AI Agent Gateway

# AI Agent Gateway

Governed MCP (Model Context Protocol) server for WordPress — let AI agents safely read and act with scopes, approval queues, audit logs, rate limits, and a kill switch.

Version: 2.0.0 · Requires: WordPress 6.0+ · PHP 8.0+ · Multisite-aware

Features

• MCP over Streamable HTTP (JSON-RPC 2.0) + SSE events
• Agent API keys (hashed at rest), scopes, IP allowlist, expiry
• Optional JWT exchange with secret rotation
• Risk tiers — Tier 0 read · Tier 1 reversible write · Tier 2 approval-required
• Approval queue with diff preview, approve-with-edit, re-validation of edited payloads
• Runtime identity binding — tools execute as the agent’s mapped WordPress role
• JSON Schema validation of tool arguments
• SSRF protection on outbound media fetches
• Privilege clamps (no role escalation above mapped role; expanded option blocklist)
• Authenticated /describe (no public tool-catalog dump)
• Hash-chained audit with transition records + CSV export
• Rate limits, circuit breaker, global kill switch, emergency revoke-all
• Webhook notifications for Tier 2 / kill-switch events
• Policy engine (force draft, word blocklists, category restrictions)
• Built-in content/media/user/plugin tools; WooCommerce & forms when active
• Extensible via ai_agent_gateway_register_tools
• Dashboard usage analytics · onboarding wizard · keep-data uninstall option

Installation

1. Upload/activate (Composer autoload or bundled PSR-4 fallback)
2. Complete onboarding — create an agent, copy the API key once
3. Point your MCP client at /wp-json/ai-agent-gateway/v1/mcp
4. Review the Approval Queue for Tier 2 actions

Security

Deny-by-default scopes, constant-time key verification, capability re-checks, CSRF on admin actions, trusted-proxy IP configuration. See SECURITY.md.

License

GPL-2.0-or-later

Author & Contact

Imran Dev BD · github.com/imranbru99