NDsoft MCP HTTP Connector v1.1.0

v1.1.0 — Stable Release

NDsoft MCP HTTP Connector 1.1.0 is the first stable release of the direct HTTP MCP connector for WordPress.

Core capabilities

• Direct HTTP MCP connection to WordPress
• No Node.js bridge, npm install, local MCP server folder, or WP-CLI MCP adapter required
• Seven WordPress MCP tools
• HTTPS + token authentication for live sites
• Read-only defaults
• Separate Create and Update page permissions
• Draft-only safety guard
• Token rotation and immediate revocation
• Automatic token input revisioning after token rotation/revocation
• Token created / last-used metadata
• Per-IP rate limiting
• MCP self-test
• Audit log with source IP
• Unique site-specific VS Code MCP server IDs

Regression testing completed

• Local WordPress read/write
• Fresh LocalWP installation
• Live HTTPS WordPress read
• Live token authentication
• Controlled live draft creation
• Publish attempt blocked by Draft-only guard
• Draft update allowed
• Published-page update blocked
• Revoked token rejected
• New token reconnect successful
• Seven MCP tools rediscovered after reconnect

Upgrade note

Existing RC3 tokens remain valid after upgrading to 1.1.0. If an older token predates creation-time tracking, the settings screen reports that the token exists but its original creation time is unavailable.

On future token rotation/revocation, the generated VS Code input ID changes automatically so the MCP client can request the current token rather than reuse an older cached secret.

NDsoft MCP HTTP Connector v1.1.0-rc3

v1.1.0-rc3 — Release Candidate

This release candidate focuses on production hardening after successful local and live MCP testing.

Highlights

• Direct HTTP MCP connection to WordPress
• No Node.js bridge, npm install, or WP-CLI MCP adapter required
• Seven WordPress MCP tools
• HTTPS + token authentication for live sites
• Token rotation and immediate revocation
• Separate Create and Update permissions
• Draft-only safety guard
• Per-IP rate limiting
• Token created / last-used metadata
• MCP self-test
• Audit log with source IP
• Unique site-specific VS Code MCP server IDs

Tested

• Local WordPress read/write
• Fresh second LocalWP installation
• Live HTTPS WordPress read
• Live token authentication
• Controlled live draft creation

Status

This is a pre-release / release candidate.

Do not label it stable until final security, compatibility, and WordPress coding-standard checks are complete.