Skip to content

v1.2.0

Choose a tag to compare

View all tags
@soulevilx soulevilx released this 30 Aug 14:13
· 39 commits to develop since this release
v1.2.0
9b038d8
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Highlights

  • MCP request observability — an X-Request-Id header correlates a tool call across the MCP server's own event log and the WordPress site's audit log; every REST endpoint now logs with duration (not just mutations); new wordpress_get_mcp_stats / wordpress_get_mcp_request_log tools; log retention (MCP_LOG_RETENTION_DAYS); admin Audit Log page gained filters, a summary, and CSV export
  • On-site SEO tools (no external API calls) — wordpress_get_robots / wordpress_update_robots, wordpress_seo_audit, wordpress_get_seo_metadata / wordpress_update_seo_metadata / wordpress_seo_fix; auto-detects Yoast/Rank Math, falls back to the plugin's own fields
  • wordpress_get_site_limits reports the site's real PHP upload/content limits; MCP's own body limit is now a configurable backstop (MCP_JSON_BODY_LIMIT), not a hard ceiling
  • Node 24 upgrade for the MCP server (current Active LTS)
  • Also includes everything from the in-flight tool-policy/DTO/resources/session-manager work: safety gates, resource discovery, content diff preview, semantic search, session-aware site selection, and tool allowlisting — plus a security/quality audit's worth of fixes (denial handling, resource-list resilience, nested DTO projection, session-eviction observability, tag-diff case sensitivity, media MIME-sniff hardening, protected-postmeta query guard)

Full changelog: https://github.com/jooservices/wordpress-mcp/blob/v1.2.0/CHANGELOG.md#120---2026-08-30

Assets 2
Loading