{"id":261081,"date":"2025-12-30T19:35:32","date_gmt":"2025-12-30T19:35:32","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/aura-ai\/"},"modified":"2026-05-24T09:14:28","modified_gmt":"2026-05-24T09:14:28","slug":"mai-smart-assistant","status":"publish","type":"plugin","link":"https:\/\/el.wordpress.org\/plugins\/mai-smart-assistant\/","author":20955113,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"1.1.0","stable_tag":"1.1.0","tested":"7.0","requires":"5.8","requires_php":"7.4","requires_plugins":null,"header_name":"MAI Smart Assistant","header_author":"Mairan Anjum","header_description":"Complete AI integration for WordPress with multi-provider support, intelligent chatbot, and content automation","assets_banners_color":"4e5b7e","last_updated":"2026-05-24 09:14:28","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"","header_author_uri":"","rating":0,"author_block_rating":0,"active_installs":0,"downloads":274,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"1.0.2":{"tag":"1.0.2","author":"mairananjum","date":"2025-12-30 20:22:15"},"1.0.3":{"tag":"1.0.3","author":"mairananjum","date":"2026-01-17 08:41:49"},"1.1.0":{"tag":"1.1.0","author":"mairananjum","date":"2026-05-24 09:14:28"}},"upgrade_notice":{"1.1.0":"<p>Major release: streaming chatbot, lazy-loaded widget (CWV win), MCP server with 30 abilities and per-token scope picker for Claude Desktop \/ Cursor \/ ChatGPT Desktop (WP 6.9+ only), Privacy tab + GDPR tools, latest AI models (GPT-5.5, Claude Opus 4.7, Gemini 3.5), automation cron fix.<\/p>","1.0.3":"<p>CSS fixes for theme compatibility and removal of &quot;Powered By&quot; branding.<\/p>","1.0.2":"<p>Critical security update: Fixes SQL injection vulnerabilities, updates dependencies, and resolves all WordPress.org plugin review issues. Recommended for all users.<\/p>","1.0.1":"<p>Initial release of MAI Smart Assistant. Install to start using AI features on your WordPress site.<\/p>"},"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3429815,"resolution":"128x128","location":"assets","locale":"","width":129,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3429815,"resolution":"256x256","location":"assets","locale":"","width":257,"height":257}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3429815,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3429815,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.2","1.0.3","1.1.0"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3429815,"resolution":"1","location":"assets","locale":"","width":1920,"height":952},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3429815,"resolution":"2","location":"assets","locale":"","width":564,"height":899},"screenshot-3.png":{"filename":"screenshot-3.png","revision":3429815,"resolution":"3","location":"assets","locale":"","width":1920,"height":1471},"screenshot-4.png":{"filename":"screenshot-4.png","revision":3429815,"resolution":"4","location":"assets","locale":"","width":1920,"height":4217},"screenshot-5.png":{"filename":"screenshot-5.png","revision":3429815,"resolution":"5","location":"assets","locale":"","width":1920,"height":952}},"screenshots":{"1":"Main dashboard showing AI usage analytics and quick access to all features","2":"Chatbot configuration with appearance customization options","3":"Content generation in the Gutenberg editor with AI assistant","4":"Provider configuration page with multiple AI service options","5":"Training page for managing indexed content and RAG functionality","6":"Live chatbot widget on the frontend with modern, responsive design"}},"plugin_section":[],"plugin_tags":[2353,569,2364,8494,194533],"plugin_category":[],"plugin_contributors":[253048],"plugin_business_model":[],"class_list":["post-261081","plugin","type-plugin","status-publish","hentry","plugin_tags-ai","plugin_tags-automation","plugin_tags-chatbot","plugin_tags-content-generation","plugin_tags-openai","plugin_contributors-mairananjum","plugin_committers-mairananjum"],"banners":{"banner":"https:\/\/ps.w.org\/mai-smart-assistant\/assets\/banner-772x250.png?rev=3429815","banner_2x":"https:\/\/ps.w.org\/mai-smart-assistant\/assets\/banner-1544x500.png?rev=3429815","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/mai-smart-assistant\/assets\/icon-128x128.png?rev=3429815","icon_2x":"https:\/\/ps.w.org\/mai-smart-assistant\/assets\/icon-256x256.png?rev=3429815","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/mai-smart-assistant\/assets\/screenshot-1.png?rev=3429815","caption":"Main dashboard showing AI usage analytics and quick access to all features"},{"src":"https:\/\/ps.w.org\/mai-smart-assistant\/assets\/screenshot-2.png?rev=3429815","caption":"Chatbot configuration with appearance customization options"},{"src":"https:\/\/ps.w.org\/mai-smart-assistant\/assets\/screenshot-3.png?rev=3429815","caption":"Content generation in the Gutenberg editor with AI assistant"},{"src":"https:\/\/ps.w.org\/mai-smart-assistant\/assets\/screenshot-4.png?rev=3429815","caption":"Provider configuration page with multiple AI service options"},{"src":"https:\/\/ps.w.org\/mai-smart-assistant\/assets\/screenshot-5.png?rev=3429815","caption":"Training page for managing indexed content and RAG functionality"}],"raw_content":"<!--section=description-->\n<p>MAI Smart Assistant is a comprehensive AI integration plugin for WordPress that brings the power of artificial intelligence to your website. With support for multiple AI providers and a wide range of features, it's designed to enhance your content creation, user engagement, and site automation.<\/p>\n\n<h4>Key Features<\/h4>\n\n<ul>\n<li><strong>Multi-Provider Support<\/strong> - Seamlessly integrate with OpenAI, Anthropic Claude, Google Gemini, X.AI Grok, and Cohere<\/li>\n<li><strong>Intelligent Chatbot<\/strong> - RAG-based chatbot trained on your site content for accurate, context-aware responses, with optional streaming token-by-token replies<\/li>\n<li><strong>MCP Server for AI Agents<\/strong> - Expose your WordPress site to Claude Desktop, Cursor, ChatGPT Desktop and any Model Context Protocol client via 30 secure abilities. Per-token ability scoping lets you restrict each token to a subset (e.g. read-only, no deletes) \u2014 requires WordPress 6.9+; rest of the plugin works on 5.8+<\/li>\n<li><strong>Content Generation<\/strong> - AI-powered content creation throughout WordPress admin and frontend<\/li>\n<li><strong>Automation &amp; Scheduling<\/strong> - Automated content creation and updates with flexible scheduling<\/li>\n<li><strong>Privacy &amp; GDPR Controls<\/strong> - Dedicated Privacy tab with conversation retention auto-cleanup, IP\/UA opt-out, optional consent gate, and native WordPress GDPR export \/ erase hooks<\/li>\n<li><strong>Analytics Dashboard<\/strong> - Comprehensive tracking of usage, costs, and performance metrics<\/li>\n<li><strong>Security First<\/strong> - Built with WordPress security best practices: proper sanitization, escaping, nonce verification, per-ability capability checks<\/li>\n<li><strong>Performance Optimized<\/strong> - Lazy-loaded chatbot widget (~5.8 KB launcher on page load instead of 30 KB), intelligent response caching, rate limiting, optimized database queries<\/li>\n<\/ul>\n\n<h4>Chatbot Features<\/h4>\n\n<ul>\n<li><strong>Streaming Responses<\/strong> - Token-by-token streaming so visitors see replies as they're generated; auto-falls-back to non-streaming on hosts that buffer responses<\/li>\n<li><strong>Lazy-Loaded Widget<\/strong> - Only a small launcher script (~5.8 KB) is on the page until the visitor clicks; the full bundle loads on-demand to protect Core Web Vitals (INP)<\/li>\n<li><strong>RAG (Retrieval-Augmented Generation)<\/strong> - Chatbot searches your site content to provide accurate answers<\/li>\n<li><strong>Content Search Integration<\/strong> - Automatically finds and presents relevant posts, pages, and products<\/li>\n<li><strong>Conversation History<\/strong> - Maintains context across multiple messages<\/li>\n<li><strong>Optional Consent Gate<\/strong> - Inline checkbox above the input field for GDPR-friendly sites; visitor must tick it before sending; persisted per-browser in localStorage<\/li>\n<li><strong>Customizable Appearance<\/strong> - Full color customization, custom avatars, and styling options<\/li>\n<li><strong>Mobile Responsive<\/strong> - Works perfectly on all devices<\/li>\n<li><strong>Optional Footer<\/strong> - \"Powered by\" footer is disabled by default; enable it only if you want to display custom branding<\/li>\n<\/ul>\n\n<h4>AI Agent \/ MCP Integration (NEW in 1.1.0)<\/h4>\n\n<p>The plugin acts as a <strong>Model Context Protocol server<\/strong> \u2014 connect Claude Desktop, Cursor, ChatGPT Desktop, Continue, Cline or any MCP client to your WordPress site and let it drive your content. Requires WordPress 6.9+ (Abilities API); on older versions the rest of the plugin keeps working unchanged and the MCP tab shows an info notice.<\/p>\n\n<p><strong>30 abilities, grouped by domain:<\/strong><\/p>\n\n<ul>\n<li><strong>Posts (7)<\/strong> - get, list (paginated\/filterable), create, update, delete (trash or permanent), duplicate, set featured image. <code>create-post<\/code> and <code>update-post<\/code> auto-import external <code>&lt;img&gt;<\/code> URLs into your media library so AI-generated posts aren't broken hotlinks.<\/li>\n<li><strong>Taxonomies (6)<\/strong> - list taxonomies, list terms, create\/update\/delete terms, assign terms to posts. Works with categories, tags, and any custom taxonomy (product_cat for WooCommerce, etc.).<\/li>\n<li><strong>Comments (5)<\/strong> - list\/get\/create\/update\/delete. Also covers <strong>WooCommerce reviews<\/strong> \u2014 set <code>type: \"review\"<\/code> and <code>meta: {\"rating\": 5}<\/code> to write the exact shape WC reads from.<\/li>\n<li><strong>Media (3)<\/strong> - upload from URL (with MIME sniffing for extensionless CDN URLs), get attachment metadata, delete.<\/li>\n<li><strong>Site introspection (2)<\/strong> - list post types, get site info (URL, language, timezone, WP\/PHP versions). No secrets returned.<\/li>\n<li><strong>Plugin-native (7)<\/strong> - search site content, generate AI text, index for RAG, list\/run automation rules, list configured providers (no API keys returned), get analytics summary.<\/li>\n<\/ul>\n\n<p><strong>Security model:<\/strong><\/p>\n\n<ul>\n<li>Bearer-token authentication with SHA-256-hashed storage. Plaintext shown exactly once at creation, never again.<\/li>\n<li><strong>Three-layer permissions:<\/strong> (1) token validates at transport; (2) per-token ability allowlist \u2014 if the token wasn't granted access to that specific tool, the AI client never sees it in <code>tools\/list<\/code> and <code>tools\/call<\/code> is rejected; (3) per-ability WordPress capability check runs against the user the token is bound to.<\/li>\n<li>Destructive operations (delete-post \/ delete-term \/ delete-media \/ delete-comment \/ <code>force: true<\/code>) are MCP-annotated so client UIs prompt for confirmation.<\/li>\n<li>Sideload helper blocks private\/loopback IPs (RFC1918, 127.0.0.1, 169.254.169.254 cloud-metadata, etc.) to prevent SSRF, and caps download size at 25 MB.<\/li>\n<\/ul>\n\n<p>The plugin admin includes step-by-step setup guides for Claude Desktop (incl. Microsoft Store install), Claude.ai web, ChatGPT Desktop, Cursor, Continue (VS Code\/JetBrains), Cline, and a generic raw-HTTP section for custom integrations.<\/p>\n\n<h4>Content Generation<\/h4>\n\n<ul>\n<li><strong>Gutenberg Integration<\/strong> - AI assistant directly in the block editor<\/li>\n<li><strong>Classic Editor Support<\/strong> - Seamless integration with the classic WordPress editor<\/li>\n<li><strong>WooCommerce Integration<\/strong> - Generate product descriptions, features, and marketing content<\/li>\n<li><strong>Multiple Content Types<\/strong> - Support for posts, pages, products, and custom post types<\/li>\n<li><strong>Template System<\/strong> - Pre-built templates for common content types<\/li>\n<\/ul>\n\n<h4>Security &amp; Performance<\/h4>\n\n<ul>\n<li><strong>WordPress Standards Compliant<\/strong> - Follows all WordPress.org coding and security guidelines<\/li>\n<li><strong>SQL Injection Protection<\/strong> - Proper use of $wpdb-&gt;prepare() with dynamic placeholders<\/li>\n<li><strong>XSS Prevention<\/strong> - All outputs properly escaped with esc_html(), esc_url(), esc_attr()<\/li>\n<li><strong>Input Sanitization<\/strong> - All inputs sanitized using WordPress core functions<\/li>\n<li><strong>Rate Limiting<\/strong> - Built-in protection against API abuse<\/li>\n<li><strong>Caching System<\/strong> - Intelligent caching to reduce API costs and improve performance<\/li>\n<li><strong>Local Assets<\/strong> - Required JavaScript libraries are bundled locally; no remote CDN assets are loaded<\/li>\n<\/ul>\n\n<h4>Supported AI Providers<\/h4>\n\n<ul>\n<li><strong>OpenAI<\/strong> - GPT-5.5 \/ GPT-5.5 Mini (latest), GPT-5 series, GPT-4.1, plus legacy GPT-4o \/ GPT-4 \/ GPT-3.5 Turbo for accounts that still have access<\/li>\n<li><strong>Anthropic<\/strong> - Claude Opus 4.7 (incl. 1M-token context variant), Claude Sonnet 4.6, Claude Haiku 4.5, plus legacy Claude 3.x models<\/li>\n<li><strong>Google Gemini<\/strong> - Gemini 3.5 Flash (latest), Gemini 3.1 Pro (up to 2M token context), Gemini 2.5 series, plus legacy Gemini 1.5<\/li>\n<li><strong>X.AI<\/strong> - Grok 4 (latest), Grok 3 \/ 3 Mini, Grok 2 series, Grok Code Fast<\/li>\n<li><strong>Cohere<\/strong> - Command A (2025), Command R+ \/ R series, plus embedding models for RAG<\/li>\n<\/ul>\n\n<p>Model availability depends on your provider account, plan, and regional access. Configure models per-feature in the plugin settings.<\/p>\n\n<h4>Automation &amp; Scheduling<\/h4>\n\n<ul>\n<li><strong>Intelligent Content Generation<\/strong> - Create blog posts, articles, and product descriptions automatically<\/li>\n<li><strong>Advanced Scheduler<\/strong> - Flexible scheduling with timezone support, blackout dates, and time windows<\/li>\n<li><strong>Queue System<\/strong> - Robust queue with retry logic, exponential backoff, and priority handling <\/li>\n<li><strong>SEO Integration<\/strong> - Automatic SEO optimization for Yoast SEO, Rank Math, and All in One SEO<\/li>\n<li><strong>Custom Fields<\/strong> - Populate ACF and JetEngine custom fields automatically<\/li>\n<li><strong>Image Generation<\/strong> - DALL-E 3 integration for automated featured images with style control<\/li>\n<li><strong>Quality Controls<\/strong> - Content scoring, duplicate detection, and uniqueness validation<\/li>\n<li><strong>Budget Management<\/strong> - Daily and monthly cost limits with auto-pause on budget exceeded<\/li>\n<li><strong>Failure Handling<\/strong> - Email notifications, automatic retries, and configurable failure behaviors<\/li>\n<li><strong>Monitoring Dashboard<\/strong> - Track rule performance, costs, success rates, and execution history<\/li>\n<\/ul>\n\n<h4>Use Cases<\/h4>\n\n<ul>\n<li><strong>Customer Support<\/strong> - Intelligent chatbot that answers questions using your site content<\/li>\n<li><strong>Content Marketing<\/strong> - Generate blog posts, product descriptions, and marketing copy<\/li>\n<li><strong>E-commerce<\/strong> - Automated product descriptions and customer support<\/li>\n<li><strong>Documentation<\/strong> - Interactive help system for complex products or services<\/li>\n<li><strong>Lead Generation<\/strong> - Engage visitors with intelligent conversations<\/li>\n<\/ul>\n\n<h3>External Services<\/h3>\n\n<p>This plugin connects to third-party AI provider APIs to function. You must configure API keys from at least one of the following services:<\/p>\n\n<p><strong>OpenAI API<\/strong>\n* Service: https:\/\/platform.openai.com\/\n* Privacy Policy: https:\/\/openai.com\/policies\/privacy-policy\n* Terms of Service: https:\/\/openai.com\/policies\/terms-of-use\n* Data transmitted: User messages, site content for indexing, generation prompts\n* Purpose: AI text generation, chat completion, embeddings creation<\/p>\n\n<p><strong>Anthropic API (Claude)<\/strong>\n* Service: https:\/\/www.anthropic.com\/\n* Privacy Policy: https:\/\/www.anthropic.com\/legal\/privacy\n* Terms of Service: https:\/\/www.anthropic.com\/legal\/terms\n* Data transmitted: User messages, site content for indexing, generation prompts\n* Purpose: AI text generation, chat completion<\/p>\n\n<p><strong>Google Gemini API<\/strong>\n* Service: https:\/\/ai.google.dev\/\n* Privacy Policy: https:\/\/policies.google.com\/privacy\n* Terms of Service: https:\/\/policies.google.com\/terms\n* Data transmitted: User messages, site content for indexing, generation prompts\n* Purpose: AI text generation, chat completion, embeddings creation<\/p>\n\n<p><strong>X.AI API (Grok)<\/strong>\n* Service: https:\/\/x.ai\/\n* Privacy Policy: https:\/\/x.ai\/legal\/privacy-policy\n* Terms of Service: https:\/\/x.ai\/legal\/terms-of-service\n* Data transmitted: User messages, site content for indexing, generation prompts\n* Purpose: AI text generation, chat completion<\/p>\n\n<p><strong>Cohere API<\/strong>\n* Service: https:\/\/cohere.com\/\n* Privacy Policy: https:\/\/cohere.com\/privacy\n* Terms of Service: https:\/\/cohere.com\/terms-of-use\n* Data transmitted: User messages, site content for indexing, generation prompts\n* Purpose: AI text generation, chat completion, embeddings creation<\/p>\n\n<p><strong>Important Notes:<\/strong>\n* API keys are required to use this plugin - you must sign up with at least one provider\n* All API communications use HTTPS encryption\n* No data is sent to external services except the AI providers you explicitly configure\n* You are responsible for compliance with each provider's terms of service\n* This plugin does not send any tracking or telemetry data to the plugin author<\/p>\n\n<p><strong>MCP Server endpoint (inbound \u2014 NOT an external service)<\/strong><\/p>\n\n<p>As of 1.1.0 the plugin exposes a Model Context Protocol server at <code>\/wp-json\/mai-smart-assistant\/v1\/mcp<\/code>. This endpoint is <strong>inbound only<\/strong>: AI desktop clients (Claude Desktop, Cursor, ChatGPT Desktop) connect <em>to<\/em> your WordPress site. No data is sent <em>from<\/em> your site to a third-party MCP host. The endpoint is disabled until you create a bearer token in MAI Smart Assistant \u2192 MCP. Each token is scoped at creation to Full access OR a subset of the 30 abilities. Every call is then gated by three layers: bearer token at transport, the per-token ability allowlist, and the WordPress capability of the user the token is bound to. Requires WordPress 6.9 or later (Abilities API) \u2014 on older WordPress versions the MCP feature silently no-ops and the rest of the plugin keeps working unchanged.<\/p>\n\n<p><strong>Bundled third-party PHP libraries (no Composer required)<\/strong><\/p>\n\n<p>The MCP server feature is built on two open-source libraries from the WordPress project, vendored unmodified into the plugin's <code>\/vendor\/wordpress\/<\/code> directory. We use our own PSR-4 autoloader to map their namespaces \u2014 no Composer install is required, no upstream code is patched. Source attribution and licenses are also documented in <code>vendor\/README.md<\/code>.<\/p>\n\n<p><strong>WordPress\/mcp-adapter<\/strong>\n* Source: https:\/\/github.com\/WordPress\/mcp-adapter\n* License: GPL-2.0-or-later (compatible with this plugin's GPLv2+)\n* Pinned upstream commit: <code>7cc42a0c1de1937bea6ca9cea56d1b0818e94632<\/code> (2026-05-20, release 0.5.0)\n* Purpose: Bridges the WordPress 6.9 Abilities API to the Model Context Protocol JSON-RPC transport\n* Data transmitted: None \u2014 runs entirely as in-process PHP code; no outbound HTTP<\/p>\n\n<p><strong>WordPress\/php-mcp-schema<\/strong>\n* Source: https:\/\/github.com\/WordPress\/php-mcp-schema\n* License: GPL-2.0-or-later\n* Pinned upstream version: <code>v0.1.1<\/code>\n* Purpose: PHP Data Transfer Objects for MCP protocol message types \u2014 required runtime dependency of mcp-adapter\n* Data transmitted: None \u2014 schema\/validation classes only<\/p>\n\n<h3>Privacy Policy<\/h3>\n\n<p>MAI Smart Assistant is designed with privacy in mind:<\/p>\n\n<ul>\n<li><strong>Local Data Storage<\/strong> - All conversations and analytics are stored locally in your WordPress database. Nothing is sent to the plugin author.<\/li>\n<li><strong>API Communications<\/strong> - The plugin communicates directly with your chosen AI providers using your API keys; data passes through their privacy policies (linked in External Services above), not ours.<\/li>\n<li><strong>No External Tracking<\/strong> - We don't collect or transmit any data to external services beyond the AI providers you configure. No analytics, no telemetry.<\/li>\n<li><strong>MCP Server is Inbound Only<\/strong> - When MCP is enabled, AI clients connect <em>to<\/em> your site over an authenticated endpoint. No data is sent <em>from<\/em> your site to a third-party MCP host.<\/li>\n<li><strong>Conversation Retention<\/strong> - The Privacy tab lets you set an automatic daily purge for chatbot conversations older than N days (default 90; set to 0 to keep forever).<\/li>\n<li><strong>IP \/ User Agent Opt-Out<\/strong> - The Privacy tab lets you disable storing visitor IP and User Agent on new chatbot rows; existing rows are left untouched.<\/li>\n<li><strong>Optional Consent Gate<\/strong> - You can require visitors to tick a consent checkbox before the chatbot accepts their first message. Acceptance is stored client-side (localStorage), not server-side.<\/li>\n<li><strong>GDPR Export and Erase<\/strong> - The plugin registers the standard WordPress <code>wp_privacy_personal_data_exporters<\/code> and <code>wp_privacy_personal_data_erasers<\/code> hooks. Tools \u2192 Export \/ Erase Personal Data will include the visitor's chatbot conversations when you look them up by email.<\/li>\n<li><strong>Admin Purge Action<\/strong> - A one-click \"Purge all conversations\" button in the Privacy tab for full data wipes.<\/li>\n<li><strong>User Control<\/strong> - You have full control over what content gets indexed (Training tab) and which features are enabled (Chatbot, Content, Automation tabs).<\/li>\n<li><strong>Third-Party Services<\/strong> - See \"External Services\" section above for details on the AI provider APIs the plugin connects to.<\/li>\n<\/ul>\n\n<h3>Support<\/h3>\n\n<p>For support, feature requests, and bug reports, please visit our GitHub repository or contact us through the WordPress.org support forums.<\/p>\n\n<h3>Credits<\/h3>\n\n<p>MAI Smart Assistant is developed with \u2764\ufe0f for the WordPress community. Special thanks to all the AI providers who make these amazing technologies accessible to developers and content creators.<\/p>\n\n<!--section=installation-->\n<ol>\n<li>Upload the plugin files to the <code>\/wp-content\/plugins\/<\/code> directory, or install the plugin through the WordPress plugins screen directly.<\/li>\n<li>Activate the plugin through the 'Plugins' screen in WordPress.<\/li>\n<li>Navigate to \"MAI Smart Assistant\" in your WordPress admin menu.<\/li>\n<li>Configure your AI provider API keys in the Providers tab.<\/li>\n<li>Enable the features you want to use (chatbot, content generation, etc.).<\/li>\n<li>(Optional) Review the Privacy tab \u2014 set the conversation retention window, decide whether to log IP\/UA, enable the consent gate if needed for your jurisdiction.<\/li>\n<li>(Optional, WordPress 6.9+) To connect Claude Desktop \/ Cursor \/ ChatGPT Desktop \/ Continue \/ Cline, open the MCP tab, generate a bearer token, copy the endpoint URL, and follow the per-client setup snippets shown right below the token list.<\/li>\n<li>Start using AI features throughout your WordPress site!<\/li>\n<\/ol>\n\n<!--section=faq-->\n<dl>\n<dt id=\"do%20i%20need%20api%20keys%20for%20ai%20providers%3F\"><h3>Do I need API keys for AI providers?<\/h3><\/dt>\n<dd><p>Yes, you'll need API keys from at least one supported AI provider (OpenAI, Anthropic, Google, X.AI, or Cohere). The plugin supports multiple providers, so you can use different providers for different features.<\/p><\/dd>\n<dt id=\"is%20the%20chatbot%20trained%20on%20my%20site%20content%3F\"><h3>Is the chatbot trained on my site content?<\/h3><\/dt>\n<dd><p>Yes! The chatbot uses RAG (Retrieval-Augmented Generation) technology to search your site content and provide accurate, context-aware responses. You can control which content gets indexed through the Training page.<\/p><\/dd>\n<dt id=\"does%20this%20plugin%20work%20with%20woocommerce%3F\"><h3>Does this plugin work with WooCommerce?<\/h3><\/dt>\n<dd><p>Absolutely! MAI Smart Assistant includes dedicated WooCommerce integration for generating product descriptions, features lists, and providing customer support through the chatbot.<\/p><\/dd>\n<dt id=\"is%20my%20data%20secure%3F\"><h3>Is my data secure?<\/h3><\/dt>\n<dd><p>Yes, security is our top priority. All API keys are encrypted before storage, all database queries use proper sanitization, and the plugin follows WordPress security best practices. We never store your AI conversations on external servers.<\/p><\/dd>\n<dt id=\"can%20i%20customize%20the%20chatbot%20appearance%3F\"><h3>Can I customize the chatbot appearance?<\/h3><\/dt>\n<dd><p>Yes! The plugin includes comprehensive customization options including colors, fonts, chat window size, custom avatars, and more. You can match your brand perfectly.<\/p><\/dd>\n<dt id=\"does%20this%20work%20with%20gutenberg%20and%20classic%20editor%3F\"><h3>Does this work with Gutenberg and Classic Editor?<\/h3><\/dt>\n<dd><p>Yes, MAI Smart Assistant works with both the Gutenberg block editor and the Classic Editor, providing AI assistance wherever you create content.<\/p><\/dd>\n<dt id=\"what%20is%20the%20mcp%20server%20and%20how%20do%20i%20use%20it%3F\"><h3>What is the MCP server and how do I use it?<\/h3><\/dt>\n<dd><p>MCP (Model Context Protocol) is an open standard that lets AI desktop apps \u2014 Claude Desktop, Cursor, ChatGPT Desktop, Continue, Cline \u2014 drive your WordPress site directly. After enabling MCP in MAI Smart Assistant \u2192 MCP, you generate a bearer token, paste it into the AI client's config, and the AI gets 30 abilities (create\/update\/delete posts, manage taxonomies, upload media, post WooCommerce reviews, run automation rules, etc.). At token-creation time you choose the token's scope &mdash; Full access, Read-only, Content creation (no deletes), or hand-pick individual abilities via checkbox. Every call is then gated by three layers: bearer token at transport, the per-token ability allowlist, and the standard WordPress capability of the user the token is bound to. The MCP tab includes per-client step-by-step setup guides.<\/p><\/dd>\n<dt id=\"do%20i%20need%20wordpress%206.9%20for%20everything%3F\"><h3>Do I need WordPress 6.9 for everything?<\/h3><\/dt>\n<dd><p>No. The plugin works on WordPress 5.8+. The MCP server feature specifically requires the WordPress 6.9 Abilities API; on older WordPress versions the MCP tab shows an info notice and the rest of the plugin (chatbot, content generation, automation, privacy, analytics) keeps working unchanged.<\/p><\/dd>\n<dt id=\"can%20the%20ai%20agent%20create%20woocommerce%20product%20reviews%20via%20mcp%3F\"><h3>Can the AI agent create WooCommerce product reviews via MCP?<\/h3><\/dt>\n<dd><p>Yes. Use <code>mai\/create-comment<\/code> with <code>type: \"review\"<\/code> and <code>meta: {\"rating\": 5}<\/code> (1\u20135 stars). The comment lands in <code>wp_comments<\/code> with the exact shape WooCommerce reads from for product star ratings.<\/p><\/dd>\n<dt id=\"what%27s%20the%20%2Fvendor%20folder%20i%20see%20in%20the%20plugin%3F\"><h3>What's the \/vendor folder I see in the plugin?<\/h3><\/dt>\n<dd><p>Two open-source libraries from the WordPress.org project (<code>WordPress\/mcp-adapter<\/code> and <code>WordPress\/php-mcp-schema<\/code>, both GPL-2.0-or-later) bundled unmodified so the MCP server works without requiring you to run <code>composer install<\/code>. They're documented in <code>vendor\/README.md<\/code> with pinned commit hashes and source URLs.<\/p><\/dd>\n<dt id=\"how%20does%20the%20plugin%20handle%20gdpr%20and%20user%20privacy%3F\"><h3>How does the plugin handle GDPR and user privacy?<\/h3><\/dt>\n<dd><p>The new Privacy tab (1.1.0+) gives you four controls: (1) automatic conversation retention cleanup on a daily WP-Cron schedule with a configurable retention window; (2) an IP\/User Agent storage opt-out that writes NULL to those columns for new conversations; (3) an optional consent gate that shows a checkbox above the chatbot input field \u2014 visitors must tick it before sending; (4) registered exporter + eraser hooks so that WordPress core's Tools \u2192 Export Personal Data \/ Erase Personal Data screens include chatbot conversations when you look up a visitor by email. There's also a one-click \"Purge all conversations\" button for admins.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>1.1.0<\/h4>\n\n<p><strong>New chatbot UX<\/strong>\n* Added: Streaming chatbot responses \u2014 reply text appears token-by-token instead of after a 3\u20138s wait. Supported on all five providers (OpenAI, Anthropic, Google Gemini, X.AI Grok, Cohere). Auto-falls-back to non-streaming on hosts that buffer responses (some shared hosts \/ Cloudflare proxy).\n* Added: Streaming and non-streaming chat now share the same response cache \u2014 repeat questions get instant cache hits regardless of which endpoint served the first call.\n* Added: Lazy-loaded chatbot widget \u2014 only a ~5.8 KB launcher script is enqueued on page load. The full widget JS (~30 KB) + CSS + jQuery (if needed) load on demand when the user clicks the chat button. Protects Core Web Vitals and INP on pages where the chatbot is enabled but not opened.<\/p>\n\n<p><strong>MCP server (Model Context Protocol)<\/strong>\n* Added: Per-token ability scoping. When creating a bearer token in MAI Smart Assistant &rarr; MCP, admins can now restrict that token to a subset of the 30 available abilities &mdash; either pick individual checkboxes (grouped by domain: Posts, Taxonomies, Comments, Media, Site introspection, Plugin-native) or use one of the presets (\"Read-only\", \"Content creation (no deletes)\", \"Select all\", \"Clear all\"). The AI client only sees tools the token is allowed to use; disallowed tools are hidden from <code>tools\/list<\/code> and rejected at <code>tools\/call<\/code> with a clear error message. Existing tokens (and tokens created with \"Full access\") behave unchanged.\n* Added: MCP server \u2014 exposes the plugin as a Model Context Protocol server so AI desktop apps (Claude Desktop, Cursor, ChatGPT Desktop) can connect to your WordPress site and invoke abilities directly. <strong>30 abilities<\/strong> covering plugin features and full WordPress content management:\n  - Plugin-native (7): search-content, generate-content, index-content (RAG), list-automation-rules, run-automation-rule, list-providers, get-analytics-summary\n  - Posts (7): create-post, get-post, list-posts (paginated with filters), update-post, delete-post (trash or permanent), duplicate-post, set-featured-image\n  - create-post and update-post automatically download any external <code>&lt;img src=\"https:\/\/...\"&gt;<\/code> URLs in the content into the media library and rewrite the URLs to local ones. Avoids hotlinking (broken images when the source disappears, GDPR concerns, lost SEO credit). Opt out with <code>import_external_images: false<\/code>.\n  - Taxonomies (6): list-taxonomies, list-terms, create-term, update-term, delete-term, assign-terms (categories, tags, custom taxonomies)\n  - Site introspection (2): list-post-types, get-site-info (URL\/name\/language\/timezone\/versions \u2014 no secrets)\n  - Media (3): upload-media-from-url, get-media, delete-media\n  - Comments (5): list-comments, get-comment, create-comment, update-comment, delete-comment. Also supports WooCommerce reviews \u2014 pass <code>type: \"review\"<\/code> and <code>meta: {\"rating\": 5}<\/code> to mai\/create-comment and the review lands in the exact shape WooCommerce reads from.\n  - Three-layer security: bearer-token transport gate + per-token ability allowlist (scope picker at token creation: Full access \/ Read-only \/ Content creation \/ hand-pick) + per-ability WordPress capability check (e.g., update-post requires edit_post on that specific post; delete-term requires the taxonomy's delete_terms cap)\n  - Destructive operations (delete-post\/term\/media + force-delete) are annotated so AI clients display a confirmation prompt\n  - Bearer tokens stored as SHA-256 hashes; plaintext is shown exactly once at creation\n  - Requires WordPress 6.9+ (Abilities API). Gracefully no-ops with an info notice on older WordPress; all other plugin features continue to work.\n  - The MCP admin tab includes step-by-step setup guides for Claude Desktop, Claude Desktop (Microsoft Store), ChatGPT Desktop, Cursor, Continue, Cline, plus a generic raw-HTTP section for custom clients.<\/p>\n\n<p><strong>Privacy + GDPR<\/strong>\n* Added: New \"Privacy\" admin tab consolidating retention, IP\/UA opt-out, consent gate, GDPR export\/erase, and a danger-zone \"Purge all conversations\" button.\n* Added: Optional consent gate \u2014 when enabled, the chatbot widget shows an inline consent checkbox above the input field. Visitor must tick it before sending; acceptance persists in localStorage so the gate isn't shown again on that browser.\n* Added: Optional IP \/ User Agent opt-out \u2014 when disabled, new chatbot rows write NULL into the user_ip and user_agent columns. Existing rows are not touched.\n* Added: GDPR exporter and eraser hooks \u2014 Tools \u2192 Export Personal Data and Tools \u2192 Erase Personal Data now include the visitor's chatbot conversations (looked up by email \u2192 WordPress user).\n* Added: Conversation retention auto-cleanup \u2014 a daily WP-Cron job purges chatbot conversations older than the configured retention (default 90 days; set to 0 to keep forever).<\/p>\n\n<p><strong>AI provider models<\/strong>\n* Added: Latest AI models \u2014 OpenAI GPT-5.5 \/ GPT-5.5 Mini, Anthropic Claude Opus 4.7 (incl. 1M-context variant), Claude Sonnet 4.6, Claude Haiku 4.5, Google Gemini 3.5 Flash and Gemini 3.1 Pro.\n* Changed: Older models (GPT-4o family, Claude 3.x, Gemini 1.5) are now labeled \"(Legacy)\" in model dropdowns; they still work for sites that already have access.<\/p>\n\n<p><strong>Reliability<\/strong>\n* Fix: Automation Scheduler is now instantiated before Queue_Manager so the <code>every_5_minutes<\/code> recurrence is registered when the queue cron event is scheduled \u2014 resolves intermittent <code>invalid_schedule<\/code> errors during WP-Cron runs.\n* Fix: Automation_Manager is now booted on every request (including wp-cron.php) so the queue-processor cron callback always resolves.<\/p>\n\n<h4>1.0.3<\/h4>\n\n<ul>\n<li>Added: Advanced automation system with intelligent content generation\n\n<ul>\n<li>Create posts automatically based on rules and schedules<\/li>\n<li>Support for multiple content structures (how-to, listicle, tutorial, review, comparison, case study)<\/li>\n<li>Configurable tone control (professional, casual, friendly, formal, conversational, technical)<\/li>\n<li>Quality validation with content scoring and duplicate detection<\/li>\n<\/ul><\/li>\n<li>Added: Multi-plugin SEO integration (Yoast SEO, Rank Math, All in One SEO)\n\n<ul>\n<li>Automatic meta titles and descriptions<\/li>\n<li>Focus keyword generation<\/li>\n<li>Open Graph and Twitter Card data<\/li>\n<li>Schema markup support<\/li>\n<\/ul><\/li>\n<li>Added: Custom fields support (ACF and JetEngine integration)\n\n<ul>\n<li>Auto-populate custom fields from generated content<\/li>\n<li>Support for all field types (text, number, boolean, select, date, etc.)<\/li>\n<li>Intelligent field value generation based on content context<\/li>\n<\/ul><\/li>\n<li>Added: DALL-E 3 image generation for automated posts\n\n<ul>\n<li>Multiple image styles (photorealistic, illustration, abstract, minimalist, cartoon, vintage, modern, artistic)<\/li>\n<li>Configurable image sizes (1024x1024, 1792x1024, 1024x1792)<\/li>\n<li>Fallback to stock images (Unsplash, Pexels)<\/li>\n<li>Batch image generation support<\/li>\n<\/ul><\/li>\n<li>Added: Advanced scheduler with timezone support and multiple scheduling options\n\n<ul>\n<li>One-time, recurring, specific times, and advanced (cron-like) schedules<\/li>\n<li>Custom intervals (every 15 min, 30 min, 2 hours, 6 hours, 12 hours)<\/li>\n<li>Time windows and blackout dates<\/li>\n<li>Random offset for natural variation<\/li>\n<\/ul><\/li>\n<li>Added: Queue system with retry logic and exponential backoff\n\n<ul>\n<li>Priority queue management<\/li>\n<li>Automatic retries (max 3 attempts)<\/li>\n<li>Exponential backoff (5 min, 15 min, 60 min delays)<\/li>\n<li>Stuck item detection and recovery<\/li>\n<\/ul><\/li>\n<li>Added: Comprehensive analytics and monitoring dashboard\n\n<ul>\n<li>Real-time execution tracking<\/li>\n<li>Cost analysis and budget monitoring<\/li>\n<li>Success\/failure rate tracking<\/li>\n<li>Performance metrics (avg execution time)<\/li>\n<li>Upcoming executions calendar<\/li>\n<\/ul><\/li>\n<li>Added: REST API endpoints for automation management\n\n<ul>\n<li>Full CRUD operations for automation rules<\/li>\n<li>Test execution without creating posts<\/li>\n<li>Enable\/disable rules via API<\/li>\n<li>Queue management endpoints<\/li>\n<\/ul><\/li>\n<li>Changed: Logging is now disabled by default for better performance and security<\/li>\n<li>Changed: Auto-index content setting is now disabled by default<\/li>\n<li>Changed: Improved performance with optimized database queries<\/li>\n<li>Fix: Resolved \"options page not in allowed options list\" error when saving auto-index settings<\/li>\n<li>Fix: Removed \"Powered By\" footer branding from chatbot<\/li>\n<li>Fix: Improved chatbot CSS isolation to prevent theme conflicts<\/li>\n<li>Fix: Added CSS reset for chatbot container<\/li>\n<li>Fix: Optimized uniqueness checking to avoid redundant database queries<\/li>\n<\/ul>\n\n<h4>1.0.2<\/h4>\n\n<ul>\n<li>Security: Fixed SQL injection vulnerabilities in Analytics_Service.php with proper wpdb-&gt;prepare() usage<\/li>\n<li>Security: Verified all AJAX handlers have nonce verification and capability checks<\/li>\n<li>Updated: Chart.js library from v4.4.7 to v4.5.1 (latest stable)<\/li>\n<li>Fixed: Renamed JavaScript global objects to use unique MAISMAS_ prefix (WordPress.org compliance)<\/li>\n<li>Removed: load_plugin_textdomain() call (not needed for WordPress 5.8+ on WordPress.org)<\/li>\n<li>Optimized: Removed redundant require_once calls for wp-admin\/includes\/upgrade.php<\/li>\n<li>Documentation: Cohere API usage fully documented in External Services section<\/li>\n<li>WordPress.org ready: All issues from plugin review resolved<\/li>\n<\/ul>\n\n<h4>1.0.1<\/h4>\n\n<ul>\n<li>First stable release<\/li>\n<li>Multi-provider AI integration (OpenAI, Anthropic, Google Gemini, X.AI, Cohere)<\/li>\n<li>Intelligent RAG-based chatbot with vector embeddings<\/li>\n<li>Content generation for posts, pages, and WooCommerce products<\/li>\n<li>Comprehensive analytics dashboard with usage tracking<\/li>\n<li>Security hardening and performance optimization<\/li>\n<li>Full WordPress coding standards compliance<\/li>\n<\/ul>\n\n<h4>1.0.0<\/h4>\n\n<ul>\n<li>Initial beta release<\/li>\n<\/ul>","raw_excerpt":"Complete AI integration for WordPress with multi-provider support, intelligent chatbot, and content automation.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/el.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/261081","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/el.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/el.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/el.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=261081"}],"author":[{"embeddable":true,"href":"https:\/\/el.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/mairananjum"}],"wp:attachment":[{"href":"https:\/\/el.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=261081"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/el.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=261081"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/el.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=261081"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/el.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=261081"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/el.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=261081"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/el.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=261081"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}