You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
One-paste connect: paste only the endpoint URL into Claude, ChatGPT (developer mode), Claude Code or Codex and approve on a consent screen. No token to copy.
Connect an AI agent with a copy-and-paste prompt (Claude Code, Codex, Cursor agent). The prompt holds no token. The agent saves its approved connection in a private file and reuses it, so it does not ask again unless the token expired, was revoked, or a permission is missing.
Approval screens tick every permission by default, with a Select all / Deselect all checkbox and an "Access expires after" dropdown (1 day, 1 week, 30 days by default, Never expire).
OAuth access tokens now last for the chosen period instead of one hour, and a refresh no longer depends on re-fetching the client's metadata document.
Cursor and VS Code install links that carry no secret.
Tools
New file_copy tool: copies files (including binary files such as images) and directories.
New media_upload tool: uploads images and other allowed files to the Media Library from base64, without WP-CLI.
Admin
Tokens tab: checkboxes, select all, Revoke Selected and Delete Selected.
Bearer-token section (Quick connect, Custom connection, copy-token box) is at the bottom of the Settings tab.
Safe mode is off by default and shown as a toggle switch (recommended on for production).
Default WP-CLI timeout is 180 seconds.
Status row names the PHP functions a host has disabled.
Notes
Every permission, including wp-cli, is ticked by default on the approval screens. Check the boxes before you approve.
Existing sites keep their saved settings (safe mode, timeout).
Requires WordPress 6.0+ and PHP 7.4+. CI passes on PHP 7.4, 8.1 and 8.3. techthrill-mcp-1.5.1.zip