=== MountDev AI MCP Connector ===
Contributors: cascadiawebservices
Tags: mcp, ai, chatgpt, claude, woocommerce
Requires at least: 5.8
Tested up to: 6.9.4
Requires PHP: 7.4
Stable tag: 1.4.0
License: GPLv3 or later
License URI: https://www.gnu.org/licenses/gpl-3.0.en.html

Transform your WordPress site into an AI-powered Model Context Protocol (MCP) server. Exposes WordPress functionality for AI agents.

== Description ==

MountDev AI MCP Connector is a WordPress MCP plugin that lets you connect ChatGPT, Claude, and other MCP-compatible AI clients directly to your WordPress site. Use it to give AI agents secure, controlled access to WordPress posts, pages, media, comments, users, and other site resources through the Model Context Protocol.

If you are searching for a way to connect ChatGPT to WordPress, connect Claude to WordPress, or run AI agents on WordPress with secure authentication and permission controls, this plugin provides a practical WordPress AI connector for content management, publishing workflows, media handling, and site updates.

Built for agencies, developers, publishers, and teams using AI to manage WordPress, MountDev AI MCP Connector supports OAuth 2.0 for ChatGPT, WordPress Application Passwords for Claude Desktop, Cursor, and Windsurf, and profile-based access controls to help keep WordPress automation secure.

**WooCommerce Support:** Manage your online store with 74 WooCommerce-specific tools for products, orders, coupons, shipping, tax rates, webhooks, payment gateways, and reports. Control inventory, process refunds, manage product variations, and automate store operations through AI agents.

**Yoast SEO Support:** Optimize your content with 29 Yoast SEO tools for meta data management, content analysis, readability scoring, keyword optimization, schema markup, sitemap status, and robot directives. Premium features include redirect management and multiple keyword analysis.

**Rank Math SEO Support:** Manage search engine optimization with 78 Rank Math SEO tools for post meta, schema markup, redirects, 404 monitoring, analytics, and Search Console data. Pro features include Schema Templates, Keyword Tracking, Link Genius, and News/Video Sitemaps.

**Contact Form 7 Support:** Manage your contact forms with 20 Contact Form 7 tools for creating, editing, and duplicating forms, updating mail templates and response messages, configuring additional settings, and managing global plugin options and integrations.

= Features =

* **MCP Server Implementation** - Full JSON-RPC 2.0 endpoint for MCP protocol
* **OAuth 2.0 Support** - Native OAuth authentication for ChatGPT with secure credential generation
* **WordPress Application Passwords** - Secure Basic Auth for Claude Desktop, Cursor, Windsurf
* **Profile-Based Access Control** - Predefined profiles for flexible tool management
* **276 Tools Across 5 Plugins** - 75 WordPress core + 74 WooCommerce + 29 Yoast SEO + 78 Rank Math SEO + 20 Contact Form 7
* **74 WooCommerce Tools** - Products, orders, coupons, shipping, tax, and more (requires WooCommerce plugin)
* **29 Yoast SEO Tools** - Meta data, analysis, schema, redirects, and more (requires Yoast SEO plugin)
* **78 Rank Math SEO Tools** - Post SEO, schema, redirects, analytics, and more (requires Rank Math SEO plugin)
* **20 Contact Form 7 Tools** - Form management, mail templates, messages, and more (requires Contact Form 7 plugin)
* **Zero External Dependencies** - Pure WordPress implementation
* **AES-256-CBC Encryption** - Client secrets stored securely

= Supported Clients =

* **ChatGPT** - OAuth 2.0 authentication with Client ID/Secret
* **Claude Desktop** - Basic Auth with Application Passwords
* **Cursor** - Basic Auth with Application Passwords
* **Windsurf** - Basic Auth with Application Passwords
* Any MCP-compatible client supporting OAuth 2.0 or Basic Auth

= Supported Plugins =

**WordPress Core (75 tools)** - Complete WordPress management including posts, pages, media, comments, users, taxonomies, site settings, menus, plugins, and themes.

**Yoast SEO (29 tools)** - Full integration with Yoast SEO for search engine optimization:
* SEO Meta Data - Get and update SEO titles, meta descriptions, focus keywords, and canonical URLs
* Content Analysis - Readability scores, keyword density, internal linking suggestions
* Social Meta - Open Graph and Twitter Card management
* Schema Markup - View and update schema.org page and article types
* Sitemap Status - Check XML sitemap configuration and URLs
* Premium Features - Redirect management and multiple keyword analysis (requires Yoast SEO Premium)

**WooCommerce (74 tools)** - Full integration with WooCommerce for managing your online store:
* Products & Inventory - Create, update, manage variations, stock levels, categories, tags, brands, and attributes
* Orders & Fulfillment - Process orders, refunds, order notes, and customer management
* Store Operations - Coupons, shipping zones, tax rates, payment gateways, webhooks, and sales reports

**Rank Math SEO (78 tools)** - Full integration with Rank Math SEO for search engine optimization:
* Post SEO Meta - Get and update SEO titles, descriptions, focus keywords, canonical URLs, and robots directives
* Schema Markup - View and manage structured data including FAQ, HowTo, and article schemas
* Redirects & 404s - Create and manage redirects, monitor and clear 404 error logs
* Analytics - Site analytics, Search Console data, winning/losing posts, and Content AI scores
* Pro Features - Schema Templates, Keyword Tracking, Link Genius, News/Video Sitemaps, and Image SEO (requires Rank Math Pro)

**Contact Form 7 (20 tools)** - Full integration with Contact Form 7 for form management:
* Form Management - List, create, update, duplicate, and delete contact forms
* Mail Templates - Get and update primary and auto-responder email templates
* Response Messages - Get and update form submission response message strings
* Advanced Config - Additional settings, mail tag discovery, SWV validation schema, and config validation
* Plugin Settings - Global CF7 options and integration service status (Akismet, reCAPTCHA, Turnstile, etc.)

All tools respect WordPress user capabilities and permissions. Visit the plugin's Profiles tab to see the complete tool list and create custom access profiles.

== Installation ==

1. Upload the `mountdev-ai-mcp-connector` folder to `/wp-content/plugins/`
2. Activate the plugin through the 'Plugins' menu in WordPress
3. Go to **Settings → MCP Connector → Quick Start** to configure

= For ChatGPT Users =

1. Navigate to **MountDev AI MCP Connector → ChatGPT OAuth** tab
2. Click **Generate OAuth Credentials**
3. Copy the Client ID and Client Secret (keep them secure!)
4. In ChatGPT, go to **Settings → Apps → Create App**
5. Enter your MCP Server URL: `https://yoursite.com/wp-json/mountdev-ai-mcp-connector/v1/messages`
6. Select **OAuth** authentication
7. Paste your Client ID and Client Secret
8. Authorize access when redirected to WordPress

= For Claude Desktop / Cursor / Windsurf Users =

1. Create an Application Password in **Users → Profile**
2. Go to **Settings → MCP Connector → Profiles** and select a profile
3. Use the **Client Setup** tab to automatically generate your configuration
4. Or manually use endpoint: `https://yoursite.com/wp-json/mountdev-ai-mcp-connector/v1/messages`
5. Authenticate with your WordPress username and Application Password

== Frequently Asked Questions ==

= What is MCP? =

Model Context Protocol (MCP) is an open protocol developed by Anthropic that standardizes how AI assistants connect to external data sources and tools.

= Is OAuth 2.0 secure? =

Yes, we implement OAuth 2.0 with PKCE (Proof Key for Code Exchange) for enhanced security. All tokens have expiration times and refresh token rotation.

= Do I need an API key? =

For ChatGPT, generate OAuth credentials in the plugin admin. For other clients, use WordPress Application Passwords.

= How do I set up ChatGPT? =

Generate OAuth credentials in **MountDev AI MCP Connector → ChatGPT OAuth** tab, then add the MCP server in ChatGPT settings with your Client ID and Secret. See Installation section for detailed steps.

= Are my OAuth credentials secure? =

Yes. Client secrets are encrypted using AES-256-CBC encryption before storage. Only WordPress administrators can generate or view credentials.

= Do I need WooCommerce installed to use this plugin? =

No. The plugin works independently for WordPress content management. WooCommerce tools only appear when WooCommerce is installed and active.

= What WooCommerce features are supported? =

74 tools covering products, variations, categories, tags, brands (with WooCommerce Brands extension), attributes, orders, refunds, order notes, coupons, shipping zones, tax rates, webhooks, payment gateways, sales reports, and system status.

= How do I enable WooCommerce tools? =

Install WooCommerce, then select a WooCommerce profile in **Settings → MCP Connector → Profiles**. Tools automatically appear when WooCommerce is active.

= Can I use WooCommerce tools with ChatGPT and Claude? =

Yes. WooCommerce tools work with all supported MCP clients (ChatGPT, Claude Desktop, Cursor, Windsurf) using the same OAuth or Application Password authentication.

== Screenshots ==

1. Quick start
2. OAuth setup
3. Profiles tab
4. Endpoints tab
5. Client setup tab
6. FAQ tab

== External Services ==

This plugin includes a Node.js bridge script that connects MCP clients (Claude Desktop, Cursor, Windsurf, etc.) to your WordPress site's REST API endpoints. The bridge facilitates communication between the MCP client and your WordPress installation.

**What the service is and what it is used for:**
The wordpress-mcp-bridge is a Node.js script that acts as a communication bridge between MCP-compatible AI clients and your WordPress site's REST API. It translates MCP protocol requests into WordPress REST API calls and returns the responses to the AI client.

**What data is sent and when:**
When you use an MCP client (like Claude Desktop) with this plugin, the bridge sends the following data to your WordPress site's REST API endpoints:
* Your WordPress username and Application Password (for authentication)
* MCP protocol requests (tool calls, resource requests, prompts)
* Content data when creating or updating WordPress posts, pages, media, etc.
* This data is sent every time you interact with WordPress through the MCP client

**Where the data is sent:**
All data is sent to YOUR OWN WordPress site's REST API endpoints at:
* `https://yoursite.com/wp-json/mountdev-ai-mcp-connector/v1/messages` (main MCP endpoint)
* `https://yoursite.com/wp-json/mountdev-ai-mcp-connector/v1/oauth/*` (OAuth endpoints for ChatGPT)

**Important notes:**
* No data is sent to any third-party external services
* All communication is between the MCP client and your own WordPress installation
* Your WordPress credentials and data remain on your own server
* The plugin does not transmit any data to external services operated by the plugin author or any third parties

== Security ==

* **OAuth 2.0 with PKCE** - Enhanced authorization flow for ChatGPT
* **AES-256-CBC Encryption** - Client secrets encrypted at rest
* **Token Expiration** - Access tokens expire after 1 hour
* **Refresh Tokens** - Valid for 30 days with automatic renewal
* **Authorization Codes** - Expire after 10 minutes
* **WordPress Application Passwords** - Secure Basic Auth for other clients
* **Admin-Only OAuth** - Only administrators can authorize ChatGPT connections
* **Profile-Based Restrictions** - Control which tools are available
* **Capability Checks** - All operations respect WordPress user permissions
* **No Privilege Escalation** - Users cannot perform actions beyond their role

== Tested With ==

The following plugin versions were active during testing of the current release (1.4.0):

* **WordPress** 6.9.4
* **WooCommerce** 10.7.0
* **Yoast SEO** 27.5
* **Rank Math SEO** 1.0.269
* **Contact Form 7** 6.1.5

== Changelog ==

= 1.4.0 =
* Added: 20 Contact Form 7 tools for complete form management (list, get, create, update, delete, duplicate, mail templates, messages, additional settings, plugin settings, integrations)
* Added: 3 new predefined profiles (cf7_read_only, cf7_form_manager, cf7_full_access)
* Added: Contact Form 7 plugin banner and profile category in admin UI
* Changed: Tool count increased from 256 to 276 total tools

= 1.3.2 =
* Fixed: RankMath per-post robots meta (noindex, nofollow, noarchive, noimageindex, nosnippet) now readable and writable via rankmath_get/update_post_meta
* Fixed: RankMath schema tools rewritten to use modern rank_math_schema_* meta format (was using deprecated rank_math_rich_snippet keys)
* Fixed: rankmath_update_schema, rankmath_get_post_schema, rankmath_add_faq_schema, rankmath_add_howto_schema now work correctly with Rank Math 1.0.42+

= 1.3.1 =
* Added: 11 new Yoast SEO tools (robot directives, breadcrumb title, term SEO metadata, global settings, keyword usage, post type settings, update redirect, inclusive language score)
* Fixed: Yoast SEO Premium tools were unreachable due to an early return in get_tools()
* Fixed: RankMath create_redirect now correctly uses the sources column; url_to/destination values were swapped
* Changed: Tool count increased from 245 to 256 total tools

= 1.3.0 =
* Added: 78 Rank Math SEO tools for comprehensive SEO management
* Added: 18 core read tools (post meta, social meta, canonical, content analysis, keyword analysis, schema, sitemap settings)
* Added: 16 core write tools (update post meta, social meta, schema, canonical, FAQ/HowTo schema blocks, global/sitemap settings)
* Added: 6 redirect and 404 monitor tools (list/create/bulk-delete/export redirects, 404 logs, 404 summary)
* Added: 6 analytics tools (site analytics, Search Console data, winning/losing posts, Content AI score)
* Added: 32 Rank Math Pro tools (Schema Templates, Link Genius, Keyword Tracking, Multi-Location, News/Video Sitemaps, Image SEO, Email Reports)
* Added: 3 new predefined profiles (rankmath_read_only, rankmath_content_optimizer, rankmath_full_access)
* Added: Pro badge detection in Profile Manager for profiles requiring Rank Math Pro
* Fixed: Page parent parameter now correctly sets post hierarchy when creating/updating pages
* Fixed: Reading Settings options (homepage display, feed settings) added to site tools whitelist
* Fixed: Claude Desktop OAuth setup instructions added to client setup page
* Changed: Tool count increased from 167 to 245 total tools

= 1.2.0 =
* Added: 18 Yoast SEO tools for comprehensive SEO management
* Added: 3 new predefined profiles (yoast_read_only, yoast_content_optimizer, yoast_full_access)
* Added: Yoast SEO Premium support with redirect management and multiple keywords
* Added: Content analysis, readability scoring, and keyword optimization tools
* Added: Schema markup management (page types and article types)
* Added: Social meta management (Open Graph and Twitter Card)
* Changed: Tool count increased from 149 to 167 total tools

= 1.1.1 =
* Changed: Updated readme description for better clarity
* Fixed: WooCommerce default profiles now properly hidden when WooCommerce plugin is deactivated
* Fixed: Removed WooCommerce badge from FAQ section when WooCommerce is not active

= 1.1.0 =
* Added: 74 WooCommerce tools across 3 new tool classes
* Added: 4 new predefined profiles (woo_read_only, woo_store_manager, woo_full_access, complete_site)
* Added: WooCommerce Brands extension support with 5 brand management tools
* Added: Global product attributes management with 8 attribute tools
* Added: Enhanced Profile Manager UI with WooCommerce branding and search/filter
* Added: Advanced product features (Global Unique ID, sold individually, shipping dimensions, linked products)
* Added: Comprehensive coupon management with usage restrictions and limits
* Changed: Profile Manager UI now separates WordPress and WooCommerce tools
* Changed: Tool categories expanded from 10 to 28 categories
* Changed: Tool count increased from 75 to 149 total tools
* Technical: Conditional WooCommerce tool registration (only when WooCommerce is active)
* Technical: 3 new tool classes (Woo_Product_Tools, Woo_Order_Tools, Woo_Store_Tools)

= 1.0.0 =
* Initial release
* MCP Server Implementation with JSON-RPC 2.0 endpoint
* OAuth 2.0 support for ChatGPT
* WordPress Application Passwords for Claude Desktop, Cursor, Windsurf
* 75 WordPress core tools across 10 categories
* Profile-based access control with 3 predefined profiles

== License ==

This plugin is licensed under the GPL v3 or later.

See https://www.gnu.org/licenses/gpl-3.0.en.html for details.
