What we fixed: media reads reached past the uploader
In 1.4.3 an author-level user could read the entire WordPress media library, not just their own uploads. Here is the bug, the fix, and what else shipped.
Read moreThe governed agent blog
Plain guides, governance notes, and honest use cases for running an AI agent against your own WordPress site.
What we fixed when a draft post went live
In 1.4.2 we fixed a bug where asking for a draft post published it live, two related permission gaps, and two WooCommerce order and product update bugs.
Read moreQuick Connect: one-screen setup for a WordPress MCP server
Version 1.4.0 adds a one-screen Quick Connect wizard that gets an agent connected fast, without loosening the off by default governance underneath.
Read moreFirst prompts to try on your WordPress MCP server
Copy-paste prompts for a freshly connected WordPress MCP server: safe reads, a careful draft write, and what a refusal looks like when an agent overreaches.
Read moreWPML MCP: language-aware content reads
How an AI agent reads a WPML site correctly over MCP. Content reads now take a language, report what they returned, and counts match the list scope.
Read moreAI agents for membership, subscription, and LMS stores
Let an AI agent manage customers and orders on a membership, subscription, or LMS WooCommerce store, safely and audited, now that custom roles are visible.
Read moreHand your SEO metadata to an AI agent, safely
Let an AI agent write your titles, meta descriptions, noindex flags, and social images across Yoast, Rank Math, and AIOSEO, under full governance.
Read moreReliable agent tools: contract tests and verified writes
How contract tests against real vendor code and write verification keep an AI agent's WordPress tools honest and trustworthy.
Read moreWhat we fixed in the 1.3.0 security release
In 1.3.0 we turned OAuth off by default and fixed real security gaps in our own plugin, patched in the open. Here is what changed.
Read more