內容簡介
WindCodex Ops 是一款安全的 AI 行動外掛，能將 Claude、ChatGPT 等兼容 MCP 的 AI 平台連接至 WordPress，提供固定的操作列表，確保內容管理過程中的安全性與穩定性。
【主要功能】
• 無需執行代碼，僅限固定工具
• 支援內容管理，包括文章、頁面等
• 內建撤銷功能，72 小時內可回復
• 可預覽不可撤銷的操作
• 兼容多種 MCP 平台，使用 OAuth 認證
• 無需授權金鑰，所有工具免費使用
外掛標籤
開發者團隊
② 後台搜尋「WindCodex Ops – Safe AI Actions」→ 直接安裝（推薦）
原文外掛簡介
WindCodex Ops connects Claude, ChatGPT, and other MCP-compatible AI platforms to your WordPress site through a fixed, tested list of actions – not open-ended code execution. If an action isn’t on the list, the AI simply cannot do it, full stop.
This plugin covers everyday content management, entirely free: posts, pages, media, SEO, site structure, and site health.
Why Site Owners Choose WindCodex Ops
No code execution, ever – the AI can only call the fixed list of tools this plugin ships with. There is no PHP execution, no arbitrary SQL, no shell access anywhere in the codebase.
Safe on live, customer-facing sites – every tool is tested and scoped to a specific job (update a meta tag, insert a block, resize an image) rather than a general-purpose capability.
Undo built in – edits and deletes of posts, pages, categories and tags can be rolled back for 72 hours by default (see the FAQ for details).
Preview before anything irreversible – actions that can’t be undone can be set to show a preview first and run only after the AI confirms.
Works with any MCP-compatible AI platform – Claude, ChatGPT, and any other client that speaks the Model Context Protocol connects the same way, over standard OAuth.
You control who can connect – only Administrators can connect an AI app by default, and each connection can only do what its approving user could do in the dashboard.
No license key, no paywall – every tool group in this plugin is free and on by default.
Key Features
100+ tools across 5 groups, entirely free, no license key required, every group on by default:
Content management – posts, pages, categories, tags, revisions, and Gutenberg content blocks (read, insert, remove, and update one in place by position).
Media and assets – uploads, alt text, compression, format conversion, and usage lookup so the AI can tell you where an image is used before touching it.
SEO and discoverability – meta tags, focus keyword, canonical URL, Open Graph, and readability tools that auto-detect Yoast SEO, Rank Math, All in One SEO, and SEOPress, so the same tools work correctly no matter which one is active.
Site structure – menus, navigation blocks, classic widgets, redirects, sitemap status, and read-only permalink structure lookup.
Site health and diagnostics – status checks, error logs, cron health, database/disk usage, and orphaned-data cleanup.
A flat 120 requests/minute rate limit applies.
Use Cases
Let an AI assistant draft, edit, and publish blog posts and pages without giving it FTP or database access.
Keep SEO metadata (titles, meta descriptions, Open Graph tags) consistent across every post, regardless of which SEO plugin the site runs.
Batch-update image alt text and compress media for accessibility and page speed, from a chat interface.
Clean up broken permalinks, stale redirects, and orphaned post meta without opening the database.
Monitor site health – error logs, cron status, disk usage – and get a plain-language summary instead of digging through wp-admin screens.
Insert or update a specific Gutenberg block on a page programmatically, without touching the rest of the content.
For Store Owners
The content, media, SEO, and structure tools above work on any post type, including WooCommerce products, so an AI assistant can help with all of this out of the box:
Rewrite and standardize product page titles and meta descriptions ahead of a sale or new collection launch, without opening each product one by one.
Compress and add missing alt text across a product image gallery in one pass – smaller images load faster on mobile, and alt text is what image search actually indexes.
Set up a 301 redirect the moment a product is discontinued or its URL changes, so existing links and search rankings don’t turn into 404s.
Find every page and post referencing a specific image before swapping it out for a new banner or seasonal promo graphic.
Add a limited-time menu item (e.g. a Black Friday or holiday collection link) to site navigation and remove it again afterward, without a developer touching the theme.
Check sitemap status and crawl-facing site health before a big traffic push, so search engines can actually find the pages being promoted.
Risk Levels
Risk is labelled at two levels:
Tool groups are tagged low or medium risk, shown as a badge in Settings > WindCodex Ops > Tools. This is informational, not a gate: every group is on by default, and the label helps you decide which groups to turn off for your site.
Individual high-risk actions are the ones that can’t be undone – permanently deleting media, recompressing an image, deleting a category or tag, or removing a menu item, navigation item or widget. With Require preview before high-risk actions on, these return a preview first and run only when the AI confirms. You can also be emailed whenever one runs.
How It Works
Install and activate the plugin.
Go to Settings > WindCodex Ops and review which tool groups are enabled.
Copy the Connector URL from the Connection tab and add it to Claude, ChatGPT, or any other MCP-compatible AI platform as a custom connector.
Authenticate once via OAuth while logged in as an Administrator – most platforms register themselves automatically from the discovery URLs on the Connection tab.
The AI can now use any enabled tool group against your site. Revoke any connected app at any time from the Connection tab.
Requirements
WordPress 6.0 or higher
PHP 7.4 or higher
An MCP-compatible AI platform (Claude, ChatGPT, or similar) to connect to
No WindCodex account, API key, or license required to use this plugin itself – see External services below for what it connects to and why
Privacy
This plugin has no code-execution capability of any kind – that’s not present anywhere in the codebase. It does not collect data for WindCodex or sell any data. All tool calls run locally against your own site’s database through WordPress’s normal APIs. The plugin does send data externally in two specific, limited cases – see External services below for exactly what’s sent, when, and to whom: (1) whatever a specific tool returns, sent only to the AI platform you’ve explicitly connected via OAuth and only when that platform calls that tool, and (2) a plugin slug (no site or user data) sent to the WordPress.org API only when the plugin-staleness tool is used. By default, deleting the plugin leaves all data in place; opt into full cleanup via Settings > WindCodex Ops > General > Data & Privacy.
External services
This plugin connects to the following external services:
The AI platform you connect (e.g. Claude, ChatGPT, or any other MCP-compatible client)
The entire purpose of this plugin is to let an AI platform you choose to connect – over the OAuth connector you set up yourself in Settings > WindCodex Ops > Connection – call a fixed list of tools against your site. When that platform calls an enabled tool, this plugin sends back only what that specific tool returns (for example: post/page content and metadata, media URLs, SEO fields, or site-diagnostic data such as WordPress/PHP versions or database size), and only in direct response to that tool call. Nothing is sent proactively, on a schedule, or to any platform you haven’t explicitly connected and authorized via OAuth. Because you choose which platform to connect, its terms and privacy policy are the platform’s own – for example, Anthropic’s (https://www.anthropic.com/legal/consumer-terms and https://www.anthropic.com/legal/privacy) or OpenAI’s (https://openai.com/policies/terms-of-use and https://openai.com/policies/privacy-policy).
WordPress.org Plugin API (api.wordpress.org)
The “Check Plugin Staleness” tool (wp_check_plugin_staleness), when called by your connected AI, looks up each active plugin’s last-updated date from https://api.wordpress.org/plugins/info/1.0/{slug}.json to flag plugins that look abandoned. Only the plugin’s slug (its folder/file name) is sent – no site data, user data, or content. This call only happens when that specific tool is invoked. See the WordPress.org API’s terms (https://wordpress.org/about/privacy/) for how WordPress.org handles requests to its services.
More from WindCodex
Ops is free and fully functional. If you run WooCommerce or manage client sites, see our other plugins at https://windcodex.com/?utm_source=wordpress.org&utm_medium=readme&utm_campaign=ops
SiteDocs – AI-written site documentation and client handover
SwitchUser – switch users safely, with an audit trail
Free versions of GeoBlock, ReturnDesk, ScraperBlock and SwitchUser are also on WordPress.org.
