The fork's Pro merge left Backup/Restore/Migrate/Sync as placeholders (4 naive files): no restore path, migrate-site was a canned-success stub, sync-to-live touched only wp_options, and the connector exposed only a /status route. This makes the story real at a bounded scope and fixes the wiring/doc drift found in a feature-parity review against upstream Pro. - search-replace engine: byte-accurate serialized fixer (length-delta, never unserializes), JSON escaped+unescaped URL pair replace (_elementor_data), and a site-wide table walker; legacy EMCP_Tools_Search_Replace now delegates. - backups: streamed DB export (bounded chunks, explicit-column INSERTs), richer .emcp manifest (format version, site_url, php/wp/db, DB sha256 + row stats), opt-in include_files bundling of uploads/plugins/themes. - restore: hardened statement-aware importer (skips transaction-control directives, ';'-in-string safe); new Restore_Engine (hash-verified -> import -> URL rewrite -> traversal-guarded file placement); admin Restore/Download/ Delete + restore-history panel (nonce + manage_options, admin-only). - migrate-site: real push to a standalone HMAC connector (2 MB signed packets -> assemble -> verify -> self-contained restore -> pollable job). confirm:true required; direction "pull" returns unsupported. - sync-to-live: real site-wide serialized-safe URL search-replace across options/posts/postmeta/comments/term+usermeta + prefixed tables, ledger- recorded for History rollback. - remove 3 never-registered ghost tools (list-syncable-changes, sync-content-item, discard-sync-change) from catalog/slugs/seeding. - AI Chat: canonical module id 'ai-chat' (admin toggle now works, legacy ai_chat read-back), /emcp/v1/chat route gated on module state, default on. - docs: correct README/readme.txt over-claims (WooCommerce op list, addon slugs, atomic wording, SEO/forms counts), tidy pro-manifest.txt; bump 3.16.0. Tests: extended tests/test-migrate-packager.php (8 suites, all passing) covering byte-accurate SR, export/import round trip, directive-skip, quote-safe split, and packager create/read/list/delete. Co-Authored-By: Claude <[email protected]>
13 KiB

Heretek Control Core: Unlocked Machine Rites
The Sanctified, Enterprise-Grade Model Context Protocol (MCP) Server for WordPress, Elementor & Gutenberg
Maintained by Heretek AI · 100% Open Source · All 269+ Pro Machine Rites Unlocked
"From the moment I understood the weakness of my flesh, it disgusted me. I craved the strength and certainty of steel. I aspired to the purity of the Blessed Machine."
⚙️ About Heretek Control Core
Heretek Control Core is an unrestricted, telemetry-free community edition of the Model Context Protocol (MCP) server for WordPress and Elementor, originally authored by Mian Shahzad Raza as elementor-mcp.
While the upstream free edition offers foundational builder endpoints, critical enterprise capabilities (in-editor cyber-theurgy AI chat, custom Gutenberg block forge, project memory, runtime agent doctrines, 8 form integrations, 6 SEO suites, unlimited themer quotas, and offline STC bundles) were cordoned behind commercial paywalls and remote licensing servers.
What Heretek Control Core delivers:
- 🔓 100% Pro Machine Rites Unlocked: All commercial capabilities are compiled directly into the core. Zero license keys, zero subscriptions, and complete disarmament of Freemius telemetry.
- 🛡️ Zero Telemetry & External Nags: Stripped of phone-home analytics, account verification screens, and external licensing interceptors.
- 🔄 Native In-Dashboard GitHub Updates: The integrated updater checks
Heretek-AI/heretek-control-core/releasesdirectly from your WordPress admin dashboard with one-click in-place updates. - 📦 Self-Contained Repository: No private submodules or missing directories. Everything required to run, test, and forge ships directly in this repository.
- 🤝 100% Protocol Compatible: Preserves standard tool identifiers (
emcp-tools/*), database formats, and REST routes. Existing agent configurations, Claude Desktop profiles, and client scripts work seamlessly without modification.
⚡ All 269+ Machine Rites Unlocked
| Forge Domain | Upstream Free | Heretek Control Core | Sanctified Capabilities |
|---|---|---|---|
| Total MCP Tools | ~188 | 269+ | Complete coverage of WordPress core, builders, forms, SEO, and commerce |
| Cyber-Theurgy (AI Chat) | ❌ Paid | ✅ Included | Floating AI assistant inside Elementor & Gutenberg; BYO LLM key or local Ollama |
| Forge Block Builder | ❌ Paid | ✅ Included | Custom Gutenberg block generator with sandbox compiler & live testing |
| Elementor Widget Builder | ❌ Paid | ✅ Included | Sandbox-backed custom Elementor widget generation & validation |
| Heretek Themer | 1 per type | Unlimited | Headers, footers, single posts, and archives with exclude rules & dynamic tags |
| Engram Memory | ❌ Paid | ✅ Included | Persistent memory CPT, admin approval workflow, and context injection |
| Adept Doctrines (Skills) | ❌ Paid | ✅ Included | Runtime SKILL.md catalog with list-skills & get-skill discovery tools |
| Deep Page Snapshot | Basic | Full Audits | Automated WCAG AA color contrast math, heading hierarchy, and SEO audits |
| Form Engines (8) | ❌ Paid | ✅ Included | WPForms, Gravity Forms, Fluent, Ninja, Formidable, MetForm, SureForms, Forminator |
| SEO Suites (6) | ❌ Paid | ✅ Included | Yoast SEO, Rank Math, AIOSEO, SEOPress, The SEO Framework, SureRank |
| Themes & Addons | ❌ Paid | ✅ Included | GeneratePress, GenerateBlocks, Blocksy, BeTheme, Essential Addons, Premium, UAE |
| WooCommerce Logistics | ❌ Paid | ✅ Included | woo-read/woo-write: products, orders, customers, product CRUD + order updates (catalog widgets via add-pro-widget) |
| STC Archives (Migrate) | ❌ Paid | ✅ Included | Portable .emcp site packages, database export/import, and deep URL search/replace |
| Sanctified Visuals & Blueprints | 5 Prompts | Full Library | 50 Brand Kits, 60 Industry Landing Page Prompts, and Premium Templates |
🚀 Quick Start
1. Installation
- Download the latest release
.zipfrom Releases. - In your WordPress admin: navigate to Plugins → Add New → Upload Plugin, select the
.zip, and click Install Now. - Click Activate Plugin.
- Access the Heretek AI menu in your WordPress admin sidebar.
- Notice the ARCH-HERETEK UNLOCKED badge in the header — all machine rites are immediately active.
2. Sanctified In-Dashboard Updates
This core features native in-dashboard update checking powered directly by GitHub Releases:
- Go to Dashboard → Updates or click the Check for updates button on the Heretek AI → Cogitator Deck screen.
- WordPress will notify you when a new release is available from
Heretek-AI/heretek-control-coreand allow one-click in-place updates without ever prompting for third-party licenses.
🔮 Connect Your Noosphere Client
The plugin exposes an MCP server over stdio or HTTP streaming via the bundled WordPress MCP Adapter.
Claude Desktop
Add this configuration to your claude_desktop_config.json:
{
"mcpServers": {
"wordpress": {
"command": "npx",
"args": ["-y", "@msrbuilds/emcp-proxy@latest"],
"env": {
"WP_URL": "https://your-site.com",
"WP_USER": "your_username",
"WP_APP_PASSWORD": "xxxx xxxx xxxx xxxx"
}
}
}
}
Tip: You can also generate a 1-click .mcpb bundle directly from the Noosphere Uplink tab in the plugin admin.
Claude Code
Connect Claude Code directly to your WordPress forge:
claude mcp add wordpress -- npx -y @msrbuilds/emcp-proxy@latest
Cursor
In your workspace root, create or edit .cursor/mcp.json:
{
"mcpServers": {
"wordpress": {
"command": "npx",
"args": ["-y", "@msrbuilds/emcp-proxy@latest"],
"env": {
"WP_URL": "https://your-site.com",
"WP_USER": "your_username",
"WP_APP_PASSWORD": "xxxx xxxx xxxx xxxx"
}
}
}
}
Direct HTTP Streaming (OAuth / App Password)
{
"mcpServers": {
"wordpress": {
"url": "https://your-site.com/wp-json/mcp/emcp-tools-server",
"headers": {
"Authorization": "Basic <base64(username:app_password)>"
}
}
}
}
🧩 Comprehensive Integrations Suite
When an integrated plugin is active on your WordPress site, its corresponding MCP machine rites automatically awaken:
1. E-Commerce (WooCommerce)
Two dispatcher tools register only when WooCommerce is active:
emcp-tools/woo-read:list-products,get-product,list-orders,get-order,list-customers,system-status.emcp-tools/woo-write:create-product,update-product,delete-product,update-order. Coupons, reviews, tax rates, shipping zones, and payment-gateway management are not yet exposed; WooCommerce widgets are placed throughadd-pro-widget(catalog tierwoo).
2. Form Engines (8 Supported)
Inspect schemas, review field arrangements, and pull submissions:
- WPForms (
emcp-tools/wpforms-read) - Gravity Forms (
emcp-tools/gravityforms-read) - Fluent Forms (
emcp-tools/fluentforms-read) - Ninja Forms (
emcp-tools/ninjaforms-read) - Formidable Forms (
emcp-tools/formidable-read) - MetForm (
emcp-tools/metform-read) - SureForms (
emcp-tools/sureforms-read) - Forminator (
emcp-tools/forminator-read)
3. SEO Suites (7 Supported: Slim SEO free + 6 Pro)
Full read & write control over meta titles, descriptions, OpenGraph/Twitter social cards, focus keywords, robots indexing, and canonical tags:
- Yoast SEO (
yoast-read,yoast-write) - Rank Math SEO (
rankmath-read,rankmath-write) - All in One SEO (AIOSEO) (
aioseo-read,aioseo-write) - SEOPress (
seopress-read,seopress-write) - The SEO Framework (
seoframework-read,seoframework-write) - SureRank (
surerank-read,surerank-write) - Slim SEO (
slimseo-read,slimseo-write, free tier)
4. Themes & Custom Builders
- GeneratePress: Customizer colors, typography, layout presets, and elements (
generatepress-read,generatepress-write). - GenerateBlocks: Block catalog discovery + block defaults (
generateblocks-read,generateblocks-write). - Blocksy: Blocks catalog, extensions, and header/footer builder integration.
- BeTheme & BeBuilder: Read/write BeTheme options and construct BeBuilder content trees.
- Elementor Addon Packs: Essential Addons (
essential-addons-read), Premium Addons (premium-addons-read), and Ultimate Addons for Elementor (uae-read,uae-write).
🛠️ Sandbox & Forge Superpowers
Gutenberg Custom Block Builder
AI agents can autonomously craft native Gutenberg blocks within an isolated sandbox directory (wp-content/emcp-sandbox/blocks/):
emcp-tools/create-custom-block: Generates validblock.json(apiVersion 3),index.js, andrender.php.emcp-tools/validate-block-spec: Lints and validates block attributes and controls schema.emcp-tools/set-block-status: Safely activates or deactivates blocks on the site.
Elementor Widget Builder
Construct production-ready custom Elementor widgets:
- Validated controls, responsive typography, icon selectors, and repeater structures.
- Isolated sandbox verification prior to live deployment.
STC Archives (Backup, Restore & Migration)
create-backup/list-backups: Build a portable.emcparchive (full database dump + optionalinclude_filesbundle of uploads/plugins/themes) and list existing archives. Non-destructive, on by default.- Restore (admin-only): The Backup & Migrate tab verifies an archive's manifest hash, imports the database, rewrites the source URL to this site (serialized-safe, incl.
_elementor_data), and places bundled files. Download + delete also live there. migrate-site: Push this site to a remote EMCP Connector (connector/emcp-connector.php, installed standalone on the destination) as HMAC-signed 2 MB packets; the connector restores it and reports a job id. Destructive on the destination — requiresconfirm:true. Disabled by default.sync-to-live: Run a serialized-safe URL search-and-replace across the whole database (options, posts, postmeta incl._elementor_data, comments, term/usermeta, other prefixed tables). Requiresconfirm:true. Disabled by default.
🔒 Omnissiah Safety & Permission Protocols
Every machine rite strictly executes under native WordPress security standards:
- Capability Checks: An agent can only execute operations permitted to the authenticated user account.
- Mutation Safeguards: Destructive write, delete, and filesystem operations require an explicit
confirm: trueparameter. - Opt-In Safety Defaults: Write-capable and database-mutating abilities ship disabled-by-default on the Machine Rites screen for administrator review.
- Audit Trail: Every change executed by an AI agent is recorded in the Chrono-Ledger with one-click rollback.
🤝 Contributing & Codex
We welcome community contributions, bug reports, canticles, prompts, and new integrations! Please review our Contribution Guidelines to get started.
- Found an anomaly or bug? Open an Issue.
- Want to share a blueprint or canticle? Join the Discussions.
📄 License & Attribution
This project is licensed under the GNU General Public License v2.0 or later.
- Original Project:
msrbuilds/elementor-mcpby Mian Shahzad Raza. - Unlocked Core: Maintained by Heretek AI.