Initial Codex blog abilities plugin

This commit is contained in:
Christian Krakau-Louis
2026-05-16 22:27:25 +02:00
commit e0d0c16892
4 changed files with 1420 additions and 0 deletions
+5
View File
@@ -0,0 +1,5 @@
.DS_Store
Thumbs.db
*.zip
vendor/
node_modules/
+11
View File
@@ -0,0 +1,11 @@
This program is free software; you can redistribute it and/or modify it under
the terms of the GNU General Public License as published by the Free Software
Foundation; either version 2 of the License, or (at your option) any later
version.
This program is distributed in the hope that it will be useful, but WITHOUT ANY
WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A
PARTICULAR PURPOSE.
You should have received a copy of the GNU General Public License along with
this program. If not, see https://www.gnu.org/licenses/gpl-2.0.html.
+77
View File
@@ -0,0 +1,77 @@
# Codex Blog Abilities
Codex Blog Abilities is a small WordPress plugin that exposes guarded blog
administration actions through the WordPress MCP Adapter.
It is intended for a trusted MCP client, such as Codex, that authenticates with a
WordPress Application Password.
## Requirements
- WordPress 6.9 or newer
- PHP 7.4 or newer
- The WordPress MCP Adapter plugin
- A WordPress user with the capabilities required for the requested action
## Abilities
The plugin registers public MCP abilities under the `codex-blog/` namespace:
- `get-site-info`
- `list-post-types`
- `list-posts`
- `get-post`
- `create-post`
- `update-post`
- `delete-post`
- `list-terms`
- `create-term`
- `update-term`
- `delete-term`
- `list-comments`
- `update-comment`
- `delete-comment`
- `list-media`
- `list-plugins`
- `activate-plugin`
- `deactivate-plugin`
- `get-options`
- `update-options`
## Safety Model
The plugin relies on native WordPress capabilities before executing actions.
For example, post edits require `edit_post`, plugin management requires
`activate_plugins`, and option changes require `manage_options`.
The option update ability is intentionally restricted to a small allowlist of
common site settings. It does not expose arbitrary `update_option()` access.
Deactivation of `mcp-adapter` and this plugin is blocked by default so an MCP
client does not accidentally remove its own control plane.
## Installation
Copy this directory to:
```text
wp-content/plugins/codex-blog-abilities
```
Then activate it:
```bash
wp plugin activate codex-blog-abilities
```
## Development
Run a PHP syntax check before deploying:
```bash
php -l codex-blog-abilities.php
```
## License
GPL-2.0-or-later.
File diff suppressed because it is too large Load Diff