WindCodex Ops
Overview
WindCodex Ops connects Claude, ChatGPT, and any other MCP-compatible AI platform to your WordPress site through a fixed, tested list of actions - not open-ended code execution. If an action isn't on the list, the AI cannot do it.
The free edition ships 100+ tools across 5 groups covering everyday content management. It needs no license key, no account, and no external service.
AI platform (Claude, ChatGPT, any MCP client)
│ OAuth 2.0 (auto-registered)
▼
┌------------------------------------------------┐
│ /wp-json/windcodex-ops/v1/mcp │
│ ├── Rate limit (120 requests/min per user) │
│ ├── Tool group enabled? │
│ └── Fixed tool list - no PHP, no SQL, no shell│
└--------------------┬---------------------------┘
▼
WordPress core APIs (posts, media, menus…)
│
▼
Activity log + 72-hour undo snapshotsOps is one of two WindCodex AI product lines. Ops is safe by construction and meant for live, customer-facing sites. Forge (coming soon) is for developers who need an AI to inspect, or write and run, real code, and is meant for test and staging sites. They are separate plugins: installing Ops never exposes anything Forge can do.
Requirements
| Requirement | Minimum | Notes |
|---|---|---|
| WordPress | 6.0 | Tested up to 7.1 |
| PHP | 7.4 | - |
| AI platform | Any MCP client | Claude, ChatGPT, or similar |
| License key | Not needed | Free plugin |
| External account / API key | Not needed | - |
Key Features
- No code execution, ever - no PHP execution, arbitrary SQL, or shell access exists anywhere in the codebase.
- 100+ tools in 5 groups - content, media, SEO, site structure, and site health. All on by default.
- Undo built in - supported write tools keep an undo window of 72 hours by default (72, 96, or 168 selectable). See Undo & Activity Log.
- Works with any MCP platform - standard OAuth with automatic client registration and a static Client ID/Secret fallback.
- SEO plugin aware - auto-detects Yoast SEO, Rank Math, All in One SEO, and SEOPress.
- Revocable access - see every connected AI app and revoke any of them individually.
- WordPress Abilities API - the same tools are also exposed through WordPress core's native Abilities API.
Free vs. Pro Comparison
| Feature | Ops (Free) | Ops Pro (coming soon) |
|---|---|---|
| Tools | 100+ | 246 |
| Tool groups | 5 | 12 |
| Content (posts, pages, categories, tags, blocks) | ✅ | ✅ |
| Media and assets | ✅ | ✅ |
| SEO and discoverability | ✅ | ✅ |
| Site structure (menus, widgets, redirects) | ✅ | ✅ |
| Site health and diagnostics | ✅ | ✅ |
| OAuth connector, revoke, rate limit | ✅ | ✅ |
| Undo (72, 96, or 168 hours) for posts, pages, categories, tags | ✅ | ✅ |
| Users, comments, forms, HubSpot sync | ✗ | ✅ |
| Custom fields (ACF, Pods) | ✗ | ✅ |
| Memory across conversations | ✗ | ✅ |
| Page builders | ✗ | ✅ |
| WooCommerce | ✗ | ✅ |
| Security and zip backups with rollback | ✗ | ✅ |
| Advanced admin (updates, staging compare) | ✗ | ✅ |
| Undo across nearly every write tool (up to 168 hours) | ✗ | ✅ |
| Automatic plugin updates and support | ✗ | ✅ |