Agentdesk Site Operations

Agentdesk Site Operations connects MCP-capable AI clients (such as Claude, Cursor, and VS Code) to your WordPress site through a fixed, predefined set of operations built on WordPress's own APIs. Ask in plain language and your agent performs the operation. This plugin does not edit files, execute code, run arbitrary SQL, or install other plugins. Every action is one of a fixed set of reviewed operations that go through core WordPress functions (wp_insert_post, wp_update_post, the WooCommerce CRUD APIs, and Elementor's own document meta). There is no file manager and no code editor. Content is filtered with wp_kses_post, and the Elementor HTML and Shortcode widgets are rejected, unless the acting user holds the unfiltered_html capability - the same rule WordPress itself applies in the block and classic editors. What you can do

• Content - create, edit, publish, search, and organize posts, pages, and custom post types; manage categories, tags, and comments.
• Media - browse the library, import images from a URL, and edit titles/alt text.
• WooCommerce - create, update and delete products; update order status and add order notes; list variations, coupons, customers and sales reports.
• Elementor - list pages, read and update the Elementor document (structured widget data), add headings/text/buttons/containers, and build pages from a brief.
• SEO - read and update Yoast / Rank Math SEO meta for posts you can edit.
• Site settings - read and update a small allowlist of general options (site title, tagline, date/time format, posts per page). Site address, home URL and admin email are deliberately excluded.
• Maintenance - flush page and object caches; detect installed integrations.
• Read & audit - site info, health checks, environment diagnostics, user and plugin/theme inventory, debug configuration, and an action log.

The plugin does not create users, change roles, or modify user passwords. Predefined operations, by design Every tool is a fixed operation with a typed input schema. The agent cannot write files, edit theme or plugin code, run raw database queries, or install software. This keeps the surface small, reviewable, and safe. Safety

• Authentication - a bcrypt-hashed API key or a WordPress Application Password is required on every request.
• Capability checks - each operation runs as a real WordPress user. Content operations are checked per object (you cannot edit or delete an item you could not edit in wp-admin), and internal or block-theme template post types are never writable.
• Safe mode (default on) - blocks permanently destructive operations such as deleting posts, media, products and comments.
• Power mode (default off) - required for sensitive operations: site settings, and overwriting or importing an Elementor document.
• Rate limiting - a per-IP flood guard plus a per-key request budget.
• Audit log - every action is recorded.

Self-hosted Runs entirely on your site. No external service and no account: nothing is sent to us or to any third-party service. Your own AI client connects directly to your site.

2.1.0

• Added per-object and post-type capability checks for all content operations.
• Elementor content is now filtered unless the user has unfiltered_html.
• Removed site address, home URL and admin email from the writable options allowlist.
• Removed user creation and role editing; user data is now read-only.
• Renamed the plugin and aligned all descriptions with the actual feature set.

2.0.0

• Refocused on a fixed set of predefined operations. Removed all file management, file/code editing, arbitrary database search-replace, plugin installation, and theme switching. The plugin now performs only reviewed content, commerce, media, and read/audit operations through core WordPress APIs.