npc01

NPC Maintenance Inspector performs 9-point health diagnostics on your WordPress site directly from the admin dashboard:
<ol>
<li>WordPress core updates — Detect missing core updates.</li>
<li>Plugin updates — List plugins with available updates.</li>
<li>Site Health issues — Extract critical issues from WP standard Site Health API.</li>
<li>PHP version — Warn on end-of-life PHP versions.</li>
<li>Error log analysis — Summarize debug.log entries and save a one-click backup to uploads/ for safe review.</li>
<li>File integrity — Detect suspicious code patterns in core files (eval / base64_decode / etc.) by comparing checksums against the WordPress.org Checksum API.</li>
<li>Suspicious files — Find unexpected PHP files in wp-content/uploads/, with built-in whitelist for known legitimate plugin files (Ajax Load More templates, WP STAGING index.php, AIOS firewall rules, etc.).</li>
<li>SSL certificate — Check days until expiration (warn under 30 days, critical at 0).</li>
<li>File permissions — Check critical files like wp-config.php, .htaccess, wp-content/.</li>
</ol>
Operational features:
<ul>
<li>History — Keep the last 10 diagnoses as a custom post type.</li>
<li>Scheduled auto-check — Run daily, weekly, or monthly via WP Cron.</li>
<li>Email notifications — Send alerts only on critical issues.</li>
<li>One-click debug.log clear — Truncate the log while preserving file permissions.</li>
<li>Optional AI report — Generate maintenance suggestions via Anthropic Claude API. Disabled by default; opt-in via a wp-config.php constant.</li>
</ul>
The plugin is locked to the user who activated it and to the original site URL, so it stays inert after backup restores to a different domain.
<h3>External services</h3>
This plugin can optionally connect to the Anthropic Claude API (<code>https://api.anthropic.com/v1/messages</code>) to generate AI-powered maintenance reports. This is the only external service the plugin ever contacts.
When is data sent?
<ul>
<li>When you manually click the “Generate AI Report” button in the admin.</li>
<li>When an automatic scheduled diagnosis detects a critical issue and notifications are enabled. In that case the AI report is generated once per critical run and attached to the notification email.</li>
</ul>
What data is sent?
<ul>
<li>The diagnosis result text only:
<ul>
<li>Site URL, site name, WordPress version, theme name</li>
<li>Counts of plugin updates / Site Health issues / error-log entries</li>
<li>PHP version, memory limit, max upload size</li>
<li>SSL expiration date and days remaining</li>
<li>File-permission status of critical files</li>
<li>Suspicious code patterns detected (function names like <code>eval</code>, <code>base64_decode</code>)</li>
</ul>
</li>
<li>No login data, no post content, no personal data of site visitors.</li>
</ul>
Is the data sent unconditionally?
No. The AI feature is completely disabled unless you define <code>NPCMI_API_KEY</code> in <code>wp-config.php</code>. Without that constant, no external connection to Anthropic is ever made.
Anthropic’s terms and privacy policy:
<ul>
<li>Consumer Terms of Service: https://www.anthropic.com/legal/consumer-terms</li>
<li>Privacy Policy: https://www.anthropic.com/legal/privacy</li>
<li>Commercial Terms of Service (if you use a paid API plan): https://www.anthropic.com/legal/commercial-terms</li>
</ul>
By enabling the AI report feature (i.e. by defining <code>NPCMI_API_KEY</code>), you agree to Anthropic’s applicable terms.

NPC Maintenance Inspector

WordPress maintenance health-check tool with 9-point diagnostics, history tracking, and optional AI-powered reports.

Roland Bende

This plugin adds a custom REST API endpoint that returns information about the current versions of the WordPress core, active themes, and active plugins.
Useful for remote WordPress site version monitoring & logging, CI/CD checks, and automated update workflows.
Both endpoints require authentication via a Bearer token.
Endpoint 1: Status — outdated items only
<ul>
<li>HTTP method: <code>GET</code></li>
<li>API endpoint: <code>/wp-json/vercheck-api/v1/status</code></li>
</ul>
Returns only items that have available updates: 
– WordPress core update status. 
– A list of plugins with available updates. 
– A list of themes with available updates.
Endpoint 2: Audit — full inventory
<ul>
<li>HTTP method: <code>GET</code></li>
<li>API endpoint: <code>/wp-json/vercheck-api/v1/audit</code></li>
</ul>
Returns a complete inventory of everything installed: 
– WordPress core version info. 
– All installed themes (active and inactive) with version and update info. 
– All installed plugins (active and inactive) with version and update info.
Example response — /v1/status:
<pre><code> {
 "core": {
 "current_version": "6.4.3",
 "new_version": "6.5",
 "is_outdated": true
 },
 "outdated_themes": [],
 "outdated_plugins": [
 {
 "name": "Example Plugin",
 "current_version": "1.2.0",
 "new_version": "1.3.0"
 }
 ]
 }
</code></pre>
Example response — /v1/audit:
<pre><code> {
 "core": {
 "current_version": "6.4.3",
 "new_version": "6.5",
 "is_outdated": true
 },
 "themes": [
 {
 "name": "Twenty Twenty-Four",
 "slug": "twentytwentyfour",
 "current_version": "1.3",
 "new_version": null,
 "is_outdated": false,
 "is_active": true
 }
 ],
 "plugins": [
 {
 "name": "Example Plugin",
 "slug": "example-plugin/example-plugin.php",
 "current_version": "1.2.0",
 "new_version": "1.3.0",
 "is_outdated": true,
 "is_active": true
 }
 ]
 }
</code></pre>
Additional info: 
The unique request ID for each API call is returned in the response header:
<pre><code>X-Request-ID: {{unique-request-id}}
</code></pre>

VerCheck API

A REST API endpoint for checking WordPress core, theme, and plugin versions.

NPC Maintenance Inspector vs VerCheck API