Documentation

What Ordomat is

Ordomat is a WordPress plugin that exposes your site to an assistant as named, documented tools. The assistant guesses nothing: it calls a tool, with precise parameters, and gets an answer.

The plugin contains no artificial intelligence. It calls no service. It waits to be spoken to, and checks every request before answering it.

Install the plugin

Two minutes, no command line.

1. Download the packageVersion 1.0.0, from this page. Free, under the GPL, no account to create.
2. Upload itIn your admin: Plugins, Add New Plugin, Upload Plugin, then Install Now.
3. ActivateA new Ordomat menu appears in the left column.
4. Open the connectorOrdomat, Settings. It arrives closed: pick the usage mode that suits you.

Connect your assistant

The Connection screen builds the command for you. There is nothing to compose by hand.

1. Create a tokenOrdomat, Connection, New token. Choose its profile and how long it lasts.
2. Copy the commandIt appears once, token included. The token is never shown again.
3. Paste it into a terminalOnce. Claude Code remembers the connection.

claude mcp add ordomat \
  --transport http https://your-site.com/wp-json/ordomat/v1/mcp \
  --header "Authorization: Bearer your-token"

For another client, the same screen offers a configuration file to drop in. And if your client reads the WordPress core Abilities API, the tools are declared there too.

The 87 tools

Sorted into eleven families. Each tool states its scope, its profile and its parameters, and each one can be switched off on its own from the Tools screen.

A tool moves to Pro as soon as it writes executable code, touches the whole database, schedules a deferred action, or reads operational data.

What you can ask for

You state the outcome you want, in your own words. Turning that into tool calls is the assistant's job.

The three barriers

Every call passes them in order. The strictest one wins, always. The assistant can never do more than the account it borrows.

1. The site usage modeSet in the settings, it applies to everyone. In read-only mode, no writing tool exists at all, not even for an administrator.
2. The token profileEach token carries its own. A read token stays a read token, whatever account created it.
3. The WordPress account's capabilitiesThe token borrows an account. What that account cannot do in the admin, the assistant cannot do either.

Tokens

Your password never leaves WordPress. The assistant presents a token, and nothing else.

• It shows once, when created.
• It is stored hashed: reading your database will not recover it.
• It carries a profile, a lifetime and an account.
• It is revoked in one click, and stops working at once.
• An emergency stop closes the connector and revokes every token at the same time.

Dry run before writing

Every tool that changes something can first describe what it would do, touching nothing. The parameter is injected by the framework, never copied tool by tool: none of them can forget it.

{
  "tool": "content_replace",
  "arguments": {
    "search": "old name",
    "replace": "new name",
    "dry_run": true
  }
}

The answer lists what would change, item by item. Nothing is written until you say yes. Bulk replace even refuses to run if no preview was asked for.

The log

Every call is recorded, refusals included: the account, the tool, the originating address, the duration, what changed. Secrets are masked as they are written, never stored in the clear.

The Log screen filters by tool, by account and by outcome. The dashboard draws from it the count for the last seven days and the success rate.

Compatibility

Ordomat reads content where it actually lives, not where an assumed format would put it. That is what lets audits and link checks tell the truth on a site built with a page builder.

Licence and updates

The free plugin is downloaded from this site, and every version stays available there. The What's new page says what changed.

Ordomat Pro updates from our own server, and only while your licence is active. The Licence screen shows its state, the product bought, the renewal date and the sites using it. A place frees up and moves elsewhere at any time.

What Ordomat does not do

Ordomat lives inside WordPress. It does not replace SSH access, and we would rather write it here than let you find out.

• System cron, the server's scheduled tasks rather than WordPress ones.
• Server configuration, the PHP version, system extensions.
• DNS, certificates, domain redirection.
• Your host's backups, and restoring them.
• Bulk email, which belongs to your email tool.

What's new

1.0.3 30 September 2026

• The connection screen gives one path per client, Claude Code, a single project, Claude Desktop and Cursor, or by hand, each with its own three steps.

1.0.2 30 September 2026

• Comment moderation is paginated and searchable: hundreds of pending comments no longer take four round trips.
• A featured image can be set from the library, which no tool allowed before.
• Discussion settings are writable: link threshold, disallowed words, words that hold a comment.
• A category description can be written, where many themes display it.
• A redirect loop is named instead of leaving the site for dead, and a link refused by a remote server is no longer counted as broken.
• The connection test tries both headers, reads every schema as a client would, calls a tool for real, and asks the internet for every folder the plugin writes into.
• An email warns a token's owner the first time it answers from a new address.
• The log filters by kind of action, and the dashboard announces the widest mode.

1.0.1 30 September 2026

• Fixed: tools with no parameter sent an empty JSON array instead of an empty object. A strict client then rejected the whole list, and no tool was usable at all.
• Security: the backup folder is now proven closed before a backup is written into it. On nginx its guard files are never read, and a full copy of the site became downloadable.
• Fixed: the token is also read from the raw request headers. Hosts that strip the Authorization header before PHP no longer need an .htaccess rule.
• Fixed: a replace preview is kept in the database rather than a transient, which an object cache could lose. Unknown and expired no longer say the same thing.
• Fixed: link checking stops after a time limit and returns what it found, instead of never answering when a remote server goes silent.

1.0.0 25 September 2026

• First public release.
• 87 tools in eleven families, each one switchable on its own.
• MCP entry point in JSON-RPC over the REST API, mirrored in the core Abilities API.
• Hashed tokens, with a profile and a lifetime, plus an emergency stop.
• Dry run required before any bulk write.
• A log of every call, refusals included.
• French and English.