FAQ
What is the difference between Forge and Forge Pro?
Forge is entirely read-only: file read, database SELECT, content-block read, and memory, safe to run on a live site. Forge Pro is a separate standalone plugin that adds PHP execution, WP-CLI, sandbox and direct file writes, and database writes. It is meant for test and staging sites and is blocked by default on anything that looks like production.
Do I need to install both?
No. Forge Pro replaces Forge. Activating one deactivates the other, and settings carry over.
Is it safe to run on my live site?
Forge has no write tool and no code-execution capability, so it cannot change your site, database, or files. It can, however, read data, including any database table, so only connect AI platforms you trust.
Can the AI modify my database or files?
No. Only SELECT queries and file reads are possible. Writing requires Forge Pro.
What can the database read tool see?
Any table in the WordPress database through SELECT, plus table listing and column structure. Non-SELECT statements are rejected.
Which files can the AI read?
Files inside wp-content (themes, plugins, uploads). Files outside it, such as wp-config.php and WordPress core, are not readable.
Does it send data to WindCodex or a third party?
No data is sent to WindCodex, and there is no account or license. One exception: wp_take_screenshot asks a public WordPress.com screenshot service to render the page, so that page's URL is sent to it. Turn that tool off on the Tools tab if that is not acceptable.
What is the memory feature for?
wp_remember, wp_list_memories, and wp_forget let one conversation save a fact so a separate future conversation can recall it. It is plaintext, capped at 200 entries, and not meant for secrets.
How does authentication work?
OAuth only. Most platforms register themselves; otherwise use the static Client ID/Secret. You can revoke any connected app. See Connecting an AI Platform.
Which AI platforms work?
Any MCP client, including Claude and ChatGPT.