AI Workflow Automation – AI Agent Hub

AI-powered WordPress hub with 70+ abilities, built-in MCP server, role-based access control, JWT auth, workflow builder, and WooCommerce support.

What can AI Agent Hub do?

• 10 independently toggleable modules – enable only what you need.
• 70+ registered abilities covering posts, pages, media, users, custom post types, REST API discovery, site diagnostics, WordPress settings, and WooCommerce.
• External Abilities – automatically discovers and integrates abilities from WordPress core and third-party plugins via the Abilities API. Any plugin that registers abilities with wp_register_ability() is instantly available in your workflows, access control, and MCP server.
• Built-in MCP server – expose abilities to AI agents over JSON-RPC 2.0.
• JWT authentication – secure MCP and REST API access with token-based auth (no passwords over the wire).
• Workflow builder – combine abilities into reusable workflows from the admin dashboard or the post editor meta box.
• Multi-provider AI – connect OpenAI, Google Gemini, or Anthropic Claude via the WordPress AI Client for content analysis.
• Role-based access control – assign abilities per WordPress role so each MCP connection only exposes what that user is allowed to use.

Modules

Each module can be independently enabled or disabled from the AI Agent Hub dashboard.

1. AI Content Steward (6 abilities)

AI-powered content analysis and improvement for posts and pages.

• awfah-content/analyze-post – Summarize a post with readability and improvement suggestions.
• awfah-content/generate-feature-image – Generate an AI-ready feature image prompt and alt text.
• awfah-content/generate-excerpt – Create a concise, SEO-friendly excerpt.
• awfah-content/focus-keywords – Extract relevant focus keywords for SEO targeting.
• awfah-content/lsi-keywords – Generate related LSI keyword ideas.
• awfah-content/suggest-titles – Generate alternative title ideas.

2. Posts Manager (13 abilities)

Full CRUD for WordPress posts, categories, and tags.

• awfah-posts/wp-posts-search – Search and filter posts with pagination.
• awfah-posts/wp-get-post – Get a post by ID.
• awfah-posts/wp-add-post – Create a new post.
• awfah-posts/wp-update-post – Update an existing post.
• awfah-posts/wp-delete-post – Delete a post.
• awfah-posts/wp-list-categories – List all post categories.
• awfah-posts/wp-add-category – Add a new category.
• awfah-posts/wp-update-category – Update a category.
• awfah-posts/wp-delete-category – Delete a category.
• awfah-posts/wp-list-tags – List all post tags.
• awfah-posts/wp-add-tag – Add a new tag.
• awfah-posts/wp-update-tag – Update a tag.
• awfah-posts/wp-delete-tag – Delete a tag.

3. Pages Manager (5 abilities)

CRUD operations for WordPress pages.

• awfah-pages/wp-pages-search – Search and filter pages with pagination.
• awfah-pages/wp-get-page – Get a page by ID.
• awfah-pages/wp-add-page – Create a new page.
• awfah-pages/wp-update-page – Update an existing page.
• awfah-pages/wp-delete-page – Delete a page.

4. Media Manager (7 abilities)

Upload, update, and manage media files.

• awfah-media/wp-media-search – Search and filter media with pagination.
• awfah-media/wp-get-media – Get a media item by ID.
• awfah-media/wp-upload-media – Upload a new media file (base64 or URL).
• awfah-media/wp-update-media – Update media metadata (title, alt text, caption).
• awfah-media/wp-delete-media – Delete a media item.
• awfah-media/wp-get-media-sizes – Get all available image sizes for a media item.
• awfah-media/wp-get-media-file – Get the actual file content of a media item.

5. Users Manager (7 abilities)

Search, create, and manage WordPress users.

• awfah-users/wp-users-search – Search and filter users.
• awfah-users/wp-get-user – Get a user by ID.
• awfah-users/wp-create-user – Create a new user.
• awfah-users/wp-update-user – Update a user.
• awfah-users/wp-delete-user – Delete a user.
• awfah-users/wp-get-current-user – Get the currently authenticated user.
• awfah-users/wp-list-roles – List all available user roles.

6. Custom Post Types Manager (6 abilities)

CRUD operations for any registered custom post type.

• awfah-cpt/wp-list-post-types – List all registered post types.
• awfah-cpt/wp-cpt-search – Search items of a specific post type.
• awfah-cpt/wp-cpt-get – Get a single CPT item by ID.
• awfah-cpt/wp-cpt-add – Create a new CPT item.
• awfah-cpt/wp-cpt-update – Update a CPT item.
• awfah-cpt/wp-cpt-delete – Delete a CPT item.

7. REST API Tools (3 abilities)

Discover and execute any WordPress REST API endpoint dynamically.

• awfah-rest-api/list-api-functions – List all available REST API endpoints that support CRUD.
• awfah-rest-api/get-function-details – Get detailed metadata for a specific endpoint and method.
• awfah-rest-api/run-api-function – Execute any REST API endpoint with provided parameters.

8. Site Info & Diagnostics (4 abilities)

View site info, plugins, themes, and users at a glance.

• awfah-site/get-site-info – Detailed info about the WordPress site (name, URL, version, plugins, themes, users).
• awfah-site/get-plugin-info – Info about active plugins.
• awfah-site/get-theme-info – Info about the active theme.
• awfah-site/get-user-info – Info about the current authenticated user.

9. Settings Manager (3 abilities)

View and update WordPress site settings.

• awfah-settings/wp-get-settings – Get WordPress general site settings.
• awfah-settings/wp-update-settings – Update general settings (title, tagline, timezone, etc.).
• awfah-settings/get-site-settings – Get all settings including reading, discussion, media, permalinks, and privacy.

10. AI Store Manager – WooCommerce (25 abilities)

Full WooCommerce management through AI. Requires WooCommerce to be active.

• Products: search, get, add, update, delete.
• Product categories: list, add, update, delete.
• Product tags: list, add, update, delete.
• Product brands: list, add, update, delete.
• Orders: search.
• Reports: coupons totals, customers totals, orders totals, products totals, reviews totals, sales.

Coming Soon

• AI Support Desk – Summarize comment threads, suggest reply drafts, categorize support requests.
• AI Automation Recipes / Workflows – Rule-based AI automations triggered by WordPress events.

Connecting AI Agents via MCP

AI Agent Hub includes a built-in MCP (Model Context Protocol) server that lets external AI agents interact with your WordPress site. The MCP endpoint is:

Any MCP-compatible AI client can connect and use all enabled abilities as tools.

AI Agent Hub Dashboard

The plugin adds a top-level «AI Agent Hub» menu in WordPress admin with:

1. Connected AI Agents – shows which AI providers are available (Auto, OpenAI, Gemini, Claude) and their status.
2. Modules & Features – 11 module cards with independent on/off toggles.
3. Workflow Builder – search abilities, drag them into a workflow, preview the prompt, and save.
4. Documentation – built-in getting started guide.
5. Contact Support – direct link to support.

Post Editor Meta Box

On every post and page edit screen, the AI Content Steward meta box provides:

• Provider selection (Auto, OpenAI, Gemini, Claude).
• Ability checkboxes to select which analyses to run.
• Editable prompt preview that updates as you select abilities.
• One-click workflow execution.
• Save workflows for reuse.

Connecting AI Agents

Claude Desktop

Claude Desktop supports MCP servers natively. To connect it to your WordPress site:

Step 1: Generate a JWT token

Send a POST request to your site to get a JWT token:

This returns a token valid for 30 days (2592000 seconds). Copy the token value from the response.

Step 2: Configure Claude Desktop

Open the Claude Desktop config file:

• Windows: %APPDATA%\Claude\claude_desktop_config.json
• macOS: ~/Library/Application Support/Claude/claude_desktop_config.json

Add this MCP server entry:

Step 3: Restart Claude Desktop

After saving the config, restart Claude Desktop. All enabled abilities will appear as tools. You can then ask Claude to manage posts, pages, media, users, settings, and WooCommerce from natural language.

Claude Code (CLI)

Claude Code can also connect to MCP servers. Add the server using:

Then set the JWT token as an environment variable before running Claude Code:

Cursor / Windsurf / Other MCP Clients

Any editor or AI tool that supports MCP can connect. The setup is similar:

1. Generate a JWT token (see above).
2. Point the MCP client to: https://your-site.com/wp-json/awfah_mcp/mcp
3. Use the @anthropic-ai/mcp-wordpress-remote transport package, or configure your client’s native MCP settings with the URL and JWT token.
4. The authentication header format is: Authorization: Bearer <your-jwt-token>

Postman / API Testing

You can test the MCP endpoint directly using Postman or any HTTP client. The MCP protocol uses JSON-RPC 2.0 over HTTP.

Step 1: Initialize a session

Send a POST request to https://your-site.com/wp-json/awfah_mcp/mcp with:

• Header: Authorization: Bearer <your-jwt-token>
• Header: Content-Type: application/json
• Body: { «jsonrpc»: «2.0», «id»: 1, «method»: «initialize», «params»: { «protocolVersion»: «2024-11-05», «capabilities»: {}, «clientInfo»: { «name»: «postman», «version»: «1.0» } } }

Copy the Mcp-Session-Id header from the response.

Step 2: Send initialized notification

Send a POST with the session ID header:

• Header: Mcp-Session-Id: <session-id-from-step-1>
• Body: { «jsonrpc»: «2.0», «method»: «notifications/initialized» }

Step 3: Call a tool

Now you can call any ability as a tool:

Note: In MCP tool names, the / in ability IDs is replaced with -. So awfah-site/get-site-info becomes awfah-site-get-site-info.

JWT Token Management

AI Agent Hub provides three JWT endpoints:

• Generate token: POST /wp-json/jwt-auth/v1/token – Pass username, password, and optional expires_in (seconds, min 3600, max 2592000).
• List tokens: GET /wp-json/jwt-auth/v1/tokens – List all active tokens (requires authentication).
• Revoke token: POST /wp-json/jwt-auth/v1/revoke – Revoke a specific token (requires authentication).

Tokens are signed with HS256 using a per-site secret key stored in the awfah_jwt_secret_key option. Each token includes the user ID, issued-at time, expiration, and a unique JTI.

Role-Based MCP Access

AI Agent Hub provides role-based access control for MCP connections. This means different WordPress users see different abilities depending on their role.

How it works:

1. An administrator configures which abilities each WordPress role can access via the Access Control tab in the AI Agent Hub dashboard.
2. When an AI client connects via MCP, it authenticates as a specific WordPress user (using JWT or Application Password).
3. The plugin checks that user’s role and only exposes the abilities assigned to that role.
4. The AI client can only see and execute the allowed abilities — everything else is hidden.

Example scenarios:

• Administrator — Full access to all 70+ abilities including post CRUD, site settings, user management, media, WooCommerce, and content analysis.
• Editor — Content-focused abilities only (e.g. analyze posts, generate excerpts, suggest titles, focus keywords). No access to site settings, user management, or destructive operations.
• Author / Contributor — Can be fully restricted or given a minimal subset of abilities as configured by the site admin.

Setting up role-based access:

1. Go to the AI Agent Hub dashboard in WordPress admin.
2. Click the Access Control tab.
3. Select a role from the dropdown.
4. Check or uncheck abilities to grant or revoke access for that role.
5. Click Save. Changes take effect immediately for all MCP connections using that role.

Multiple MCP connections:

You can create multiple MCP connections in your AI client config, each authenticating as a different WordPress user. For example:

• A «full-access» connection using an administrator account.
• A «content-only» connection using an editor account.

This lets you switch between permission levels depending on the task at hand.

Application Passwords (Alternative)

If you prefer not to use JWT, you can also authenticate with WordPress Application Passwords (available in WordPress 5.6+):

1. Go to Users > Profile > Application Passwords.
2. Create a new application password.
3. Use Basic Auth with your username and the application password.

However, JWT is recommended for MCP connections as it avoids sending credentials with every request.