The Robot Suit

Learn to code. Learn to prompt. Learn to survive in the woods.

Hey @jasontheadams @WordPress Since MCP Adapter 0.7.0, requests in a 2025-06-18 or 2025-11-25 session without an MCP-Protocol-Version header get HTTP 400. 0.6.x accepted them, and the 2025-11-25 spec lets a server use the version negotiated at initialization instead: modelcontextprotocol.io/spec… Could the adapter fall back to the session's version, or add a filter, so clients or proxies that drop the header don't break? Also: posting a JSON-RPC response object logs PHP Warning: Undefined array key "method" (McpWireOrchestrator.php:409).

Hey @mattyp @bot bug report for Grok Bot's MCP connector: tool calls arrive without the MCP-Protocol-Version header (the session ID is sent). The MCP spec says clients MUST send it on every request after initialize, and WordPress MCP Adapter 0.7.0 rejects calls without it (HTTP 400). Spotted this when connecting Grok Bot to WordPress sites via my plugin that was developed to provide a governance layer for AI agents to act on sites under human-approved rules. I've updated my plugin to address this issue, but ideally it should be addressed on your end 🫶

I think there's a huge market opportunity in building software that acts as a governance layer for AI agents. Many organisations are waiting for robust guard rails that give them confidence to give AI agents access their systems. The fear of agents accidentally breaking things, destroying data or causing security issues is very real, particularly for SMEs. I had this same fear, so I developed a governance layer for all of our sites running on @WordPress. It allows me to use agents from any of the frontier AI labs with confidence. The plugin provides a governance layer that lets AI agents act on the site under human-approved rules. It has policies for each action (with allow, require approval, or deny), an approval inbox, email and/or @SlackHQ notifications, changes tracking, audit trail, kill switch, and governed MCP connections. Agents can create posts, build pages, make design changes, manage products, and more. I built the plugin in my spare time over a couple of weeks, including time for extensive testing and numerous rounds of auditing. It works so well that it feels like magic. About 10 years ago, I was developing and selling WordPress plugins. I've been building a lot again recently, and to say that my development capabilities have been supercharged by AI is an understatement. What a time to be alive.