Christian Krakau-Louis
102 lines
2.3 KiB
Markdown
102 lines
2.3 KiB
Markdown
# Codex Blog Abilities
|
|
|
|
Codex Blog Abilities is a small WordPress plugin that exposes guarded blog
|
|
administration actions through the WordPress MCP Adapter.
|
|
|
|
It is intended for a trusted MCP client, such as Codex, that authenticates with a
|
|
WordPress Application Password.
|
|
|
|
## Requirements
|
|
|
|
- WordPress 6.9 or newer
|
|
- PHP 7.4 or newer
|
|
- The WordPress MCP Adapter plugin
|
|
- A WordPress user with the capabilities required for the requested action
|
|
|
|
## Abilities
|
|
|
|
The plugin registers public MCP abilities under the `codex-blog/` namespace:
|
|
|
|
- `get-site-info`
|
|
- `list-post-types`
|
|
- `list-posts`
|
|
- `get-post`
|
|
- `create-post`
|
|
- `update-post`
|
|
- `delete-post`
|
|
- `schedule-post`
|
|
- `upload-media-from-url`
|
|
- `set-featured-image`
|
|
- `set-featured-image-from-url`
|
|
- `remove-featured-image`
|
|
- `get-seo-meta`
|
|
- `update-seo-meta`
|
|
- `audit-post-seo`
|
|
- `list-terms`
|
|
- `create-term`
|
|
- `update-term`
|
|
- `delete-term`
|
|
- `list-comments`
|
|
- `update-comment`
|
|
- `delete-comment`
|
|
- `list-media`
|
|
- `list-plugins`
|
|
- `activate-plugin`
|
|
- `deactivate-plugin`
|
|
- `get-options`
|
|
- `update-options`
|
|
|
|
## Safety Model
|
|
|
|
The plugin relies on native WordPress capabilities before executing actions.
|
|
For example, post edits require `edit_post`, plugin management requires
|
|
`activate_plugins`, and option changes require `manage_options`.
|
|
|
|
The option update ability is intentionally restricted to a small allowlist of
|
|
common site settings. It does not expose arbitrary `update_option()` access.
|
|
|
|
SEO metadata updates use All in One SEO's runtime API when it is available and
|
|
also write known post-meta fallbacks for compatibility. The SEO audit is
|
|
deterministic: it checks content and metadata structure but does not generate
|
|
ranking claims.
|
|
|
|
Deactivation of `mcp-adapter` and this plugin is blocked by default so an MCP
|
|
client does not accidentally remove its own control plane.
|
|
|
|
## Installation
|
|
|
|
Copy this directory to:
|
|
|
|
```text
|
|
wp-content/plugins/codex-blog-abilities
|
|
```
|
|
|
|
Then activate it:
|
|
|
|
```bash
|
|
wp plugin activate codex-blog-abilities
|
|
```
|
|
|
|
## Development
|
|
|
|
Run a PHP syntax check before deploying:
|
|
|
|
```bash
|
|
php -l codex-blog-abilities.php
|
|
```
|
|
|
|
## Releases
|
|
|
|
Push a semantic version tag to build an installable ZIP through GitHub Actions:
|
|
|
|
```bash
|
|
git tag v0.2.0
|
|
git push origin main v0.2.0
|
|
```
|
|
|
|
The release artifact is named `codex-blog-abilities-<tag>.zip`.
|
|
|
|
## License
|
|
|
|
GPL-2.0-or-later.
|