=== Site MCP – Self-Hosted MCP Server for AI Assistants ===
Contributors: 313automations
Tags: mcp, ai agents, woocommerce, llms.txt, markdown
Requires at least: 6.4
Tested up to: 7.1
Requires PHP: 7.4
Stable tag: 1.0.0
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

A public, read-only MCP server so AI assistants can search your content, read it as Markdown and look up WooCommerce products, prices and stock.

== Description ==

More people now ask an AI assistant instead of opening a search engine. When the assistant wants to know what you sell, what it costs or what your returns policy says, it has to read your website. Most of the time it scrapes the page, gets lost in menus and scripts, and guesses.

Site MCP gives them a proper front door. It adds a public, read-only server to your site that speaks the Model Context Protocol (MCP), the open standard AI assistants and agents use to connect to tools and data. An agent connects, asks a question, and gets a clean answer straight from your content.

There are no API keys to set up and nothing to pay for. The plugin makes no calls to outside services.

= What agents can do =

* **Find out who you are.** Site name, description, language, main menu pages and the contact details you choose to share.
* **Search your content.** Pages, posts and any public custom post type you switch on, with a short summary of each match.
* **Read a page as Markdown.** The full text of any shared page or post, cleaned of menus and scripts, with headings, lists, tables and links kept.
* **List everything.** Every shared page and post, 50 at a time.
* **Search your shop (WooCommerce).** Find products by words, category, price range or stock.
* **Get product details (WooCommerce).** Price, sale price, availability, options and variations, description, rating and images, exactly as your shop shows them.

Agents can look, but they cannot change anything, place orders or send messages. Every tool is marked read-only.

= What is never shared =

The server only shares what a logged-out visitor can already see on your site.

* Drafts, private, scheduled and password-protected content
* Anything marked noindex in Yoast SEO, Rank Math, SEOPress or The SEO Framework
* Products hidden from your shop catalogue
* Any page, post or product you hide with the "Hide from AI agents" box in the editor, or by ID in the settings

= Helping agents find you =

* A server card at `/.well-known/mcp/server-card.json`, the file MCP directories and clients read to learn what your server offers.
* An `llms.txt` file listing your main pages, recent posts and product categories, with a pointer to the server. If your site already has an llms.txt file, yours is left alone.

= See what agents do =

The settings page shows how many AI clients connected and which tools they used over the last 30 days. Only counts are kept, never IP addresses. You can also choose to keep the last 100 things agents searched for, which shows you what people ask their assistants about your business. That option is off by default.

= Built to be safe =

* Read-only by design: no tool writes, deletes or sends anything.
* A per-address rate limit (60 requests a minute by default).
* Requests over 64 KB and large batches are refused.
* Nothing leaves your site: no tracking, no remote calls, no account.

= For developers =

Filters: `site_mcp_post_available`, `site_mcp_post_markdown`, `site_mcp_tools`, `site_mcp_call_tool`, `site_mcp_site_info`, `site_mcp_server_card`, `site_mcp_llms_txt`, `site_mcp_rate_limit` and `site_mcp_client_ip`.

The server follows the MCP Streamable HTTP transport with plain JSON responses and no sessions, and supports protocol versions 2025-11-25, 2025-06-18, 2025-03-26 and 2024-11-05.

= Documentation =

Every setting and tool is explained at [313automations.com/blog/site-mcp-wordpress-plugin](https://313automations.com/blog/site-mcp-wordpress-plugin).

== Installation ==

1. Install and activate Site MCP from the Plugins screen.
2. Go to **Settings > Site MCP**.
3. Choose what to share, add a sentence about your business, and save.
4. Click **Test the server**. When all three checks pass, copy the server address into any MCP client, or list it in public MCP directories.

The server address is `https://your-site.com/wp-json/site-mcp/v1/mcp`.

== Frequently Asked Questions ==

= What is MCP? =

The Model Context Protocol is an open standard that lets AI assistants and agents connect to outside tools and data. A site with an MCP server can answer an agent's questions directly, instead of the agent scraping and guessing.

= Does it share anything that is not already public? =

No. It only reads published content that a logged-out visitor can already see, and it leaves out everything listed under "What is never shared".

= Can an AI agent change my site or place an order? =

No. Every tool only reads. Agents are told to send people to your site to buy, book or get in touch.

= Do I need an API key or an account? =

No. The plugin does not call any outside service, so there is nothing to sign up for and nothing to pay.

= Will it slow my site down? =

No. It only runs when an agent calls the server. Normal page views are not affected.

= The test says the request was refused. =

A security plugin or firewall is probably blocking the WordPress REST API for logged-out visitors. Allow requests to `/wp-json/site-mcp/` in that plugin.

= The server card or llms.txt shows a "page not found" error. =

Both need any permalink setting other than "Plain" (Settings > Permalinks). The MCP server itself works either way.

= My site is behind a proxy or CDN, and everyone shares one address. =

The rate limit counts requests per IP address. If your host does not pass the real visitor address to WordPress, raise the limit in the settings, or use the `site_mcp_client_ip` filter.

= Does it work with page builders? =

Pages are read after WordPress has run its normal content filters, so content from the block editor, shortcodes and most builders is included.

== Screenshots ==

1. The settings page: your server address, a one-click test and what to share.
2. Activity: connections, tools used and the AI clients that called your site.
3. The "Hide from AI agents" box in the editor.

== Changelog ==

= 1.0.0 =
* First release.

== Upgrade Notice ==

= 1.0.0 =
First release.

== Privacy ==

Site MCP does not send any data to outside services.

It stores, in your own database: daily counts of connections and tool calls, and the first word of each AI client's user agent, for 30 days. If you turn on "Search terms", it also keeps the last 100 search terms agents sent. You can clear all of it from the settings page, and deleting the plugin removes it.
