WP HealthKit

Install

Works with Claude Code, VS Code, Codex, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/wphealthkit-com-mcp-server

About

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.

Tools

11 read · 0 write · 0 delete · 2 not yet classified

Secrets

1 (API keys, tokens or passwords)

Install scripts

None found

Runs as

Node.js package

Tools (13)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

• audit_plugin

  Trigger a security audit for a WordPress plugin by its wp.org slug. Optionally pass engines: ['performance'] for extended performance analysis (+1 token). Submits to the job queue and polls until complete (up to 20 minutes). Returns the full audit summary.

• audit_plugin_zip

  Audit a WordPress plugin from a local ZIP file. Provide the absolute or relative path to the .zip file. Submits to the job queue and polls until complete (up to 20 minutes). Returns the full audit summary.

• audit_plugins_bulk

  Audit all plugin ZIP files in a local directory. Submits in batches of 10 via the job queue, streams results as each audit completes, and prints a summary table. Useful for auditing an entire plugin suite at once.

• check_plugin

  Look up a plugin's latest security grade, risk level, and findings count from the WP HealthKit directory.

• flag_finding

  Flag a specific finding in an audit as a false positive. The report goes to the WP HealthKit team for review — confirmed patterns result in a scanner rule update preventing this finding in future audits.

• generate_sbom

  Generate a CycloneDX or SPDX Software Bill of Materials (SBOM) for a completed audit. Required for EU Cyber Resilience Act (CRA) compliance. Returns the SBOM JSON.

• get_findings

  Get paginated findings from an audit, optionally filtered by severity or category.

• get_fix_plan

  Get the full Fix Plan for an audit — every finding with impact, remediation guidance, test steps, confidence, and agent-safety flags. Premium-tier audits may include refactorPlan: systemic refactor plans that eliminate a whole class of bug in one coordinated change (do those first). JSON (default) or Markdown.

• get_fix_prompt

  Get AI-ready fix prompts for an audit's findings, batched by severity.

• get_job_status

  Check the status of a queued or in-progress audit job. Returns status (queued/processing/complete/failed), queue position, progress, and the audit result when complete.

• get_report

  Get the status and results of a completed audit by its audit ID. Use get_job_status to check a job's progress instead.

• get_telemetry_stats

  Get aggregated telemetry statistics for a plugin — active installs, version distribution, WP/PHP version breakdown, locale spread, error rates, and daily trend. Requires that your API key is scoped to the plugin or you have a verified plugin claim.

• list_usage

  Check your current usage — audits used this month, tier, and limits.

Signals

Stars

0

Forks

0

Open issues

0

Last commit

Aug 7, 2026 (2 months ago)

Last release

Aug 7, 2026 (2 months ago)

From GitHub (fetched Oct 24, 2026).

Details

Registry name

com.wphealthkit/mcp-server

Version

0.6.4

Auth

Auth not stated, API key

Packages

npm @wphealthkit/mcp-server

License

MIT

Repository

github.com/BuiltByGo/wphealthkit-mcp

Website

wphealthkit.com/docs/mcp

First seen

Oct 24, 2026

Last checked

Oct 24, 2026

Source

Official MCP Registrygithub-graphql