Observed arrival · 2026-08-29
SiteHelm, the WordPress MCP server with a hard stop before every write
An open-source WordPress plugin gives AI agents 99 named operations while blocking PHP, shell, and SQL access.
Field notes
The plugin separates planning from execution: a proposed field change receives exact before-and-after values and a one-use token, and any alteration to the arguments produces a StalePlan refusal. After application, SiteHelm rereads the WordPress site and compares persisted values with the proposal, retaining the old state for rollback. The homepage lists 99 operations across areas including Elementor, custom fields, forms, users, and site settings, organized through 10 modules and 11 dispatchers.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue