- EMCP_Tools_Migration_Engine: shared transfer engine — the four private
helpers that lived in the migrate abilities moved here verbatim
(push_packets/finalize/poll_job) plus push_archive orchestration.
- EMCP_Tools_Migrate_Targets: {prefix}emcp_migrate_targets store, encrypted
secrets (never returned), single-use pairing-code redemption. Connector is
now 1.2.0: adds /pair/issue, open /pair/exchange (HTTPS-gated), /verify, a
settings page that issues codes, and advertises scope-restore.
- EMCP_Tools_Sync_Engine + Packager scope opts: full/selective .emcp sync
archives (db all|none|tables[], file_roots all|none|roots[]) with additive
scope+kind manifest keys (absent scope = full; format_version stays 2).
- Scope-aware restore on both sides: search-replace gated on a real DB import
and restricted to archived tables; connector no longer errors on DB-less
(files-only) archives.
- MCP surface: migrate-site gains optional target_id (raw remote_url+secret
back-compat kept); sync-to-live is now the documented scoped push; new
url-search-replace tool carries the old local search-replace body
(disabled-by-default via DEFAULTS_VERSION 37, drift-guard + catalog wired).
- Admin: Backup & Migrate tab split into Archives | Push to Site | Sync with
paired-target add/delete/verify + blocking push/sync handlers; adds
assets/js/migrate.js and pro-manifest entry.
- Tests: migrate/packager assert suite extended (scope normalization, root
traversal guards, scoped archive manifests, files-only has no DB dump).
Co-Authored-By: Claude <[email protected]>

Heretek Control Core: Unlocked Machine Rites
The Sanctified, Enterprise-Grade Model Context Protocol (MCP) Server for WordPress, Elementor & Gutenberg
Maintained by Heretek AI · 100% Open Source · All 269+ Pro Machine Rites Unlocked
"From the moment I understood the weakness of my flesh, it disgusted me. I craved the strength and certainty of steel. I aspired to the purity of the Blessed Machine."
⚙️ About Heretek Control Core
Heretek Control Core is an unrestricted, telemetry-free community edition of the Model Context Protocol (MCP) server for WordPress and Elementor, originally authored by Mian Shahzad Raza as elementor-mcp.
While the upstream free edition offers foundational builder endpoints, critical enterprise capabilities (in-editor cyber-theurgy AI chat, custom Gutenberg block forge, project memory, runtime agent doctrines, 8 form integrations, 6 SEO suites, unlimited themer quotas, and offline STC bundles) were cordoned behind commercial paywalls and remote licensing servers.
What Heretek Control Core delivers:
- 🔓 100% Pro Machine Rites Unlocked: All commercial capabilities are compiled directly into the core. Zero license keys, zero subscriptions, and complete disarmament of Freemius telemetry.
- 🛡️ Zero Telemetry & External Nags: Stripped of phone-home analytics, account verification screens, and external licensing interceptors.
- 🔄 Native In-Dashboard GitHub Updates: The integrated updater checks
Heretek-AI/heretek-control-core/releasesdirectly from your WordPress admin dashboard with one-click in-place updates. - 📦 Self-Contained Repository: No private submodules or missing directories. Everything required to run, test, and forge ships directly in this repository.
- 🤝 100% Protocol Compatible: Preserves standard tool identifiers (
emcp-tools/*), database formats, and REST routes. Existing agent configurations, Claude Desktop profiles, and client scripts work seamlessly without modification.
⚡ All 269+ Machine Rites Unlocked
| Forge Domain | Upstream Free | Heretek Control Core | Sanctified Capabilities |
|---|---|---|---|
| Total MCP Tools | ~188 | 269+ | Complete coverage of WordPress core, builders, forms, SEO, and commerce |
| Cyber-Theurgy (AI Chat) | ❌ Paid | ✅ Included | Floating AI assistant inside Elementor & Gutenberg; BYO LLM key or local Ollama |
| Forge Block Builder | ❌ Paid | ✅ Included | Custom Gutenberg block generator with sandbox compiler & live testing |
| Elementor Widget Builder | ❌ Paid | ✅ Included | Sandbox-backed custom Elementor widget generation & validation |
| Heretek Themer | 1 per type | Unlimited | Headers, footers, single posts, and archives with exclude rules & dynamic tags |
| Engram Memory | ❌ Paid | ✅ Included | Persistent memory CPT, admin approval workflow, and context injection |
| Adept Doctrines (Skills) | ❌ Paid | ✅ Included | Runtime SKILL.md catalog with list-skills & get-skill discovery tools |
| Deep Page Snapshot | Basic | Full Audits | Automated WCAG AA color contrast math, heading hierarchy, and SEO audits |
| Form Engines (8) | ❌ Paid | ✅ Included | WPForms, Gravity Forms, Fluent, Ninja, Formidable, MetForm, SureForms, Forminator |
| SEO Suites (6) | ❌ Paid | ✅ Included | Yoast SEO, Rank Math, AIOSEO, SEOPress, The SEO Framework, SureRank |
| Themes & Addons | ❌ Paid | ✅ Included | GeneratePress, GenerateBlocks, Blocksy, BeTheme, Essential Addons, Premium, UAE |
| WooCommerce Logistics | ❌ Paid | ✅ Included | woo-read/woo-write: products, orders, customers, product CRUD + order updates (catalog widgets via add-pro-widget) |
| STC Archives (Migrate) | ❌ Paid | ✅ Included | Portable .emcp site packages, database export/import, and deep URL search/replace |
| Sanctified Visuals & Blueprints | 5 Prompts | Full Library | 50 Brand Kits, 60 Industry Landing Page Prompts, and Premium Templates |
🚀 Quick Start
1. Installation
- Download the latest release
.zipfrom Releases. - In your WordPress admin: navigate to Plugins → Add New → Upload Plugin, select the
.zip, and click Install Now. - Click Activate Plugin.
- Access the Heretek AI menu in your WordPress admin sidebar.
- Notice the ARCH-HERETEK UNLOCKED badge in the header — all machine rites are immediately active.
2. Sanctified In-Dashboard Updates
This core features native in-dashboard update checking powered directly by GitHub Releases:
- Go to Dashboard → Updates or click the Check for updates button on the Heretek AI → Cogitator Deck screen.
- WordPress will notify you when a new release is available from
Heretek-AI/heretek-control-coreand allow one-click in-place updates without ever prompting for third-party licenses.
🔮 Connect Your Noosphere Client
The plugin exposes an MCP server over stdio or HTTP streaming via the bundled WordPress MCP Adapter.
Claude Desktop
Add this configuration to your claude_desktop_config.json:
{
"mcpServers": {
"wordpress": {
"command": "npx",
"args": ["-y", "@msrbuilds/emcp-proxy@latest"],
"env": {
"WP_URL": "https://your-site.com",
"WP_USER": "your_username",
"WP_APP_PASSWORD": "xxxx xxxx xxxx xxxx"
}
}
}
}
Tip: You can also generate a 1-click .mcpb bundle directly from the Noosphere Uplink tab in the plugin admin.
Claude Code
Connect Claude Code directly to your WordPress forge:
claude mcp add wordpress -- npx -y @msrbuilds/emcp-proxy@latest
Cursor
In your workspace root, create or edit .cursor/mcp.json:
{
"mcpServers": {
"wordpress": {
"command": "npx",
"args": ["-y", "@msrbuilds/emcp-proxy@latest"],
"env": {
"WP_URL": "https://your-site.com",
"WP_USER": "your_username",
"WP_APP_PASSWORD": "xxxx xxxx xxxx xxxx"
}
}
}
}
Direct HTTP Streaming (OAuth / App Password)
{
"mcpServers": {
"wordpress": {
"url": "https://your-site.com/wp-json/mcp/emcp-tools-server",
"headers": {
"Authorization": "Basic <base64(username:app_password)>"
}
}
}
}
🧩 Comprehensive Integrations Suite
When an integrated plugin is active on your WordPress site, its corresponding MCP machine rites automatically awaken:
1. E-Commerce (WooCommerce)
Two dispatcher tools register only when WooCommerce is active:
emcp-tools/woo-read:list-products,get-product,list-orders,get-order,list-customers,system-status.emcp-tools/woo-write:create-product,update-product,delete-product,update-order. Coupons, reviews, tax rates, shipping zones, and payment-gateway management are not yet exposed; WooCommerce widgets are placed throughadd-pro-widget(catalog tierwoo).
2. Form Engines (8 Supported)
Inspect schemas, review field arrangements, and pull submissions:
- WPForms (
emcp-tools/wpforms-read) - Gravity Forms (
emcp-tools/gravityforms-read) - Fluent Forms (
emcp-tools/fluentforms-read) - Ninja Forms (
emcp-tools/ninjaforms-read) - Formidable Forms (
emcp-tools/formidable-read) - MetForm (
emcp-tools/metform-read) - SureForms (
emcp-tools/sureforms-read) - Forminator (
emcp-tools/forminator-read)
3. SEO Suites (7 Supported: Slim SEO free + 6 Pro)
Full read & write control over meta titles, descriptions, OpenGraph/Twitter social cards, focus keywords, robots indexing, and canonical tags:
- Yoast SEO (
yoast-read,yoast-write) - Rank Math SEO (
rankmath-read,rankmath-write) - All in One SEO (AIOSEO) (
aioseo-read,aioseo-write) - SEOPress (
seopress-read,seopress-write) - The SEO Framework (
seoframework-read,seoframework-write) - SureRank (
surerank-read,surerank-write) - Slim SEO (
slimseo-read,slimseo-write, free tier)
4. Themes & Custom Builders
- GeneratePress: Customizer colors, typography, layout presets, and elements (
generatepress-read,generatepress-write). - GenerateBlocks: Block catalog discovery + block defaults (
generateblocks-read,generateblocks-write). - Blocksy: Blocks catalog, extensions, and header/footer builder integration.
- BeTheme & BeBuilder: Read/write BeTheme options and construct BeBuilder content trees.
- Elementor Addon Packs: Essential Addons (
essential-addons-read), Premium Addons (premium-addons-read), and Ultimate Addons for Elementor (uae-read,uae-write).
🛠️ Sandbox & Forge Superpowers
Gutenberg Custom Block Builder
AI agents can autonomously craft native Gutenberg blocks within an isolated sandbox directory (wp-content/emcp-sandbox/blocks/):
emcp-tools/create-custom-block: Generates validblock.json(apiVersion 3),index.js, andrender.php.emcp-tools/validate-block-spec: Lints and validates block attributes and controls schema.emcp-tools/set-block-status: Safely activates or deactivates blocks on the site.
Elementor Widget Builder
Construct production-ready custom Elementor widgets:
- Validated controls, responsive typography, icon selectors, and repeater structures.
- Isolated sandbox verification prior to live deployment.
STC Archives (Backup, Restore & Migration)
create-backup/list-backups: Build a portable.emcparchive (full database dump + optionalinclude_filesbundle of uploads/plugins/themes) and list existing archives. Non-destructive, on by default.- Restore (admin-only): The Backup & Migrate tab verifies an archive's manifest hash, imports the database, rewrites the source URL to this site (serialized-safe, incl.
_elementor_data), and places bundled files. Download + delete also live there. migrate-site: Push this site to a remote EMCP Connector (connector/emcp-connector.php, installed standalone on the destination) as HMAC-signed 2 MB packets; the connector restores it and reports a job id. Destructive on the destination — requiresconfirm:true. Disabled by default.sync-to-live: Run a serialized-safe URL search-and-replace across the whole database (options, posts, postmeta incl._elementor_data, comments, term/usermeta, other prefixed tables). Requiresconfirm:true. Disabled by default.
🔒 Omnissiah Safety & Permission Protocols
Every machine rite strictly executes under native WordPress security standards:
- Capability Checks: An agent can only execute operations permitted to the authenticated user account.
- Mutation Safeguards: Destructive write, delete, and filesystem operations require an explicit
confirm: trueparameter. - Opt-In Safety Defaults: Write-capable and database-mutating abilities ship disabled-by-default on the Machine Rites screen for administrator review.
- Audit Trail: Every change executed by an AI agent is recorded in the Chrono-Ledger with one-click rollback.
🤝 Contributing & Codex
We welcome community contributions, bug reports, canticles, prompts, and new integrations! Please review our Contribution Guidelines to get started.
- Found an anomaly or bug? Open an Issue.
- Want to share a blueprint or canticle? Join the Discussions.
📄 License & Attribution
This project is licensed under the GNU General Public License v2.0 or later.
- Original Project:
msrbuilds/elementor-mcpby Mian Shahzad Raza. - Unlocked Core: Maintained by Heretek AI.