Skip to content

v0.2.0

Choose a tag to compare

View all tags
@vikasiwp vikasiwp released this 19 Aug 09:18
· 4 commits to main since this release
v0.2.0
e4f8fe8
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode. 
npm install @instawp/mcp-wp@0.2.0

Added

  • WORDPRESS_USER_AGENT — sets the user-agent on every outbound request: the WordPress REST client behind all tools, the SQL endpoint, both api.wordpress.org lookups, and remote media downloads. Leave it unset (the default) and nothing changes — axios keeps sending its own axios/<version>. Set it when a CDN or WAF in front of your site rejects that default. An empty or whitespace-only value is treated as unset, since some edges block an empty user-agent too. (#30, #35)

Changed

  • execute_sql_query now explains an HTTP 403 rather than just reporting it. A 403 can mean WordPress rejected the credentials, or that a CDN/WAF returned a challenge page before the request ever reached WordPress. The error says so and prints the (truncated) response body, which is the only thing that distinguishes the two. The bare Request failed with status code 403 is what made #28 hard to diagnose. (#35)

Security

  • vitest bumped to ^4.1.11, clearing GHSA-5xrq-8626-4rwp (critical, vitest < 3.2.6) and four moderate/high advisories in the vite / vite-node / esbuild chain. Dev-only — none of it ships in the published package, so no consumer was exposed. (#34)
Assets 2
Loading