Mindio Magic MCP
| 开发者 | farvisun |
|---|---|
| 更新时间 | 2026年7月28日 03:46 |
| PHP版本: | 8.0 及以上 |
| WordPress版本: | 7.0 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
- Stateless MCP Streamable HTTP endpoint
- API keys, OAuth 2.1 authorization code flow, PKCE S256, and WordPress authentication
- Hierarchical read-only, editor, and administrator scopes
- Structured Gutenberg block discovery and revision-safe block-tree editing
- Post, media, comments, users, SEO, settings, plugin, theme, webhook, search, and diagnostics tools
- Official-directory plugin/theme search, installation, updates, deletion, generic theme settings, and Flatsome settings
- Free integrations for ACF, BetterDocs, Contact Form 7, WooCommerce, Yoast SEO, and Rank Math with fixed operation catalogs
- Opt-in, bounded, read-only filesystem and database inspection
- Native-first Flatsome sections, rows, columns, and 29 typed UX Builder components with reported HTML fallback
- Persian content support and RTL-safe generated layouts
- Conditional WooCommerce and multisite tools
- Rate limits, strict schemas, audit logs, SSRF controls, and destructive-action confirmations
- Responsive flat enterprise admin console with compact 2–4px geometry and separate Overview, Tools, Credentials, Webhooks, Activity, and Settings tabs
- Searchable, grouped per-site tool exposure policy with individual, group, and enable/disable-all controls
- Expandable per-operation integration policy; reads start enabled and writes start disabled
- Searchable diagnostics, copy-ready endpoints, accessible controls, and WordPress.org language-pack support
安装:
- Upload the plugin ZIP from Plugins > Add New > Upload Plugin.
- Activate Mindio Magic MCP.
- Open Settings > Mindio Magic MCP.
- Generate an API key for a WordPress user using the least-privileged suitable scope.
- Configure your MCP client with the displayed REST endpoint.
屏幕截图:
常见问题:
Does this require Flatsome?
No for general WordPress tools. Flatsome is required for page generation and editing. list_flatsome_components remains available when the theme is inactive so agents can diagnose compatibility.
Does the plugin call an AI service?
No. Content generation and translation fail closed until a site owner connects a provider through the documented filters. Summarization has a local extractive fallback.
Does it support OAuth?
Yes. It includes OAuth 2.1 authorization code flow with PKCE S256, dynamic client registration, rotating refresh tokens, MCP protected-resource metadata, and a standalone translated consent/result experience. Enter the MCP endpoint in your client; OAuth discovery URLs are used automatically.
Are developer tools enabled by default?
No. Read-only filesystem inspection, fixed-shape database schema inspection, and in-process WP-CLI commands must be enabled separately by an administrator and remain tightly allowlisted.
Can administrators disable individual MCP tools?
Yes. Open the Tools tab to control the MCP surface per site. Disabled tools disappear from discovery and direct calls are rejected without changing existing credentials or scopes. ACF, BetterDocs, Contact Form 7, Yoast, Rank Math, and WooCommerce dispatchers also expose individual operation switches. Their write operations are disabled by default.
When are plugin integration controls shown?
Only when WordPress detects that integration plugin as installed. Installed but inactive plugins remain configurable, although their MCP operations cannot execute until the plugin is activated. Saved policy is retained if a plugin is later removed and restored if it is installed again.
Does it support Gravity Forms?
No. Gravity Forms is a separate commercial plugin and is not bundled, required, or feature-gated by Mindio Magic MCP. There is no paid Mindio Magic MCP tier that unlocks it.
Does Mindio Magic MCP execute arbitrary code?
No. It provides no PHP or JavaScript editor, file manager, arbitrary command runner, or AI-generated executable-code path. Agent-supplied HTML is filtered through the WordPress KSES allowlist. WP-CLI is limited to four fixed in-process maintenance commands with no shell, and child-theme creation writes only a fixed plugin-owned bootstrap template that accepts no executable-code input.
Does it download executable code?
Only when an authorized administrator explicitly requests a plugin or theme install/update. Packages must resolve to verified HTTPS URLs on downloads.wordpress.org and are installed by WordPress core upgraders. Mindio Magic MCP does not fetch executable code from any other service.
Is any included functionality restricted by payment, a license, or a trial?
No. The plugin contains no license check, paywall, feature gate, time limit, usage cutoff, or remote activation dependency. Optional integrations appear only when their independently distributed WordPress plugins are installed.
How is this different from other MCP plugins?
Its primary distinction is native-first Flatsome UX Builder generation and editing across 29 typed components, combined with revision-safe Gutenberg operations, granular per-tool and per-operation policy, OAuth 2.1, Persian localization, and RTL-safe generated layouts.
更新日志:
- Added 9 BetterDocs Free operations for documents, categories, and tags.
- Preserved BetterDocs REST hooks and role capabilities while filtering writes and confirming deletion.
- Added BetterDocs integration coverage and refreshed WordPress.org release assets.