Xaflo

Changelog

What changed, version by version

Xaflo ships as three coordinated products: the WordPress plugin, the MCP server, and the desktop app. Every release notes which pieces changed together.

v1.0.0 Initial public release

🚀 New

  • Xaflo Desktop 1.0 — Electron + Svelte 5 desktop app for managing every WordPress connection in one window. 7 pages (Dashboard, Prompts, Tools, Backups, Settings, Help, About). Dark + light theme. EN + IT UI.
  • Xaflo WP Connect plugin 1.0 — Server-side companion exposing 74 typed REST endpoints with JWT auth, scoped tokens, rate limiting and audit log.
  • claude-wp-mcp 1.0 — Node.js MCP server bridging Claude Code to the WordPress plugin. Dual-mode: stdio MCP server or interactive installer.
  • Prompt library — 17 curated Claude Code prompts across Audit, Create, Manage, Analytics, Development. Custom prompt CRUD editor.
  • Tool browser — All 74 MCP tools catalogued in 10 categories with human descriptions, copy-to-clipboard.
  • Health monitoring — Sparkline of last 30 health checks per site, persisted across restarts. Latency, uptime, scopes, plugin/WP/PHP version, multilingual adapter.
  • Backup manager — Every .claude.json save is preserved with timestamp; restore or prune in bulk.
  • Multilingual UI — English + Italian translations baked in. Reactive switch without app restart.
  • Theme toggle — Dark / Light. Follows system by default.
  • Desktop notifications — Tray icon + system notifications when a site transitions online/offline.

🔒 Security

  • JWT HS256 with 32-byte minimum secret enforced.
  • Per-token sliding-window rate limiting (60 RPM default, tighter for write scopes).
  • SqlGuard validates every SQL query before execution.
  • FileSandbox for theme / plugin writes with automatic backup.
  • Two-step confirmation for destructive operations (DB writes, plugin installs, backups).
  • HTTPS enforced by default.
  • 90-day audit log retention with full payload sanitization.

📦 Distribution

  • WordPress plugin as 200 KB zip (PHP 8.1+ required).
  • Xaflo Desktop NSIS installer for Windows x64 (82 MB).
  • macOS and Linux builds coming soon.
  • CLI installer also available: npm install -g claude-wp-mcp + claude-wp-mcp add.
v1.0.0-rc15 Release candidate

🐛 Fixed

  • WPML adapter — fixed 3 audit bugs on first live deploy (string translation coverage, media translation links, language code matching).
v1.0.0-rc14

🚀 New

  • WPML Media Translation support.
  • WPML String Translation support.
v1.0.0-rc13

🚀 New

  • WPML support via Multilingual adapter family. Polylang adapter included.
v1.0.0-rc12

🚀 New

  • AIOSEO adapter writes directly to wp_aioseo_posts custom table for faster bulk updates.
v1.0.0-rc11

🚀 New

  • Real SiteKitAdapter integrating Google Search Console for keyword analytics.
  • Fallback chain: Site Kit → MonsterInsights → Jetpack → Independent → null.
Open source · MIT v1.0.0 · 2026-05-15 Windows · macOS · Linux 74 WP tools