Vinkius

WordPress Plugin Auditor MCP. Audit Site Plugins Securely. No Admin Passwords Needed.

WordPress Plugin Auditor provides your agent with secure, read-only access to list every plugin on a WordPress site. It returns the name, version number, author, and whether each plugin is active or inactive. Use this MCP for quick security sweeps, compliance checks, and generating detailed maintenance reports without ever needing full admin credentials.

WordPress Plugin Auditor MCP is compatible with Claude Claude
WordPress Plugin Auditor MCP is compatible with ChatGPT ChatGPT
WordPress Plugin Auditor MCP is compatible with Cursor Cursor
WordPress Plugin Auditor MCP is compatible with Gemini Gemini
WordPress Plugin Auditor MCP is compatible with Windsurf Windsurf
WordPress Plugin Auditor MCP is compatible with VS Code VS Code
WordPress Plugin Auditor MCP is compatible with JetBrains JetBrains
WordPress Plugin Auditor MCP is compatible with Vercel Vercel
See Vinkius in Action

Give Claude and any AI agent real-world access

Generate Plugin Inventory

Lists every installed WordPress plugin, providing its name, version number, author, and operational status.

Identify Inactive Plugins

Checks the site to pinpoint plugins that are currently disabled or unused, helping focus cleanup efforts.

Create Maintenance Reports

Gathers structured data on all active and inactive components needed for client-facing status reports.

Audit Security Status

Performs a quick sweep to check plugin statuses, assisting in vulnerability or cleanup planning.

Waiting for input…

AI Agent
WordPress Plugin Auditor

What AI agents can do with WordPress Plugin Auditor with 1 Tool

Use this single tool to gather comprehensive, read-only data on all plugins across any connected WordPress site.

Make your AI actually useful.

Add this MCP to Claude, Cursor, or Windsurf and your AI stops guessing. It gets real tools to look things up, take action, and handle the stuff you keep doing by hand.

Start using WordPress Plugin Auditor MCP

Audit Wordpress Plugins

Lists all installed WordPress plugins, returning the name, version, author, and current active or inactive status for each one.

Security and governance baked right in.

Pick your AI client below to get set up. Just create a Vinkius account, subscribe, and you're instantly up and running. We handle the entire backend infrastructure, delivering out-of-the-box support for HTTPS Streamable, SSE, and OAuth2—zero messy routing required.

WordPress Plugin Auditor MCP is compatible with Claude

Claude AI

1

Open Claude Settings

Go to claude.ai, click your profile icon, then navigate to Customize → Connectors.

2

Add Custom Connector

Click the "+" button and select Add custom connector. Paste your Vinkius endpoint URL:

https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp

Replace [YOUR_TOKEN_HERE] with your token from cloud.vinkius.com. For OAuth-protected servers, expand Advanced settings to add credentials.

3

Start a conversation

Open a new chat. The WordPress Plugin Auditor integration is available immediately — no restart needed.

Choose How to Get Started

Build a custom MCP for your own tools, or connect a ready-made integration from our catalog.

Build Your Own

Turn any API into an MCP. Import a spec, define Agent Skills, or deploy with MCPFusion.

  • Import from OpenAPI, Swagger, or YAML specs
  • Create Agent Skills with progressive disclosure
  • Deploy to edge with MCPFusion framework
  • Built in DLP, auth, and compliance on each call
  • Real time usage dashboard and cost metering
  • Publish to catalog or keep private
Start building

Make Your AI Do More

Start with WordPress Plugin Auditor, then connect any of our 5,200+ other servers whenever your AI needs more. One click, no limits.

  • Use this MCP plus 5,200+ others, all in one place
  • Add new capabilities to your AI anytime you want
  • Connections are secured and governed automatically
  • Track usage and costs across all your servers
  • Works with Claude, ChatGPT, Cursor, and more
  • New servers added to the catalog weekly
WordPress Plugin Auditor MCP server cover

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by WordPress. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

VINKIUS CLOUD

Cloud Hosted

Managed infra

V8 Isolated

Sandboxed per request

Zero-Trust Proxy

No stored credentials

DLP Enforced

Policy on each call

GDPR Compliant

EU data residency

Token Compression

~60% cost reduction

Your data is protected. See how we built it.

The Plugin Inventory Nightmare

When a client asks, "What plugins do we have?" you usually end up logging into multiple dashboards, navigating through the 'Installed Plugins' screen repeatedly. You copy names and versions from one tab, then switch to another dashboard for a different site, only to find yourself with half-copied data and hours wasted.

With this MCP, your agent handles that tedious work instantly. One prompt retrieves all plugin metadata—name, version, author, status—from every site you connect it to. You get clean, structured data ready for a report in seconds.

Get the Full Plugin Status Report with WordPress Plugin Auditor MCP

The manual steps that vanish are the logins, the dashboard clicks, and the copy-pasting across multiple sites. You no longer have to maintain a personal checklist of every single plugin status.

Now, you simply ask your agent what's wrong with the plugins, and it gives you an immediate, actionable list. The process shifts from tedious data collection to quick diagnosis.

What WordPress Plugin Auditor MCP does for your AI

Managing multiple client websites means juggling dozens of plugins. You don't want to give your AI agent the master admin password just to check if a couple of things are outdated or inactive. This MCP solves that risk by giving your agent specific, read-only access.

It lets you ask questions like, "Which plugins haven't been used in three months?" and instantly get a structured list detailing every plugin’s status and version. It works entirely on the assumption that the data is for viewing—the AI client can check inventory, but it cannot delete anything or change settings.

This secure scoping is vital when dealing with sensitive client sites.

If you're used to manually logging into WordPress dashboards just to pull a list of plugins, this changes that. You connect your preferred agent through Vinkius, and the auditing capability becomes an immediate tool in your workflow, letting you gather all necessary plugin metadata for maintenance reporting or vulnerability assessments without touching a single core file.

Built · Hosted · Managed by Vinkius WordPress Plugin Auditor - Audit Installed Plugins Securely
Server ID 019e390d-33ab-73b7-9a4d-20a63079d645
Vinkius Inspector
Compliance Grade A+
Score 100/100
Vinkius Inspector Badge — Score 100/100

Frequently asked questions about WordPress Plugin Auditor MCP

Can WordPress Plugin Auditor MCP delete inactive plugins? +

No, this is a purely read-only tool. It can only audit and report the names, versions, and statuses of installed plugins; it cannot perform any deletion or modification actions.

Does WordPress Plugin Auditor MCP require full admin credentials? +

No. The MCP is designed for secure scoping using native WordPress Application Passwords, meaning you don't have to risk giving out your main administrator password just to read the data.

What information does audit_wordpress_plugins provide? +

The tool provides four key pieces of metadata for every plugin: its name, version number, who wrote it (author), and whether it is currently active or inactive on the site.

Can I use WordPress Plugin Auditor MCP for vulnerability scanning? +

Yes. By providing a complete inventory of names and versions, you can feed that data into other security tools to check for known vulnerabilities associated with those specific plugin versions.

Is this safe for multiple client sites? +

Yes. Because it operates in a read-only capacity using secure scoping methods, it is designed to audit many different WordPress environments without risking data integrity.

Can the AI install or delete plugins with this tool? +

No. This MCP only calls the GET endpoint for plugins. It cannot modify your site's plugin configuration.