Aculect AI Companion
| 开发者 | mehul0810 |
|---|---|
| 更新时间 | 2026年7月31日 01:02 |
| PHP版本: | 8.2 及以上 |
| WordPress版本: | 7.0 |
| 版权: | GPL-2.0-or-later |
| 版权网址: | 版权信息 |
详情介绍:
Aculect AI Companion is a secure MCP connector for WordPress. It lets approved AI apps such as ChatGPT, Claude, and other compatible clients work with your WordPress content, media, comments, and site information through permission-aware workflows.
Instead of switching between WordPress admin screens, you can ask your AI assistant in plain English to draft a post, update a page, review comments, upload media, inspect safe site details, or prepare long-form content using WordPress blocks.
WordPress remains the source of truth. Aculect AI Companion checks the connected WordPress user's permissions before every action, lets administrators choose which optional abilities are available, keeps safe baseline read/discovery abilities default-active, and keeps risky write actions behind configurable controls.
What is MCP for WordPress?
MCP stands for Model Context Protocol. In Aculect AI Companion, MCP gives supported AI assistants a structured, permission-controlled way to request WordPress actions. The assistant does not receive direct database access. It can only use the enabled tools exposed by WordPress and approved by an administrator.
Why use Aculect AI Companion?
- Connect WordPress to ChatGPT, Claude, and other MCP-compatible AI apps
- Create, update, and organize WordPress content through controlled AI workflows
- Audit internal linking, review link opportunities, and apply approved suggestions through MCP
- Work with posts, pages, custom post types, categories, tags, comments, and media
- Use block-aware content workflows instead of raw custom HTML
- Inspect Site Editor and admin menu surfaces before planning theme or settings work
- Review AI activity with sanitized audit logs
- Control access globally, by connection, by role, and by WordPress user permissions
- Use diagnostics to verify OAuth, MCP, endpoint, and environment readiness
- Copy your connection URL from AI Companion > Connect.
- Choose ChatGPT, Claude, or another AI app for the right setup guide.
- Paste the URL when prompted by your AI app.
- Approve the connection on the screen that appears.
- Create, edit, and publish posts, pages, and supported custom post types
- Plan and draft long-form block content for WordPress
- Audit internal linking, prepare reviewable link suggestions, and apply approved links through MCP
- Manage categories, tags, custom taxonomies, and content groups
- Moderate, reply to, and bulk-manage comments
- Upload, list, update, attach, detach, and safely rename media
- View safe site settings, active plugins, active themes, and diagnostics
- Connect, pause, review, and disconnect AI assistants
- Control which MCP abilities each assistant can use
- ChatGPT custom apps. Developer Mode availability depends on your plan and workspace settings.
- Claude custom connectors through Customize > Connectors.
- Standards-compatible remote MCP clients.
- Prepare a post outline, section plan, taxonomy recommendations, media recommendations, and SEO recommendations
- Create a draft from validated serialized WordPress block content
- Update an existing post with block-safe content workflows
- Update Rank Math SEO title, description, and focus keywords when Rank Math is active
- Inspect recent Rank Math 404 Monitor entries and prepare safe Rank Math redirects when those modules are active
- List readable content types, including custom post types
- List posts, pages, and custom content items with pagination
- Read one content item by ID
- Create a post, page, or custom content item with optional featured image, author, and taxonomy assignments
- Update title, content, excerpt, slug, status, featured image, author, or taxonomy assignments for an existing item
- Update SEO title, SEO description, and focus keywords for supported SEO plugins
- Audit supported content for internal-link gaps and discover relevant on-site content
- Map potential linking opportunities and prepare reviewable suggestions
- Review individual suggestions before applying them to supported content
- Apply approved suggestions only when the connected user's WordPress permissions and configured MCP policy allow the change
- List bounded Rank Math redirection rules when Rank Math Redirections is active
- Validate proposed Rank Math redirects before saving them
- Create one or more Rank Math redirects with per-item results and dry-run support
- Review recent Rank Math 404 Monitor entries with query strings redacted
- List available categories, tags, and custom content groups
- List terms for a supported taxonomy with pagination
- Create a category, tag, or custom content group
- Update a category, tag, or custom content group
- Assign or clear an image for supported taxonomy terms
- List comments for review with pagination
- Read one comment by ID
- Reply to a comment as the connected WordPress user
- Moderate comment content or status
- Bulk moderate multiple comments
- List media library attachments with pagination
- Read, update, trash, and safely rename media items
- Upload media from a public URL with server-side request checks
- Attach media to posts or detach media from posts
- View safe, non-secret site settings
- View WordPress version, PHP version, active theme, and basic site metadata
- List installed plugins and active state for users who can manage plugins
- List installed themes and active state for users who can manage themes
- Discover supported public WordPress abilities registered by WordPress and plugins
- Inspect one supported public WordPress ability
- Run a supported public WordPress ability using the connected user's permissions
安装:
- Upload the
aculect-ai-companionfolder to the/wp-content/plugins/directory, or install the plugin ZIP from WordPress. - Activate Aculect AI Companion from the Plugins screen.
- For stronger production hardening, define
ACULECT_AI_COMPANION_ENCRYPTION_KEYinwp-config.phpwith a unique random value of at least 32 characters. If the constant is not defined, Aculect AI Companion generates a database-managed encryption key automatically. - Open AI Companion > Connect.
- Copy your connection URL.
- Choose ChatGPT, Claude, or another AI app for the right setup guide.
- Paste the URL when prompted by your AI app.
- Approve the connection on the screen that appears.
屏幕截图:
常见问题:
Does Aculect AI Companion send my data automatically?
No. Aculect AI Companion does not send site data on activation or admin page load. Data is only available to an AI assistant after an administrator connects that assistant and approves access in WordPress.
What is Aculect AI Companion used for?
Aculect AI Companion is used to connect WordPress with AI assistants through MCP. Site owners can use it to draft and update content, manage comments, upload media, review safe site information, and run controlled WordPress workflows from tools such as ChatGPT, Claude, Codex, Cursor, Gemini, and OpenAI-compatible MCP clients.
Does Aculect AI Companion give AI assistants direct database access?
No. Aculect AI Companion exposes structured MCP tools through WordPress. Connected assistants can only request enabled abilities, and WordPress permissions are checked when each tool runs.
Can ChatGPT or Claude create WordPress posts with Aculect AI Companion?
Yes. After an administrator connects and approves the assistant, ChatGPT, Claude, Codex, Cursor, Gemini, or another supported MCP client can create WordPress drafts or update content when the required abilities and WordPress permissions are available.
Can Aculect AI Companion help with long-form WordPress content?
Yes. Aculect AI Companion includes guided content workflows for planning long-form posts, validating block content, creating drafts, updating existing content, and applying supported SEO metadata.
Can Aculect AI Companion help with internal linking?
Yes. When the appropriate MCP abilities are enabled, a connected AI assistant can audit supported content, find relevant on-site pages and posts, prepare reviewable internal-link suggestions, and apply approved suggestions. The workflow stays permission-aware and policy-controlled; Aculect AI Companion does not insert links automatically just because an assistant is connected.
Does Aculect AI Companion support Rank Math SEO?
Yes. Aculect AI Companion can update supported Rank Math SEO fields, including SEO title, meta description, and focus keywords, when Rank Math is active and the connected user has permission to edit the content.
Does Aculect AI Companion support Rank Math redirects?
Yes. When Rank Math and the relevant Rank Math modules are active, Aculect AI Companion can list redirects, validate proposed redirects, create redirects with dry-run support, and inspect recent 404 Monitor entries for users with the required permissions.
Can I disconnect access?
Yes. Open AI Companion > Connections and disconnect one AI assistant or all active AI assistants.
Can I control what my AI assistant can do?
Yes. After a connection exists, open AI Companion > Abilities and enable or disable optional abilities. Baseline read/discovery abilities used for core MCP guidance stay default-active so assistants can understand available workflows and blockers. WordPress permissions are still checked every time your AI assistant asks Aculect AI Companion to do something.
Why do diagnostics recommend ACULECT_AI_COMPANION_ENCRYPTION_KEY?
Aculect AI Companion encrypts OAuth signing key material at rest. It does not use WordPress AUTH_KEY or other salts for this. If ACULECT_AI_COMPANION_ENCRYPTION_KEY is not defined, the plugin generates a random database-managed key so OAuth setup can continue securely. Define a unique ACULECT_AI_COMPANION_ENCRYPTION_KEY constant in wp-config.php for stronger protection because the key then lives outside the database. If the active key changes later, connected assistants must reconnect through the normal approval flow.
Can I review what connected AI assistants changed?
Yes. Open AI Companion > Activity to review MCP actions requested by connected AI assistants. The activity log stores the assistant, connected WordPress user, action, target, status, and sanitized metadata without storing large content payloads.
Does Aculect AI Companion require an account with a third-party service?
Aculect AI Companion does not require a separate product account. To use it with an external AI assistant, you may need an account with that external service.
Can I try Aculect AI Companion in the WordPress.org preview?
Yes. The WordPress.org preview opens a temporary WordPress Playground site with Aculect AI Companion active and takes you to the plugin settings screen. The preview is useful for reviewing the setup flow, supported abilities, diagnostics, and activity screens. For a full ChatGPT or Claude connection test, use your own HTTPS WordPress site because external AI assistants must be able to reach the WordPress site during OAuth and MCP requests.
I use Cloudflare. Can Bot Fight Mode block the connection?
Yes. Cloudflare Bot Fight Mode can block automated MCP requests from an AI assistant before they reach WordPress. Keep Bot Fight Mode disabled for the hostname used by your Aculect AI Companion connection URL; otherwise setup and later tool calls, such as creating or updating content, may fail even after the assistant was previously connected.
I use Cloudflare. Can Flexible SSL prevent the connection from working?
Yes. If your DNS record is proxied through Cloudflare and SSL/TLS mode is set to Flexible, the AI assistant connection may fail. Use an end-to-end HTTPS mode such as Full or Full (strict) with a valid origin certificate for the hostname used by your connection URL.
Are custom post types and custom taxonomies supported?
Yes. Aculect AI Companion can work with supported custom post types and custom taxonomies when they are visible through WordPress and the connected user has the required permissions.
更新日志:
0.7.1
- Simplified the Connect workspace around one copyable connection link, a lean AI app chooser, and current ChatGPT and Claude setup guidance.
- Improved incident approval authorization and clarified rejected refresh-token activity.
- Removed non-functional controls from pending request views.
- Added production-package checks that require Composer autoloading and the OAuth2 server runtime interfaces.
- Added WordPress core management discovery for supported site, user, role, capability, revision, autosave, and REST schema surfaces.
- Added MCP internal-linking workflows for auditing content, finding opportunities, reviewing suggestions, applying approved links, and surfacing editor suggestions.
- Improved deterministic MCP discovery, verified connection state, and post-save content-index refresh reliability.
- Fixed content-index refresh scheduling so post-save term and metadata changes settle before indexing.
- Fixed Connect completion state so it reflects a verified active session rather than local setup signals.
- Fixed local sample history so it stays distinct from real connection state.
- Fixed plugin lifecycle safety metadata to accurately report supported activation and deactivation operations.
- Fixed incident reporting so authorized
plugin_incident_listcalls remain read-only whileplugin_incident_reportuses the standard confirmation and replay-safe storage flow. - Added a production release guard that blocks deployment unless the exact release tag is already on main and the versions match.
- Updated prerelease packaging so a published draft prerelease triggers its build, package verification, Plugin Check, and artifact upload.
- Fixed the Learning tab so Learning Suggestions, Memory Records, and Incident Reports are separated into clear review surfaces without a large blank layout gap.
- Added Rank Math redirect and recent 404 workflow abilities for listing redirects, validating redirect proposals, creating redirects with dry-run support, and reviewing recent 404 Monitor entries.
- Improved MCP connection discovery and ability hydration reliability with deterministic registry fingerprints, cache refresh handling, and connector diagnostics.
- Added a release-candidate visual and workflow regression gate with browser smoke coverage for critical admin tabs and Learning surface separation.
- Added optional authenticated MCP
tools/listrelease smoke coverage with bounded, public-safe summary artifacts. - Added field-level diff output to dry-run write responses so reviewers can inspect intended changes before applying supported writes.
- Added a provider registry with setup guidance for ChatGPT, Claude, Codex, Cursor, Gemini, generic MCP clients, and OpenAI-compatible integrations.
- Added public Dynamic Client Registration auth profiles for better compatibility with clients that do not use client secrets.
- Added canonical MCP
searchandfetchtools for citation-friendly WordPress content retrieval. - Added workflow guide discovery so assistants can choose repeatable content, SEO, site audit, and troubleshooting workflows before calling write tools.
- Added
workflow_route_requestso assistants can classify ambiguous content, SEO, site, internal-link, and capability-discovery requests before choosing tools. - Added bounded workflow session tools so long-running content and site workflows can preserve compact progress without relying on ChatGPT, Claude, or Codex saved memory.
- Added bounded workflow loop tools so assistants can store guidance once and resume item-by-item or in small batches for thin-page cleanup and other collection workflows.
- Added MCP
resources/listandresources/readsupport for compact capability, site, content, brand, workflow guide, and approved memory context. - Added a site audit workflow for safe site-management readiness checks.
- Added WordPress Abilities API diagnostics and read-only Aculect Intelligence registrations.
- Added Site Editor and Admin Menu intelligence so assistants can inspect Appearance > Editor surfaces, admin navigation, and registered settings metadata without file-level changes or raw option access.
- Added MCP activity learning inspection so repeated disabled-tool, scope, block-validation, and unknown-tool failures can become admin-reviewed learning suggestions.
- Added MCP metadata fingerprint diagnostics to help detect stale connector tool metadata.
- Added intelligence index diagnostics for freshness, refresh jobs, and search readiness.
- Added atomic block validation for direct content create and update tools so invalid block markup and Custom HTML blocks are rejected earlier.
- Added a
plugin_incident_reporttool that stores local sanitized incident reports and prepares public GitHub issue drafts when the plugin or MCP workflow fails. - Improved MCP input schemas and descriptors for stricter ChatGPT, Claude, Codex, Cursor, Gemini, and generic client compatibility.
- Improved workflow and read-only intelligence availability so first-party workflow/help tools remain available without separate admin ability toggles when OAuth scope allows them.
- Improved content workflows so assistants infer article, page, landing page, service page, product page, case study, or visual layout mode from the brief and return matching block and pattern plans.
- Improved content index search with an optional word-count threshold for thin-page discovery.
- Improved the Connections tab with effective ability counts, policy-aware ability details, and clearer read/write access copy for trusted AI sessions.
- Improved trusted write handling so admin-trusted connections skip the custom MCP confirmation-token retry after OAuth scope, role policy, pause-state, and WordPress capability checks pass.
- Improved role ability settings by keeping role-specific policy controls behind the Advanced opt-in.
- Improved OAuth and connector diagnostics for authorization methods, provider matching, and tool availability blockers.
- Added layout-aware validation warnings when visual page requests produce paragraph-only block markup.
- Fixed MCP scheduled post validation so future status rejects missing or past dates before WordPress can normalize the post to published.
- Fixed duplicate active connection rows by revoking older refreshable sessions when the same assistant provider reconnects for the same WordPress user and resource.
- Improved MCP workflow discovery so content and SEO workflows are derived from the enabled atomic abilities instead of requiring separate workflow toggles.
- Improved read-only intelligence discovery so site, content, developer, brand, and capability context tools are available by default when OAuth read access allows them.
- Added an MCP capability help directory so assistants can discover available abilities, workflows, intelligence surfaces, blockers, prompts, and suggested next actions.
- Hardened durable intelligence memory writes so direct memory saves require review controls and normal learning suggestions use feedback submission.
- Fixed MCP content scheduling so future post status and date metadata persist correctly.
- Fixed missing or roleless MCP users so they resolve to a safe read-only ability policy.
- Fixed MCP tool availability so OAuth scope blockers are reported before exposing tools unavailable to the connected client.
- Added Cloudflare compatibility diagnostics for Bot Fight Mode and Flexible SSL/TLS connector issues.
- Updated GitHub Actions for the Node 24 runtime.
- Resolved an npm development dependency security alert.
- Added an OAuth connector smoke gate for dynamic client registration and authorization redirects.
- Bounded MCP PHPStan analysis into focused groups so release-readiness static analysis remains reliable.
- Improved OAuth secret storage so sites without
ACULECT_AI_COMPANION_ENCRYPTION_KEYautomatically use a generated database-managed encryption key instead of blocking assistant authorization. - Updated diagnostics to warn, not fail, when OAuth secrets are encrypted with the database-managed fallback key.
- Kept
ACULECT_AI_COMPANION_ENCRYPTION_KEYas the strongest production option for storing the encryption key outside the database.
- Refreshed the AI Companion admin experience with clearer navigation, connection guidance, diagnostics, activity, and changelog surfaces.
- Added AI Activity logging.
- Added role-specific MCP ability policy controls and per-user access pause controls.
- Added per-connection write permission controls for trusted assistants.
- Added Intelligence Layer.
- Added block and pattern knowledge so assistants can understand available WordPress blocks and patterns without relying on custom HTML blocks.
- Added settings import, export, and reset actions for safer configuration transfer and recovery.
- Added an authenticated MCP tool manifest export for diagnosing client-specific tool discovery differences.
- Added guided MCP content workflow tools for long-form post planning, draft creation, section-based post updates, and Rank Math SEO updates.
- Added reviewed learning suggestions so assistants can report improvement opportunities for admin review.
- Reduced unnecessary admin payload work for tab-specific data.
- Refined Connections and Abilities list views with assigned-abilities modals, access-level controls, and desktop-friendly DataViews layouts.
- Polished settings header spacing, tab navigation, Advanced layout, admin notices, loading states, and connector branding.
- Hardened OAuth storage maintenance so repeated dynamic client registration is bounded without blocking valid connector retries.
- Polished the connection access modal logo and form spacing.
- Updated workflow tool availability so workflows only appear when the required underlying global abilities, role policy, and OAuth scopes allow them.
- Added provider compatibility guards for MCP tool descriptors and schemas.
- Expanded cleanup coverage for full uninstall data removal.
- Expanded unit coverage for workflow tools, content intelligence indexing, activity logging, OAuth error handling, tool safety, and cleanup.
- Added featured image, author, taxonomy, and supported SEO metadata controls to content workflows.
- Added taxonomy term image assignment for supported content groups.
- Expanded media workflows with media read, update, trash, attachment relationship, and safe physical filename rename actions.
- Expanded comment workflows with richer filters and bulk moderation.
- Added safe site health summaries and broader site management visibility.
- Added dry-run previews and confirmation gates for higher-risk write actions.
- Added role-based MCP connection entry points for non-admin users.
- Added policy-controlled bridging for public WordPress Abilities registered by WordPress and other plugins.
- Added Codex connector setup guidance.
- Improved MCP list payloads with compact defaults and sparse field controls for lower-volume responses.
- Modularized MCP tool definitions, schemas, scopes, read-only hints, and handlers to reduce drift as more tools are added.
- Expanded test and CI coverage for MCP tools, permissions, safety controls, media workflows, and release packaging.
- Added an AI Activity tab for reviewing write actions requested by connected AI assistants.
- Added a Connections control to temporarily pause or resume AI access without disconnecting assistants.
- Added connection diagnostics that check endpoint, OAuth, and MCP readiness from the settings screen.
- Refreshed the settings screen header with Aculect branding and clearer AI agent connection messaging.
- Added WordPress.org plugin icon, banner, branded screenshots, and a Playground preview blueprint for the plugin listing.
- Improved action permission controls so AI tools only expose and run enabled, authorized abilities.
- Added OAuth storage maintenance to clean up expired connection data.
- Hardened media uploads from public URLs with stricter sideload safeguards.
- Expanded connector flow, activity log, access control, media, OAuth, and diagnostics test coverage.
- Fixed the Active Connections screen so the active access notice does not appear when no assistants are connected.
- Fixed diagnostics logging when the logs table is missing but the saved diagnostics database version is current.
- Added automatic repair for the diagnostics logs table during plugin boot.
- Added Cloudflare troubleshooting guidance for Bot Fight Mode and Flexible SSL/TLS connection issues.
- Clarified that Cloudflare Bot Fight Mode should remain disabled for the hostname used by the MCP connection URL because it can block setup and later tool calls.
- Added unit coverage for diagnostics log table repair.
- Added opt-in diagnostic logging for AI assistant connection flows.
- Added an Advanced setting to enable diagnostics and a Logs tab that appears only when logging is enabled.
- Added sanitized lifecycle and error logs for dynamic client registration, OAuth discovery, authorization, token exchange, and MCP authorization checks.
- Added 30-day log retention, automatic pruning, pagination, and clear-log controls.
- Hardened OAuth consent and authorization request handling with allowlisted, context-aware sanitization.
- Added stricter validation for response type, resource, PKCE, scopes, redirect URI, and consent decisions.
- Added unit coverage for diagnostic logging, redaction, repository behavior, and OAuth authorization parameter handling.
- Connect a supported AI assistant by copying one connection URL from WordPress.
- Approve each AI assistant in WordPress before it can access your site.
- Choose which abilities your AI assistant can use after it is connected.
- See connected AI assistants and disconnect them whenever needed.
- Ask your AI assistant to help with content, comments, media, site information, plugins, and themes.
- Added clearer privacy notes and extra safety checks for testing.