Timothy Jacobs

When a network error is encountered, API clients should be able to retry a request without a risk of their request being processed twice. 
WP API Idempotence adds support for clients to include an idempotency key that uniquely identifies that request. If the server detects 
that a request with the same key has already been processed or is currently being processed, the response for the initial request will 
be returned.
For Example:
<pre><code>{
 "title": "My Important Post",
 "content": "This will only go out once!",
 "status": "draft",
 "idempotency_key": "1ced64e9-9537-4b7b-9919-444d9e15e201"
}
</code></pre>
<h4>Configuration</h4>
<ul>
<li>Idempotency key can either be passed in the request header or the request body.</li>
<li>The idempotency key name can be customized.</li>
<li>Change the HTTP methods the idempotency key is supported for. Defaults to <code>POST</code>, <code>PUT</code>, <code>PATCH</code>.</li>
</ul>
A sample request interface is included to demonstrate the selected configuration.
<h4>Developers</h4>
The plugin includes two actions to modify the dependency injection container (DIC) and insert custom services.
The <code>wp_api_idempotence_initialize_container_builder</code> action allows you to modify the Dependency Injection builder itself and 
the <code>wp_api_idempotence_initialize_container</code> action allows you to override dependencies. For example:
<pre><code>add_action( 'wp_api_idempotence_initialize_container', function( $container ) {
 $container->set( '_dataStore', DI\object( 'YourName\CustomDataStore' ) );
} );
</code></pre>
Under the hood, the plugin is made up of a <code>DataStore</code>, <code>RequestHasher</code>, <code>ResponseSerializer</code> and <code>RequestPoller</code>.
The <code>DataStore</code> is primarily responsible for retrieving or storing an idempotent request. By default, requests 
are stored in a custom database table. This could be substituted for a custom driver by implementing the <code>DataStore</code> 
interface. For example a Redis server.
The <code>RequestHasher</code> produces a unique hash for a <code>WP_REST_Request</code> object. This hash is based off of the contents of 
the request, not for the object via <code>spl_object_hash</code> or similar. This can also be substituted by implementing the 
 RequestHasher interface.
The <code>ResponseSerializer</code> converts a <code>WP_REST_Response</code> or <code>WP_Error</code> object back and forth from a string representation. 
The default JSON serializer supports filtering the serialization process using the <code>wp_api_idempotence_serialized_response_data</code> 
and <code>wp_api_idempotence_attach_serialized_response_data</code> filters. See <code>src/ResponseSerializer/Filtered.php</code>. 
The entire serializer can be substituted by implementing the <code>ResponseSerializer</code> interface.
Finally, the <code>RequestPoller</code> class polls the data store for a response if it is determined that an idempotent request 
is currently being processed when another request with the same key arrives. By default, the data store is polled 
every seconds a maximum of 15 times to try and retrieve a response object. If no response is found, an error with code 
 rest_duplicate_idempotency_key will be returned. This can be adjusted by overwriting the <code>poll.sleepSeconds</code> and 
 poll.maxQueries in the DIC. The <code>RequestPoller</code> can also be entirely subsituted by implementing the <code>RequestPoller</code> 
interface.
<h4>Contributing</h4>
This plugin is hosted on <a href="https://github.com/iron-bound-designs/wp-api-idempotence" rel="nofollow ugc">GitHub</a>. Issues and pull requests are welcomed.

WP REST API Idempotent Requests

Allow REST API clients to safely retry requests in case of network errors without risk of the request being processed twice.

fabiomontenegro1987

Enable Abilities for MCP gives you full control over which WordPress Abilities are available to AI assistants through the MCP (Model Context Protocol) Adapter.
WordPress 6.9 introduced the Abilities API, allowing external tools to discover and execute actions on your site. This plugin extends that functionality by registering a comprehensive set of content management abilities and providing a simple admin interface to toggle each one on or off.
<h4>Features</h4>
<ul>
<li>58 abilities organized in 13 categories: Core, Read, Write, SEO (Rank Math), SEO (SEOPress), SEO (Yoast), Utility, Multilanguage, Custom Post Types, WooCommerce, The Events Calendar, Code Snippets, and JetEngine Options Pages</li>
<li>WooCommerce integration — dedicated abilities to manage products, orders, and customers using the native WooCommerce API (HPOS-compatible, formally declared)</li>
<li>The Events Calendar integration — list, get, create, and update events with venue, organizer, and date filters</li>
<li>Admin dashboard with toggle switches for each ability</li>
<li>Per-ability control — expose only what you need</li>
<li>Secure by design — proper capability checks, input sanitization, and per-post permission validation</li>
<li>WPCS compliant — fully passes WordPress Coding Standards (phpcs)</li>
<li>MCP-ready — all abilities include <code>show_in_rest</code> and <code>mcp.public</code> metadata</li>
</ul>
<h4>Available Abilities</h4>
Read (safe, query-only):
<ul>
<li>Get posts with filters (status, category, tag, search)</li>
<li>Get single post details (content, SEO meta, featured image)</li>
<li>Get categories, tags, pages, comments, media, and users</li>
</ul>
Write (create & modify):
<ul>
<li>Create, update, and delete posts</li>
<li>Create categories and tags</li>
<li>Create pages</li>
<li>Moderate comments</li>
<li>Reply to comments as the authenticated user</li>
<li>Upload images from external URLs to the media library (with optional auto-assign as featured image)</li>
</ul>
SEO — Rank Math:
<ul>
<li>Get full Rank Math metadata for any post/page (title, description, keywords, robots, Open Graph, SEO score)</li>
<li>Update Rank Math metadata: SEO title, description, focus keyword, canonical URL, robots, Open Graph, primary category, pillar content</li>
</ul>
SEO — SEOPress:
<ul>
<li>Get full SEOPress metadata for any post/page (title, description, focus keyword, robots, canonical, Open Graph, Twitter Card)</li>
<li>Update SEOPress metadata: SEO title, description, focus keyword, canonical URL, robots directives, Open Graph, Twitter Card</li>
</ul>
SEO — Yoast SEO:
<ul>
<li>Get full Yoast SEO metadata for any post/page (title, description, focus keyphrase, canonical, robots, Open Graph, Twitter Card)</li>
<li>Update Yoast SEO metadata: SEO title, description, focus keyphrase, canonical URL, robots (noindex, nofollow, advanced), Open Graph, Twitter Card</li>
<li>Get Yoast sitemap index — fetch and parse the sitemap index, returning all registered sitemap URLs with last modification date</li>
</ul>
Custom Post Types:
<ul>
<li>List all registered custom post types with configuration and taxonomies</li>
<li>Get items from any CPT with filtering, search, and taxonomy queries</li>
<li>Get full details of a CPT item including all meta fields (WooCommerce, ACF, JetEngine, etc.)</li>
<li>Create, update, and delete CPT items with taxonomy and meta field support</li>
<li>Get CPT taxonomies with their terms</li>
<li>Assign taxonomy terms to CPT items</li>
</ul>
WooCommerce:
<ul>
<li>List products with price, SKU, stock status, categories, and type</li>
<li>Get full product detail including gallery, attributes, and variations</li>
<li>Update product price, sale price, stock quantity, and status</li>
<li>List orders with customer, total, status, and date (HPOS-compatible)</li>
<li>Get full order detail: line items, billing/shipping, totals, and notes</li>
<li>Update order status with optional note</li>
<li>List customers with email, name, total spent, and order count</li>
</ul>
The Events Calendar:
<ul>
<li>List events with start/end date, venue, organizer, and date range filter</li>
<li>Get full event detail with resolved venue address and organizer contact</li>
<li>Create new events with title, description, dates, venue, and organizer</li>
<li>Update existing events</li>
</ul>
Utility:
<ul>
<li>Search and replace text in post content</li>
<li>Site statistics overview (includes custom post type counts)</li>
<li>Update any post meta field by exact key (with protected internal key blocklist)</li>
</ul>
<h4>Requirements</h4>
<ul>
<li>WordPress 6.9 or later (Abilities API)</li>
<li>MCP Adapter plugin installed and configured</li>
<li>PHP 8.0 or later</li>
</ul>

Enable Abilities for MCP


I really appreciate this plugin it does what it said it does and I didn't have to waste tokens creating my own abilites.


Very Helpful and Worked out of the box.

Manage which WordPress Abilities are exposed to MCP servers. Supports WooCommerce, The Events Calendar, and any custom post type.

WP REST API Idempotent Requests vs Enable Abilities for MCP