Release history
Meikero changelog
What has shipped in Meikero MCP, kept separate from what is planned but not yet available. The Free download is always the current release (1.1.1); one shared ZIP serves Free, trial and paid plans.
Update download recovery
- Fixed plugin updates failing with
activation_not_found(HTTP 403) when a website still held a licensing credential the server no longer recognised. - The updater now retries the already-public shared package in that one case. Signed publisher verification, matching release metadata and ZIP SHA-256 checks are unchanged.
- Recovery never changes license or trial state, never creates activations and never bypasses a paused connection.
Pause and resume from your account
- Each connected website can be set to Active or Paused under My account → Meikero licenses. Paused blocks every MCP request from Claude within about a minute; resuming keeps the same connection key.
- Disconnecting a website in the account releases its seat and, on this version or newer, also blocks MCP access on that site.
- Unlinked Free installations keep their local controls. Existing tools, permissions, backups and trial rules are unchanged.
Unified workspace
- Seven admin screens: Overview, Connection, Permissions, Available tools, History & backups, License & plan, Settings & diagnostics.
- Connection and Permissions are separate; theme/plugin folder rows show their paths and always-visible Off / Read / Read & write controls; the update panel is always visible.
- Two new read-only tools:
list_page_templatesandget_post_blocks, both under the existing content permission. - Locally bundled AI client logos, an explicit Add key form, remembered permission review and clearer save confirmation.
- Minimal authenticated connection reports for the account dashboard (connector category, enabled/verified flags, last activity) — no site content, files or keys.
Connection-first setup
- One-step Claude wizard on Overview: prepare the connection, copy the MCP URL and the full
Authorizationheader, then verify an authenticated request from Claude. - Other AI choices (ChatGPT, Codex, Cursor) shown as Coming soon while they are tested. Existing client keys are retained.
- Stateful trial / license page. Existing security and entitlement gates unchanged.
Page builders
- WPBakery: 11 tools that appear only when WPBakery is active — read and set layouts, add, update, move, duplicate and remove elements, element schemas, page creation — with snapshots, CSS restoration and optimistic locking.
- Oxygen Builder (Preview): a bridge to Oxygen’s public abilities with its own permission, native schema validation and explicit write confirmation. Meikero does not create rollback snapshots for native Oxygen operations.
Trial, client keys and Permissions 2.0
- One-time, signed 4-hour Premium trial per website, started by the first eligible tool request after explicit opt-in. Perpetual (Pro, Studio) versus annual (Agency) access; launch pricing and renewal shown in the plugin.
- Separate revocable connection keys per AI client, shown once, with last-used timestamps. No plaintext secrets stored in WordPress options.
- Permissions 2.0: independent Create and Edit switches inside approved folders, enforced server-side before any file change. Optional Safe Mode for experimental file deletion.
- Diagnostics tab with administrator-only JSON export (no credentials or content); more sensitive filenames blocked from file tools; bounded diff between saved backups and current files.
- Exact-HTTPS-origin allowlist for additional clients; no OAuth 2.1, so clients that require OAuth (ChatGPT) remain unsupported.
Free and Pro in one plugin
- Meikero Free: download and use without registration or a purchase license. Free allows the reads an administrator approves and saving audit reports.
- Meikero Pro: entering a license key in the same installation enables the supported website-changing tools, still limited to the permissions the administrator selects.
- Signed native WordPress updates offered in the Plugins screen; manual ZIP replacement still works.
- Signed installed Pro access that survives license-server outages after publisher verification; plan names and licensed website counts in the plugin.
- Redesigned monochrome admin: compact connection card, Themes / Plugins tabs, short Off / Read / Read & write controls, sticky save bar, tool filters and a support diagnostic summary without credentials.
Licensing
- Purchase-license activation in the plugin, with check, disconnect and reactivation. The license key is separate from the Bearer connection key.
- In 0.8.0, remote MCP use required an active license (replaced by Free in 0.8.1). Bounded 7-day outage tolerance, later replaced by signed offline access in 0.9.4.
Tools
- Site context: site information, settings allowlist, Site Health checks, update status, cron status and connection diagnostics.
- Scoped files: list, read, read ranges, multi-read, search, write, patch and delete within approved theme/plugin folders. Edits to existing files require the current SHA-256 and create automatic backups; PHP is syntax-validated.
- Content: list, search, read, create and update pages and posts; revisions; post types; taxonomies and terms; media listing and metadata; classic menus and navigation blocks (read-only).
- WooCommerce products (when WooCommerce is active): store summary, list, read and variations; create simple products and update allowlisted product fields.
- SEO metadata (with Yoast SEO or Rank Math): read site SEO details; read and update stored title, description, focus keyphrase and canonical.
- Audits: audit prompt, snapshot, save and list reports.
- Version history: project checkpoints of approved folders on request, work sessions with summaries, file and data backup restore.
Safety
- Per-area read/write permissions and per-folder approval; Meikero’s own source, licensing secrets and credentials are protected from edits.
- Stale-hash and path-traversal rejection; bounded response sizes.
- Meikero 1.0.0.
- ChatGPT, Codex, Cursor and other MCP clients beyond Claude (shown as Coming soon in the plugin while tested).
- Free staging/local seats that do not count toward the website limit.
- Oxygen Builder bridge leaving Preview.
Planned items may change in scope or timing and are not part of the current purchase.