# Royal MCP Pro changelog

> Every Royal MCP Pro release, newest first: new tools, improvements and fixes in each version, with release dates.

- Canonical: <https://royalplugins.com/royal-mcp-pro/changelog/>
- HTML version: <https://royalplugins.com/royal-mcp-pro/changelog/>

---

- [Overview](https://royalplugins.com/royal-mcp-pro/)
- [Pricing](https://royalplugins.com/royal-mcp-pro/pricing/)
- [Compare](https://royalplugins.com/royal-mcp-pro/compare/)

  [All Comparisons](https://royalplugins.com/royal-mcp-pro/compare/)
  [Free vs Pro](https://royalplugins.com/royal-mcp-pro/free-vs-pro/)
  [vs WPVibe](https://royalplugins.com/royal-mcp-pro/vs-wpvibe/)
  [vs Easy MCP AI](https://royalplugins.com/royal-mcp-pro/vs-easy-mcp/)
  [vs Elementor MCP](https://royalplugins.com/royal-mcp-pro/vs-elementor-mcp/)
  [vs WooCommerce MCP](https://royalplugins.com/royal-mcp-pro/vs-woocommerce-mcp/)
  [vs WordPress.com MCP](https://royalplugins.com/royal-mcp-pro/vs-wordpress-com-mcp/)
  [vs AI Engine](https://royalplugins.com/royal-mcp-pro/vs-ai-engine/)
  [vs GoBuildWP](https://royalplugins.com/royal-mcp-pro/vs-gobuildwp/)
  [vs Novamira](https://royalplugins.com/royal-mcp-pro/vs-novamira/)
  [vs Other MCPs](https://royalplugins.com/royal-mcp-pro/vs-other-wordpress-mcp/)
- [Developers](https://royalplugins.com/support/royal-mcp/add-your-plugin-tools/)

  [Add your plugin’s tools](https://royalplugins.com/support/royal-mcp/add-your-plugin-tools/)
  [Changelog](https://royalplugins.com/royal-mcp-pro/changelog/)
- [Troubleshooting](https://royalplugins.com/support/royal-mcp-pro/troubleshooting-start-here/)
- [Docs](https://royalplugins.com/support/royal-mcp-pro/)

Overview
Pricing
Compare
Free vs Pro
vs WPVibe
vs Easy MCP AI
vs Elementor MCP
vs WooCommerce MCP
vs WordPress.com MCP
vs AI Engine
vs GoBuildWP
vs Novamira
vs Other MCPs
Developers — Add your plugin’s tools
— Changelog
Troubleshooting
Documentation

Every Royal MCP Pro release, newest first: what’s new, what improved and what was fixed. Updates install from your WordPress dashboard while your licence is active.

## [1.0.15](#v1-0-15)

October 27, 2026
Latest

- NewA Dashboard is the landing page, with your MCP address, tool, client, safety mode and licence tiles, and recent AI activity with undo.
- NewA Needs attention list on the dashboard and in royal\_mcp\_get\_notifications shows problems with a fix link and a 7-day snooze.
- NewThe menu has five entries, Dashboard, Connections, Context, Safety and Activity, with tabs, and existing bookmarks still work.
- NewTest connection checks the endpoint, AI sign-in discovery and the Authorization header, beside connect steps for each AI client.
- NewThe dashboard adds prompt starters, the other MCP plugins on the site, the changelog and a Copy system info button for support.
- NewRoyally (Beta): with Managed by Royally on, every AI connection except Royally's is read-only on the site.
- Newroyal\_mcp\_get\_ai\_permissions and royal\_mcp\_update\_ai\_permissions let Royally manage which options and theme settings AI may write.
- NewA Royally card on the dashboard, and links that open this site in Royally from the dashboard, Royally page and Audit Log.
- Newwp\_update\_plugin, wp\_update\_theme and wp\_update\_core preview first, check the home page after, and plugin updates can be rolled back.
- NewInstall plugins and themes from WordPress.org, and activate, deactivate, delete or switch them, each with a preview.
- NewAn activation, deactivation or theme switch that stops the home page loading is put back automatically.
- Newwp\_set\_plugin\_auto\_update and wp\_set\_theme\_auto\_update turn auto-updates on or off with undo.
- Newwp\_run\_cli\_command runs cache flush, rewrite flush, due cron events, expired transient cleanup and a search-replace count.
- NewUser tools create users, change or demote roles and delete users, and always protect the last administrator.
- Newwp\_audit\_application\_passwords lists application passwords and their last use, never the password itself.
- Newwp\_bulk\_moderate\_comments moderates up to 500 comments at once with undo.
- Newwp\_optimize\_database clears old revisions, drafts, trash, spam and expired transients, and reports the largest autoloaded options.
- Newwp\_set\_maintenance\_mode shows visitors a maintenance page while administrators and AI connections keep working.
- Newwp\_bulk\_update\_menu\_items changes many menu items in one call, and menu and custom CSS updates can check nothing changed since read.
- Newsv\_restore\_backup restores a SiteVault Pro backup after a preview, and sv\_get\_restore\_status follows its progress.
- Newwp\_create\_login\_link makes a one-time sign-in link to wp-admin for the connection's own administrator, valid for 60 seconds.
- Newwp\_get\_php\_errors lists recent PHP fatal errors with the plugin or theme they came from.
- NewGuardPress tools block and unblock IP addresses and read or change hardening settings, with a preview and undo.
- Newelementor\_replace\_text\_sitewide replaces text on every Elementor page, post and template in one call, with a preview and one undo.
- Newelementor\_get\_kit\_globals and elementor\_update\_kit\_global read and change the kit's global colours and fonts, with undo.
- Newrafp\_get\_period\_summary and rafp\_list\_affiliates report referrals, commission, visits and top affiliates for any dates.
- Newraif\_set\_bot\_policies sets Royal AI Firewall policies for many bots in one call, with per-bot results and one undo.
- Newwp\_security\_triage gives a read-only security checklist, and wp\_clone\_post\_as\_draft copies a post or page into a new draft.
- Newwp\_revoke\_preview\_links ends every preview link for a post.
- NewA sign-in self-check names any plugin that answers part of Royal MCP's sign-in and shows how to fix it.
- EnhancementElementor text, image, widget-setting and template tools work with Elementor 4 atomic widgets, and changes show at once.
- EnhancementUndo of the bulk Elementor widget-setting and find-and-replace tools keeps edits made since.
- EnhancementUndo of an Elementor page change is refused while the page has been edited since, and force: true restores it anyway.
- EnhancementUndo lasts 7 days for every tool, and each tool tells AI clients whether it can preview and how long its undo lasts.
- Enhancementwp\_get\_plugins and wp\_get\_themes show available updates with their requirements, and wp\_get\_site\_info shows a WordPress update.
- Enhancementwp\_create\_menu and wp\_create\_menu\_item return undo tokens, and menu reads include locations and link targets.
- EnhancementReferral records and fraud incidents filter by dates in the site timezone, and referral records can leave out personal details.
- EnhancementWith Royal Affiliate Pro 2.6.20 or later, the fraud scan runs its own checks and approved referrals can be paid during an open payout.
- Enhancementwcs\_cancel\_subscription can cancel at the end of the paid term.
- Enhancementwcs\_update\_next\_payment\_date reads dates in the site timezone and accepts dates up to 5 years ahead, before the subscription ends.
- EnhancementThe Royal plugins card shows a live line and licence state for each active Royal plugin, with activate and install links.
- EnhancementOther plugins' notices on Royal MCP screens fold into one row.
- EnhancementAn Elementor change that would remove markup an administrator saved is refused for users without the unfiltered HTML permission.
- EnhancementWooCommerce, Elementor template, comment, menu, custom CSS and preview link tools check the user's rights on each item.
- Enhancementwp\_get\_post and wp\_get\_page return the stored source only to users who can edit it.
- EnhancementOn multisite networks, Royal AI Firewall, LiteSpeed and W3 Total Cache tools need a network administrator.
- EnhancementCalls through the WordPress Abilities API are rate limited per user.
- EnhancementRoyal MCP Pro's own settings can never be opened to AI option writes.
- EnhancementDeleting all data on uninstall also removes each user's Royal MCP preferences.
- EnhancementTablePress CSV exports write cells that start with =, +, - or @ as plain text.
- FixMoving a subscription's next payment date works on WooCommerce Subscriptions stores.
- Fixwcs\_get\_subscriptions shows an empty value for dates a subscription does not have.
- Fixraif\_set\_bot\_policy keeps each bot's rate limit and paywall address.
- Fixgp\_get\_dashboard\_summary reports two-factor sign-in as on when it is turned on in GuardPress.
- FixMenu item titles, addresses and descriptions keep their backslashes.
- FixUndo of wp\_reorder\_menu\_items keeps nested items under their parents.
- FixRevoke all on Connected Clients asks for confirmation.
- FixSeveral read tools return their data through the Abilities API and the MCP Adapter.
- FixWooCommerce and Complianz tools say the plugin is not active when it is missing.
- FixWP-CLI changes to drafts-only mode and access levels are recorded in the activity log.

## [1.0.14.3](#v1-0-14-3)

October 23, 2026

- NewEndpoint profiles can lock the site API key or a connected AI client to one profile, whatever URL it connects with.
- NewComplianz integration with seven tools for the consent setup, cookies, banner texts and legal documents, with undo for text edits.
- NewThe audit log is part of WordPress's Export Personal Data and Erase Personal Data tools.
- NewPlugin developers can add their own tools to Royal MCP with two filters, described in the developer guide on royalplugins.com.
- EnhancementDeleting a user or erasing their personal data removes their IP, browser and account details from the audit log.
- EnhancementWooCommerce bulk price, stock, SKU and coupon tools accept only valid amounts, and generous coupon batches ask for confirmation.
- EnhancementBulk order status changes leave Refunded to WooCommerce, where the payment is refunded through the gateway.
- EnhancementRoyal Affiliate payouts, store credit, rates and broadcasts check amounts and recipients before anything changes.
- EnhancementBulk FormForge resends mail only the addresses set in the form, show the recipient domains first and stop at 500 emails a day.
- EnhancementThe bulk Redirection tools refuse to redirect the home page, sign-in, wp-admin or the REST API unless the call asks for it explicitly.
- EnhancementUndo checks the permission each tool itself needs, and a bulk change that stops partway can still be undone.
- EnhancementACF imports and clones create their own fields, and deleting a field removes only the values ACF saved for it.
- EnhancementElementor edits by users without the unfiltered HTML permission keep the rest of the page as it was.
- EnhancementTools added by other plugins follow read-only mode, drafts-only mode and each connection's access level.
- EnhancementRoyal MCP tools are listed on Royal MCP's own MCP Adapter server instead of the adapter's default server.
- Enhancementwp\_get\_plugins lists must-use plugins and drop-ins, and wp\_get\_users returns registration dates and capabilities granted beyond roles.
- EnhancementThe audit log records the visitor's IP behind Cloudflare or a proxy the site trusts, and undos made from admin screens.
- EnhancementThe audit signing key is stored encrypted in the database.
- EnhancementCSV exports keep spreadsheet formulas from running and hide undo tokens that can still be used.
- FixAI clients reach Royal MCP's own sign-in even when another plugin answers every OAuth discovery address on the site.
- FixSwitching Royal MCP off also stops Pro tools and calls through the WordPress Abilities API and the MCP Adapter.
- FixA new install shows its API key once on the settings page.
- FixThe IndexNow key is served as plain text so search engines accept it.
- FixRecent Operations shows who can undo another user's change instead of an Undo button that cannot work.
- FixAdmin pages no longer load fonts from Google.
- Action requiredIf a connection sends the API key in the X-Royal-MCP-API-Key header, switch it to Authorization: Bearer; the old header is deprecated.

## [1.0.14.2](#v1-0-14-2)

October 21, 2026

- EnhancementTurning a plugin on in Plugin Abilities turns on its read-only abilities, and abilities that can change the site are allowed one by one.
- EnhancementAbilities a plugin adds in an update stay off and are marked New until Plugin Abilities is saved again.
- EnhancementTools from other plugins' abilities are available to administrators only, and very large results are trimmed with a note.
- EnhancementWooCommerce, Subscriptions, widget, find and replace, ACF, Royal Affiliate and publishing tools follow each user's WordPress permissions for every item they change.
- FixPasswords and API keys in results from other plugins' abilities are now hidden, the same as in Royal MCP's own tools.
- FixMonsterInsights summary, top pages, traffic sources and search queries tools now return reports when MonsterInsights is connected.
- FixPro's Divi tools accept pages whose Code modules contain line breaks.
- FixThe renew link in the expired-license message now opens My Account.
- FixThe dashboard's count of tools with undo now includes every core tool.
- FixSiteVault failed-backup details no longer show a malformed error.

## [1.0.14.1](#v1-0-14-1)

October 19, 2026

- NewTablePress integration with six tools to list, read, create, copy and export tables and change cells, with undo.
- NewCode Snippets integration with five tools to list, read, deactivate and rename snippets.
- NewWPCode integration with three read-only tools for snippets, their code and their last error.
- NewSettings for who can connect AI clients and who can use tools from other MCP servers, both Administrators only by default.
- NewWooCommerce orders filter by date, after and before, in the site's timezone.
- NewPlugin Abilities turns on single abilities as well as whole plugins, such as only Rank Math's 404 log.
- EnhancementSites where editors connect AI clients should set Who can connect AI clients to Editors and above.
- EnhancementWooCommerce product, order, customer, variation and coupon lists page with totals, up to 100 per page.
- EnhancementWooCommerce products filter by IDs, SKU and stock status.
- EnhancementCredential settings with one-word names and credential ACF fields are hidden from AI clients and from the Audit Log.
- EnhancementThe Allowlisted plugin options setting shows which listed names are blocked.
- EnhancementEvery tool checks the signed-in user's rights on each post, comment, term and template it reads or changes.
- EnhancementElementor display conditions, redirects, full-site backups and whole-site cache clears are administrator actions.
- EnhancementUndo checks that the user can still make the change.
- EnhancementThe OAuth Settings page shows who can connect AI clients next to the token lifetimes.
- FixThe WooCommerce coupon list pages through every coupon in the store.
- FixDivi 4 pages whose Code modules contain line breaks can be cloned, rewritten and validated.
- SecuritySearch returns only content the signed-in user may read; thanks to Vincent Cassiau (CyberVanguard).
- SecurityCloning an Elementor page or template checks the right to read the source and to publish the copy; thanks to Usama Arshad.

## [1.0.14](#v1-0-14)

October 15, 2026

- NewDrafts only setting lets AI clients create and edit drafts while refusing publishing, live pages and site settings, across every Pro tool.
- NewEach connected AI client and the API key can be given its own access level: Full, Read-only or Drafts only.
- NewRecent Operations has a Details view with the values before, after and now, and two tools give AI clients the same list.
- NewBlock editor tools read a page's blocks and insert, replace, move or delete single blocks, and read synced patterns, global styles and templates.
- NewPlugin Abilities screen turns other plugins' abilities, such as Rank Math's content analysis, into tools on your Royal MCP endpoint.
- NewA schema check tool finds duplicate articles, mismatched headlines and dates, missing authors and broken Rank Math schema on any page.
- NewA purge-and-verify tool clears one page from every active cache and confirms visitors see the update.
- NewThe rendered page check accepts CSS selectors and flags duplicate headings, duplicate tables of contents and leftover shortcodes.
- NewA Rank Math score tool returns a post's saved score and points to a fresh analysis.
- NewA licence status tool reports the licence of every Royal plugin on the site.
- NewA backup check tool confirms a SiteVault backup can be restored, including encrypted backups.
- NewA coexistence tool reports other MCP servers on the site and which plugin answers the shared sign-in addresses.
- NewA media tool finds files already in the library by address or content, and uploads can reuse them instead of adding a copy.
- NewThe settings page has ready-to-copy commands that connect Claude Code or Codex.
- EnhancementNew AI client connections sign in through Royal MCP's own address, so another MCP plugin cannot take them over.
- EnhancementPro tools behave the same through the MCP Adapter, Angie and the abilities API as on the Royal MCP endpoint.
- EnhancementNewly created posts and pages can be undone.
- EnhancementSiteVault tools report cloud sync state and the health of every storage provider.
- EnhancementThe bulk SEO audit counts the headings your theme adds to each page.
- EnhancementSearch and page listings can include drafts, and the term, category and menu tools accept slugs, any post type and any taxonomy.
- EnhancementSEO fields for Yoast, Rank Math and SEObolt are written through the SEO tool and read back after saving.
- EnhancementMedia details include file size, dimensions and a content fingerprint.
- EnhancementDeleting the plugin clears expired sessions, tokens and undo history on every site of a network.
- EnhancementWhen a renewal payment fails, Pro keeps working through a grace period and says until when.
- Enhancementsign-in responses say how long the refresh token lasts.
- FixIndexNow only submits pages that are public and indexable.
- FixChanging permalinks updates the server's rewrite rules on Apache sites.
- FixWrite and undo tools keep backslashes in content, meta and term values exactly.
- HousekeepingThe Outbound AI Provider settings section is removed.

## [1.0.13.5](#v1-0-13-5)

October 12, 2026

- NewDeleting the plugin keeps your settings, activity log and undo history unless you turn on "Delete all data when the plugin is deleted" in the settings.
- EnhancementThe Claude platform settings offer the Claude 5.5 models, with Sonnet 5.5 as the default.
- FixDeleting a post or page without force moves any post type to the trash, and refuses when the trash is not available.

## [1.0.13.4](#v1-0-13-4)

October 9, 2026

- NewChatGPT can hand a file from the conversation straight to the media upload tool.
- NewThe media upload tools can convert, resize and compress an image as it uploads, for example to a JPEG under 400 KB.
- EnhancementThe media upload tools accept PDFs and any other file type your site allows in its media library.
- EnhancementAn image whose file name has an unfamiliar extension, such as .jfif, is saved under its real image type.
- EnhancementThe audit log records uploads without storing the file contents or download links.
- FixDeactivating and reactivating the plugin with the same licence key no longer releases its licence seat.

## [1.0.13.3](#v1-0-13-3)

October 7, 2026

- NewWordfence integration with eight tools for security status, blocked IPs, failed logins, blocked requests and scans.
- NewLiteSpeed Cache integration with four tools for cache status, settings and purging.
- NewAI clients can read site info, the active theme, the tool catalog and connection health as resources.
- NewAI clients can revoke their own access when they disconnect.
- NewConnected Clients screen lists the AI clients signed in through OAuth and lets you revoke them one at a time or all at once.
- NewRead-only mode setting refuses every tool that changes the site while leaving all reads available.
- NewSite Health tests check permalinks, the discovery document, the Authorization header and the sign-in addresses.
- NewWP-CLI commands to check connection health, list connected clients and rotate the API key.
- NewCompanion plugins can run their own tools through Royal MCP Pro.
- EnhancementThe Revoke all active sessions button moved from the OAuth settings to the Connected Clients screen.
- EnhancementOption tool messages say where an administrator can allowlist an option.
- FixPreview links only open the draft they were created for.
- FixOption previews redact sensitive values.
- Fixnon-public taxonomies are listed only to users who can edit the post.
- FixPage checks stay on this site when a page redirects elsewhere.
- FixPost lists by ID follow the same visibility rules as other listings.
- FixPlugin settings reads accept plugin slugs only.
- FixThe OAuth sign-in notice recognises more shapes of another plugin's discovery document.
- FixA page or post published at /register or /token is shown to visitors.
- FixPost term reads and writes refuse a taxonomy that is not registered for the post type.
- Fixpassword-protected content is returned only to users who can edit the post.
- Fixpublish-and-promote reads the publish date in the site timezone.
- FixThe page-check rate limit counts calls, not redirect hops.
- FixConnection health no longer reports software versions.
- Fixread-only mode and endpoint profiles are enforced on sites running Advanced Custom Fields.
- FixLicense checks no longer run during visitor page loads.
- FixReinstalling the plugin from a downloaded zip keeps the signed-update check working.

## [1.0.13.2](#v1-0-13-2)

October 5, 2026

- Newseobolt\_get\_search\_performance returns Search Console clicks, impressions, top pages and position changes from SEObolt Pro.
- Newwp\_get\_posts can fetch up to 100 posts by ID in one call, optionally with their plain-text content.
- NewIntegration tools in the tool list now show whether their plugin is active on the site.
- Enhancementwp\_verify\_rendered\_page reports the robots meta tag, X-Robots-Tag header, redirect chain and certificate validity.
- Enhancementseo\_audit\_meta\_tags reports robots directives, hreflang alternates and structured data types.
- Enhancementwp\_prepare\_for\_launch in report-only mode now runs its SEO, link, speed and security checks.
- Enhancementwp\_audit\_seo\_bulk returns the title and description length limits it checks against.
- FixAll tools now agree on which SEO plugin is active and use SEObolt's own meta fields.
- Fixwp\_audit\_seo\_bulk reads All in One SEO's noindex setting correctly.
- Fixwp\_get\_themes returns each theme's slug.
- FixTool descriptions for solid\_list\_events, wp\_audit\_seo\_bulk and the Search Console push option now match what they do.
- FixThe WordPress dashboard and the Audit Log, Endpoint Profiles, OAuth and Protocol Insights pages load correctly for administrators.
- FixPost and page dates without a timezone are scheduled in the site's timezone.
- FixCreating a post or page that WordPress rejects now returns an error instead of a success message.

## [1.0.13.1](#v1-0-13-1)

October 4, 2026

- NewEvery tool now tells AI clients whether it only reads the site or can change it.
- NewBulk SEO updates preview every post, mark posts that would not change, and accept empty values to clear a field.
- NewUndo of a bulk SEO update leaves posts edited since then alone unless you ask to restore them anyway.
- NewThe SiteVault backup summary includes schedule health and the most recent failed backup.
- FixBulk SEO updates confirm every change was saved and report any post that was not updated.
- FixUndo always reverses your most recent change and keeps working after a license expires.
- FixSiteVault backup times and retention now match the site's own settings.
- FixLaunch tools no longer interrupt a SiteVault backup that is already running.
- FixMonthly maintenance reports in report-only mode now include their findings.
- FixUninstalling Royal MCP Pro no longer removes license data for other Royal plugins.
- FixOn multisite, Royal MCP Pro settings are available to network administrators only.
- FixSaving a post or page together with its featured image now runs other plugins' save routines once instead of twice.
- FixResetting OAuth state or clearing a settings field no longer empties the allowlisted options or turns off abilities.
- FixRoyal MCP's MCP Adapter server now registers when another plugin provides the MCP Adapter.

Show 39 earlier releases

## [1.0.13](#v1-0-13)

October 2, 2026

- NewRead the categories, tags and custom terms assigned to any post or page, including drafts.
- NewAdmin notice when another plugin is answering OAuth sign-in for the site.
- FixOAuth sign-in now works across ChatGPT, Claude Code, Cursor and VS Code connectors.
- FixPreview links now open draft pages and custom post types.
- FixOptions added under Allowlisted plugin options can now be read and written over MCP.

## [1.0.12.2](#v1-0-12-2)

- FixChatGPT connectors can now complete OAuth setup against the MCP endpoint.
- FixAdmin actions on multisite now require network-scope authority rather than only sub-site admin.

## [1.0.12.1](#v1-0-12-1)

September 27, 2026

- FixSmall polish across template listing, log tail readout, plugin inventory shape, and post/term counts.

## [1.0.12](#v1-0-12)

September 25, 2026

- FixMCP client responses now include every field required by the modern protocol so newer Claude, ChatGPT, and Perplexity connectors handshake cleanly.
- HousekeepingCleanup and minor bug fixes.

## [1.0.11.2](#v1-0-11-2)

September 22, 2026

- Fix`tools/list`, `prompts/list`, and `resources/list` responses now conform to the modern-era MCP schema for connectors that require the newer wire shape.

## [1.0.11.1](#v1-0-11-1)

- NewProtocol Insights admin page shows per-protocol-version request volume, top MCP clients, and method-call frequency in weekly rollups.
- NewOAuth authorization responses include the `iss` parameter per RFC 9207.
- NewProtected Resource Metadata is now also served at the RFC 9728 path-suffixed URL for the MCP endpoint.
- EnhancementTool responses tag successful envelopes with `resultType` for downstream observability.
- EnhancementServer accepts and logs the `Mcp-Method` and `Mcp-Name` request headers for client-side tracing.
- EnhancementOAuth discovery advertises the wp-json fallback URLs directly in the server card and 401 responses.
- EnhancementTimestamp fields in ForgeCache, UpdraftPlus, and undo-envelope responses now use ISO 8601 UTC format on the wire.
- EnhancementWebMCP bridge status badge on the settings page is silent unless a bridge is actively detected.
- Fix`server/discover` response now conforms to the modern-era MCP schema for connectors that require the newer wire shape.
- FixEmpty plugin-setting values return as empty in tool responses so callers can distinguish unconfigured fields from set-but-redacted ones.
- HousekeepingProtocol-usage rollups are pruned by the daily maintenance cron.

## [1.0.11](#v1-0-11)

- NewTwelve Royal Affiliate Pro workflow tools for campaigns, landing pages, tag assignment, commission rates, store credit, broadcasts, monthly reports, and fraud scans.
- EnhancementThe Royal Affiliate Pro activity log tool gains action, user, date-range, and search filters when Royal Affiliate Pro 2.6.15 or later is installed.
- FixAI Safety Overview dashboard widget now detects SiteVault Pro alongside SiteVault Free.

## [1.0.10.1](#v1-0-10-1)

September 15, 2026

- NewOptional "Require approval before new AI clients can connect" setting with a Pending Clients admin page for reviewing dynamically-registered OAuth clients.
- NewOAuth discovery advertises `client_id_metadata_document` (CIMD) support.
- NewOAuth discovery is also served under `/wp-json/royal-mcp/v1/.well-known/` for managed hosts that reserve the root `.well-known/` prefix.
- NewAdmin notice detects when the web server strips Authorization headers, with copy-paste Apache and nginx fix guidance.
- New`server/discover` handler for MCP clients using the newer protocol era.
- NewTwitter card fields on `wp_update_seo_meta` for Yoast SEO, Rank Math, SEOPress, and SEObolt.
- New`fc_get_rum_stats` MCP tool exposes ForgeCache real-user Core Web Vitals data.
- NewSetting to disable the WordPress Abilities API bridge.
- EnhancementTool descriptions include the site host so multi-connector setups can disambiguate identically-named tools.
- Enhancement`wp_replace_in_post` supports targeted edits on the WordPress custom\_css post.
- Enhancement`initialize` response advertises resources and prompts capabilities alongside tools.
- FixCoupon listing via MCP no longer errors on Pro sites.
- Fix`wp_update_widget` and other tools with nested object schemas now validate under stricter MCP clients.
- HousekeepingStale OAuth clients are pruned by the daily maintenance cron.

## [1.0.10](#v1-0-10)

September 13, 2026

- NewForward-compatible MCP protocol handling — next-revision response fields, OAuth issuer identifier, request headers, and a server-discovery endpoint are now surfaced.
- NewWeekly rollup of inbound MCP client names, protocol versions, and method calls per site.
- NewProtocol Insights admin dashboard shows which MCP clients and spec versions hit your site over rolling weekly windows.

## [1.0.9.2](#v1-0-9-2)

September 11, 2026

- NewSiteVault Pro backup health surfaces as a live dashboard summary for connected orchestrators.
- NewGuardPress security posture surfaces as a live dashboard summary for connected orchestrators.
- FixThe Pro undo tool now accepts recovery tokens issued by the core plugin's undo tool, so undo works seamlessly across both surfaces.

## [1.0.9.1](#v1-0-9-1)

September 10, 2026

- NewBrowser-based AI agents can now use Royal MCP Pro tools via any WebMCP-compatible bridge, using the visitor's existing WordPress login.
- NewBrowser Agents section on the settings page toggles the WebMCP path on or off.
- NewPublishes a machine-readable server card and skills index so Agent Readiness scanners auto-detect the site.
- EnhancementRate-limit responses now include the seconds until retry so MCP clients know exactly when to try again.
- EnhancementAuthenticated requests get a higher rate-limit ceiling so legitimate bulk operations no longer trip the anti-abuse limit.

## [1.0.9](#v1-0-9)

- NewElementor design token authoring for global variables and reusable classes across the whole site.
- NewBulk Elementor element operations, up to 50 changes in one atomic call with full rollback.
- NewJSON-driven Elementor section composition for agent-authored page structures.
- NewWooCommerce grouped-product children as first-class read/write relationships.
- NewSix Royal Affiliate Pro observability tools covering campaigns, creatives, payouts, and activity log.
- NewWhat's New modal surfaces release milestones and the Pro roadmap directly in the admin.
- NewRoyal MCP Pro now ships over 300 total MCP tools across your WordPress stack.

## [1.0.8.2](#v1-0-8-2)

September 4, 2026

- HousekeepingAligned bundled core plugin with Royal MCP 1.5.0 (multi-version protocol negotiation, stateless transport, Elementor discovery tools, Activity Log entries, Perfmatters notice).

## [1.0.8.1](#v1-0-8-1)

- FixACF integration tools now expose their full input details to MCP clients even when Advanced Custom Fields is not installed.
- FixEvery tool now advertises complete input and response metadata for improved compatibility with strict MCP clients like ChatGPT.

## [1.0.8](#v1-0-8)

September 2, 2026

- Newseo\_optimize\_for\_launch composer runs SEO audit, meta fixes, schema check, 301 redirects, IndexNow, GSC, and cache purge in one call with full rollback.
- Newwp\_publish\_and\_promote\_pro accepts an optional seo\_automation arg block for auto meta, schema, IndexNow, and Google Search Console push.

## [1.0.7.3](#v1-0-7-3)

September 1, 2026

- HousekeepingAligned bundled core plugin with Royal MCP 1.4.45 (adds Solid Security, Contact Form 7, MonsterInsights, W3 Total Cache, Duplicator, and BuddyPress integration tools).

## [1.0.7.2](#v1-0-7-2)

- Fixformforge\_get\_entry now returns created\_at using the same timestamp format as other Pro read tools.

## [1.0.7.1](#v1-0-7-1)

August 28, 2026

- EnhancementRenamed the Pro-tier Elementor apply-template tool; see support docs for the updated tool name.
- HousekeepingAligned bundled core plugin with Royal MCP 1.4.44 (adds Yoast SEO, UpdraftPlus, and WPForms integration tools, plus a new in-plugin Help page).

## [1.0.7](#v1-0-7)

- NewFour ACF field group tools — create, clone, update, delete a field group end-to-end from Claude.
- NewTwo ACF JSON bridge tools — import a field group from JSON and export an existing group as JSON.
- NewFour ACF field-level tools — add a field, update a field definition, delete a field, and reorder fields inside a group.
- NewTwo ACF introspection tools — read a full field group configuration and list every registered field type.
- Newacf\_create\_options\_page registers site-wide settings surfaces (requires ACF Pro).
- Newacf\_register\_post\_type registers a custom post type using ACF Pro's built-in CPT UI (requires ACF Pro 6.1 or later).
- Newacf\_register\_block registers an ACF Block that renders via an existing template file (requires ACF Pro).

## [1.0.6.2](#v1-0-6-2)

August 24, 2026

- HousekeepingAligned bundled core plugin with Royal MCP 1.4.43.

## [1.0.6.1](#v1-0-6-1)

August 23, 2026

- FixCloned page content populates correctly, image-alt sync walks nested widgets, and every Elementor write emits a 72h undo token.
- FixTool input schemas use anyOf for union fields so ChatGPT Developer Mode connectors can complete action discovery.
- FixWrite tool responses surface created resource URLs and affected IDs in the response text so AI clients skip a follow-up call.

## [1.0.6](#v1-0-6)

- NewSOC2-ready audit trail — cryptographically signed JSON exports of the activity log with a standalone offline verifier script.
- NewLegal Hold flag on audit rows prevents retention-cron deletion while an investigation is open, with an admin-configurable release capability.
- NewGDPR field redaction with a companion event log preserving chain-of-custody evidence.
- NewWp royal-mcp-pro audit-export CLI command produces signed exports directly from wp-cli.
- NewEndpoint Profile templates seed reusable per-client configurations with controlled override slots.
- NewEndpoint Profile version pinning freezes the effective profile shape per AI session so mid-flight edits don't affect running conversations.
- EnhancementActivity log rows capture client IP address, user agent, and actor role snapshot for compliance reviews.

## [1.0.5.2](#v1-0-5-2)

August 17, 2026

- Fixwp\_audit\_seo\_bulk now honors the post\_ids filter and audits only the requested posts.
- Fixwp\_add\_post\_terms and wp\_create\_post accept both a single value and an array for terms and categories.
- FixPost titles, search terms, alt text, and other user-authored fields preserve tokens like %category% and %author% verbatim when writing.

## [1.0.5.1](#v1-0-5-1)

August 17, 2026

- Fixwp\_update\_permalink\_structure preserves permalink tokens like %category% and %author% when writing the structure.

## [1.0.5](#v1-0-5)

August 16, 2026

- NewThree FormForge Pro read tools: get entry, get analytics, and paginated entry export.
- NewFormForge Pro bulk delete entries tool with undo protection.
- NewTwo FormForge Pro form creation tools with undo: duplicate form and create from template.
- NewFormForge Pro bulk resend notifications tool for re-firing entry email notifications.
- NewThree Royal Affiliate Pro read tools: affiliate performance snapshot, referral records query, and fraud incidents query.
- NewTwo Royal Affiliate Pro bulk status tools with undo: approve affiliates and update referral status.
- NewTwo Royal Affiliate Pro bulk generation tools with undo: generate payouts and generate WooCommerce coupons.
- NewAI Safety Overview dashboard widget summarizes reversibility coverage, active undo window, and companion plugin status at a glance.
- NewRecent Operations admin page lists every pending undo token with a one-click Undo action per row.
- EnhancementAudit Log now includes a Royal AI Firewall cross-link for at-a-glance AI activity across surfaces.
- EnhancementStandalone Royal MCP Free notice now recommends deleting the standalone Free plugin instead of deactivating it.

## [1.0.4.2](#v1-0-4-2)

August 14, 2026

- FixPlugin update notifications now clear correctly on the Dashboard → Updates page after a successful update.

## [1.0.4.1](#v1-0-4-1)

August 13, 2026

- Enhancementwcs\_get\_subscriptions accepts next\_payment\_after and next\_payment\_before to filter subscriptions by upcoming renewal date range.

## [1.0.4](#v1-0-4)

August 13, 2026

- NewFour bulk WooCommerce coupon tools — create, update, expire (by date), delete.
- NewFive WooCommerce Subscriptions lifecycle tools — list, pause, resume, cancel, shift next payment date.
- NewBulk price changes for WooCommerce Subscriptions products with a warning that existing subscribers stay on their current pricing.
- EnhancementCoupon tools recognize WooCommerce Subscriptions discount types when active, plus the "active for X payments" subscription-length field.
- EnhancementElementor atomic widgets return a clear "not yet supported" error on every write handler.
- EnhancementPlugin icons and banners render on Dashboard > Updates.

## [1.0.3.4](#v1-0-3-4)

August 12, 2026

- Fixseo\_audit\_meta\_tags now counts characters instead of bytes so titles and descriptions containing non-ASCII content are measured correctly.

## [1.0.3.3](#v1-0-3-3)

August 12, 2026

- EnhancementStandalone free plugin notice now recommends deactivation instead of removal to preserve shared authentication data.
- Fixwp\_audit\_seo\_bulk now measures rendered SEO titles and descriptions as served — resolving template variables and site defaults across Yoast, Rank Math, AIOSEO, SEOPress, and SEObolt.
- FixSEObolt detection now correctly reflects the actual plugin activation state rather than lingering constants from a prior load.

## [1.0.3.2](#v1-0-3-2)

August 11, 2026

- FixMissing activity log table and default settings are now created automatically on first load.

## [1.0.3.1](#v1-0-3-1)

August 11, 2026

- FixPHP warnings on every page load are resolved.

## [1.0.3](#v1-0-3)

August 11, 2026

- NewDivi 5 scaffold tool now first-class-supports post-content and blog modules for Theme Builder body templates and category archive listings.
- NewBulk find and replace now supports Customizer CSS entries and reports unreachable post types instead of silently returning zero matches.
- NewEvery write tool re-reads modified fields after the write and returns the actual saved values.
- NewUndo tokens now cover wp\_delete\_post, wp\_delete\_term, and wp\_delete\_menu\_item, restoring deleted objects within 72 hours via mcp\_undo\_last\_operation.
- Newwp\_update\_post preserves the WooCommerce product\_type on generic post updates.
- Newwc\_get\_order returns fee\_lines, shipping\_lines, and the raw payment method ID for full write-verification.
- Newwp\_get\_seo\_meta and wp\_update\_seo\_meta support AIOSEO and SEObolt alongside Yoast and Rank Math.
- Newwp\_get\_widgets returns widget instance content and parsed block markup for before-and-after diffs.
- NewOAuth endpoint paths are filterable via royal\_mcp\_oauth\_rewrite\_paths.
- NewAdmin notice detects when a published page shadows an OAuth endpoint.
- EnhancementMore core WordPress write tools now emit undo tokens and canonical response envelopes.
- EnhancementActivity log now records content-length before and after for post content writes so audit rows can distinguish the tool from later edits.
- EnhancementThe Divi migration prep tool is now available under a clearer name that matches what it actually does; the previous name is kept as a deprecated alias.
- EnhancementBulk find and replace now auto-purges ForgeCache after successful writes and reports the outcome in the response.
- EnhancementThe publish-and-promote composer now auto-purges ForgeCache as its final step and records the outcome in the step ledger.
- EnhancementThe publish-and-promote composer now queues a SiteVault backup as its pre-flight step when SiteVault is active, replacing the prior manual-invocation note.
- EnhancementActivity log records the Divi format on Divi post writes so admins can spot which rows touched Divi 5 content.
- Enhancementwp\_get\_posts and wp\_count\_posts accept non-public post types when the caller has edit capability.
- EnhancementOption writes require opt-in to the read allowlist first; admin\_email, default\_role, and mailserver\_\* are permanently denylisted.
- EnhancementJSON-RPC envelope now re-forces "2.0" against edge-layer transformations.
- EnhancementVerified compatibility with WordPress 7.1.
- EnhancementDivi 4 shortcode validation errors now include the offending shortcode name, byte offset, and surrounding excerpt so callers can locate the failing tag in one round-trip.
- EnhancementSupport link in the admin chrome now points to the troubleshooting entry article so customers hitting problems land somewhere actionable.
- Fixelementor\_replace\_text is now multi-byte and case-insensitive.
- Fixdivi\_clone\_page, divi\_replace\_image, and divi\_import\_template now accept Divi 4 shortcodes written in the self-closing form used by image, divider, and fullwidth\_header modules.
- FixChatGPT setup guide in Settings now reflects the current ChatGPT UI naming (Plugins).

## [1.0.2.3](#v1-0-2-3)

August 9, 2026

- NewUndo can be called with no arguments to reverse the last operation.
- NewMedia library queries accept pagination and alt-text filters.
- FixUndo tokens are returned in tool responses.
- FixSEO audit sees images and headings inside galleries and page-builder modules.

## [1.0.2.2](#v1-0-2-2)

- Newroyal\_mcp\_connection\_health response includes standalone\_free\_present, standalone\_free\_active, standalone\_free\_version, and vendored\_free\_version fields so callers can distinguish which Free codebase is serving requests. New: Admin notice surfaces when the standalone Royal MCP Free plugin is installed but inactive alongside Royal MCP Pro, recommending removal to avoid load-order and double-registration risk.

## [1.0.2.1](#v1-0-2-1)

- FixTool responses now surface undo tokens, commit tokens, and step notes in the text summary. Fix: SiteVault and ForgeCache detection recognizes both Free and Pro editions in the wp\_publish\_and\_promote\_pro composer. Improved: divi5\_scaffold\_block validates module type, builder version, and content shape before emitting markup. Improved: divi5\_scaffold\_block returns a clean error on sites without Divi installed unless the force flag is passed. Improved: wp\_audit\_seo\_bulk defaults to published posts and offers an include\_drafts opt-in for pre-publish audits. Improved: The active-profile notice tool returns a metadata envelope instead of a refusal when invoked. Improved: wp\_publish\_and\_promote\_pro warns when status defaults to publish so callers can pass status:"draft" explicitly. Fix: wp\_audit\_seo\_bulk summary line uses correct singular and plural nouns for the audited post type.

## [1.0.2](#v1-0-2)

August 7, 2026

- Newdivi5\_scaffold\_block tool emits ready-to-write Divi 5 block markup for a module in a single call. New: royal\_mcp\_pro\_oauth\_role\_ttl\_policy filter flips multi-role OAuth TTL from longest-wins to shortest-wins. New: Custom-seconds input in the per-role OAuth TTL admin UI. New: count\_decorative\_alts option on wp\_audit\_seo\_bulk separates decorative-image markers from missing-alt issues. Improved: SEO Suite tools now recognize SEObolt alongside Yoast, Rank Math, SEOPress, and AIOSEO. Improved: wp\_publish\_and\_promote\_pro composer routes SEO meta to SEOPress in addition to the other four detected plugins. Improved: Widget bulk-replace case-insensitive matching handles accented characters and unicode case pairs. Improved: AIOSEO bulk-update seeds a table row automatically for posts that AIOSEO has not previously touched. Improved: Divi tool descriptions clarify that Divi 5 modules can be authored programmatically. Fix: Cross-plugin composer writes SEObolt meta to the correct keys.

## [1.0.1](#v1-0-1)

August 4, 2026

- FixPro admin pages now require a license key before they can be viewed or acted on.

## [1.0.0](#v1-0-0)

- Initial release.

## Get each release as it ships

Every plan includes updates for as long as your licence is active.

[See Pro pricing](https://royalplugins.com/royal-mcp-pro/pricing/)
[Read the docs](https://royalplugins.com/support/royal-mcp-pro/)