A project of Dynamic.ooo

Give your AI agent full access to WordPress.

Novamira is an MCP server — the open protocol that connects AI agents to external tools. Your AI runs PHP inside WordPress, queries the database, calls plugin APIs, reads and writes files.

For WordPress developers. On staging environments. With backups. Always.

novamira

Simulated output for illustration purposes. Actual results depend on your site and AI model.


5 primitives

This is all the AI gets.
It builds the rest.

Execute PHP Run arbitrary code inside the WordPress process. Full access to $wpdb, every function, every loaded plugin.
Read & Write Files Read any file on the server. PHP writes go to a dedicated sandbox — if anything crashes, Novamira detects it and recovers automatically.
Edit Files Find-and-replace on existing files. Same syntax validation and crash recovery for PHP.
Delete & Toggle Delete files or directories. Disable and re-enable sandbox files without deleting them.
List Directory Explore the filesystem. Glob filtering, recursive traversal, configurable depth.
Security

Full access. Full responsibility.

Novamira runs PHP inside your WordPress process — full access to every function, the database, the filesystem, and the network.

File operations are sandboxed: PHP writes go to a dedicated directory, syntax is validated, crashes are auto-recovered. Direct code execution via eval() bypasses these guardrails — any code the AI runs can do anything PHP can do.

Authentication is enforced. Every request requires a WordPress Application Password over HTTPS. Only admin users can connect. There is no anonymous access.

Recommended for staging environments with backups. You choose the model, you provide the API key, you review the output. We provide the plugin.


Safety nets

Things break.
You recover.

Crash recovery

If a sandbox file causes a fatal error, Novamira detects it, disables the file, and restores your site automatically. Won’t catch everything — database changes or wp-config.php edits via eval() are beyond its reach. But for the PHP it writes, your site comes back.

Safe mode

Append ?dynmcp_safe_mode=1 to any URL and all sandbox files are bypassed instantly. Manual kill switch when you need it.

30-second limit

Every eval() call has a hard time limit. No runaway scripts, no infinite loops eating your server.

Sandbox dashboard

Every file the AI creates is listed in the admin panel. Inspect, disable, or delete them one by one. You stay in control.


The loop

Every conversation makes the system smarter.

1
Discover

The AI scans your site, reads plugin source code, maps APIs. It learns your specific stack.

2
Prototype

Tests PHP live, iterates, fixes errors. It understands the actual implementation, not the docs.

3
Save

What works becomes a permanent new tool. Syntax-validated, crash-guarded, loaded on every request.

4
Expand

Next session, the tool is already there. Any agent on the same site can use it. The system grows.


Knows your stack

Your plugins become
its tools.

The AI detects your installed plugins, reads their source code, and builds tools on top of them. Every plugin becomes an extension of what the AI can do.

WooCommerce ACF Yoast SEO Elementor Gravity Forms WPML Contact Form 7 Rank Math Bricks + any plugin & theme

Quick start

Two steps. Two minutes.

1
Install Novamira for WordPress

Activate the plugin and enable AI Abilities in the settings page. This registers the primitives.

2
Connect your AI client

Select your client and add the config. Novamira generates this automatically from the dashboard.

terminal

            
Works with

Any MCP-compatible AI client.

Claude Code Claude Desktop Cursor VS Code + Copilot Windsurf Zed OpenCode Any MCP client

Your WordPress. Your AI.
Nothing in between.

Free, open source, AGPL-3.0. Built for WordPress 6.9+.


Newsletter

Stay in the loop.

Product updates, new abilities, and WordPress × AI insights. No spam.