Smart MCP Changelog: Free and Pro Release Notes

1.0.7Latest

November 14, 2026

NewA simpler Connect page. Pick your app and follow the steps; the best way to connect is already chosen for each app.
NewFor Claude Desktop, the Codex app and coding tools, copy one ready-made message, paste it into the app and it connects itself.
NewThe page shows when your app has connected, with tips if it has not.
NewEach AI app gets its own key, with a list of connected apps and when each was last used. Your existing key keeps working.
NewA check at the top of the Connect page shows what your site still needs for AI apps, with one-click fixes.
NewA cleaner Chat page laid out like the Claude and ChatGPT desktop apps: chats and search on the left, the conversation in the middle and a round message box. The steps the AI takes fold into one line you can open.
ImprovedClearer steps for Claude Desktop, ChatGPT, Codex and Claude Code.
ImprovedGetting Started: pick your AI app and the Connect page opens with it ready, and the last step offers example requests that open the Chat with the text filled in.
FixedAPI keys now work on hosts that move the Authorization header.
FixedFinishing Getting Started without turning on AI apps no longer switches off the MCP server.

1.0.6

November 11, 2026

NewChange one heading, paragraph or section of a post without touching the rest. Works in the block editor and the Classic Editor.
NewCreate or edit a post with its categories, tags, featured image, excerpt, slug and schedule date in one step.
NewAdd images inside posts from Openverse or Pixabay, with alt text and a credit caption. Pixabay needs a free API key in Settings.
NewInternal linking. The AI links new posts to related content and can find broken links. Choose which links each content type allows in Settings.
NewWorks with custom post types, taxonomies, custom fields (ACF, Secure Custom Fields and others) and shortcodes.
NewManage navigation menus, categories and tags, duplicate posts, and add text to the start or end of a post.
NewStop button in the chat, and a link to every item the AI creates or changes.
NewSearchable model picker with updated recommended models. Models you already saved are not changed.
ImprovedThe AI never publishes or unpublishes unless you ask, and only reports an action as done when it really worked.
ImprovedWooCommerce tools appear only when WooCommerce is active.
FixedSome Wikimedia image uploads failed.

1.0.5

October 28, 2026

NewSystem check on the Chat page tests your hosting and AI connection.
ImprovedClear error messages in the chat with Continue and Try again buttons, and a timer while the AI works.
ImprovedOne header across all Smart MCP pages.
ImprovedThe Telegram bot shows typing while it works and sends the answer as one message.
FixedLong replies could stop on some hosts.
FixedImages from links without a file extension could not be uploaded.

1.0.4

October 26, 2026

NewElementor 4 design: color and font tokens, global classes, site-wide tag styles, per-device and hover styles, and animations.
NewThe AI checks its own work for empty headings, missing alt text, heading order and broken links, and fixes what it caused. Check any page or the whole site.
NewUndo a whole conversation. Every post and page the AI changed in that chat goes back.
NewBigger changes to live pages are made on a private draft copy with a preview link.
NewThe AI learns your builder, brand colors, fonts and main menu before it builds, so new pages match your site.

1.0.3

October 22, 2026

ImprovedClearer messages when your AI provider returns an error.
ImprovedThe chat explains its time limit for very large jobs and suggests connecting an AI app for them.

1.0.2

October 16, 2026

ImprovedNew plugin name and setup videos on the WordPress.org page.

1.0.1

October 15, 2026

NewChoose which account AI clients work as on Smart MCP > Connect, or let them use your administrator account, limited to content.
NewA guided setup with three approval levels: everything runs, risky actions ask first, or every change asks first.
ImprovedThe AI Providers page tests your key and lists the models you can use.
ImprovedChange Elementor page settings from the chat.
ImprovedClearer setup steps for Claude, ChatGPT, Cursor and other AI apps.

1.0.0

October 15, 2026

First release on WordPress.org.
AI chat workspace in wp-admin with streaming answers and conversation history.
Built-in MCP server for Claude, ChatGPT, Cursor and other MCP clients.
Tools for content, media, menus, taxonomies, Elementor pages and WooCommerce.
Block editor, Site Editor, revisions, custom fields and comment tools.
Approvals for risky actions, and an Audit Log with filters and CSV export.
Telegram bot.

1.0.3Latest

November 14, 2026

NewWorks with most other plugins and themes: it uses the actions a plugin offers and can look up where a plugin keeps its settings.
NewSaves what it learned about a plugin as a draft skill for you to review and publish.
NewSquirrly SEO support for titles, descriptions, keywords and social fields.
NewDivi components: build them, choose which fields each page can change, fill their slots and see where each one is used.
NewDivi icons: finds icons by name, including icon sets you uploaded.
NewA much stronger security scan: plugin files are checked against the official WordPress.org copies, and it finds backdoors, web shells, hidden code, injected scripts and spam in posts and settings, card skimmers, harmful .htaccess rules, suspicious administrator accounts, files anyone can download (config backups, database dumps, debug logs) and pending updates.
NewRestore changed WordPress and plugin files from the official copy, checked before it is written and undoable.
NewScheduled security scans, daily or weekly, with an email when new serious problems appear.
NewA Security page in wp-admin (Smart MCP > Security): the latest scan, a Scan now button, one-click repair, quarantine and ignore for each problem, the scan schedule and the quarantine list.
NewFile change monitoring: shows files added or changed since the last scan in themes, must-use plugins and plugins not from WordPress.org.
NewSecurity hardening with one-click fixes you can undo: turn off file editing in wp-admin, block PHP in uploads, block XML-RPC, hide the user list and author pages from visitors, and add security headers. It also checks debug display, an "admin" user, HTTPS and the database prefix.
NewWarns about plugins removed from WordPress.org (and says when it was for a security issue) and plugins not updated for over two years.
NewAn optional weekly security summary email that shows what was checked, even when all is well.
NewRemove harmful code from posts and settings in one click: only the injected part is removed (a script, iframe, hidden links or PHP), the rest stays as it was, and you can undo it.
NewOptional blocklist check: with your own free Google Safe Browsing key, each scan checks whether your site is listed as harmful.
NewBlock backup, log and config files from the web in one click (old wp-config copies, .sql dumps, logs, .env and .git), checked with a real request.
NewAn optional limit on REST API requests from visitors who are not logged in, to slow down bots. Logged-in users and AI apps connected with a key are never limited.
NewKnown security holes: the scan and the chat check your installed plugins and themes against a public vulnerability database, matched to your version, and show the version that fixes each one.
ImprovedBig sites are scanned in short steps, so the scan never runs into hosting time limits.
ImprovedWhen it changes a plugin's settings, only the settings you asked about are written; the rest stay exactly as they were.
ImprovedDivi variables can build on other variables, including math such as doubling a base size, and loops are refused.
FixedThe plugin vulnerability check works again. It no longer depends on a service that now needs a paid key.
FixedDivi global library items placed on a page now stay in sync with the library item.
FixedQuarantined files are now kept where they cannot be run or downloaded from the web.
FixedQuarantining a file inside a subfolder no longer fails.
FixedThe AI can now quarantine and restore files and check plugins for known vulnerabilities from the chat and AI apps.
FixedPHP run from the chat can no longer stop the whole request by calling exit or die.
FixedAfter you approve the site on WP Smarto, the license page now shows the license as active right away, without reloading.

1.0.2

November 11, 2026

FixedSome REST API requests from the chat, such as /wp/v2/posts/123, were refused.
FixedInstalling or updating plugins, themes or WordPress core from the chat could break the reply.

1.0.1

October 28, 2026

NewDivi 5 support. Build and edit Divi pages and modules, Theme Builder templates, the Divi Library, global colors, fonts and presets, and Theme Options.
ImprovedLong Telegram jobs show the bot as typing and send the answer as one message.

1.0.0

October 26, 2026

First release: manage plugins, themes and core updates, malware scan, backups, users and roles, site settings, a file manager, PHP and WP-CLI tools, a Skills library, and administrator access for AI clients.

What's new in Smart MCP