PW Feed Readiness Audit for WebMCP

Description

PW Feed Readiness Audit for WebMCP provides a local, administrator-initiated static audit of WebMCP implementations delivered by your WordPress pages.

This is an independent PW Feed compatibility and readiness tool. It is not affiliated with, endorsed by, or an official product of the WebMCP project or its maintainers.

The validator reviews:

  • Declarative form tools using toolname, tooldescription, toolparamdescription, and toolautosubmit.
  • Imperative registrations using document.modelContext.registerTool().
  • Required tool contract fields such as name, description, input schema, and execution handler.
  • Deprecated navigator.modelContext usage.
  • Recommended name, description, and parameter character budgets.
  • Duplicate names, missing form-control names, semantic labels, and completion paths.
  • Security annotation hints and cross-origin iframe tool delegation.
  • HTTPS and HTTP response readiness.

The report includes a readiness score, detailed findings, a tool inventory, clipboard summary, and a downloadable JSON export.

Privacy: page content is processed on your WordPress server. The plugin does not send page content, scan results, or usage data to PW Feed or any third party.

WebMCP is an experimental proposed web standard and may change. This plugin performs static source analysis; it cannot observe tools that appear only after runtime interaction or state changes.

PW Feed also publishes resources for wordpress plugin users and Turkish wordpress eklentileri users.

Installation

  1. Upload the pw-feed-readiness-audit folder to /wp-content/plugins/, or install the ZIP from Plugins > Add New > Upload Plugin.
  2. Activate PW Feed Readiness Audit for WebMCP.
  3. Open PW Feed Readiness Audit for WebMCP in the WordPress admin menu.
  4. Enter a public page URL on the same WordPress site and select Run validation.

FAQ

Does this plugin add WebMCP tools to my site?

No. It is a validator and does not change front-end markup or register tools.

Does it send my page source to an external service?

No. The WordPress server fetches a public same-origin URL and analyzes the returned source locally.

Can it validate tools registered after a click or login?

Not from static source alone. The report clearly identifies this limitation. Runtime-only registrations may not appear in a scan.

Why can I only scan this WordPress site’s URLs?

Same-origin restrictions reduce server-side request forgery risk and keep the plugin focused on auditing the site where it is installed.

Is WebMCP a finalized standard?

No. WebMCP is experimental and under active development. The validator follows current public documentation and should be updated as the proposal evolves.

Is the plugin translation-ready?

Yes. English is the source language, and all user-facing strings use the pw-feed-readiness-audit text domain. WordPress.org language packs can provide additional languages through Translate.WordPress.org.

Reviews

There are no reviews for this plugin.

Contributors & Developers

“PW Feed Readiness Audit for WebMCP” is open source software. The following people have contributed to this plugin.

Contributors

Changelog

1.0.3

  • Renamed the plugin to PW Feed Readiness Audit for WebMCP.
  • Changed the directory slug and translation domain to pw-feed-readiness-audit.
  • Clarified that the plugin is an independent compatibility tool and is not an official WebMCP project product.

1.0.2

  • Updated the original display name and aligned its directory slug and translation domain.

1.0.1

  • Added the supplied PW logo as an optimized dashboard and compact menu asset.
  • Improved WordPress.org readme metadata and translation documentation.
  • Made the clipboard report template translatable.

1.0.0

  • Initial release.
  • Added declarative and imperative WebMCP static analysis.
  • Added security, quality, accessibility, and deprecation checks.
  • Added JSON export and privacy-first same-origin scanning.