# Royal MCP Pro

**Production-grade MCP for WordPress. Undo tokens, audit trail, deep integrations.**

Royal MCP Pro extends the free [Royal MCP](https://royalplugins.com/royal-mcp/) plugin with the safety infrastructure and integration coverage that agencies and shops running AI agents on live WordPress sites need in production.

- Product page: <https://royalplugins.com/royal-mcp-pro/>
- Pricing: <https://royalplugins.com/royal-mcp-pro/pricing/>
- Product manifest: <https://royalplugins.com/mcp-manifest.json>

---

## Royal MCP Pro and Royally

Royal MCP Pro is the plugin on each WordPress site. Royally is the hosted side that looks after all your client sites in one place: backups, updates, security, approvals and every change an AI makes, with undo. Royal MCP Pro comes with every Royally plan: Solo ($89 a year or $9 a month, 3 sites), Freelancer ($249 or $24, 10 sites), Studio ($390 or $39, 50 sites) and Agency ($790 or $79, 250 sites); Enterprise covers more than 250 sites. Plans differ only in sites and team seats, and client portal access is unlimited on every plan. An existing Royal MCP Pro licence includes a Royally plan.

- Video: [Royal MCP Pro & Royally Cloud Launch](https://www.youtube.com/watch?v=iFqHYTLchnk), the plugin on each site and the guardrails in the cloud, shown in five minutes.

## Inside Royal MCP Pro

The admin screens shown on the product page:

- **Dashboard:** your MCP URL with setup steps for Claude, ChatGPT, Claude Code, Codex, Cursor and VS Code, the tools each AI client gets, connected clients, safety mode, licence, what needs attention, recent AI activity and the Royal plugins on the site.
- **Managed by Royally:** when Royally manages a site, every other connection can only read and only Royally can change the AI permissions. Shows what each connection can do, the settings Royally may change, and a PHP error record.
- **Audit Log:** every MCP tool call with tool name, user, status and undo state, filterable and exportable as CSV.
- **Protocol Insights:** weekly MCP request volume, unique clients, protocol versions, top clients and method calls.
- **Recent Operations:** destructive Pro tool calls still inside the undo window, each with an Undo button.
- **Custom Endpoint Profiles:** scoped tool sets with their own endpoint URLs, such as a content writer or a read-only SEO auditor.
- **Plugin Abilities:** other plugins' WordPress abilities offered as tools, a whole plugin or one ability at a time.
- **Pending Client Approval:** new AI clients wait for approval before they can connect.
- **Per-Role OAuth TTL:** access-token lifetime set per WordPress role.

---

## What Pro adds over the free tier

### Reversibility & safety

- **Destructive-write undo tokens.** Every irreversible operation returns an undo token with up to 168h (7-day) retention. Redo/undo the operation without manual database work.
- **Audit log with hash-chain integrity.** SOC2-ready tamper detection. Every tool call captured with pre/post state, request hash, and cryptographic chaining. WP-CLI verifier included.
- **Legal Hold flags** on audit rows for compliance-regulated workflows.
- **Snapshot integration** with SiteVault (pre-destructive-operation backups) and UpdraftPlus.

### 100+ Pro tools

- **WooCommerce full CRUD** — create/update products, variations, orders, coupons, customer records, subscription plans; bulk operations across all
- **Divi authoring** — create pages, clone templates, replace text/images, validate layouts, migrate shortcodes to blocks
- **Elementor authoring** — add/update/delete widgets, bulk-replace widget settings, clone pages, apply templates, manage global classes/variables, XML composition
- **ACF authoring** — create field groups, add fields, register post types, register blocks, import/export JSON
- **SEO plugin writes** — Yoast, Rank Math, AIOSEO, SEOPress bulk meta updates
- **Royal Plugins portfolio integrations** — GuardPress security operations, SiteVault backup control, ForgeCache purge, SEObolt reports, Royal Affiliates commissions, FormForge entry management, Royal AI Firewall bot policies
- **Third-party plugin integrations** — Wordfence, SolidSecurity, UpdraftPlus, W3 Total Cache, Redirection, WPForms, Contact Form 7, BuddyPress, Duplicator, MonsterInsights, Yoast Local SEO

### Reliability

- **Licensing SDK** with 10-second HTTP timeout to prevent hangs
- **Connection health diagnostics** — real-time report of registered tools, schemas, handlers, and OAuth state
- **Pre-tool tier gates** — tools that require Pro return a structured "requires_pro" envelope with upgrade guidance, never a silent failure

---

## Who this is for

- **Agencies running AI agents on client sites** — the undo token infrastructure + audit trail makes it safe to let Claude, ChatGPT, or Cursor make real changes to production WordPress
- **Shops publishing at volume** — WooCommerce full CRUD + Divi/Elementor authoring means an AI agent can execute complete product-launch or campaign workflows
- **Compliance-regulated teams** — SOC2 hash-chain audit log satisfies most "who did what" requirements for AI-driven changes
- **Solo developers running multiple client sites** — install Royal MCP Pro once per site and orchestrate all of them from a single AI client via connector switching

---

## Getting started

1. Choose a Royally plan at <https://royalplugins.com/royal-mcp-pro/pricing/>; Royal MCP Pro is included
2. Download the Pro plugin zip from [my.royalplugins.com](https://my.royalplugins.com/my-account/) after purchase
3. Upload via wp-admin → Plugins → Add New → Upload Plugin
4. Activate the license on the License tab under Royal MCP Pro → Dashboard

---

## Documentation

- [Free vs Pro comparison](https://royalplugins.com/royal-mcp-pro/free-vs-pro/)
- [Setup guide](https://royalplugins.com/support/royal-mcp/) — shared with the free plugin
- [Licensing](https://royalplugins.com/support/licensing/)
- [Product manifest](https://royalplugins.com/mcp-manifest.json) — machine-readable capability declaration
