Changelog
What changed, version by version
Xaflo ships as three coordinated products: the WordPress plugin, the MCP server, and the desktop app. Every release notes which pieces changed together.
🚀 New
- Xaflo Desktop 1.0 — Electron + Svelte 5 desktop app for managing every WordPress connection in one window. 7 pages (Dashboard, Prompts, Tools, Backups, Settings, Help, About). Dark + light theme. EN + IT UI.
- Xaflo WP Connect plugin 1.0 — Server-side companion exposing 74 typed REST endpoints with JWT auth, scoped tokens, rate limiting and audit log.
- claude-wp-mcp 1.0 — Node.js MCP server bridging Claude Code to the WordPress plugin. Dual-mode: stdio MCP server or interactive installer.
- Prompt library — 17 curated Claude Code prompts across Audit, Create, Manage, Analytics, Development. Custom prompt CRUD editor.
- Tool browser — All 74 MCP tools catalogued in 10 categories with human descriptions, copy-to-clipboard.
- Health monitoring — Sparkline of last 30 health checks per site, persisted across restarts. Latency, uptime, scopes, plugin/WP/PHP version, multilingual adapter.
- Backup manager — Every
.claude.jsonsave is preserved with timestamp; restore or prune in bulk. - Multilingual UI — English + Italian translations baked in. Reactive switch without app restart.
- Theme toggle — Dark / Light. Follows system by default.
- Desktop notifications — Tray icon + system notifications when a site transitions online/offline.
🔒 Security
- JWT HS256 with 32-byte minimum secret enforced.
- Per-token sliding-window rate limiting (60 RPM default, tighter for write scopes).
- SqlGuard validates every SQL query before execution.
- FileSandbox for theme / plugin writes with automatic backup.
- Two-step confirmation for destructive operations (DB writes, plugin installs, backups).
- HTTPS enforced by default.
- 90-day audit log retention with full payload sanitization.
📦 Distribution
- WordPress plugin as 200 KB zip (PHP 8.1+ required).
- Xaflo Desktop NSIS installer for Windows x64 (82 MB).
- macOS and Linux builds coming soon.
- CLI installer also available:
npm install -g claude-wp-mcp+claude-wp-mcp add.
🐛 Fixed
- WPML adapter — fixed 3 audit bugs on first live deploy (string translation coverage, media translation links, language code matching).
🚀 New
- WPML Media Translation support.
- WPML String Translation support.
🚀 New
- WPML support via Multilingual adapter family. Polylang adapter included.
🚀 New
- AIOSEO adapter writes directly to
wp_aioseo_postscustom table for faster bulk updates.
🚀 New
- Real SiteKitAdapter integrating Google Search Console for keyword analytics.
- Fallback chain: Site Kit → MonsterInsights → Jetpack → Independent → null.