v3.0.0 — Bridge API: Remote Filesystem Access for AI Agents on Shared Hosting

What's New in v3.0.0

BugLens now works on shared hosting — no SSH or CLI installation needed. AI coding agents connect remotely via the new Bridge API.

Bridge API — 12 Filesystem Endpoints

Full WordPress filesystem access over HTTPS:

Endpoint	Description
/fs/read	Read file contents (with offset/limit)
/fs/write	Write to existing files
/fs/create	Create new files or directories
/fs/delete	Delete files or empty directories
/fs/rename	Rename/move files
/fs/list	List directory contents
/fs/search	Search across files (like grep)
/fs/info	File metadata (size, permissions, mime type)
/fs/diff	Compare content against file on disk
/fs/bulk-read	Read up to 20 files at once
/fs/tree	Recursive directory tree view
/fs/wp-cli	Execute WP-CLI commands (if available)

buglens-mcp — npm MCP Server Package

Zero-install MCP server with 15 tools (12 filesystem + 3 bug report). Works with all major AI coding agents:

• Claude Code, Claude Desktop
• Cursor, Windsurf
• OpenAI Codex CLI
• Gemini CLI / Antigravity
• VS Code Copilot
• Cline, Continue, JetBrains

Quick start:

BUGLENS_URL=https://yoursite.com BUGLENS_KEY=your_key \
  claude mcp add buglens -- npx -y buglens-mcp

Bridge Security — 4 Layers

1. API Key (always on) — timing-safe hash_equals() validation
2. IP Whitelist (optional) — proxy-aware (Cloudflare, X-Forwarded-For)
3. Time-Limited Tokens (optional) — SHA-256 hashed, configurable 15min–24h
4. Path Restrictions (optional) — allow/block lists with fnmatch patterns
5. Read-Only Mode (optional) — disable all write operations

wp-config.php, .htaccess, .htpasswd blocked by default.

Admin Settings Page

New BugLens > Bridge page with:

• Security configuration (enable/disable, IP whitelist, tokens, paths, read-only)
• Copy-paste config snippets for 8+ AI tools
• HTTPS warning when not using SSL

Installation

Download buglens-3.0.0.zip and upload via Plugins > Add New > Upload Plugin in WordPress admin.