shows which listed names are blocked.
- Enhancement: every tool checks the signed-in user’s rights on each post, comment, term and template it reads or changes.
- Fix: Divi 4 pages whose Code modules contain line breaks can be cloned, rewritten and validated.
- Security: search returns only content the signed-in user may read; thanks to Vincent Cassiau (CyberVanguard).
- Security: cloning an Elementor page checks the right to read the source and to publish the copy; thanks to Usama Arshad.
Royal MCP 1.5.9
- New: Drafts only setting lets AI clients create and edit drafts while refusing publishing, live pages and site settings.
- New: each connected AI client and the API key can be given its own access level: Full, Read-only or Drafts only.
- New: Recent Changes screen and two tools show what AI clients changed in the last 72 hours, with the values before, after and now.
- New: block editor tools read a page’s blocks and insert, replace, move or delete single blocks, and read synced patterns, global styles and templates.
- New: a media tool finds files already in the library by address or content, and uploads can reuse them instead of adding a copy.
- New: the settings page has ready-to-copy commands that connect Claude Code or Codex.
- New: a setting to delete all plugin data when the plugin is deleted, off by default so settings, the activity log and connected clients are kept.
- Enhancement: publish-and-promote creates a draft unless asked to publish.
- Enhancement: media details include file size, dimensions and a content fingerprint.
- Enhancement: media downloads that fail say why, such as a missing file, an expired link or the size limit.
- Enhancement: SEO fields for Yoast, Rank Math and SEObolt are written through the SEO tool and read back after saving.
- Enhancement: the Elementor notices only appear when Elementor’s own MCP server is switched on.
- Enhancement: deleting the plugin clears expired sessions, tokens and undo history on every site of a network.
- Fix: write and undo tools keep backslashes in content, meta and term values exactly.
- Housekeeping: the Outbound AI Provider settings section is removed.
Royal MCP 1.5.8
- New: ChatGPT can hand a file from the conversation straight to the media upload tool.
- New: the media upload tools can convert, resize and compress an image as it uploads, for example to a JPEG under 400 KB.
- Enhancement: the media upload tools accept PDFs and any other file type your site allows in its media library.
- Enhancement: an image whose file name has an unfamiliar extension, such as .jfif, is saved under its real image type.
- Enhancement: option tool messages say where an administrator can allowlist an option.
- Enhancement: the Claude platform settings offer the Claude 5.5 models, with Sonnet 5.5 as the default.
- Fix: deleting a post or page without force moves any post type to the trash, and refuses when the trash is not available.
- Fix: post term reads and writes refuse a taxonomy that is not registered for the post type.
- Fix: password-protected content is returned only to users who can edit the post.
- Fix: publish-and-promote reads the publish date in the site timezone.
- Fix: the page-check rate limit counts calls, not redirect hops.
Royal MCP 1.5.7
- New: a tool to read the terms assigned to a post, and post and page reads now include their assigned terms.
- New: admin notice when another plugin is answering OAuth sign-in for the site.
- New: Wordfence integration with eight tools for security status, blocked IPs, failed logins, blocked requests and scans.
- New: LiteSpeed Cache integration with four tools for cache status, settings and purging.
- New: every tool tells AI clients whether it only reads or can change the site.
- New: AI clients can read site info, the active theme, the tool catalog and connection health as resources.
- New: AI clients can revoke their own access when they disconnect.
- New: Connected Clients screen lists the AI clients signed in through OAuth and lets you revoke them one at a time or all at once.
- New: Read-only mode setting refuses every tool that changes the site while leaving all reads available.
- New: Site Health tests check permalinks, the discovery document, the Authorization header and the sign-in addresses.
- New: WP-CLI commands to check connection health, list connected clients and rotate the API key.
- New: companion plugins can run their own tools through Royal MCP.
- New: read several posts in one call with trimmed text, and see robots, redirect, hreflang and structured-data details when checking a page.
- Enhancement: the Revoke all active sessions button moved from the OAuth settings to the Connected Clients screen.
- Enhancement: tools for plugins that are not active are flagged in the tool list.
- Enhancement: the plugin list reports network-active plugins and version requirements.
- Fix: preview links now open draft pages and custom post types.
- Fix: the Claude.ai connector starts OAuth sign-in reliably.
- Fix: resetting OAuth or clearing a credential field no longer changes other settings.
- Fix: options added under Allowlisted plugin options can be read and written by AI clients.
- Fix: scheduled dates are read in the site timezone.
- Fix: featured images set while creating or updating a post are saved in one step.
- Fix: SEObolt noindex and SEO field updates now apply.
- Fix: Royal MCP registers with the WordPress MCP Adapter when another plugin bundles it.
- Fix: a page or post published at /register or /token is shown to visitors.
Royal MCP 1.5.6
- Fix: OAuth connector compatibility across MCP clients.
Royal MCP 1.5.5
- New: dry-run preview mode on high-blast option-write tools, a wp_verify_rendered_page tool for post-write confirmation, and a compact tool-discovery profile for context-limited AI clients.
Royal MCP 1.5.4
- Fix: tools/list, prompts/list, and resources/list responses now conform to the modern-era MCP schema for connectors that require the newer wire shape.
Royal MCP 1.5.3
- New: Local Protocol Insights admin page shows per-protocol-version request volume + top MCP clients + method-call frequency.
- New: OAuth authorization responses include the iss parameter per RFC 9207.
- New: Protected Resource Metadata is now also served at the RFC 9728 path-suffixed URL for the MCP endpoint.
- Enhancement: Tool responses tag successful envelopes with resultType for downstream observability.
- Enhancement: Server accepts and logs the Mcp-Method and Mcp-Name request headers for client-side tracing.
- Enhancement: OAuth discovery advertises the wp-json fallback URLs directly in the server card and 401 responses.
- Enhancement: Timestamp fields in ForgeCache, UpdraftPlus, and undo-envelope responses now use ISO 8601 UTC format on the wire.
- Enhancement: WebMCP bridge status badge on the settings page is silent unless a bridge is actively detected.
- Fix: server/discover response now conforms to the modern-era MCP schema for connectors that require the newer wire shape.
- Fix: Empty plugin-setting values return as empty in tool responses so callers can distinguish unconfigured fields from set-but-redacted ones.
- Housekeeping: Protocol-usage rollups are pruned by the daily maintenance cron.
Royal MCP 1.5.2
- New: Optional “Require approval before new AI clients can connect” setting with a Pending Clients admin page for reviewing dynamically-registered OAuth clients.
- New: OAuth discovery advertises client_id_metadata_document support for MCP clients that use CIMD instead of dynamic client registration.
- New: OAuth discovery is also served under a /wp-json/royal-mcp/v1/.well-known/ alternate path for managed hosts that reserve the root .well-known/ prefix.
- New: Admin notice detects when the web server strips Authorization headers, with copy-paste Apache and nginx fix guidance.
- New: server/discover handler for MCP clients using the newer protocol era.
- New: Twitter card fields on wp_update_seo_meta for Yoast SEO, Rank Math, SEOPress, and SEObolt.
- New: fc_get_rum_stats MCP tool exposes ForgeCache real-user Core Web Vitals data.
- Add: Setting to disable the WordPress Abilities API bridge.
- Enhancement: Tool descriptions include the site host so multi-connector setups can disambiguate identically-named tools.
- Enhancement: wp_replace_in_post supports targeted edits on the WordPress custom_css post.
- Enhancement: initialize response advertises resources and prompts capabilities alongside tools.
- Fix: wp_update_widget and other tools with nested object schemas now validate under stricter MCP clients.
- Housekeeping: Stale OAuth clients are pruned by the daily maintenance cron.
Royal MCP 1.5.1
- New: Browser-based AI agents can now use Royal MCP tools via any WebMCP-compatible bridge, using the visitor’s existing WordPress login.
- New: Browser Agents section on the settings page toggles the WebMCP path on or off.
- New: Publishes a machine-readable server card and skills index so Agent Readiness scanners auto-detect the site.
- Enhancement: Rate-limit responses now include the seconds until retry so MCP clients know exactly when to try again.
- Enhancement: Authenticated requests get a higher rate-limit ceiling so legitimate bulk operations no longer trip the anti-abuse limit.
- Fix: Rate limits behind Cloudflare now count per real visitor instead of coalescing everyone at the edge server IP.
- Fix: The Perfmatters compatibility warning no longer appears when Disable REST API is only blocking logged-out visitors.
- Fix: The site icon in the server identity response now returns as a string for all icon formats.
Royal MCP 1.5.0
- New: Three Elementor discovery tools (widget schema, widget list, dynamic tags) plus an include-styles option on the page-outline tool.
- New: The Troubleshooting Help tab surfaces the fix for the most-reported OAuth reconnect issue directly in WordPress admin.
- Enhancement: Royal MCP now speaks the modern MCP wire, improving compatibility with newer Claude.ai, ChatGPT, and other AI client connectors.
- Enhancement: Support for multiple MCP protocol versions on the initialize handshake so newer AI clients get the latest wire behavior.
- Enhancement: OAuth discovery now works for AI clients that probe the alternate path-scoped discovery URL.
- Enhancement: Every MCP request now appears in the Royal MCP Activity Log for improved diagnostic visibility.
- Enhancement: A compatibility notice appears when the Perfmatters plugin is set to disable the REST API, which would otherwise block MCP connections.
- Enhancement: Every tool advertises complete input and response metadata for improved compatibility with strict MCP clients like ChatGPT.
- Enhancement: The internal ChatGPT connection guide walks the sign-in modal, WordPress authorize page, and post-connection state as distinct steps.
- Fix: Unknown MCP methods return the correct method-not-found response so probing AI clients do not get stuck in reconnect loops.
- Fix: The /register OAuth endpoint returns 405 Method Not Allowed with a proper Allow header for GET requests.
- Fix: When a database table upgrade fails on incompatible host configurations, the plugin now skips retries for 24 hours to prevent error-log flooding.
Royal MCP 1.4.45
- Fix: Plugin constant definitions no longer emit PHP notices when Royal MCP is loaded alongside a wrapper plugin that pre-defines the same constants.
- New: Solid Security integration adds four tools — read the security status summary, list currently locked-out IPs, read the security event log, and add an IP to the ban list.
- New: Contact Form 7 integration adds three tools — list forms, read a single form’s parsed field schema, and list submissions when the Flamingo add-on is active.
- New: MonsterInsights integration adds four tools — read the analytics overview, top pages, traffic sources, and top Google Search Console queries.
- New: W3 Total Cache integration adds three tools — read cache configuration across every module, purge cache (all, by URL, or by post), and read usage statistics.
- New: Duplicator integration adds three tools — list migration packages, read per-package status, and get the installer URL for a completed package.
- New: BuddyPress integration adds four tools — list community members, read a single member profile, list groups, and read the activity feed.
- New: MCP server identity now advertises the WordPress Site Icon so connector cards show per-site branding.
- Enhancement: WooCommerce coupon and product read responses now include ISO 8601 date variants and additional catalog and subscription fields.
- Enhancement: Help page CSS and admin links now work correctly when the plugin is vendored inside a wrapper plugin.
- Fix: WooCommerce order tools now register correctly with ChatGPT.
Royal MCP 1.4.44
- New: Yoast SEO integration adds five tools — read the full Yoast meta surface, capture the JSON-LD schema graph, list indexed internal links, list Premium redirects, and update Yoast title/description/focus keyword with a 72-hour undo token.
- New: UpdraftPlus integration adds four tools — list local backup history, read per-backup status, trigger a new backup, and read the current backup schedule.
- New: WPForms integration adds four tools — list forms, read a single form’s field schema, and (Premium) list submissions plus read a single submission.
- Fix: Envelope helper’s full-JSON-mirror path no longer throws on non-array input during defensive test paths.
- Fix: Post meta, SEO meta, Yoast meta, and featured image edits made through Royal MCP tools now trigger the standard WordPress post-save event so page-cache plugins and SEO indexable rebuilders pick up the change automatically.
- Fix: Divi tools now return a clean not-active error on sites where Divi is not installed.
- Fix: divi_validate_layout accepts raw_content on sites without Divi installed so cross-site validation workflows work without the plugin being present.
- Fix: Meta writes now bump the post modification timestamp so sitemap regenerators, feed cache invalidators, and staleness detectors keyed on post_modified fire correctly.
- Fix: wp_get_post, wp_get_page, wp_get_posts, and wp_get_pages return featured_media (attachment ID) and featured_media_url in the response envelope.
- Fix: wp_set_featured_image persists the alt_text argument on both the media_id and image_url input paths.
- Fix: mcp_undo_last_operation documentation names yoast_update_meta in the supported-tools list.
- Fix: Tier-gated tools return a uniform {state: “unavailable”, reason, tier, message} envelope so AI callers cannot misread a tier gate as an empty query result.
- Fix: yoast_get_meta returns Open Graph, Twitter, canonical, and breadcrumb fields as both the stored template and the resolved value Yoast renders (featured image fallback, permalink fallback, post title fallback).
- Fix: yoast_get_meta surfaces analysis_pending so callers can distinguish a post that has never been scored from a post with a real low content_score or linkdex.
- Fix: yoast_get_schema removes empty author references from the JSON-LD graph so posts with unresolvable authors no longer produce invalid Article markup.
- Fix: yoast_get_internal_links returns link_index_status (indexed, index_pending, no_links) plus a content_anchor_count cross-check so callers can distinguish a post with no links from a post the link index has not processed yet.
- Fix: updraftplus_trigger_backup dispatches asynchronously via WP-Cron and honors the entities argument (a caller requesting entities:[“plugins”] gets a plugins-only backup).
- Fix: fc_purge_url purges the homepage, category and tag archives, paginated pages, and other URLs that do not resolve to a single post or page.
- Fix: WPForms form schema returns choices as an indexed list with label/value/key, required as a boolean, timestamps as ISO 8601 strings alongside epoch integers, and form listing paginates deterministically on same-second creations.
- New: In-plugin Help page with per-client setup guides (Claude Desktop, claude.ai Web, Claude Code CLI, ChatGPT, Cursor, VS Code, Continue), a three-rung quick-fix troubleshooting ladder, and a copy-ready diagnostic-info block for support requests.
- New: Newsletter signup link in the Royal MCP admin header and Support tab.
- Enhancement: Cross-sell notice bar above every Royal MCP admin page.
- Enhancement: Every integration’s tools now appear in the MCP tool list on connect (WooCommerce, Elementor, Divi, ACF, Yoast, UpdraftPlus, WPForms, SiteVault, ForgeCache, GuardPress, Royal AI Firewall, Royal Ledger, Royal Links, Redirection) so activating a supported plugin no longer requires reconn…
Royal MCP 1.4.43
- New: Divi 4 and Divi 5 page tools in Free — clone a page, swap images, and import a library template, all with 72-hour undo tokens.
- New: Elementor library-to-page bridge (elementor_apply_template_to_page) plus tools to repair pages where the Elementor render is missing (single and bulk).
- New: SiteVault backup tools now work with the free SiteVault plugin from WordPress.org in addition to SiteVault Pro.
- Enhancement: Every destructive write emits a 72-hour undo token in the response text; responses now surface actionable URLs, IDs, and counts.
- Enhancement: elementor_replace_text adds dry-run preview, expected-count guard, image alt/title walking, and optional media-library sync.
- Fix: Tool schemas conform to strict JSON Schema so VS Code and ChatGPT Plugins accept the tools at load time.
- Fix: elementor_clone_page populates page content so cloned pages stay visible to WordPress core search.
- Fix: OAuth discovery adds a filter to override the metadata URL for hosts intercepting .well-known/.
Royal MCP 1.4.42
- Enhancement: Write-verification helper now detects pre-write input mangling for tools that require strict input fidelity.
- Enhancement: Tool argument sanitizers now preserve %XX escape sequences so URLs, patterns, and templated inputs survive round-trip.
- Fix: wp_update_permalink_structure preserves permalink tokens like %category% and %author% when writing the structure.
- Fix: Hardens redaction of sensitive data across plugin/option/meta read tools and debug log responses.
Royal MCP 1.4.41
- New: Six Divi builder tools for safer AI-driven Divi editing (get page format, outline, validate layout, list local templates, library get, replace text).
- New: wp_publish_and_promote publishes a draft and inserts it into a menu in one call.
- New: wp_create_menu creates a WordPress navigation menu with optional theme-location assignment.
- New: wp_create_preview_link generates a shareable draft-preview URL for one preview session.
- Enhancement: wp_get_post_revisions returns per-revision content_length for quick change-size scanning.
- Enhancement: Destructive write tools now warn when literal escape sequences appear in replacement text, so operators catch double-escaping before it lands.
- Enhancement: OAuth discovery self-check now detects Sucuri / CloudProxy edge blocks and links to a Sucuri-specific fix guide.
- Enhancement: A “Re-check now” button on host-blocked admin notices re-probes OAuth discovery in-place during troubleshooting.
- Enhancement: OAuth discovery cache shortens automatically on WAF-fronted sites for faster feedback after configuration changes.
Royal MCP 1.4.40
- New: Every write tool re-reads modified fields after the write and returns the actual saved values.
- New: Undo tokens now cover wp_delete_post, wp_delete_term, and wp_delete_menu_item, restoring deleted objects within 72 hours via mcp_undo_last_operation.
- New: wp_update_post preserves the WooCommerce product_type when generic post updates would otherwise reset it to Simple.
- New: wc_get_order returns fee_lines, shipping_lines, and the raw payment method ID for full write-verification.
- New: wp_get_seo_meta and wp_update_seo_meta now support AIOSEO and SEObolt alongside Yoast and Rank Math.
- New: wp_get_widgets returns widget instance content and parsed block markup for before/after diffs.
- New: OAuth endpoint paths (authorize/token/register) are filterable via royal_mcp_oauth_rewrite_paths.
- New: Admin notice detects when a published page shadows an OAuth endpoint.
- Enhancement: wp_get_posts + wp_count_posts accept non-public post types when the caller has edit capability.
- Enhancement: Option writes require opt-in to the read allowlist first; admin_email + default_role + mailserver_* permanently denylisted.
- Enhancement: JSON-RPC envelope hardening re-forces “2.0” against edge-layer transformations.
- Enhancement: Royal MCP Pro promotion refreshed for post-launch with a green Upgrade to Pro link in the sidebar.
- Fix: elementor_replace_text is now multi-byte and case-insensitive.
- Fix: Uninstalling the free plugin no longer …
Royal MCP 1.4.39
Royal MCP 1.4.38
Royal MCP 1.4.37
Royal MCP 1.4.36
Royal MCP 1.4.35
Royal MCP 1.4.34
Royal MCP 1.4.33
Royal MCP 1.4.32
Royal MCP 1.4.31
Royal MCP 1.4.30
Royal MCP 1.4.29
Royal MCP 1.4.28
Royal MCP 1.4.27
Royal MCP 1.4.26
Royal MCP 1.4.25
Royal MCP 1.4.24
Royal MCP 1.4.23
Royal MCP 1.4.22
Royal MCP 1.4.21
Royal MCP 1.4.20
Royal MCP 1.4.19
Royal MCP 1.4.18
Royal MCP 1.4.17
Royal MCP 1.4.16
Royal MCP 1.4.15
Royal MCP 1.4.14
Royal MCP 1.4.13
Royal MCP 1.4.12
Royal MCP 1.4.11
Royal MCP 1.4.10
Royal MCP 1.4.9
Royal MCP 1.4.8
Royal MCP 1.4.7
Royal MCP 1.4.6
Royal MCP 1.4.5
Royal MCP 1.4.4
Royal MCP 1.4.1
Royal MCP 1.4.0
Royal MCP 1.3.0
Royal MCP 1.2.3
Royal MCP 1.2.2
Questions about Royal MCP’s releases
What is the latest version of Royal MCP?
1.5.15, released on Nov 6, 2026 (3 days ago). It’s tested up to WordPress 7.1.4 and needs PHP 7.4 or later.
How often is Royal MCP updated?
63 releases in the last year, about one every 5 days. Its first release on WordPress.org dates from January 2026.
Know when your rivals ship
Track your plugin and its rivals: TrackWP sees each new release in the nightly snapshot and alerts you, with what it did to their rank.
Start freeRelease dates come from the day each version’s folder was made in Royal MCP’s WordPress.org SVN repository; the notes from its readme’s changelog, as its authors wrote it.