GetMCP Extensions

Developed by Synergetic Dev.

A standalone WordPress add-on for personal MCP connections, project gateways and controlled access. PHP 8.2+, single-site WordPress 6.2+ and a compatible GetMCP installation are required. Tested on WordPress 7.1.2. Existing GetMCP subscription limits still apply.

Features

• Native WordPress OAuth with searchable, explicit user allowlists.
• Remote Streamable HTTP connections with tools, resources, prompts and personal upstream OAuth.
• Project gateways with selected servers, separate user access and endpoint-bound credentials.
• Paste Configuration previews for supported JSON, simple YAML/TOML, MCP client commands and HTTPS URLs.
• Select and import up to 100 Remote MCP entries with individual results, renaming and retry support.
• Codex Desktop Quick Connect with direct HTTP and copyable config.toml entries.
• A redacting configuration converter for Claude/Cursor JSON, VS Code JSON and Codex TOML.
• Five marketing templates that install into empty native servers in draft status.
• Editable authentication fields and encrypted custom headers. Blank saved-secret fields preserve existing values.
• Personal marketing connections, private Instagram Page selection, provider discovery and readiness checks.
• Optional modules that can be retired individually as matching functionality becomes available.
• Public GitHub updates in the normal WordPress dashboard, without a client token.

Command-only server configurations are flagged for a reviewed native port. Import never runs commands, installs runtimes or creates a companion service. Automatic remote OAuth depends on provider metadata and client-registration support; some providers still require an application registration.

Installation and updates

1. Back up files and the database; retain encryption salts. Validate in a disposable or staging site first.
2. Download the versioned plugin ZIP from Releases. Activate GetMCP before this add-on.
3. Open GetMCP → Extensions to select modules, Gateways & Remote MCP for connections and gateways, and My MCP Connections for personal accounts.
4. Subsequent public releases appear under Dashboard → Updates and Plugins. No GitHub token is requested.

The first updater-enabled version requires one manual ZIP installation on older installations. GitHub source archives and Git checkouts are development material and do not enable self-updates. The install ZIP includes a distribution marker and the update-checker runtime.

Access and safe retirement

Empty gateway allowlists deny everyone, including administrators. Gateway membership deliberately delegates access to its selected servers; direct connections retain their own restrictions. Gateway credentials are never sent upstream. Existing credentials, routing and user selections are preserved during an add-on update.

Activation installs an owned persistent endpoint guard in wp-content/mu-plugins/. Disabling or deleting the add-on leaves affected endpoints blocked. Reactivating a compatible version restores them. Do not remove the guard until protected definitions have been migrated or retired. There is no automatic data purge.

Documentation

• Installation, compatibility and rollback
• Bulk import, portal, templates and Codex setup
• Local 1.2.0 verification
• User access API and gateway API/hooks
• Marketing connections and setup API
• Token-free updates and releases
• Architecture and Graphify
• Local tests and coverage limits
• Contributing and security reporting
• Portable marketing configuration guide

Real Meta consent, token-extension compatibility and messaging require separate provider acceptance. Local write tests use synthetic providers. No production installation is implied by repository publication.

Development

python tools/verify.py
python tools/build.py
python tools/graph.py

The build contains runtime files only. Tests, docs, Graphify outputs and tools stay in the repository. The code map indexes authored backend and admin code, excludes dependencies and generated compatibility assets, and uses local AST extraction without an external model.

GPL-2.0-or-later. Required third-party notices are in LICENSE-NOTICE.md.