WindCodex Forge Pro

Overview

WindCodex Forge Pro gives Claude, ChatGPT, and other MCP-compatible AI coding assistants a small number of general-purpose, powerful tools instead of a fixed list of actions: run PHP, run WP-CLI, write files, and write to the database. It is built for developers doing custom work: debugging, building features, and fixing problems no pre-built tool covers.

Forge Pro is a standalone plugin, not a license unlock. It includes every Forge tool plus the power tools, in 39 tools across 9 groups.

⚠️

Install Forge Pro only on a test, development, or staging site. It gives a connected AI the same level of access WordPress itself has on the server. Power tools are blocked by default on anything that looks like production. For live sites use Ops or the read-only Forge.

AI platform (Claude, ChatGPT, any MCP client)
        │  OAuth 2.0
        ▼
┌---------------------------------------------------------┐
│  /wp-json/windcodex-forge/v1/mcp                        │
│  Gate 1  Live-site block   (production? → blocked)      │
│  Gate 2  Administrator required at call time            │
│  Gate 3  Per-tool toggle / group toggle                 │
│  Gate 4  Backup acknowledged (PHP, admin login links)   │
│  Gate 5  confirm: true on destructive tools             │
│  Gate 6  10 calls/min for the highest-risk tools        │
└-------------------------┬-------------------------------┘
        ┌-----------------┼------------------┐
        ▼                 ▼                  ▼
  Sandbox drafts     Live file writes    Database writes
  (wcforge-pro-      (auto-snapshot      (auto-snapshot
   drafts/)           first)              of the table)

Requirements

Requirement	Minimum	Notes
WordPress	6.0	Tested up to 7.1
PHP	7.4	-
Site type	Test / staging / local	Production is blocked by default
WP-CLI	Optional	Needed only for the WP-CLI tools; the server must permit `exec()` and `proc_open()`
License key	For updates only	Every tool works without one

Key Features

Execute PHP - run arbitrary PHP (requires acknowledging a backup exists).
Run WP-CLI - foreground or queued as a background job. See WP-CLI & Background Jobs.
Sandbox first, live second - new code lands in a draft area; promoting is a separate, confirmed step. See Sandbox & Drafts.
Direct file writes - off by default, behind their own toggle.
Snapshots - files and database tables are snapshotted before every write, and can be restored. See Snapshots & Restore.
Live-site block - one gate blocks every power tool on production. See Live-Site Block.
Full audit logging - the actual PHP code or command is logged in full.
wp forge CLI - inspect safety state and snapshots from a terminal.

Free vs. Pro Comparison

Feature	Forge (Free)	Forge Pro
Tools / groups	18 / 4	39 / 9
Site introspection, file read, database read, memory	✅	✅
Content blocks	Read only	Read and write
Execute PHP	✗	✅
Run WP-CLI (foreground and background)	✗	✅
Sandbox file writes and one-time upload links	✗	✅
Direct file writes and admin login links	✗	✅
Database write	✗	✅
Snapshots and restore	✗	✅
Production detection and power-tool lock	✗	✅
Backup acknowledgement gate	✗	✅
Draft browser with diff viewer	✗	✅
Safe on a live site	✅	✗
Automatic updates and support	✗	✅

Where to Go Next

Developer Reference Installation