Title: ZoofiAI – Connect Your Site with ChatGPT, Claude & Any AI Agent via MCP Author: zoofiai Published: September 13, 2026 Last modified: September 13, 2026 --- Search plugins ![](https://ps.w.org/zoofiai-mcp-connector/assets/banner-772x250.png?rev=3693495) ![](https://ps.w.org/zoofiai-mcp-connector/assets/icon-256x256.png?rev=3693495) # ZoofiAI – Connect Your Site with ChatGPT, Claude & Any AI Agent via MCP By [zoofiai](https://profiles.wordpress.org/zoofiai/) [Download](https://downloads.wordpress.org/plugin/zoofiai-mcp-connector.1.8.17.zip) * [Details](https://wordpress.org/plugins/zoofiai-mcp-connector/#description) * [Reviews](https://wordpress.org/plugins/zoofiai-mcp-connector/#reviews) * [Installation](https://wordpress.org/plugins/zoofiai-mcp-connector/#installation) * [Development](https://wordpress.org/plugins/zoofiai-mcp-connector/#developers) [Support](https://wordpress.org/support/plugin/zoofiai-mcp-connector/) ## Description ZoofiAI – Connect Your Site with ChatGPT, Claude & Any AI Agent via MCP creates a permission-controlled bridge between your WordPress site and the ZoofiAI service. After an administrator explicitly authorizes a connection, supported AI clients can perform WordPress management tasks through signed, replay-protected requests and WordPress capability checks. The connector keeps the existing Zoofi management workflow while using standard WordPress controls for installation and updates. Core capabilities include: * Read, create and edit posts, pages and supported custom post types. * Draft, publish and trash content with approval gates for higher-impact actions. * Read and update categories, tags, custom taxonomies and post metadata. * Bulk post, taxonomy and media workflows with bounded request sizes. * Upload media, update attachment metadata and set featured images. * Structured WordPress setting management through a conservative safe-option allowlist. * Read-only user discovery for administrative context; this WordPress.org edition does not create, delete, log in, or change roles for WordPress users. * Navigation menu management. * Plugin and theme discovery, activation, deactivation and updates through WordPress APIs. * Install plugins/themes from the WordPress.org directory by slug where WordPress permits it. * Read-only theme and plugin source browsing/search for diagnostics and planning. * Database-backed theme draft planning: changed source text is stored in WordPress options only; the WordPress.org edition does not write drafts into installed theme directories or publish executable theme source. * Allowlisted WP-CLI-style administration implemented through native PHP dispatch; no shell execution endpoint is provided. * Database status/table metadata is exposed through WordPress APIs; arbitrary SQL execution is not available in the WordPress.org edition. * Local audit records, approval previews, backups/checkpoints and emergency read- only mode. * Optional white-label mode that hides Zoofi’s own Tools menu while keeping its Installed Plugins row visible and normal administrator controls available. * Optional Cloudflare, Google Analytics 4 and Google Search Console integrations when an administrator supplies the required credentials. #### Important source-editing boundary This WordPress.org build does not expose a general-purpose live PHP/JavaScript editor, arbitrary plugin/theme source writer, arbitrary shell execution, or an endpoint that downloads executable plugin packages from third-party URLs. Theme/plugin source can still be listed, read and searched. Theme draft changes are stored only in the WordPress database for review/validation and are never written into installed theme directories by this edition. Normal WordPress management and structured write/edit operations remain available. ### External services This plugin connects to external services only for features that require them. #### ZoofiAI ZoofiAI is the primary service used to pair a WordPress site with an authorized AI client, broker authenticated management requests, and maintain the user’s Zoofi workspace. Connection is initiated by the administrator or by an AI flow that still requires WordPress administrator authorization. Data sent can include the site URL/name, connector installation identifier, connector version, pairing information, and the WordPress data required to perform a user- requested management operation. A connector secret is used to authenticate signed requests. WordPress login passwords are not sent to ZoofiAI by this connector. Service: https://app.zoofiai.com/ Privacy: https://app.zoofiai.com/privacy Terms: https://app.zoofiai.com/terms MCP endpoint: https://mcp.zoofiai.com/mcp #### Cloudflare (optional) If an administrator configures Cloudflare credentials and asks Zoofi to use the integration, requests may be sent to the Cloudflare API for supported CDN/cache operations. Service/API: https://api.cloudflare.com/ Privacy: https://www.cloudflare.com/privacypolicy/ Terms: https://www.cloudflare.com/website-terms/ #### Google Analytics 4 and Google Search Console (optional) If an administrator configures Google OAuth credentials and property/site identifiers, Zoofi can request analytics or Search Console reports on the administrator’s behalf. Google privacy: https://policies.google.com/privacy Google terms: https://policies. google.com/terms No optional integration is contacted until it is configured and a related operation is requested. ### Privacy The plugin stores local connector identity, pairing state, permissions, encrypted optional integration credentials, audit records and operational state needed for its features. ZoofiAI communication occurs only as described in the External services section. If your site has its own privacy policy, disclose your use of ZoofiAI and any optional third-party integrations you enable, together with the types of site data you choose to process through them. ## Installation 1. Install and activate ZoofiAI – Connect Your Site with ChatGPT, Claude & Any AI Agent via MCP. 2. Open Tools > Zoofi AI Connector. 3. Add `https://mcp.zoofiai.com/mcp` to your supported AI client. 4. Sign in to ZoofiAI when prompted. 5. Ask the AI to connect your WordPress site. 6. Open the short-lived WordPress authorization link and approve the connection as an administrator. 7. Return to the AI and continue with the requested WordPress task. ## FAQ ### Does Zoofi need my WordPress password? No. The normal Zoofi flow uses the connector’s installation identity, explicit WordPress authorization, signed requests, timestamps and replay protection. ### Can Zoofi edit WordPress content and settings? Yes. Authorized requests can create and update content, media, taxonomies, supported settings/options, menus and other structured WordPress resources according to the connected permission profile and WordPress capabilities. ### Can Zoofi manage plugins and themes? Yes. The connector can inspect installed plugins/themes and perform supported WordPress lifecycle operations such as activation, deactivation and updates. Directory installation is restricted to packages resolved through WordPress.org. ### Does this plugin provide a live PHP or JavaScript file editor? No. The WordPress.org edition can browse/search theme and plugin source for diagnostics, but it does not provide a general-purpose arbitrary executable-code writer. Site changes should use WordPress APIs, theme settings, plugin APIs, content/builder APIs and other structured management paths. ### Can I hide Zoofi from wp-admin? Yes. After the site is connected, an administrator can enable optional White Label mode. It hides Zoofi from the Tools menu while the Installed Plugins row remains visible so administrators can always manage the plugin normally. Authenticated Zoofi AI/MCP management stays active. The connector can automatically reappear after 7, 15, 30 or 60 days of authenticated-AI inactivity, or the administrator can choose Never. A local administrator can always open `/wp-admin/tools.php?page=zoofi&zoofi_recovery =1` and use the nonce-protected recovery button to show Zoofi again. The feature does not force plugin activation, override WordPress update preferences, or block file-level removal. ### Can I disconnect Zoofi? Yes. A local WordPress administrator can reveal the connector if needed, disconnect the site, and rotate the local connector secret from the plugin screen. ### Where are plugin updates delivered? Through the standard WordPress plugin update system. This build contains no private updater and no custom update channel. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “ZoofiAI – Connect Your Site with ChatGPT, Claude & Any AI Agent via MCP” is open source software. The following people have contributed to this plugin. Contributors * [ zoofiai ](https://profiles.wordpress.org/zoofiai/) [Translate “ZoofiAI – Connect Your Site with ChatGPT, Claude & Any AI Agent via MCP” into your language.](https://translate.wordpress.org/projects/wp-plugins/zoofiai-mcp-connector) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/zoofiai-mcp-connector/), check out the [SVN repository](https://plugins.svn.wordpress.org/zoofiai-mcp-connector/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/zoofiai-mcp-connector/) by [RSS](https://plugins.trac.wordpress.org/log/zoofiai-mcp-connector/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.8.17 * Packaging cleanup for WordPress.org review: removed the stale class-zoofi-api. php.bak backup source file so the submitted ZIP contains only the active reviewed implementation. * No REST API permission behavior was loosened; the v1.8.16 media-parent capability checks and user-bound approval-token hardening remain unchanged. #### 1.8.16 * Hardened REST media upload permissions: any supplied parent post now requires both upload_files and edit_post for that exact post. * Direct-upload tickets are bound to the authenticated user that created them and re-check upload/edit capability when the bearer upload is consumed. * Chunked upload start/chunk/finish/abort permissions are bound to the authenticated upload session and parent-post capability. * Approval preview now requires manage_options, and approval tokens are bound to the requesting user before a sensitive operation may consume them. * Tightened attachment update/delete/status permissions to the specific attachment capability. * Fixed duplicate chunk assembly append discovered during the security review. #### 1.8.15 * Removed obsolete approval-preview descriptions for unsupported live plugin/theme source write, publish and rollback operations. * Removed inactive theme preview/publish/rollback REST routes and callbacks from the WordPress.org edition so the exposed API matches the supported feature set. * Kept database-backed theme draft planning/read/edit/validate/discard only; installed theme files remain unchanged. #### 1.8.14 * Removed exclusionary post query parameter from internal-link suggestions. * Reworked temporary-media tracking to use a bounded WordPress option registry instead of meta_key/meta_value queries. #### 1.8.13 * Final Plugin Check input-sanitization hardening for dynamic admin POST/GET helpers. * Replaced direct dynamic superglobal access with sanitized filter_input() reads while preserving nonce-protected admin flows. #### 1.8.12 * Plugin Check hardening: removed the reported direct SQL, stream, nonce/input, i18n and manual textdomain-loading findings from the public package. * Audit records and idempotency receipts now use bounded, non-autoloaded WordPress Options API storage instead of custom SQL tables. * Arbitrary SQL and direct database search-replace are not available in the WordPress. org edition. * Package slug/text domain changed to `zoofiai-mcp-connector` so the restricted` wordpress` term is not present in the plugin slug. * Public edition keeps the WordPress.org-safe edition-conflict behavior while the matching Pro build recognizes both the new and legacy public basenames. #### 1.8.10 * WordPress.org filesystem-policy hardening: theme drafts are now database-backed overlays and never create, modify, publish, roll back, or delete files inside installed theme/plugin directories. * Moved chunked media transport storage from the system temporary directory to a protected plugin-specific folder under the WordPress uploads directory. * Chunk assembly now uses WordPress media APIs and WP_Filesystem; removed direct file_put_contents/fwrite/unlink write paths from chunk transport. * Removed uninstall-time deletion of Zoofi draft theme directories. #### 1.8.9 * Removed service-user impersonation from signed Zoofi requests. * Added request-scoped capability checks against the administrator who paired the site without changing WordPress current-user or login state. * Preserved actor attribution for audit/approval flows without setting auth cookies or sessions. #### 1.8.8 * WordPress.org review hardening: removed unnecessary direct core-file loads, made remaining admin API loads conditional and operation-local, simplified Site Health collection, and removed uninstall-time core includes. #### 1.8.7 * WordPress.org review hardening for asset enqueueing, safe options, user mutation, core API loading and encrypted checkpoints. #### 1.8.6 * Updated the public WordPress.org plugin name to “ZoofiAI – Connect Your Site with ChatGPT, Claude & Any AI Agent via MCP” so the public edition is clearly distinguishable from ZoofiAI Pro. * Preserved edition switching, Settings/View details links, pairing, permissions and all connector functionality from 1.8.5. #### 1.8.5 * Fixed safe switching between the WordPress.org/Public and Private/Master Zoofi editions. Activating one now deactivates the other without PHP class/function redeclaration fatals. * Preserved existing pairing, settings and site data during edition switches. * Added a direct Settings action link and View details link to https://app.zoofiai. com/. * Clears stale private white-label visibility state on public-edition activation/ upgrade so the normal Tools > Zoofi AI Connector screen is available. #### 1.8.1 * Restored optional white-label visibility mode for connected sites. * White label can hide Zoofi from the Tools menu while its Installed Plugins row remains visible and signed AI/MCP access remains active. * Added 7/15/30/60-day or Never inactivity auto-reappear choices. * Added a local administrator recovery URL with a nonce-protected reveal action. * White label does not force activation, override WordPress auto-update preferences, or block file-level removal. #### 1.8.0 * Rebranded the public connector as Zoofi AI Connector for WordPress. * Preserved the full structured manager: content, media, taxonomies, menus, settings/ options, users, plugins/themes, bulk workflows, diagnostics, audit and approvals. * Replaced the private updater with the standard WordPress.org update path. * Restricted plugin installation to packages resolved from the WordPress.org directory. * Removed arbitrary external/local plugin ZIP installation. * Removed WAF/base64 code-body circumvention. * Removed remote self-hiding, plugin aliasing, forced activation and forced auto- update behavior. * Local administrators always retain disconnect/deactivate control. * Kept theme and plugin source inspection read-only in the directory build; removed general-purpose executable source write/delete routes. * Added explicit external-service and privacy disclosures. * Switched licensing metadata to GPL-2.0-or-later and aligned the text domain with the proposed directory slug. ## Meta * Version **1.8.17** * Last updated **2 days ago** * Active installations **Fewer than 10** * WordPress version ** 5.9 or higher ** * Tested up to **7.1** * PHP version ** 7.4 or higher ** * Tags * [AI](https://wordpress.org/plugins/tags/ai/)[ai tools](https://wordpress.org/plugins/tags/ai-tools/) [automation](https://wordpress.org/plugins/tags/automation/)[ChatGPT](https://wordpress.org/plugins/tags/chatgpt/) [mcp](https://wordpress.org/plugins/tags/mcp/) * [Advanced View](https://wordpress.org/plugins/zoofiai-mcp-connector/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/zoofiai-mcp-connector/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/zoofiai-mcp-connector/reviews/) ## Contributors * [ zoofiai ](https://profiles.wordpress.org/zoofiai/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/zoofiai-mcp-connector/)