Purpose-built tools vs AI-written code
Royal MCP vs Novamira
Novamira gives the AI direct PHP, WP-CLI and file access, and is built for development and staging sites. Here’s how it compares with Royal MCP for work on live client sites.
| Numbers that decide it | Royal MCP | Novamira |
|---|---|---|
| Price | Free plugin $0 · Pro $79/yr (1 site), $249/yr (5), $999/yr (100) | Free for unlimited sites · Pro €69/yr (3 sites), €149/yr (1,000), €299 lifetime |
| How the AI works | Purpose-built tools with fixed inputs and permission checks | Runs PHP, WP-CLI and file commands the AI writes |
| Intended for | Live client sites | “For dev and staging environments. With backups. Always.” (Novamira) |
| Undo | Free: 72 hours on tracked changes · Pro: up to 7 days | None; changes don’t roll back |
| Audit log | Every write, always on, hash-chained (Pro) | Not documented |
| Who can connect | Any user you authorize, limited by their WordPress role | Administrators only |
| Where you get it | WordPress.org (10,000+ installs) | ZIP download from its site; open source on GitHub |
Data pulled: October 2026
Novamira lets the AI run any code, on sites that have backups. Royal MCP gives the AI purpose-built tools with undo and an audit log, so it can work on live client sites.
AT A GLANCE
The Differences That Matter
Live sites
vs Dev & staging
Built for
7 days
vs None
Undo
Always on
vs Not documented
Audit log
Any role
vs Admins only
Who can connect
1 switch
vs Not a security feature
Read-only mode
$0
vs €0
Free plugin price
HONEST FIT-MAP
When to Pick Which
Both ship real capability. Here's how to know which one fits your sites.
Pick Novamira if...
You build on dev and staging sites
- You want the AI to run any PHP, WP-CLI or file command on a development or staging site that has backups
- You want free use on unlimited sites, or €149 a year for up to 1,000
- You want an open-source (AGPL) tool you can read and change
- You build with Bricks, Oxygen, Breakdance or WPBakery (Pro)
- You’re a developer who reviews the code the AI runs
Pick Royal MCP Pro if...
You let AI work on live client sites
- Every action is a purpose-built tool with fixed inputs and permission checks, so the AI never runs code it wrote itself
- Every destructive change returns an undo token that stays valid for up to 7 days, and every write lands in a hash-chained audit log
- Teammates and clients connect with their own WordPress role instead of an administrator account
- You want safety on by default: one read-only switch for every AI client, drafts-only mode, and per-connection tool lists
- You run WooCommerce stores and want 40 store tools, with bulk changes you can preview before they commit
- You want a plugin listed on WordPress.org with 10,000+ active installs
APPROACH
Approach & Connection
| Capability | Royal MCP | Novamira |
|---|---|---|
| How the AI makes changes | Named tools with fixed inputs and permission checks | Runs PHP, WP-CLI and file commands the AI writes; Pro adds read-only abilities |
| Where the MCP server runs | On your WordPress site | On your WordPress site, with no hosted proxy |
| OAuth 2.1 sign-in | Or an API key | Plus device login and Application Passwords |
| Who can connect | Any user you authorize, limited by their WordPress role | Administrators only |
| AI clients | Claude, ChatGPT, Cursor and other MCP clients | Claude, ChatGPT, Codex, Cursor, Gemini CLI and many more through its CLI |
Data pulled: October 2026
COVERAGE
Content, Store & Builders
| Capability | Royal MCP | Novamira |
|---|---|---|
| Posts, pages, media, users | Dedicated tools | Through PHP and WP-CLI |
| WooCommerce | 29 free tools, 11 bulk tools in Pro | Through PHP; structured WooCommerce knowledge in Pro |
| Divi | Divi 4 and Divi 5, 15 tools | Divi 5 (Pro) |
| Elementor | 28 tools | Pro |
| Bricks, Oxygen, Breakdance, WPBakery | Not offered | Pro |
| SEO plugins (Yoast, Rank Math, AIOSEO, SEOPress) | Pro | |
| ACF | ACF Setup Suite, 15 tools (Pro) | Pro |
| Run any PHP, WP-CLI or file command | Not offered, by design | Free |
Data pulled: October 2026
SAFETY LAYER
Safety Layer
| Capability | Royal MCP | Novamira |
|---|---|---|
| Undo | Free: 72 hours on tracked changes. Pro: 72–168 hours on every destructive Pro tool | None; Novamira says changes are real and don’t roll back |
| Audit log | Every write, always on, hash-chained (Pro) | Not documented |
| Site-wide read-only mode | One switch for every AI client | Read Mode (Pro); Novamira says it is not a security feature |
| Keep AI changes as drafts | Drafts-only mode | Not documented |
| Protection for generated code | Not needed; the AI doesn’t run code it writes | Sandbox for PHP files it creates; code run directly skips the sandbox |
| Per-connection tool scoping | Custom Endpoint Profiles (Pro) | |
| Use on production sites | Built for live sites | Novamira recommends dev and staging only, with backups |
Data pulled: October 2026
PRICING
Pricing & Project
| Item | Royal MCP | Novamira |
|---|---|---|
| Price | Free plugin $0; Pro $79/yr (1 site), $249/yr (5 sites), $999/yr (100 sites) | Free for unlimited sites; Pro €69/yr (3 sites), €149/yr (1,000 sites), €299 lifetime |
| Where you get it | WordPress.org, plus the Pro download | ZIP from its site; source on GitHub (733 stars) |
| License | GPL | AGPL |
| Who builds it | Royal Plugins | Dynamic.ooo |
| Refund window (Pro) | 30 days | 30 days, not on renewals |
Data pulled: October 2026
Letting AI work on live client sites?
Royal MCP gives the AI purpose-built tools with permission checks, undo for up to 7 days and a hash-chained audit log. Try Royal MCP Free from WordPress.org, or start Pro at $79/yr.