Title: AEOLynx – AEO, GEO & AI SEO for WebMCP, LLMs.txt, Schema & Answer Engine Optimization
Author: N4nion
Published: November 8, 2026
Last modified: November 9, 2026
---
Search plugins
# AEOLynx – AEO, GEO & AI SEO for WebMCP, LLMs.txt, Schema & Answer Engine Optimization
By [N4nion](https://profiles.wordpress.org/n4nion/)
[Download](https://downloads.wordpress.org/plugin/aeolynx-for-webmcp.1.4.9.zip)
* [Details](https://wordpress.org/plugins/aeolynx-for-webmcp/#description)
* [Reviews](https://wordpress.org/plugins/aeolynx-for-webmcp/#reviews)
* [Installation](https://wordpress.org/plugins/aeolynx-for-webmcp/#installation)
* [Development](https://wordpress.org/plugins/aeolynx-for-webmcp/#developers)
[Support](https://wordpress.org/support/plugin/aeolynx-for-webmcp/)
## Description
**AEOLynx for WebMCP** is the complete, 100% free **Answer Engine Optimization (
AEO)**, **Generative Engine Optimization (GEO)**, **AI SEO**, and **WebMCP / Model
Context Protocol (MCP)** toolkit for WordPress. It equips your site with `/llms.
txt` and `/llms-full.txt`, clean **Markdown for AI agents**, connected **Schema.
org JSON-LD** (`FAQPage`, `SpeakableSpecification`, `Article`, WooCommerce `Product`&`
Offer`), six read-only **MCP server tools**, an **AI crawler access matrix**, and
a 24-check **Agent-Ready Audit**—running 100% on your own server with zero paywalls,
zero trialware, and zero telemetry.
When **ChatGPT Search, Perplexity, Claude, Google AI Overviews, Gemini, Microsoft
Copilot**, and **WebMCP** browser agents visit your WordPress site, they look for
machine-readable discovery manifests (`/.well-known/mcp.json`, `/llms.txt`), clean
semantic Markdown streams, verified entity graphs, and callable MCP tools. AEOLynx
ships every single layer in one lightweight, privacy-first plugin.
#### Works Alongside Yoast SEO, Rank Math, AIOSEO, SEOPress & WooCommerce
Already using **Yoast SEO, Rank Math, All in One SEO (AIOSEO), SEOPress, or The
SEO Framework**? Keep it! Classic SEO plugins optimize your site for traditional
blue links. **AEOLynx** adds the AI discovery, Answer Engine Optimization (AEO),
Generative Engine Optimization (GEO), `/llms.txt`, and WebMCP layer above them—with
granular schema toggles so you never output duplicate JSON-LD markup, zero frontend
bloat, and full **WooCommerce** compatibility.
#### Why Publishers, Stores & SEO Agencies Install AEOLynx
* **Win AI Citations & Position Zero (AEO & GEO)** — Make posts, pages, and WooCommerce
products directly citeable by ChatGPT, Perplexity, Claude, and Google AI Overviews
using Speakable markup, Answer-Gap FAQs, and clean Markdown content negotiation.
* **Automatic `/llms.txt` & `/llms-full.txt` Generator** — Publish a spec-compliant(
llmstxt.org) AI index of your posts, pages, and products with automatic revision
caching and a live dashboard preview.
* **Native WebMCP & Model Context Protocol (MCP) Server** — Expose 6 safe, read-
only MCP tools over WordPress REST (`/wp-json/aeolynx/v1/`) and W3C browser `
document.modelContext.registerTool` so AI agents can search your site, read articles,
and browse your product catalog without scraping brittle HTML.
* **Markdown for AI Agents (`Accept: text/markdown`)** — Serve token-efficient
Markdown with YAML frontmatter via `?format=markdown` or HTTP `Accept: text/markdown`
negotiation—hardened with `q`-value checks, `Vary: Accept`, and LiteSpeed/CDN
cache-poisoning protection.
* **24-Point AI Agent-Ready Audit & Edge Bot Verification** — Run a real local
diagnostic across 6 protocol groups (including probing your own site with a real`
GPTBot` user-agent to catch hidden CDN/WAF HTTP 403/429 blocks) and optionally
compare against Cloudflare’s `isitagentready.com` scanner.
* **100% Free & Unlocked Forever** — No “Pro-only” locked schema types, no monthly
SaaS subscriptions, and no artificial limits.
#### Answer Engine Optimization (AEO) X-Ray Scanner & Answer-Gap FAQ Injector
* **Page AEO X-Ray Score (0–100 & Grade A+ to C)** — Scan any post, page, or WooCommerce
product inside `wp-admin` across 5 weighted AEO pillars: AI Summary readiness,
structural hierarchy (`H2`/`H3`), entity density, `FAQPage` schema readiness,
and optimal token length.
* **Live Speakable Quote Preview** — See the exact lead sentences and definitions
that voice assistants and AI answer engines extract for `SpeakableSpecification`
citations.
* **Answer-Gap Question Finder & 1-Click FAQ Schema Injector** — Automatically
generate 4 high-intent conversational questions (`What is...`, `How to implement...`,`
Why is it important...`, `Key features...`), edit the answers inline, and inject
them directly into your post’s `FAQPage` JSON-LD schema with automatic duplicate
prevention.
* **Auto-FAQPage from Question Headings** — Any `H2` or `H3` heading ending with`?`
followed by a real answer paragraph (>= 40 chars) is automatically compiled into
valid `Schema.org/FAQPage` JSON-LD and appended to your AI Markdown stream.
#### Connected Schema.org JSON-LD Graph for AI SEO & WooCommerce
* **Unified `@graph` Architecture** — Outputs a clean, cross-referenced Schema.
org `@graph` linking `Organization` (or `Person`), `WebSite` (with Google-compatible`
SearchAction`), `WebPage` (with `SpeakableSpecification`), `BreadcrumbList`,
and `Article` (`BlogPosting`, `NewsArticle`, or `TechArticle` selectable per
post).
* **WooCommerce Product & Offer Schema** — When WooCommerce is active, product
pages automatically emit `Product` and `Offer` JSON-LD including SKU, price,
currency, and real-time stock availability (`InStock`, `OutOfStock`, `PreOrder`).
* **Offline Schema.org Graph Validator** — Click **Validate** in Settings to verify
required properties, `@id` integrity, and context across your live graph without
leaving WordPress.
#### Automatic /llms.txt, /llms-full.txt & Markdown for AI Agents
* **Dynamic `/llms.txt` & `/llms-full.txt` Index** — Automatically indexes your
latest posts, cornerstone pages, WooCommerce catalog, AI crawler guidelines,
and MCP endpoint documentation—cached automatically until content or settings
change.
* **Content Negotiation for AI Agents (`?format=markdown`)** — Converts WordPress
HTML (headings, bold/italic, links, lists, blockquotes, code blocks, images)
into clean Markdown with YAML frontmatter (`title`, `url`, `date`, `modified`,`
author`, `summary`, `site`, `mcp_endpoint`) plus a site-level Markdown index
on your homepage.
* **Frontend “Ask AI / Cite This Page” Bar & `[aeolynx_ai_summary]` Shortcode**—
Optional callout box displaying your Key Summary (TL;DR) with 1-click prompt
buttons for **ChatGPT, Perplexity, Claude**, and **View AI Markdown**, complete
with automatic background luminance detection for seamless light/dark theme adaptation.
#### WebMCP & Model Context Protocol (MCP) Server Tools & Discovery
* **Six Built-In Read-Only MCP Tools** —
1. `getSiteInfo` — Site title, description, language, theme, post/page counts,
and active AEO/MCP endpoint URLs.
2. `searchSite` — Keyword search across posts, pages, WooCommerce products, and
public custom post types (with intelligent recent-posts fallback when a query
returns zero matches).
3. `getFeaturedContent` — Recent articles with word count, estimated reading time,
categories, and AI summaries.
4. `getPostContent` — Full clean Markdown, AI summary, and structured FAQs fetched
by post ID, slug, or full URL.
5. `getSiteTaxonomies` — Categories and tags ordered by post count so AI agents
understand your topical authority hierarchy.
6. `getCatalogItems` — WooCommerce products (price, regular/sale price, currency,
SKU, stock status, categories) or graceful post/page fallback when WooCommerce
is inactive.
* **Complete `.well-known` Agent Discovery Suite** — Automatically serves:
- `/.well-known/mcp.json` (and `/.well-known/model-context-protocol.json`) —
MCP Server Card (`2024-11-05` spec).
- `/.well-known/api-catalog` (and `/.well-known/api-catalog.json`) — IETF RFC
9727 `application/linkset+json` API catalog.
- `/.well-known/agent-skills/index.json` & `/.well-known/agent-skills/aeolynx-
for-webmcp/SKILL.md` — Agent Skills discovery manifest and markdown runbook.
- `/.well-known/ai-catalog.json` (and `/.well-known/ard-manifest.json`) — Agentic
Resource Discovery (ARD v1.0) manifest.
- `/auth.md` (and `/.well-known/auth.md`) — Human- and machine-readable authentication
and rate-limit policy.
- **Five RFC 8288 HTTP `Link` Headers** — `rel="model-context-protocol"`, `rel
="mcp-server"`, `rel="llms-txt"`, `rel="api-catalog"`, and `rel="service-desc"`.
* **Interactive 2-Pane Agent Sandbox** — Test natural-language agent prompts or
run individual MCP tools with custom JSON arguments right inside `wp-admin`,
complete with latency metrics, cURL copy, and 1-click Postman v2.1 collection
export.
#### AI Crawler Control (robots.txt), Content Signals & Security
* **Per-Bot AI Crawler Matrix** — Independently Allow or Disallow **AI Search Bots**(`
OAI-SearchBot`, `ChatGPT-User`, `PerplexityBot`, `ClaudeBot`, `Google-Extended`)
vs. **AI Training Scrapers** (`GPTBot`, `CCBot`) in WordPress’s virtual `robots.
txt` using 1-click presets (“Allow Search, Block Training”).
* **Content Signals Declaration (`contentsignals.org`)** — Emit `Content-Signal:
ai-train=..., search=..., ai-input=...` directives in `robots.txt`.
* **Privacy-Safe Local AI Activity Log** — Track real crawler visits (`GPTBot`,`
ClaudeBot`, `PerplexityBot`, `OAI-SearchBot`, `Google-Extended`), MCP tool calls,`/
llms.txt` reads, and Markdown fetches locally in your WordPress database (capped
at 100 events; disable or clear anytime).
* **Optional SHA-256 API Key Auth & Atomic Rate Limiting** — Public discovery is
open by default, or require `X-WebMCP-Key` headers on `/wp-json/aeolynx/v1/*`
with up to 20 SHA-256 hashed keys and atomic dual-window (per-minute + per-hour)
rate limiting.
* **WP-CLI Support** — Automate audits, cache flushes, and status checks from the
terminal.
#### Privacy & Data Disclosure
* **Zero Telemetry** — Nothing is sent to the plugin author’s servers. Your activity
log and audit reports stay 100% inside your WordPress database.
* **Zero Remote Scripts or CDNs** — All JavaScript and CSS assets are bundled locally
in full compliance with WordPress.org Guideline 8.
* **One Optional External Service (Off by Default)** — If an administrator explicitly
enables “Allow external Cloudflare scan” and clicks “Verify via Cloudflare”,
only your public site URL is sent to `isitagentready.com` (Cloudflare’s free
public agent-readiness scanner).
Project & documentation: https://wikiofautomation.com/
### External services
This plugin connects to isitagentready.com (a free site-scanner operated by Cloudflare)
for one optional feature: verifying your site’s agent-readiness score with a third-
party audit.
* What it is used for: an optional “Verify via Cloudflare” button on the Agent
Audit admin screen. The feature is disabled by default and does nothing unless
an administrator enables it and clicks the button.
* What data is sent and when: only your site’s URL, sent once per click of the “
Verify via Cloudflare” button. No other data (no user data, no content, no credentials)
is transmitted.
* The service is provided by Cloudflare, Inc. Terms of use: https://www.cloudflare.
com/website-terms/ — Privacy policy: https://www.cloudflare.com/privacypolicy/
No other external services are used. All other plugin features run entirely on your
own server.
## Screenshots
[⌊Overview Cockpit & Live Radar Deep-Scan — Watch the 8-stage Agent-Ready radar
sweep run 24 live protocol probes (robots.txt, RFC 8288 Link headers, Markdown negotiation,.
well-known manifests, and real GPTBot edge reachability) alongside the live AI crawler
activity feed, sitewide health checklist, and /llms.txt Endpoint Inspector.⌉⌊Overview
Cockpit & Live Radar Deep-Scan — Watch the 8-stage Agent-Ready radar sweep run 24
live protocol probes (robots.txt, RFC 8288 Link headers, Markdown negotiation, .
well-known manifests, and real GPTBot edge reachability) alongside the live AI crawler
activity feed, sitewide health checklist, and /llms.txt Endpoint Inspector.⌉[
**Overview Cockpit & Live Radar Deep-Scan** — Watch the 8-stage Agent-Ready radar
sweep run 24 live protocol probes (`robots.txt`, RFC 8288 `Link` headers, Markdown
negotiation, `.well-known` manifests, and real `GPTBot` edge reachability) alongside
the live AI crawler activity feed, sitewide health checklist, and `/llms.txt` Endpoint
Inspector.
[⌊Overview Dashboard & 60-Second Quick-Start — View your unified Agent-Ready Audit
score gauge, 60-second onboarding actions, real-time counters (MCP tool calls, Markdown
reads, discovery reads, AI bot visits, X-Ray audits), and live event stream (/.well-
known/api-catalog, /.well-known/mcp.json, /llms.txt, /auth.md).⌉⌊Overview Dashboard&
60-Second Quick-Start — View your unified Agent-Ready Audit score gauge, 60-second
onboarding actions, real-time counters (MCP tool calls, Markdown reads, discovery
reads, AI bot visits, X-Ray audits), and live event stream (/.well-known/api-catalog,/.
well-known/mcp.json, /llms.txt, /auth.md).⌉[
**Overview Dashboard & 60-Second Quick-Start** — View your unified Agent-Ready Audit
score gauge, 60-second onboarding actions, real-time counters (MCP tool calls, Markdown
reads, discovery reads, AI bot visits, X-Ray audits), and live event stream (`/.
well-known/api-catalog`, `/.well-known/mcp.json`, `/llms.txt`, `/auth.md`).
[⌊24-Point Agent-Ready Audit (Cloudflare isitagentready.com Standard) — Inspect
24 live checks grouped into Discoverability, Content Accessibility (Markdown for
Agents), Bot Access Control (Content Signals), API/MCP/Skill Discovery (RFC 9727,
MCP Server Card, Agent Skills, WebMCP, ARD), and Public Bot Access (BotUaReachability),
with optional 1-click Cloudflare verification.⌉⌊24-Point Agent-Ready Audit (Cloudflare
isitagentready.com Standard) — Inspect 24 live checks grouped into Discoverability,
Content Accessibility (Markdown for Agents), Bot Access Control (Content Signals),
API/MCP/Skill Discovery (RFC 9727, MCP Server Card, Agent Skills, WebMCP, ARD),
and Public Bot Access (BotUaReachability), with optional 1-click Cloudflare verification
.⌉[
**24-Point Agent-Ready Audit (Cloudflare `isitagentready.com` Standard)** — Inspect
24 live checks grouped into Discoverability, Content Accessibility (`Markdown for
Agents`), Bot Access Control (`Content Signals`), API/MCP/Skill Discovery (`RFC
9727`, `MCP Server Card`, `Agent Skills`, `WebMCP`, `ARD`), and Public Bot Access(`
BotUaReachability`), with optional 1-click Cloudflare verification.
[⌊Page AEO X-Ray Scanner & 1-Click Answer-Gap FAQ Injector — Score any post, page,
or WooCommerce product (0–100, Grade A+ to C), preview exact SpeakableSpecification
quotes for ChatGPT, Perplexity & Google AI Overviews, review the 5-point diagnostic,
and inject 4 auto-generated Answer-Gap FAQs into your connected Schema.org @graph
in one click.⌉⌊Page AEO X-Ray Scanner & 1-Click Answer-Gap FAQ Injector — Score
any post, page, or WooCommerce product (0–100, Grade A+ to C), preview exact SpeakableSpecification
quotes for ChatGPT, Perplexity & Google AI Overviews, review the 5-point diagnostic,
and inject 4 auto-generated Answer-Gap FAQs into your connected Schema.org @graph
in one click.⌉[
**Page AEO X-Ray Scanner & 1-Click Answer-Gap FAQ Injector** — Score any post, page,
or WooCommerce product (0–100, Grade A+ to C), preview exact `SpeakableSpecification`
quotes for ChatGPT, Perplexity & Google AI Overviews, review the 5-point diagnostic,
and inject 4 auto-generated Answer-Gap FAQs into your connected Schema.org `@graph`
in one click.
[⌊Interactive 2-Pane Agent Sandbox & MCP Tool Runner — Test natural-language agent
prompts or run all 6 built-in Model Context Protocol (MCP) tools (getSiteInfo, searchSite,
getFeaturedContent, getPostContent, getSiteTaxonomies, getCatalogItems) against
your live site and inspect the exact JSON response an AI agent receives.⌉⌊Interactive
2-Pane Agent Sandbox & MCP Tool Runner — Test natural-language agent prompts or
run all 6 built-in Model Context Protocol (MCP) tools (getSiteInfo, searchSite,
getFeaturedContent, getPostContent, getSiteTaxonomies, getCatalogItems) against
your live site and inspect the exact JSON response an AI agent receives.⌉[
**Interactive 2-Pane Agent Sandbox & MCP Tool Runner** — Test natural-language agent
prompts or run all 6 built-in Model Context Protocol (MCP) tools (`getSiteInfo`,`
searchSite`, `getFeaturedContent`, `getPostContent`, `getSiteTaxonomies`, `getCatalogItems`)
against your live site and inspect the exact JSON response an AI agent receives.
[⌊Settings Cockpit & Live @graph Schema Validator — Configure WebMCP & /llms.txt
discovery, Schema.org @graph entities (including WooCommerce Product & Offer and
auto-FAQPage from ? headings), the Per-Bot AI Crawler Matrix (OAI-SearchBot, ChatGPT-
User, PerplexityBot, ClaudeBot, Google-Extended, GPTBot, CCBot), Frontend "Ask AI"
widgets, rate limits, and optional SHA-256 MCP API keys.⌉⌊Settings Cockpit & Live@
graph Schema Validator — Configure WebMCP & /llms.txt discovery, Schema.org @graph
entities (including WooCommerce Product & Offer and auto-FAQPage from ? headings),
the Per-Bot AI Crawler Matrix (OAI-SearchBot, ChatGPT-User, PerplexityBot, ClaudeBot,
Google-Extended, GPTBot, CCBot), Frontend "Ask AI" widgets, rate limits, and optional
SHA-256 MCP API keys.⌉[
**Settings Cockpit & Live `@graph` Schema Validator** — Configure WebMCP & `/llms.
txt` discovery, Schema.org `@graph` entities (including WooCommerce `Product` & `
Offer` and auto-`FAQPage` from `?` headings), the Per-Bot AI Crawler Matrix (`OAI-
SearchBot`, `ChatGPT-User`, `PerplexityBot`, `ClaudeBot`, `Google-Extended`, `GPTBot`,`
CCBot`), Frontend “Ask AI” widgets, rate limits, and optional SHA-256 MCP API keys.
[⌊Post Editor AEO & FAQPage Schema Metabox — Inside the WordPress block/classic
editor, view real-time AEO status chips (Summary, FAQ, Speakable), customize your
AI Direct Answer (TL;DR) executive summary, select the primary Schema.org entity
type (BlogPosting, NewsArticle, TechArticle), and build FAQPage Q&A pairs.⌉⌊Post
Editor AEO & FAQPage Schema Metabox — Inside the WordPress block/classic editor,
view real-time AEO status chips (Summary, FAQ, Speakable), customize your AI Direct
Answer (TL;DR) executive summary, select the primary Schema.org entity type (BlogPosting,
NewsArticle, TechArticle), and build FAQPage Q&A pairs.⌉[
**Post Editor AEO & FAQPage Schema Metabox** — Inside the WordPress block/classic
editor, view real-time AEO status chips (`Summary`, `FAQ`, `Speakable`), customize
your AI Direct Answer (TL;DR) executive summary, select the primary Schema.org entity
type (`BlogPosting`, `NewsArticle`, `TechArticle`), and build `FAQPage` Q&A pairs.
## Installation
1. Install **AEOLynx – AEO, GEO & AI SEO for WebMCP, LLMs.txt, Schema & Answer Engine
Optimization** via **Plugins Add New** in WordPress (or upload the `aeolynx-for-
webmcp` folder to `/wp-content/plugins/`).
2. Activate the plugin through the **Plugins** menu in WordPress.
3. Open **AEOLynx Overview** and click **Run audit** to run the 24-check local Agent-
Ready Audit (`/llms.txt`, `/.well-known/mcp.json`, `robots.txt`, RFC 8288 `Link`
headers, Markdown negotiation, and real `GPTBot` edge access).
4. Open **X-Ray Scanner**, select any high-traffic post, page, or WooCommerce product,
review your 0–100 Page AEO grade, and click **Inject Selected into Post Schema**
to add Answer-Gap FAQs.
5. Visit **Settings** to customize your Schema.org `@graph` toggles, per-bot AI crawler
matrix (`OAI-SearchBot`, `PerplexityBot`, `ClaudeBot`, `GPTBot`), optional frontend“
Ask AI” summary bar, and optional MCP API keys.
## FAQ
### What is Answer Engine Optimization (AEO) and how does AEOLynx work?
Answer Engine Optimization (AEO) is the practice of structuring your WordPress content
so AI answer engines—such as **ChatGPT Search, Perplexity, Claude, Google AI Overviews,
and Microsoft Copilot**—can easily discover, trust, and cite your pages as the direct
answer. AEOLynx automates AEO by scoring your posts (0–100), surfacing `SpeakableSpecification`
passages, injecting Answer-Gap `FAQPage` schema, serving clean Markdown streams,
and publishing `/llms.txt` and WebMCP discovery endpoints.
### How does this plugin help with Generative Engine Optimization (GEO) and AI SEO?
Generative Engine Optimization (GEO) and AI SEO focus on getting your brand recommended
and cited inside AI-generated responses. Instead of forcing LLMs to parse heavy,
noisy HTML themes, AEOLynx feeds generative models structured Schema.org JSON-LD
entity graphs, token-efficient Markdown (`?format=markdown` and `Accept: text/markdown`),`/
llms.txt` indexes, and callable Model Context Protocol (MCP) tools—dramatically
increasing citation clarity.
### Will AEOLynx work alongside Yoast SEO, Rank Math, AIOSEO, or SEOPress?
Yes! AEOLynx is purposefully designed to run alongside **Yoast SEO, Rank Math, All
in One SEO (AIOSEO), SEOPress, and The SEO Framework** with zero conflicts. Keep
your traditional SEO plugin for classic title tags, XML sitemaps, and Google Search
Console, while AEOLynx handles the AI search and agent discovery layer (`/llms.txt`,
Markdown for agents, WebMCP / MCP tools, AI crawler policy, and Agent-Ready Auditing).
If your SEO plugin already outputs `Article` or `FAQPage` schema, you can toggle
individual schema nodes on or off in **AEOLynx Settings**.
### How does the automatic /llms.txt and /llms-full.txt generator work?
Following the `llmstxt.org` specification, AEOLynx dynamically serves `/llms.txt`(
a curated AI sitemap of your key posts, pages, WooCommerce products, and MCP tools)
and `/llms-full.txt` (an expanded Markdown corpus with summaries and metadata).
Both files are cached automatically and invalidated only when you publish/update
content or change settings.
### What is WebMCP and Model Context Protocol (MCP) in this plugin?
**Model Context Protocol (MCP)** and **WebMCP** are open standards that allow AI
assistants and browser agents to interact with websites through structured tools
instead of brittle screen-scraping. AEOLynx exposes a REST MCP server (`/wp-json/
aeolynx/v1/tools` and `/wp-json/aeolynx/v1/call`), a `/.well-known/mcp.json` server
card, and W3C `document.modelContext.registerTool` browser registration with 6 safe,
read-only tools (`getSiteInfo`, `searchSite`, `getFeaturedContent`, `getPostContent`,`
getSiteTaxonomies`, and `getCatalogItems`).
### How does Markdown for AI Agents content negotiation work without breaking CDN caches?
When an AI agent requests any post, page, product, or your homepage with `?format
=markdown` (or `?format=md`) or sends an HTTP `Accept: text/markdown` header where
the Markdown quality factor (`q`-value) is greater than or equal to `text/html`,
AEOLynx converts the page into clean Markdown with YAML frontmatter. To prevent
CDN or page-cache poisoning on LiteSpeed, Cloudflare, or Nginx, AEOLynx automatically
sends `Vary: Accept`, `Cache-Control: private, no-store`, and calls `LiteSpeed_Cache_API::
set_nocache()`.
### How do I allow ChatGPT and Perplexity search bots while blocking AI training scrapers?
Go to **AEOLynx Settings AI Crawler Policy** and click the **“Allow Search, Block
Training”** preset. This updates your WordPress virtual `robots.txt` to allow real-
time citation bots (`OAI-SearchBot`, `ChatGPT-User`, `PerplexityBot`, `ClaudeBot`,`
Google-Extended`) while disallowing bulk training crawlers (`GPTBot`, `CCBot`) and
sets matching `Content-Signal` directives.
### Why does the Agent-Ready Audit test my site with a GPTBot user-agent?
Many site owners think AI bots can read their site because `robots.txt` looks fine
in a normal browser, unaware that their web host, WAF, or CDN (such as Cloudflare
Bot Fight Mode) is silently returning `HTTP 403` or `HTTP 429` to AI user-agents
at the network edge. AEOLynx’s **Public Bot Access (Edge Reality)** audit group
probes your live endpoints with a real `GPTBot/1.0` user-agent so you can spot and
fix edge blocks immediately.
### Are any features locked behind a Pro upgrade, paywall, or subscription?
No. Every single feature—all 6 MCP tools, WooCommerce `Product` & `Offer` JSON-LD
schema, `FAQPage` auto-extraction, the Page AEO X-Ray & Answer-Gap Scanner, the
24-check Agent-Ready Audit, `/llms.txt`, and per-bot crawler controls—is **100%
free and unlocked** in compliance with WordPress.org Guideline 5.
### Does AEOLynx require WooCommerce?
No. WooCommerce is completely optional. When WooCommerce is active, AEOLynx automatically
adds `Product` and `Offer` JSON-LD schema to product pages and exposes live product
pricing, SKU, and stock data through the `getCatalogItems` MCP tool. On non-eCommerce
sites, `getCatalogItems` gracefully falls back to your published pages and posts.
### Can I require an API key for the MCP REST endpoints?
Yes, optionally. Public read-only agent discovery is open by default so ChatGPT,
Perplexity, and Claude can discover your published content. If you want to restrict`/
wp-json/aeolynx/v1/*` to authorized agents only, go to **AEOLynx Settings MCP
API Access**, generate a SHA-256 hashed key, and enable **Require API key on MCP
REST endpoints**.
### Does this plugin track visitors or send data to external servers?
No. AEOLynx has zero telemetry and zero tracking. All activity logs and audit scores
are stored locally in your WordPress database. The only optional external call is
the Cloudflare `isitagentready.com` verification button, which is disabled by default
and only sends your public site URL if an admin opts in and clicks Verify.
## Reviews
There are no reviews for this plugin.
## Contributors & Developers
“AEOLynx – AEO, GEO & AI SEO for WebMCP, LLMs.txt, Schema & Answer Engine Optimization”
is open source software. The following people have contributed to this plugin.
Contributors
* [ N4nion ](https://profiles.wordpress.org/n4nion/)
[Translate “AEOLynx – AEO, GEO & AI SEO for WebMCP, LLMs.txt, Schema & Answer Engine Optimization” into your language.](https://translate.wordpress.org/projects/wp-plugins/aeolynx-for-webmcp)
### Interested in development?
[Browse the code](https://plugins.trac.wordpress.org/browser/aeolynx-for-webmcp/),
check out the [SVN repository](https://plugins.svn.wordpress.org/aeolynx-for-webmcp/),
or subscribe to the [development log](https://plugins.trac.wordpress.org/log/aeolynx-for-webmcp/)
by [RSS](https://plugins.trac.wordpress.org/log/aeolynx-for-webmcp/?limit=100&mode=stop_on_copy&format=rss).
## Changelog
#### 1.4.9
* Renamed the plugin to “AEOLynx for WebMCP” (new slug: aeolynx-for-webmcp) with
an original, distinctive brand; updated the text domain, admin menu, endpoints
and documentation to match.
* The AI Summary box auto-theme script is now properly enqueued as a static file
instead of printed inline.
* Shortened the readme short description and added an “External services” section
documenting the optional isitagentready.com verification (site URL only, opt-
in) with Cloudflare terms and privacy links.
#### 1.4.8
* Settings toggles now clear correctly when unchecked (hidden `0` companions for`
options.php`).
* Plugin Check: removed non-prefixed LiteSpeed `do_action`; use LiteSpeed_Cache_API
when available.
* Shortened plugin display name and description for directory clarity.
* Admin dashboard UI: mobile nav toggle, improved responsive layout for tablets
and phones.
* readme: Screenshots section, clearer public REST / API-key FAQ, activity log
copy updated.
* Donate / project URI updated to https://wikiofautomation.com/
* readme expanded for AEO / GEO / MCP discoverability on WordPress.org and Google.
#### 1.4.7
* **Schema.org-clean JSON-LD**: empty properties pruned; single Google-compatible
WebSite SearchAction; BlogPosting/Article always include `url` + `image`; FAQPage
drops instructional Answer-Gap placeholders; Organization/Person logo handling
tightened; non-standard MCP/markdown EntryPoints removed from the public graph.
* Answer-Gap inject and metabox save reject placeholder answers so FAQPage never
fails schema.org validation.
#### 1.4.6
* Submission hardening: GPLv2 license declaration + license.txt, prepared uninstall
SQL, removed duplicate AJAX hooks, fixed stale Simulate AI Visit docs, moved
directory banners out of the plugin zip.
* Critical fix: Markdown content negotiation now requires a real markdown preference(
q-value) and always sends Vary: Accept + no-store for Accept-negotiated responses
so LiteSpeed/CDN cannot poison HTML URLs with cached Markdown.
#### 1.4.5
* **Audit engine rewritten for honesty**: removed the local-evidence fallback that
could convert unverified checks into passes. Checks that cannot be verified live
are now reported as UNVERIFIED (never counted as passing), and scoring uses the
industry-strict method — every check counts, exactly like external scanners.
* **Deeper validation**: the ARD manifest check now requires the spec’s “entries”
array (the served manifest now includes it), auth.md must actually describe agent
registration/credentials to pass, and DNS-AID performs a real DNS lookup.
* **New “Public Bot Access (edge reality)” check group**: probes robots.txt, the
MCP card, llms.txt and Agent Skills with a real AI-crawler user agent — if your
host/CDN blocks AI crawlers at the edge (HTTP 429/403), the audit reports it
with fix instructions instead of hiding it.
* **Deep-scan experience**: running the audit shows a live radar-sweep animation
with a staged checklist while 24 checks execute.
* **Detailed report export**: download the full audit report as JSON from the Agent
Audit screen.
* Fixed: corrected the Agent Audit include path, the Link-header parser now reads
every pair of multi-pair Link headers, and the crawler-policy bot labels no longer
trigger early translation loading.
#### 1.4.4
* **Fix**: translations are now loaded at the correct time (explicit `init`-hooked`
load_plugin_textdomain`), and the crawler-policy bot labels are translated lazily—
removing the WP 6.7+ “_load_textdomain_just_in_time called incorrectly” notice
on fresh installs.
* **Fix**: corrected an include path on the Agent Audit screen that could emit
a PHP warning for a doubled `partials/partials/` directory on sites with error
display enabled.
#### 1.4.3
* **Critical fix: infinite recursion on event logging** — the settings-revision
hooks added in 1.4.2 reacted to their own revision writes (and to the activity
log), causing a stack-overflow 500 on any request that recorded an event (all`.
well-known/*` discovery documents, `auth.md`, and activity logging). Revision
hooks now ignore internal log/counter/cache keys. All discovery endpoints verified
200 after the fix.
* **Audit accuracy fixes**: every audit HTTP check now retries with a browser user
agent (hosts whose WAF rejects the WordPress UA no longer produce false failures);
homepage checks use a cache-buster so page-cache copies never mask live behavior;
the Link-header parser now reads every `; rel="…"` pair in multi-pair Link
headers (previously only the first pair was parsed, guaranteeing a false fail);
and the “Run audit now” button on the Overview screen shows a scanning state
and refreshes the gauge when done. Live-verified: 12/12 checks passing, “Fully
Agent-Ready”.
* **Public bot-access reality check**: the audit now verifies robots.txt, the MCP
card, llms.txt and the Agent Skills index **as an AI crawler sees them** (GPTBot
user agent). If a host/CDN edge blocks AI-crawler user agents (HTTP 429/403)
before WordPress loads, the audit reports an honest, actionable failure instead
of a passing grade that external scanners would contradict.
* **Deep-scan experience**: running the audit now shows a live scanning animation—
radar sweep, ping rings, and a staged checklist of every probe as it executes.
* **No stale audit reports, ever**: the audit now stamps every report and views
only display reports less than 5 minutes old — an older cached report is ignored(
never shown) and the Agent Audit screen automatically runs a fresh, real scan
on load. The Overview gauge uses the same freshness gate, so both screens always
show the same live numbers with a “live report, X ago” stamp.
* **One honest score everywhere**: the Overview gauge now shows the exact same
Agent-Ready audit score, level, and pass/fail counts as the Agent Audit screen(
single cached report). No second, inflated number. Until an audit has run, the
gauge shows “No audit yet” with a one-click “Run audit now” button instead of
a placeholder value.
* **Audit checks survive blocked loopbacks**: many hosts block a server’s own HTTP
requests. The audit now retries with a browser user agent, falls back to query-
string routes when `/.well-known/` is intercepted by server config, and — only
when the gateway is provably active — reports feature checks as locally verified
with an explicit note recommending external confirmation via the optional Cloudflare
scan. Nothing is invented; honest failures stay failures.
* **Removed the “Simulate AI Visit” demo**: no more simulated agent events in the
activity feed. The activity log records only real requests your server receives.
The top-bar action is now “Run audit”, and the onboarding checklist starts with
the real audit.
* Link-header audit check now reads homepage response headers (it previously inspected
the robots.txt response).
* Sandbox prompt runner relabeled “Run as agent” — it executes real MCP tool calls.
#### 1.4.2
* New optional **API key enforcement** for the MCP REST API (Settings MCP API
access): generate keys (stored as SHA-256 hashes, shown once), revoke them any
time, and — only if you choose — require a valid `X-WebMCP-Key` header on every`/
aeolynx/v1/` call. Anonymous agent reads remain open by default.
* **Hardened rate limiting**: the per-minute limiter now counts on persistent storage
with atomic single-statement increments (SQL upsert, or object-cache increments
on sites running Redis/Memcached) instead of transient-based counting — counts
survive cache-plugin purges, stay accurate across load-balanced servers, and
cannot be overrun by parallel requests. Adds a second per-hour burst cap (filterable
via `aeolynx_hourly_rate_limit`) so floods straddling a window boundary still
get stopped, plus a 429 reply with retry seconds and automatic cleanup of expired
counters.
* **Per-tool input validation on the MCP call endpoint**: every built-in tool now
accepts only its documented parameters (allowlist with per-parameter sanitization,
length caps, and integer clamps) — unknown, nested, or wrongly-typed values are
dropped and oversized payloads over 4 KB are rejected with HTTP 413. Custom tools
registered via the `aeolynx_call_tool` filter keep receiving raw (size-capped)
parameters.
* **Admin AJAX throttling**: the expensive admin endpoints (Agent Sandbox, X-Ray
scan, Answer-Gap injection, AI-visit simulation, endpoint inspector, Agent-Ready
audit, Cloudflare scan, API-key management) are now throttled per user with atomic
persistent counters — 10 to 30 calls per minute depending on the handler — returning
HTTP 429 with a friendly message when a button is hammered. Nonces and capability
checks are unchanged.
* **Short-lived sandbox execution tokens**: sandbox tool calls now require a one-
time token fetched fresh per run (60s expiry, single use) on top of the standard
nonce — replaying a captured request fails even inside the window.
* **Schema graph caching**: the JSON-LD `@graph` is built once per post and cached(
12h, filterable) against post-modified time + a settings revision; editors always
see fresh output, and the `aeolynx_schema_graph` filter still runs on every request.
* **llms.txt caching**: `/llms.txt` and `/llms-full.txt` are generated once and
cached until content or settings change, with `no_found_rows` queries and filterable
post limits for very large sites.
* **Markdown conversion size cap**: conversion is capped at 100KB (filterable via`
aeolynx_markdown_max_bytes`); larger posts truncate with a clear note instead
of risking timeouts.
* **Custom post type support**: `searchSite` now covers every public CPT registered
as searchable (filterable via `aeolynx_supported_post_types`), and CPT singles
already emit Article/WebPage schema.
* **WP-CLI commands**: `wp aeolynx clear-log`, `wp aeolynx audit`, `wp aeolynx
flush-cache`, `wp aeolynx tools`, and `wp aeolynx status` for server-side operations.
* **JavaScript i18n + debug logging**: admin UI strings are translatable via `wp_localize_script`,
and silent `catch` blocks now log to `console.warn` when `window.aeolynxDebug`
is enabled (page behavior unchanged).
* **Local Schema.org validation**: a new **Validate** button on Settings checks
the live `@graph` (required properties per type, duplicate `@id`s, context) entirely
offline, with results per context.
* **Hardened settings URL validation**: `logo_url` and the `same_as` list accept
only `http(s)` URLs — `file://`, `phar://`, `javascript:`, and other schemes
are dropped at save.
* **Multisite-safe uninstall**: the uninstaller now also removes schema caches,
API keys, rate-limit/throttle counters, one-time tokens, and per-site data across
the whole network.
* **Hardening headers on plugin-served responses**: markdown streams, `/llms.txt`,`/
llms-full.txt`, robots policy, and every `/.well-known/*` discovery document
now send `X-Content-Type-Options: nosniff`, a strict `Content-Security-Policy:
default-src 'none'; sandbox`, and `Referrer-Policy: no-referrer` — defense-in-
depth scoped strictly to the plugin’s own plain-text/JSON responses (never site-
wide, so themes and other plugins are unaffected).
#### 1.4.1
* Discovery endpoints now answer on every commonly scanned path: **/.well-known/
api-catalog.json** (in addition to the RFC 9727 path), **/.well-known/agent-skills.
json** (in addition to index.json), **/.well-known/ard-manifest.json** (in addition
to ai-catalog.json), and **/.well-known/auth.md** (in addition to /auth.md at
the root).
* Plugin updates now flush rewrite rules automatically so newly added discovery
endpoints route without a manual deactivation/reactivation.
#### 1.4.0
* New **Agent-Ready Audit** screen: a local self-audit that replicates the industry-
standard checks published by Cloudflare’s isitagentready.com — robots.txt validity,
sitemap, agent Link headers, Markdown negotiation, AI bot rules, Content Signals,
API Catalog, MCP Server Card, auth.md, Agent Skills, ARD manifest, and WebMCP—
scored 0–100 with readiness levels, run entirely from your own server.
* Generates the emerging agent-discovery standards automatically: **/.well-known/
api-catalog** (RFC 9727 linkset), **/.well-known/agent-skills/index.json** with
a SKILL.md, **/.well-known/ai-catalog.json** (Agentic Resource Discovery), and**/
auth.md** documenting your agent authentication model.
* **Content Signals** policy (contentsignals.org): declare ai-train / search /
ai-input preferences via the Content-Signal line in robots.txt — the requirement
for “Bot-Aware” readiness.
* **Markdown for Agents** now negotiates on the homepage too, not only on posts
and pages, serving a site-level Markdown index.
* Adds **rel=”api-catalog”** and **rel=”service-desc”** Link headers so industry
scanners recognize your agent endpoints.
* Optional, off-by-default **Cloudflare verification**: relay a scan through isitagentready.
com’s free public API (only your site URL is sent) and read the verdict inside
the dashboard, plus a deep link to your public report.
* Admin asset versions now use file timestamps so cached dashboards always load
current scripts and styles.
#### 1.3.0
* Fully redesigned admin interface (“AEO Cockpit”): new app shell with left navigation,
animated AEO readiness gauge, KPI tiles, live activity feed with filters & 30-
second polling, searchable post picker, expandable fix-list, AI quote card, and
a two-pane Agent Sandbox with a terminal-style console.
* X-Ray Answer-Gap Finder: select and edit answers before injecting; duplicate
questions are now skipped automatically so FAQPage schema never gets polluted
twice.
* Added searchable AJAX post picker — sites with more than 30 posts can now scan
any published content.
* Settings rebuilt into five focused sections with toggle switches, a grouped per-
bot policy matrix with Allow-all / Block-training presets, a rate-limit slider,
and an unsaved-changes bar.
* Post editor metabox redesigned with AEO status chips, a numbered layout, and
a full FAQ repeater (drag to reorder, remove, auto-numbering).
* Frontend AI Summary / “Ask AI” bar restyled with a light/dark/auto theme and
CSS variable overrides; new `aeolynx_ai_box_html` filter for developers.
* Hardening & compliance: REST API namespace moved to the plugin-owned `aeolynx/
v1`, plugin translations now loaded via `load_plugin_textdomain()`, duplicate
Link headers fixed, REST nonce no longer exposed to anonymous visitors, multibyte-
safe word counts, and all assets carry explicit GPL headers.
#### 1.2.0
* Removed all Pro gates and locked tool placeholders for 100% WordPress.org Guideline
5 compliance.
* Added 2 new unlocked MCP tools (`getSiteTaxonomies` and `getCatalogItems` for
WooCommerce/catalog queries) for 6 total tools.
* Added unlocked WooCommerce `Product` & `Offer` Schema.org JSON-LD generation.
* Added **AI Answer-Gap Question Finder & 1-Click FAQ Schema Injector** inside
the Page AEO X-Ray Scanner.
* Added **Per-Bot AI Crawler Access Matrix** (`OAI-SearchBot`, `ChatGPT-User`, `
PerplexityBot`, `ClaudeBot`, `Google-Extended`, `GPTBot`, `CCBot`) in `robots.
txt`.
* Hardened activation & file loading with `__DIR__` paths, guarded `AEOLYNX_CORE_*`
constants, and hook-safe PHP signatures to eliminate fatal errors across all
PHP 7.4–8.4 setups.
## Meta
* Version **1.4.9**
* Last updated **3 hours ago**
* Active installations **Fewer than 10**
* WordPress version ** 6.0 or higher **
* Tested up to **7.1.4**
* PHP version ** 7.4 or higher **
* Tags
* [aeo](https://wordpress.org/plugins/tags/aeo/)[ai seo](https://wordpress.org/plugins/tags/ai-seo/)
[answer engine optimization](https://wordpress.org/plugins/tags/answer-engine-optimization/)
[llms.txt](https://wordpress.org/plugins/tags/llms-txt/)[webmcp](https://wordpress.org/plugins/tags/webmcp/)
* [Advanced View](https://wordpress.org/plugins/aeolynx-for-webmcp/advanced/)
## Ratings
No reviews have been submitted yet.
[Your review](https://wordpress.org/support/plugin/aeolynx-for-webmcp/reviews/#new-post)
[See all reviews](https://wordpress.org/support/plugin/aeolynx-for-webmcp/reviews/)
## Contributors
* [ N4nion ](https://profiles.wordpress.org/n4nion/)
## Support
Got something to say? Need help?
[View support forum](https://wordpress.org/support/plugin/aeolynx-for-webmcp/)
## Donate
Would you like to support the advancement of this plugin?
[ Donate to this plugin ](https://wikiofautomation.com/)