Nothing is ever truly gone
Every change the AI makes is snapshotted before it happens. This is built into the core of how WP MCP works, not something you have to remember to turn on.
Snapshot before every write
Let AI build your WordPress site. It physically can't wreck it.
WP MCP is an MCP server that runs inside WordPress, built on the official Abilities API. It gives AI agents like Claude and Cursor the keys to your site, updating pages, products, and settings, while quietly snapshotting everything before each write. If an agent ever gets something wrong, you press one button and your site is back exactly as it was.
Added new product · "Spring Tote Bag"
2m ago
Rewrote homepage banner
11m ago
Updated contact page and shipping note
1h ago
--- Homepage banner, saved copy
+ <h1>Fresh Bakes, Delivered Daily</h1>
- <h1>Fresh Bakes, Delivered Daily</h1>
+ <h1>undefined is not a bakery</h1>
ai> updating homepage banner...
ai> refreshing the product grid...
ai> rewriting the navigation menu...
error> something broke, the page is now blank
A visitor is on the site right now. The homepage has been blank for eleven minutes, and there is no undo button.
The problem
01
AI is confident, not careful.
An AI agent editing a live site does not pause before a risky change. It moves with the same confidence whether it is fixing a typo or wiping out your homepage.
02
Every other AI tool asks you to just trust it.
Trust is not a safety net. AI is good, not perfect, and one bad change on a live site is a broken homepage, an angry client, and a stressful afternoon you cannot get back.
03
A backup from last night will not save you.
A nightly backup does not help when the AI breaks something ninety seconds ago. You need protection at the moment of the change, not the moment of the night.
How it works
Nothing reaches your site without a snapshot saved first.
Every change the AI makes, a new page, an edited product, a settings update, follows the same four steps before it counts as done. You never have to trust that it went well. You can check, and undo it if it did not.
01
Save a snapshot
Before anything changes, WP MCP quietly saves exactly how that page, product, or setting looked, so there is always a way back.
02
Make the change
The AI does what you asked: update copy, add a product, adjust a setting. One clean change, nothing left half-done.
03
Check the result
A quick check confirms the page still works. If something looks broken, it gets reversed automatically before a visitor ever sees it.
04
Undo, any time
Change your mind later? Restore one change, or roll back an entire AI session, from a single screen in your dashboard.
Watch it undo
Click restore. Watch the mistake disappear.
This is a staged demo, not a live connection, but the interaction is the real one: every change WP MCP makes shows up in your dashboard with a Restore button right next to it.
AI editing your homepage
one click
restore
restore
your WordPress dashboard
Homepage banner updated
just now
Why developers and agencies pick WP MCP
Built for the moment the AI gets it wrong.
Works with the page builder you already use
WP MCP saves your actual site data, so restoring a page works the same way no matter which page builder or theme created it.
Lives inside your WordPress
It is a single plugin you install once, registered through the official WordPress Abilities API. No separate service, no Node proxy, no third party holding a copy of your site.
Undo a whole afternoon, not just one click
Roll back a single change, or unwind everything the AI did in a whole session, back to exactly how your site looked before you started.
Catches problems before your visitors do
A quick check runs right after every change. If something looks broken, it gets reversed automatically, before it ever reaches a visitor.
Runs the whole site, WooCommerce included
Products, orders, and sales reports, users, comments, navigation menus, plugins and themes. WP MCP manages what a real site actually needs touched every week, and every change to a product price or an order status is just as undoable as a page edit.
Watches for trouble, not just mistakes
A built-in security scanner checks for malware, tampered core files, weak configuration, and outdated software, so you find out about a compromised plugin before an AI agent, or anyone else, does.
Free and open, for real
GPL-2.0. The snapshotting and restoring, the part that actually protects your site, is free forever, not a locked feature behind a paywall.
Under the hood
For the technically curious: what the AI can actually touch.
WP MCP registers every tool as an ability through the official WordPress Abilities API, and speaks the Model Context Protocol (MCP), so it works with Claude, Cursor, or any compatible AI client. It now covers 80+ abilities across the whole site, grouped below by area. If you just want the reassurance, you do not need to read it, it is here for anyone who likes to check under the hood.
| Area | Type | What it does |
|---|---|---|
| Content | safe change | Create, edit, organize, and delete posts, pages, and products, saved before every change and checked automatically |
| Media | safe change | Read and update photo and file details; pull images from a URL straight into your library |
| Site & store settings | safe change | Read and update site settings, applying what works even if part of a batch fails |
| Users | safe change | List and update customer/staff profiles; never touches passwords or admin accounts |
| Comments | safe change | Approve, edit, or moderate comments, every change saved before it happens |
| WooCommerce products | safe change | Create products, update price and stock, browse categories, all undoable with one click |
| WooCommerce orders | safe change | Review orders, update order status, add notes, pull sales reports, status changes are one-click undoable |
| Navigation menus | safe change | Build and rearrange menus, assign them to theme locations, safely reversible |
| Plugins & themes | write | Install, activate, and update plugins and themes; risky file changes are off by default |
| Database | read (mostly) | Inspect tables and run read-only queries; raw writes are off by default and admin-only |
| Filesystem | safe change | Read, search, and edit files inside your WordPress install; every write is backed up first and off by default |
| Performance analyzer | read | Scans your server, database, and pages for slowdowns and returns a scored, ranked report |
| Security scanner | read | Checks for malware, core file tampering, weak configuration, and outdated software, with a graded report |
| Safety & history | undo | List recent AI changes and undo one change or a whole session, back to where it started |
Free vs Pro
The safety net is free. It is not the upsell.
Pro adds reach and convenience for busy sites and the agencies that run them. It does not gate the thing that keeps your site safe.
Core
Free
Fully functional. No trial, no time limit.
- The full save, change, check, and restore engine
- Page and content editing with automatic checks
- One-click restore from your dashboard or the AI
- Last 20 changes kept in history
- GPL-2.0, self-hosted, no forced tracking
Planned
Pro, via Freemius
Pro
For busy sites and the agencies that run several of them.
- Unlimited change history
- Full session restore at any depth
- Elementor deep editing
- Preview changes before they apply
- Priority support
Get started
Let the AI build. Keep the undo button.
Install the plugin, connect your AI agent, and let it start building. The first snapshot is saved before the first change ever happens.
git clone https://github.com/wpmcp/wpmcp.git wp-content/plugins/wpmcp
cd wp-content/plugins/wpmcp
composer install --no-dev