MCP Manager

Fixed — a server could offer tools you never chose, and refuse to let you remove them. On some sites the plugin’s database tables were missing columns the plugin expected,…

Installing the AcrossAI Abilities Manager add-on now just works.

Supersedes 0.3.4, which was tagged but never reached a site — WordPress.org holds updates ~6 hours for review, and two problems surfaced inside that window. If you are on 0.3.3,…

Twenty-one commits since v0.3.3. Four features, one schema migration, and two upgrade effects worth reading before you update.

Per-server default ability policy (F082, #106). Each MCP server now carries a tri-state default policy: Use each ability’s own default (the pre-F082 behaviour every existing server migrates to), Expose every…

F069 Quick Setup wizard renamed to “Quick Connect via AcrossAI” everywhere (F080, #97). Every admin surface (plugins.php row action, MCP Servers list page-title button + per-row pill, Settings-page sub-nav tab,…

Zero DB migrations. No REST route added or removed. No filter or capability renamed. No public PHP method signature changed. Any operator who already uses the plugin can update in…

Full changelog: v0.2.10…v0.3.0

Hides the Embeds tab from the per-server-edit page. Admin-UI-only change — the frontend shortcode and block continue to work.

Dependency-only release. Bumps acrossai-co/main-menu from 0.0.31 → 0.0.33 with no code changes required in this plugin.

Three PRs merged into main since 0.2.7 ship in this release; two are ⚠️ security behavior-changes surfaced by the 2026-08-13 adversarial review of the MCP two-gate access-control stack.

WordPress.org flagged two import warnings on the 0.2.6 push:

The Discovery API’s ai_connector category is now populated via the new filter acrossai_mcp_manager_discovery_ai_connectors instead of a direct call to the paid companion plugin’s ConnectorProfileRegistry class.

Ships two features that together tighten the default MCP access posture and improve cache-exclusion visibility.

Dependency bump for the vendored access-control library. Two vendor changes surface in the per-server Access Control tab (?tab=access-control).

Patch release bundling four merged PRs since 0.2.2.

Patch release bundling three merged PRs since 0.2.1.

Full Changelog: v0.1.9…v0.2.0

Three composed features that together open a public extension surface for third-party plugins (planned BuddyBoss add-on, WooCommerce My Account, MemberPress) to enumerate and render MCP connection methods on their own…

Feature 034 — MCP client subsystem refactor: self-describing subclasses + canonical filter-aware enumeration.