WP Manifestindependent plugin directory
manifest / ai / ac-vibe

AC Vibe self-updates

Turn a WordPress site into a safe, audited MCP server for AI assistants — free and open source.

by Audience Connect · github.com/tshephojoel/ac-vibe · website

★ 0stars
0forks

Install

No release zip yet. The repository archive installs, but the folder name will carry the branch suffix and updates will not flow:

wp plugin install https://github.com/tshephojoel/ac-vibe/archive/refs/heads/main.zip

Ships its own WordPress updater (built-in updater), so new versions show up under Dashboard → Updates.

Readme github.com/tshephojoel/ac-vibe ↗

Turn a WordPress site into an MCP server, so an AI assistant — Claude, Cursor, Gemini, or any MCP-capable client — can do real content work directly, safely.

Free and open source (GPL-2.0-or-later). No account, no license key, no metered API in front of it.

Why

Most "AI + WordPress" tools either hand the AI raw admin access, or bolt AI onto a page builder. AC Vibe does neither:

  • Draft-first. Content creation always lands as a draft. Publishing is its own tool, off by default.
  • Approval gates. Publishing, trashing, and edits to already-live content can require a human sign-off before anything is written — the AI parks the change with a before/after diff instead.
  • Every write is undoable. Checkpoints cover postmeta and term assignments too, which WordPress's own revision system misses.
  • Everything is logged. A full audit trail — tool, arguments, outcome, operator — with per-token revocation.
  • No arbitrary code execution. There is deliberately no WP-CLI or PHP-eval tool. The AI can only do what's in the whitelisted tool registry.
  • Gutenberg-safe by construction. Content writes never go through raw wp_kses_post(), which silently mangles block delimiters and preset CSS variables. Block markup is validated against what's actually registered on the site before anything is stored.
  • Page builders are detected, not clobbered. Elementor, Divi, Bricks, Beaver Builder, Oxygen, WPBakery and Avada pages are recognized and refused, not silently no-op'd.

60 tools covering posts/pages, SEO (Yoast/Rank Math, auto-detected), media, taxonomy, site-wide link/SEO reports, and more — see docs/platform-guide.html for the full reference.

Install

  1. Download the latest release zip from the Releases page.
  2. WordPress admin → Plugins → Add New → Upload Plugin.
  3. Activate, then open AC Vibe in the admin menu and issue a connection token.
  4. Point your AI client at the endpoint shown there:
    claude mcp add --transport http ac-vibe https://yoursite.com/wp-json/ac-vibe/v1/mcp --header "Authorization: Bearer YOUR_TOKEN"

    Any MCP client that supports a custom HTTP server URL + bearer token works the same way (Gemini's "Custom apps for Spark", Cursor via mcp-remote, etc.).

Documentation

Development

php tests/run-all.php          # full suite against real WordPress core (set WP_ROOT)
python build-release.py        # clean, client-ready zip in releases/
php docs/dump-tools.php && python docs/build-docs.py   # regenerate the HTML docs

The test harness loads real WordPress core (kses, the block parser, the block-type registry) rather than modeling it — see tests/bootstrap.php. Only plumbing (hooks, escaping, i18n) is stubbed.

License

GPL-2.0-or-later — see LICENSE.