How to Use the MainWP MCP in Mastra AI

Q: How do I register the MainWP MCP Server in Mastra AI?

Import the client from @mastra/mcp and instantiate it with your Vinkius URL. You can then call listTools() and spread them directly into your Mastra agent's tool configuration.

Q: How does Mastra AI handle rate limits during a MainWP sync?

Mastra's workflow engine manages API rate limits during syncchildsites execution. If the MainWP REST API returns a rate-limit response, the workflow automatically backs off and retries.

Q: Can I build a workflow that runs daily malware scans?

Yes. You can trigger scannetworkmalware on a cron schedule inside Mastra. The workflow can run the scan, check the results, and log any issues to your external monitoring system.

Q: How does Mastra AI protect my WordPress plugin list data?

Your list of active plugins, retrieved via listsiteplugins, is processed within your isolated Mastra deployment. Vinkius handles the credentials securely in a zero-trust MCP sandbox, ensuring your network data is never exposed.

Build automated WordPress maintenance workflows with Mastra AI and the MainWP MCP Server.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect MainWP MCP to Mastra AI

Create your Vinkius account to connect MainWP to Mastra AI and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup MainWP with Mastra AI

Ask AI about this MCP

ChatGPT

Claude

Perplexity

Automate conditional WordPress updates in Mastra AI

WordPress updates fail. That's a fact of life. With Mastra AI, you can build a workflow that runs `list_available_updates` and checks for pending plugin changes. If an update is found, the workflow triggers `upgrade_site_resource` to apply the patch automatically. If the upgrade fails or throws an error, Mastra's built-in retry engine kicks in with exponential backoff. You can set it to try twice more before routing the failure to an admin notification, ensuring you don't leave a site in a broken state.

Scheduled security scans with automatic sync cycles

Security isn't a one-time thing. This MCP Server lets your Mastra agent run scheduled workflows that initiate `sync_child_sites` to get the latest site states. Once synced, the agent immediately triggers `scan_network_malware` to search for malicious files. If malware is detected, the workflow branches. It can automatically pull a list of active plugins using `list_site_plugins` to see if a known exploit is active, giving your team a clean diagnostic trail.

Build self-healing WordPress networks using Mastra AI

When a vulnerability is announced, speed is everything. Your Mastra agent can run `scan_network_vulnerabilities` across your entire network. If any vulnerable plugins are found, the workflow uses conditional logic to match them against the output of `list_site_plugins`. The workflow then automatically triggers `upgrade_site_resource` for the vulnerable asset. This self-healing loop runs in the background, keeping your sites safe without requiring manual clicks in the MainWP dashboard.

Setup guide

Set up MainWP MCP in Mastra AI

Prerequisites

Node.js 18+ and a TypeScript project
@mastra/mcp + @mastra/core packages
Active Vinkius subscription with a valid endpoint token

1

Install dependencies
Run npm install @mastra/mcp @mastra/core plus your preferred model provider (e.g. @ai-sdk/openai).
2

Configure the MCPClient
Create an MCPClient with your Vinkius endpoint as a URL object. Replace [YOUR_TOKEN_HERE] with your token from cloud.vinkius.com.
3

Discover and inject tools
Call mcpClient.listTools() and spread the result into your agent's tools object. All MainWP tools become native Mastra tools.
4

Run with any model
Swap openai("gpt-4o") for any AI SDK-compatible provider. Call agent.generate() and the agent routes tool calls through MCP automatically.

agent.ts

import { MCPClient } from "@mastra/mcp";
import { Agent } from "@mastra/core/agent";
import { openai } from "@ai-sdk/openai";

const mcpClient = new MCPClient({
  id: "mainwp-mcp-client",
  servers: {
    "mainwp-mcp": {
      url: new URL(
        "https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
      ),
    },
  },
});

const agent = new Agent({
  name: "MainWP Agent",
  model: openai("gpt-4o"),
  instructions: "You have access to MainWP tools.",
  tools: {
    ...(await mcpClient.listTools()),
  },
});

const result = await agent.generate(
  "List recent MainWP transactions"
);
console.log(result.text);

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by MainWP. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect MainWP now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about MainWP MCP in Mastra AI

Import the client from `@mastra/mcp` and instantiate it with your Vinkius URL. You can then call `listTools()` and spread them directly into your Mastra agent's tool configuration.

Yes. Mastra supports human-in-the-loop workflows. You can configure the workflow to pause after running `list_available_updates` and wait for admin approval before executing `upgrade_site_resource`.

Mastra's workflow engine manages API rate limits during `sync_child_sites` execution. If the MainWP REST API returns a rate-limit response, the workflow automatically backs off and retries.

Yes. You can trigger `scan_network_malware` on a cron schedule inside Mastra. The workflow can run the scan, check the results, and log any issues to your external monitoring system.

Your list of active plugins, retrieved via `list_site_plugins`, is processed within your isolated Mastra deployment. Vinkius handles the credentials securely in a zero-trust MCP sandbox, ensuring your network data is never exposed.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript