Activity Log for MCP vs StifLi Flex MCP – MCP Server with undo for ChatGPT, Claude & Gemini

AI agents are starting to talk to WordPress sites directly. Claude Desktop, ChatGPT custom GPTs, and a growing list of MCP clients can connect to your site, browse content, place orders, edit posts, or call any custom tool you expose. The Model Context Protocol (MCP) is the open standard that makes this possible. The problem: by default, you can’t see any of it. Requests come in, things change, and there’s no record of what an agent actually did, when it did it, or which user it acted as. Activity Log for MCP records every MCP request the moment it hits your site. You see the route, the ability that was called, the user it acted as, the request body, the response, and whether it succeeded. Everything is browsable in a clean React admin page that feels like the rest of WordPress. If you’re running an AI integration, debugging a custom MCP server, or just want a paper trail before letting agents touch your data — this is the visibility layer. What you get A real-time log of every MCP request, with filters for date range, ability name, and user. Click any row to inspect the full request and response, copy bodies to your clipboard, or trace a single agent session end-to-end. Sortable columns, configurable per-page counts (10 to 500), and full-text search across request and response bodies. Export to CSV when you need to share findings or feed them into another tool. The whole interface is built with @wordpress/components so it inherits the WordPress design language — no jarring custom UI to learn. Built for both halves of the audience If you’re a site owner: install, activate, and click into Tools → MCP Logs. There’s no setup screen and no configuration — the plugin starts logging the moment an MCP client makes a request. If you’re a developer: there’s a full REST API for every admin feature, authenticated via WordPress Application Passwords or WooCommerce API keys. The plugin is also itself MCP-aware — it registers an MCP server with seven abilities, so an AI agent can introspect its own activity log programmatically. Source ships under src/ and builds with npm run build. Why you’d want this Debug a custom MCP integration without tailing server logs Audit AI agent activity on production sites before something goes wrong Review per-tool error rates to spot which abilities are flaky Trace a single agent session end-to-end when something breaks Export logs for compliance reviews or external analysis Let an AI agent monitor its own activity through the MCP server REST API Every admin feature is exposed under /wp-json/activity-log-for-mcp/v1/: GET /requests — list with filters, sort, and pagination GET /stats — totals, success rate, and calls per ability GET /sessions/{id} — every request in a session, in order GET /search — full-text across routes, abilities, and bodies GET /errors — recent failed executions and HTTP errors GET /tool-performance — per-ability call count, error rate, and unique users GET /filters — distinct ability names and users for dropdowns GET /export-csv — server-side streamed CSV download DELETE /requests — clear all logs DELETE /retention — delete logs older than a given date MCP abilities The plugin registers itself as an MCP server (activity-log-for-mcp-server) with seven abilities agents can call directly: get-activity — paginated log retrieval with filters get-stats — summary metrics with optional date range get-activity-by-session — full session trace, with optional body exclusion for lighter payloads search-activity — full-text search across stored requests and responses analyze-errors — recent errors with full details get-tool-performance — per-ability performance metrics clear-old-logs — date-based retention cleanup Privacy and data handling All data stays in your WordPress database — nothing is sent anywhere. Logs live in a custom table named {prefix}alfmcp_requests. You control retention and can clear everything from the admin UI or via REST. There’s no telemetry, no third-party calls, no external dependencies at runtime. Disclaimer Activity Log for MCP is not affiliated with, endorsed by, or sponsored any AI provider or the Model Context Protocol project. “MCP” and “Model Context Protocol” are referenced solely to describe the open protocol that this plugin observes. Privacy Policy Activity Log for MCP records REST API requests that contain the Mcp-Session-Id header. Logged data includes request routes, methods, headers, bodies, response data, user IDs, and timestamps. All data is stored in your WordPress database and is never transmitted to external services.

StifLi Flex MCP is the most secure MCP Server for WordPress with built-in Undo. Connect ChatGPT, Claude Desktop, Gemini, and other MCP clients safely, roll back changes when needed, and manage your site through natural conversation without losing control. Three powerful MCP and AI tools in one plugin: MCP Server — Connect ChatGPT, Claude Desktop, or any MCP client directly to your site AI Copilot — A floating assistant inside the Gutenberg and Classic editors that writes, rewrites, and optimizes your content in real time AI Chat Agent — A full conversational interface to manage posts, WooCommerce, settings, and more 🎬 Video: Claude to WordPress MCP Connector in 1 Minute 📚 Documentation StifLi Flex MCP Documentation Released in December 2025, StifLi Flex MCP was the first MCP plugin for WordPress and remains the most complete WordPress MCP platform for ChatGPT, Claude Desktop, and other MCP clients. It starts with 122+ built-in MCP tools, and with supported integrations such as All Sources Images, Stifli Backup Tools, AiPatch Security Scanner, Notification for Telegram, WPCode, Code Snippets, Woody Snippets, Advanced Custom Fields, Yoast SEO, Rank Math, WPForms, Gravity Forms, Forminator, The Events Calendar, and Elementor, it can exceed 200 total tools depending on the plugins you install. 📡 MCP Server — Connect ChatGPT, Claude Desktop, and Other MCP Clients StifLi Flex MCP includes a full standards-compliant MCP server for WordPress, so ChatGPT, Claude Desktop, LibreChat, and other MCP clients can connect directly to your site and use real WordPress tools through OAuth 2.1. ChatGPT — Connect through Apps & Connectors with OAuth 2.1 authentication Claude Desktop — Connect through Connectors with automatic OAuth flow LibreChat and other MCP clients — Use the same MCP endpoint and discovery flow Zero shared secrets — No custom API keys or passwords for external MCP clients Standards-based — Automatic discovery, registration, and authentication with OAuth 2.1, PKCE, RFC 9728, RFC 8414, and RFC 7591 Just copy the SSE URL from the Settings page, paste it into ChatGPT, Claude Desktop, or another MCP client, and authorize. ✍️ AI Copilot — Your Writing Assistant Inside the Editor The AI Copilot lives as a floating widget right inside the WordPress post and page editor. It understands the full context of what you’re editing — title, content, categories, tags, featured image, and even WooCommerce product fields — and helps you write better, faster. Rewrite, expand, or optimize content — Ask the Copilot to improve your text and it applies the changes directly into the editor One-click quick actions — “⚡ Optimize content”, “🏷️ Generate tags”, “📝 Write excerpt”, “🖼️ Generate image” — one tap, instant results Real-time editing — The Copilot sets titles, excerpts, tags, slugs, and categories directly in the editor. No copy-pasting Content block operations — Insert, update, replace, or delete Gutenberg blocks through conversation Visual feedback — Changed fields and blocks are highlighted with a green border so you always see what the AI modified Keep or Undo — Every change shows a floating banner: keep it or undo with a single click. You stay in control Image generation — Ask the Copilot to generate an image and it sets it as the featured image or inserts it as a block, automatically Works with Gutenberg and Classic Editor — Full support for both editors Context-aware — The Copilot reads your current post content, blocks, metadata, and editor state to give relevant suggestions WooCommerce-aware — When editing a product, the Copilot sees prices, stock, SKU, attributes, and product type Choose OpenAI (GPT-5.4), Anthropic (Claude 4.6 Opus/Sonnet), or Google (Gemini 3.1 Pro/Flash), and optionally use WordPress AI Client connectors like OpenRouter and Mistral when installed. No complex setup — just your API key or connector credentials. 💡 What Can You Do With the Copilot? Here are just a few examples of what you can ask while editing a post or page: ✏️ “Rewrite the introduction to sound more professional and engaging” 📊 “Add a comparison table below the second paragraph with pros and cons” 🖼️ “Generate an image that illustrates the idea in paragraph four and insert it right above” 📝 “Write a compelling meta description and set it as the excerpt” 🛒 “Update the product short description to highlight free shipping and set the sale price to $19.99” The Copilot reads your full content, understands context, and applies changes directly in the editor — no copy-pasting, no switching tabs. 🤖 AI Chat Agent — Your WordPress AI Assistant The built-in AI Chat Agent gives you a powerful conversational interface to manage your entire WordPress site: Talk to your site — “Show me the last 5 orders”, “Create a blog post about SEO tips”, “What plugins are installed?” Multi-provider — Built-in OpenAI (GPT-5.4, GPT-5.3), Anthropic (Claude 4.6 Opus/Sonnet, Claude 4.5 Haiku), Google (Gemini 3.1 Pro, Gemini 3 Flash) + optional WordPress AI Client connectors (OpenRouter, Mistral) 122+ MCP tools at its disposal — The AI agent can read posts, create content, manage WooCommerce products, check orders, inspect SEO data, update settings, and much more Smart suggestions — After each response, get contextual follow-up suggestions Conversation history — Auto-saved across sessions with multi-tab support Safe by design — Choose “Always Allow” or “Ask User” mode for tool execution confirmations Advanced tuning — Control temperature, max tokens, top_p, system prompts 💡 What Can You Do With It? Here are just a few examples of what you can ask your AI agent: 📝 “Write a 500-word blog post about healthy eating and publish it as draft” 🛒 “Show me today’s WooCommerce orders and their total revenue” 🔍 “What are the top 10 most commented posts on my site?” 📊 “List all products with stock below 5 units” 🎨 “Generate a hero image for my latest blog post about technology” The AI agent understands context, chains multiple operations, and works with your site’s real data in real time. 🎨 AI Image & Video Generation Generate stunning images and videos directly from your AI agent or the dedicated Multimedia Settings page: Image Generation — “Generate a hero image for my blog post about AI” using OpenAI (GPT Image family + DALL·E 2/3) or Google Gemini (Gemini Image + Imagen 4) Image Search — “Find a real stock image for my post” with wp_search_image (Unsplash, Pexels, Pixabay) including attribution metadata Video Generation — “Create a 5-second product showcase video” using OpenAI Sora or Google Veo 2/3 🧩 Code Snippet Management — Design and Develop Through Conversation Create, edit, activate, and manage code snippets on your WordPress site entirely through AI — no manual coding required. Compatible with the three most popular snippet plugins: WPCode, Code Snippets, and Woody Code Snippets. Add functionality instantly — “Add a PHP snippet that redirects users after login based on their role” Custom CSS on demand — “Create a CSS snippet that hides the sidebar on mobile devices” JavaScript injection — “Add a JS snippet that shows a sticky banner with a 10% discount code” Full lifecycle management — List, create, edit, activate, deactivate, and delete snippets from conversation Safe by design — PHP code is sanitized automatically, removing stray <?php tags and markdown artifacts from AI-generated output This opens up powerful possibilities: customize your theme’s appearance, add tracking scripts, inject schema markup for SEO, modify WooCommerce checkout behavior, add custom shortcodes — all through natural language. Ask your AI agent to build it, test it, and activate it, without ever touching a code editor. 🧠 WordPress Abilities Integration (WordPress 6.9+) Automatically discover and import abilities registered by other plugins into your AI agent’s toolkit. If a plugin supports the WordPress Abilities API, StifLi Flex MCP can detect, import, and expose it as an AI tool — zero configuration needed. ⏰ Automation Tasks — Let AI Work While You Sleep Schedule AI-powered tasks to run automatically on your WordPress site: Scheduled Tasks — Create daily, weekly, or monthly automated workflows Templates — Quick-start with pre-built templates (Daily Sales Report, Trending Article, Weekly Summary) Smart Scheduling — Flexible presets from “Every hour” to “Monthly” with custom times and timezones Detected Tools Mode — AI automatically identifies which tools are needed, saving tokens significantly Output Actions — Send results via email, webhook, draft post, or custom hooks Execution Logs — Full history with token usage, duration, and detailed results 🎯 Event Automations — Trigger AI on WordPress Events Run AI workflows automatically when specific events happen ⏪ Roll Back — The Only MCP Server With Undo Mistakes happen. You asked ChatGPT to update your landing page and the result isn’t what you expected? No problem — roll back the change with one click and your site is restored instantly. StifLi Flex MCP is the only MCP server for WordPress that tracks every change and lets you undo it. Every modification made by any AI — whether from ChatGPT, Claude Desktop, the built-in Chat Agent, the Copilot, or automated tasks — is recorded with a full before/after snapshot. One-click Undo — Roll back any change from the Logs & Roll Back page in your admin panel Redo support — Changed your mind? Re-apply a rolled-back change just as easily Session rollback — Undo an entire AI conversation’s changes at once, in the correct order Full audit trail — See exactly what was changed, when, by whom, and from which source Works across everything — Posts, pages, products, orders, options, menus, media, code snippets, and more AI-accessible — Your AI agent can also query and rollback changes through dedicated tools 💡 Real-world examples: 🛒 “ChatGPT updated all my product prices but used the wrong currency — roll it back!” 📝 “Claude rewrote my About page and I prefer the original — undo!” ⚙️ “An automation changed my site settings at 3 AM — I can see exactly what happened and revert it” 🎨 “The AI-generated image doesn’t match my brand — remove it and restore the previous one” 🔗 “I told the AI to delete a menu item by mistake — bring it back!” 🛡️ Security — OAuth 2.1 Built In StifLi Flex MCP uses OAuth 2.1 with PKCE — the latest industry-standard security protocol — to authenticate external AI clients. No API keys to copy, no passwords to share. Just paste the URL, authorize once, and you’re connected. OAuth 2.1 with PKCE (S256) — The most modern and secure authentication standard, used by Google, Microsoft, and GitHub Dynamic Client Registration (RFC 7591) — AI clients register automatically, no manual setup needed Auto-discovery (RFC 9728 + RFC 8414) — Clients find your server’s auth endpoints automatically Token auto-refresh — Sessions stay active for up to 90 days without re-authorization Application Passwords fallback — Still supported for advanced setups and legacy clients Per-tool capability checks linked to WordPress roles Profile-based tool restrictions (8 predefined profiles + custom) Tool execution confirmations in AI Chat Agent 📋 Tool Profiles WordPress Read Only — safe read-only access WordPress Full Management — complete CRUD operations WooCommerce Read Only — query store data WooCommerce Store Management — products, orders, coupons Complete E-commerce — all WooCommerce tools Complete Site — all 122+ tools enabled Safe Mode — non-sensitive reads only Development/Debug — diagnostic tools 🌐 Supported AI Platforms StifLi Flex MCP integrates with: Built-in AI Chat Agent + WordPress AI Client connectors: * OpenAI — GPT-5.4, GPT-5.3, GPT-5.4 Mini * Anthropic Claude — Opus, Sonnet, Haiku * Google Gemini — Pro, Flash, Flash-Lite * OpenRouter and Mistral — via WordPress AI Client connectors (when installed) MCP Server (External Clients via OAuth 2.1): * Claude Desktop, ChatGPT, LibreChat, Cursor, Cline, Roo Code, Windsurf, Claude Code Cloud & Local Providers (via MCP clients): * Groq, Azure OpenAI, AWS Bedrock * Ollama, LM Studio, self-hosted solutions 📐 MCP Spec Compliance StifLi Flex MCP implements the Model Context Protocol (MCP) 2025-11-25 specification for lifecycle and tool operations over JSON-RPC 2.0, while keeping legacy SSE compatibility for older MCP clients. External Services This plugin connects to third-party AI services to power the AI Chat Agent, AI Copilot, image generation, and video generation features. No data is transmitted until you explicitly configure an API key and initiate a request. What data is sent: Your WordPress content (post text, metadata, product details) as included in AI prompts, and MCP tool execution results when using the MCP server with external AI clients. When data is sent: Only when you have configured an API key for a provider AND actively send a message to the AI agent or Copilot, or when an external MCP client makes an authenticated request to the MCP server endpoint. Supported services and their policies: OpenAI — Used for GPT models (AI Chat Agent, AI Copilot), GPT Image / DALL·E (image generation), and Sora (video generation) Terms of Use | Privacy Policy Anthropic Claude — Used for Claude AI models (AI Chat Agent, AI Copilot) Terms of Service | Privacy Policy Google Gemini — Used for Gemini AI models (AI Chat Agent, AI Copilot), Gemini Image + Imagen 4 (image generation), and Veo 2/3 (video generation) Terms of Service | Privacy Policy Google Search Console – Used only when you connect your Google account in the SEO settings, for read-only site/search performance data. Terms of Service | Privacy Policy When using the MCP server with external AI clients (ChatGPT, Claude Desktop, LibreChat, etc.), API requests are made by the AI client’s backend servers to your WordPress MCP endpoint. The plugin itself does not send data to third parties in this scenario — the external MCP client initiates all communication.