I built an MCP server that lives inside WordPress - here's the safety model

说明与用途

SiteHelm 是一个安全的 WordPress 插件，提供 115 种类型化的 MCP 操作，支持两阶段写入、快照和审计日志，使 AI 代理能够在不直接访问数据库的情况下管理网站。

问题

Clients need an AI agent to manage WordPress sites without exposing raw database or filesystem access.

结果

SiteHelm enables secure, auditable AI-driven WordPress management with two‑phase writes, snapshot verification, and rollback, preventing accidental or malicious changes.

工作流

• Install SiteHelm plugin on WordPress
• Configure agent to use SiteHelm MCP operations
• When agent requests a write, SiteHelm performs a preview call returning before/after values and a single‑use plan token
• Agent submits apply call with exact arguments and token
• SiteHelm records snapshot before write
• Executes write operation
• Reads back site state and compares with preview promise
• If mismatch, reports failure; otherwise logs change in wp-admin
• Agent can pause writes via a single switch; plugins installed only from WordPress.org and deactivated by default

证据

Two-phase writes. Every write is two calls. The first is a preview: it writes nothing and returns each field's before and after value with a single-use plan token.

来源

Snapshot and verify. Before a write, the engine records everything a restore would need. After it, the site is read back and compared with the preview's promise.

来源

Audit and rollback. Every change lands in a log in wp-admin, in plain sentences, and applied changes roll back from there - with a preview first.

来源