Open-source WordPress MCP server and Elementor MCP server plugin with safe, typed AI automation.
Three tools with basic schemas and descriptions, but significant gaps in parameter documentation and output schema clarity. discover-abilities and get-ability-info are read-only discovery tools with minimal parameter requirements. execute-ability is a write tool with confirmation logic but lacks detailed output schema documentation. No tool descriptions explain what data structures are returned or how to chain tools together. Parameter descriptions are present but sparse (e.g., '_' parameter in discover-abilities is marked 'Unused' rather than explained). No evidence of error handling guidance, recovery paths, or validation rules in descriptions.
Discover the WordPress abilities available in this system. Returns the list of ability names (which are descriptive, e.g. elementor-mcp/update-post). Call this first to find the exact ability name for a task, then copy the name verbatim; use get-ability-info if a name is unclear.
Execute one ability by its exact name with parameters matching its schema. Use only names returned by discover-abilities; do not construct names from categories. Prefer a specific, scoped ability over general code execution.
Get detailed information about one ability, including its description and full input schema, so you can build valid parameters for execute-ability.
Output schemas not documented. No tool describes what fields are returned, their types, or how to extract IDs for chaining downstream calls. LLMs cannot plan multi-step workflows without knowing response structure.
Parameter descriptions are minimal or unhelpful. The '_' parameter in discover-abilities is labeled 'Unused; pass an empty string', this is not a description, it's a workaround. Parameters lack type hints, constraints, or format guidance.
No error handling guidance. Descriptions do not explain what happens on failure (e.g., ability not found, permission denied, execution error). LLMs have no recovery path.
Tool composition unclear. discover-abilities returns 'ability names' but get-ability-info and execute-ability expect 'ability_name', no documentation explains the exact format, whether names are case-sensitive, or how to handle ambiguous matches.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | D | 50 | 2026-07-28+ | v2 |
confirmation_reason parameter in execute-ability is required but its purpose and format are vague. Description says 'A very short single-line question to the user' but does not explain how this integrates with the MCP protocol or whether it triggers a confirmation flow.