MCP Manager

Two fixes, both small. No behaviour change for a working install: no settings change, no reconnecting, no database change outside the uninstall path.

A rewritten plugin listing and six new screenshots. No change to how the plugin works — if you are on 0.4.1 you already have every feature described here, and there…

Now supports WordPress 6.9 and later, and the plugin listing has been rewritten. No change to how the plugin works — if you are on 0.4.0 you already have every…

Connecting an AI client is now part of this plugin and free, this release adds the newest MCP standard, and it fixes a case where a server’s access rule did…

Changed — the AcrossAI server is recommended again, and now says so. It carries a green RECOMMENDED badge on the servers list and on its Overview tab, and its row…

Fixed — a server could offer tools you never chose, and refuse to let you remove them. On some sites the plugin’s database tables were missing columns the plugin expected,…

Installing the AcrossAI Abilities Manager add-on now just works.

Supersedes 0.3.4, which was tagged but never reached a site — WordPress.org holds updates ~6 hours for review, and two problems surfaced inside that window. If you are on 0.3.3,…

Twenty-one commits since v0.3.3. Four features, one schema migration, and two upgrade effects worth reading before you update.

Per-server default ability policy (F082, #106). Each MCP server now carries a tri-state default policy: Use each ability’s own default (the pre-F082 behaviour every existing server migrates to), Expose every…

F069 Quick Setup wizard renamed to “Quick Connect via AcrossAI” everywhere (F080, #97). Every admin surface (plugins.php row action, MCP Servers list page-title button + per-row pill, Settings-page sub-nav tab,…

Zero DB migrations. No REST route added or removed. No filter or capability renamed. No public PHP method signature changed. Any operator who already uses the plugin can update in…

Full changelog: v0.2.10…v0.3.0

Hides the Embeds tab from the per-server-edit page. Admin-UI-only change — the frontend shortcode and block continue to work.

Dependency-only release. Bumps acrossai-co/main-menu from 0.0.31 → 0.0.33 with no code changes required in this plugin.

Three PRs merged into main since 0.2.7 ship in this release; two are ⚠️ security behavior-changes surfaced by the 2026-08-13 adversarial review of the MCP two-gate access-control stack.

WordPress.org flagged two import warnings on the 0.2.6 push:

The Discovery API’s ai_connector category is now populated via the new filter acrossai_mcp_manager_discovery_ai_connectors instead of a direct call to the paid companion plugin’s ConnectorProfileRegistry class.

Ships two features that together tighten the default MCP access posture and improve cache-exclusion visibility.

Dependency bump for the vendored access-control library. Two vendor changes surface in the per-server Access Control tab (?tab=access-control).