內容簡介
Agentdesk Site Operations 外掛可將具備 MCP 功能的 AI 客戶端（如 Claude、Cursor 和 VS Code）連接至您的 WordPress 網站，透過固定的操作集執行各種任務，讓您以自然語言進行操作，提升網站管理效率。
【主要功能】
• 創建、編輯、發布和組織文章及頁面
• 管理 WooCommerce 產品及訂單狀態
• 瀏覽媒體庫並編輯圖片屬性
• 更新 Yoast / Rank Math SEO 元資料
• 讀取和更新網站設定選項
• 審核網站健康狀況和用戶清單
外掛標籤
開發者團隊
原文外掛簡介
Agentdesk Site Operations connects MCP-capable AI clients (such as Claude, Cursor, and VS Code) to your WordPress site through a fixed, predefined set of operations built on WordPress’s own APIs. Ask in plain language and your agent performs the operation.
This plugin does not edit files, execute code, run arbitrary SQL, or install other plugins. Every action is one of a fixed set of reviewed operations that go through core WordPress functions (wp_insert_post, wp_update_post, the WooCommerce CRUD APIs, and Elementor’s own document meta). There is no file manager and no code editor.
Content is filtered with wp_kses_post, and the Elementor HTML and Shortcode widgets are rejected, unless the acting user holds the unfiltered_html capability – the same rule WordPress itself applies in the block and classic editors.
What you can do
Content – create, edit, publish, search, and organize posts, pages, and custom post types; manage categories, tags, and comments.
Media – browse the library, import images from a URL, and edit titles/alt text.
WooCommerce – create, update and delete products; update order status and add order notes; list variations, coupons, customers and sales reports.
Elementor – list pages, read and update the Elementor document (structured widget data), add headings/text/buttons/containers, and build pages from a brief.
SEO – read and update Yoast / Rank Math SEO meta for posts you can edit.
Site settings – read and update a small allowlist of general options (site title, tagline, date/time format, posts per page). Site address, home URL and admin email are deliberately excluded.
Maintenance – flush page and object caches; detect installed integrations.
Read & audit – site info, health checks, environment diagnostics, user and plugin/theme inventory, debug configuration, and an action log.
The plugin does not create users, change roles, or modify user passwords.
Predefined operations, by design
Every tool is a fixed operation with a typed input schema. The agent cannot write files, edit theme or plugin code, run raw database queries, or install software. This keeps the surface small, reviewable, and safe.
Safety
Authentication – a bcrypt-hashed API key or a WordPress Application Password is required on every request.
Capability checks – each operation runs as a real WordPress user. Content operations are checked per object (you cannot edit or delete an item you could not edit in wp-admin), and internal or block-theme template post types are never writable.
Safe mode (default on) – blocks permanently destructive operations such as deleting posts, media, products and comments.
Power mode (default off) – required for sensitive operations: site settings, and overwriting or importing an Elementor document.
Rate limiting – a per-IP flood guard plus a per-key request budget.
Audit log – every action is recorded.
Self-hosted
Runs entirely on your site. No external service and no account: nothing is sent to us or to any third-party service. Your own AI client connects directly to your site.
