msrbuilds/elementor-mcp v3.0.0

v3.0.0 — The step beyond Elementor: WordPress management, leaner widgets, security scanner

on GitHub

The first major release of the rebranded EMCP Tools — the toolset's step beyond Elementor into general WordPress management, alongside a leaner, catalog-backed widget surface. This single 3.0.0 release bundles everything below. (Previous release: 2.2.0.)

⚠️ Breaking

• MCP namespace + server route renamed elementor-mcp → emcp-tools. Tool names are now emcp-tools-<tool> and the server route is /wp-json/mcp/emcp-tools-server (WP-CLI --server=emcp-tools-server). Reconnect every AI client — regenerate configs from EMCP Tools → Connection. Stored per-tool toggles migrate automatically.
• Widget tools consolidated — the 62 per-widget tools + universal add-widget are replaced by 5 catalog-backed tools (list-widgets, get-widget-schema, add-free-widget, add-pro-widget, update-widget). No capability is lost; per-turn widget tool-list context drops ~10×.

Beyond Elementor (new domains)

• WordPress Content (8 tools + 3 surfaced core/* abilities) — posts, pages, any CPT, terms, custom fields, featured images; never touches _elementor_data.
• WordPress Settings (2) — curated, typed allowlist of core settings.
• Plugins & Themes (13) — discover/install/update/activate/delete (wordpress.org only); 9 writes disabled-by-default.
• Media Library (3) — get-media/update-media; delete-media disabled-by-default + confirm:true.
• Users (4) — safe user management; no delete/role-change; admins off-limits; writes disabled-by-default.
• Performance & Security (2) — analyze-performance and the new scan-security (malware heuristics, core integrity, hardening, outdated/abandoned software).
• Filesystem (6) — read/scan enabled; write/edit/delete disabled-by-default, ABSPATH-confined, audit-logged.
• Database (6) — read-only SQL enabled; structured parameterized writes disabled-by-default.

Also

• Elementor is now optional — every WordPress tool works without it; the Elementor family registers only when Elementor is active.
• Claude Desktop one-click .mcpb bundle — self-contained CommonJS server that runs on Claude Desktop's built-in Node.js (no npx, no separate Node install).

See CHANGELOG.md for the full detail.