AICOM – AI Commander

AICOM – AI Commander

توسط

AICOM – AI Commander turns your WordPress site into an MCP (Model Context Protocol) server, giving AI agents direct, structured access to your WordPress content, settings, and data.

Control your WordPress site through Claude Code, OpenClaw, Celine, Goose, and any other MCP-compatible AI agent. No more copy-pasting between your AI assistant and WordPress. No more manual repetitive tasks. Describe what you want, and your AI agent does it.

What can you do with AICOM?

  • AI-powered content creation — let an AI agent write, update and publish posts, pages and custom post types directly on your site
  • Automate your WooCommerce store — update product descriptions, manage categories and read settings through an AI agent without touching the dashboard
  • Manage multilingual sites — connect with Polylang so AI agents can create and manage translations automatically
  • Control Elementor pages — validate and inspect Elementor-built pages programmatically
  • Build AI editorial workflows — draft, review, schedule and publish content via AI instructions
  • Bulk SEO tasks — update meta fields, slugs, titles and descriptions in bulk via AI
  • Audit every AI action — full log of every request: who, what, when, from which IP, with result

Who is this for?

  • Developers building AI-powered WordPress tools or integrations
  • Agencies automating client site management with AI agents
  • Content teams using AI writing assistants and wanting direct WordPress integration
  • Claude Code users — use AICOM as an MCP server directly from your terminal with Claude Code
  • OpenClaw users — AICOM works with the OpenClaw AI platform as a native WordPress MCP connector
  • Celine & Goose users — connect Celine or Goose to your WordPress site via AICOM’s MCP endpoint
  • Anyone using Claude, ChatGPT, Gemini, or other AI agents who wants them to directly control a WordPress site

How it works

AICOM exposes a secure HTTP endpoint on your WordPress site. AI platforms and agents send structured requests using the MCP / Model Context Protocol standard. AICOM authenticates the request, checks permissions, executes the operation, and returns a structured response.

AI Agent  AICOM Endpoint  WordPress

Features

  • MCP Standard — Full JSON-RPC 2.0 support (tools/call, tools/list), compatible with any MCP client
  • 87 tools across 7 modules: WP Core, Media, Users, Backup, WooCommerce, Elementor, Polylang
  • Security-first — API key authentication (bcrypt-hashed), IP allowlists, scope-based access control per key
  • Lock system — Hard lock (read-only emergency mode), soft lock, unlocked — switchable from the WordPress admin
  • Audit logging — Every request logged with duration, API key label, tool used, parameters and result summary
  • Dry-run mode — Test what an operation would do without applying changes
  • Confirm flag — Destructive operations require explicit "confirm": true — prevents accidental AI mistakes
  • Modular — WooCommerce, Elementor and Polylang tools only activate when those plugins are present

Available Modules & Tools

  • WP Core — server.status, wp.site.info, wp.posts.list/get/create/update/delete, wp.terms.*, wp.meta.*, wp.options.*
  • Media — media.list, media.get, media.upload, media.update, media.delete, files.list/read/write
  • Users — wp.users.list/get/create/update/delete, wp.roles.list
  • Backup — backup.post, backup.term, backup.restore, backup.list, backup.delete, backup.purge
  • WooCommerce (optional) — wc.products.list/get/create/update/delete, wc.categories.*, wc.settings.get/update
  • Elementor (optional) — elementor.page.validate, elementor.page.get_data, elementor.widget.*
  • Polylang (optional) — pll.languages.list, pll.post.translate, pll.term.translate, pll.string.*

API Key Scopes

Each API key is granted specific scopes — you control exactly what each AI agent can and cannot do:

read.wp, `write.wp.posts`, `manage.taxonomies`, `manage.meta`, `manage.wordpress.settings`, `manage.media`, `manage.users`, `manage.plugins`, `manage.woocommerce.products`, `manage.woocommerce.settings`, `manage.elementor`, `manage.polylang`

Endpoint

REST API:
POST /wp-json/aicom/v1/mcp

Fallback (no mod_rewrite required):
POST /?aicom=1

Health check:
GET /?aicom=1

Authentication

Authorization: Bearer aicom_XXXXXXXX_<secret>

or:

X-API-Key: aicom_XXXXXXXX_<secret>

MCP Request Example

{"jsonrpc":"2.0","method":"tools/call","params":{"name":"wp.posts.list","arguments":{"post_type":"post","posts_per_page":10}},"id":1}
  1. Upload the aicom folder to /wp-content/plugins/ or install directly from Plugins Add New by searching for “AICOM”
  2. Activate the plugin via Plugins Installed Plugins
  3. Go to AICOM API Keys and click Generate New Key
  4. Give the key a label (e.g. “OpenClaw agent”) and select the scopes you want to grant
  5. Copy the key immediately — it will not be shown again
  6. Point your AI agent or MCP client to https://yoursite.com/wp-json/aicom/v1/mcp
  7. Pass the key as Authorization: Bearer <your-key> in every request

Apache note: If the Authorization header is stripped by your server, add this line to .htaccess:

SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=$1

Safety tip: Start with Soft Lock enabled to limit the agent to read-only operations, then unlock once you’re confident in the integration.

سوالات متداول

Does this plugin make my site publicly accessible to anyone?

No. Every request must include a valid API key. Keys are bcrypt-hashed in the database and scoped — each key only has access to the specific operations you explicitly grant it. Without a valid key, the endpoint returns 401 Unauthorized.

Does it work without mod_rewrite or pretty permalinks?

Yes. The fallback endpoint /?aicom=1 works on any server configuration, with or without pretty permalinks or Apache mod_rewrite.

Is it compatible with WooCommerce, Elementor, and Polylang?

Yes. Each plugin’s tools are loaded automatically only if the corresponding plugin is active. If WooCommerce is not installed, no WooCommerce tools appear in the tool list or audit log.

Can I restrict an AI agent to read-only access?

Yes, in two ways: (1) assign only read.wp scopes to the API key, or (2) enable Soft Lock or Hard Lock mode from the Safety page — this blocks write and destructive operations site-wide regardless of key scopes.

What is the difference between Soft Lock and Hard Lock?

Soft Lock permits public, discovery and read class tools only — agents can browse and read content but cannot write, delete or change settings. Hard Lock permits only public tools (like server.status) — the site is effectively frozen from an AI perspective. Hard Lock overrides Soft Lock.

Can I test operations before they actually run?

Yes. Send "dry_run": true in your request parameters. The operation will be validated and simulated but no data will be changed. The audit log will record it as a dry run.

Does it log what AI agents do?

Yes. Every request is logged to the audit log with timestamp, remote IP, API key label, tool name, parameters, result summary, and response duration. The log is accessible from AICOM Audit Logs and can be filtered by date, key, or tool name.

What is MCP (Model Context Protocol)?

MCP is an open standard created by Anthropic for connecting AI models to external tools and data sources. AICOM implements the MCP standard so any MCP-compatible AI client — Claude, OpenClaw, and others — can communicate with your WordPress site natively without custom integrations.

Is this plugin free?

Yes, completely free and open source under the GPL-2.0-or-later license.

Can I restrict which IP addresses can use an API key?

Yes. Each API key has an optional IP allowlist. If set, requests from any other IP will be rejected even if the key is valid.

×
نظری برای این آیتم موجود نیست.
0 0 رای ها
امتیازدهی
اشتراک در
اطلاع از
0 نظرات
قدیمی‌ترین
تازه‌ترین بیشترین رأی
نسخه حجم فایل SHA256 تغییرات دانلود
2.2.0 93 کیلوبایت -
دانلود
×
بدون امتیاز

قیمت:

رایگان

نگارش

2.2.0

آخرین انتشار

16 اردیبهشت 1405

آخرین بروزرسانی

3 ماه پیش

نصب های فعال

-

نگارش وردپرس

وردپرس 6.0+

تست شده از نسخه

وردپرس 6.9.4

نگارش PHP

PHP 7.4+

نسخه ها

1 نسخه