CloseHub<\/a> \u2014 a marketing project management platform.<\/p>\n\nOnce the plugin is activated, it generates a secure API key and exposes a dedicated REST API namespace (\/wp-json\/closehub\/v1\/<\/code>) that CloseHub uses to interact with your site.<\/p>\n\nIt also exposes content abilities through the WordPress MCP Adapter. MCP clients can discover, list, read, create, update, upload an image, update a post slug, replace one exact Gutenberg block, and send posts to the trash using the server at \/wp-json\/mcp\/mcp-adapter-default-server<\/code>. closehub\/upload-media<\/code> accepts an image as data_base64<\/code>, returns its Media Library URL, and requires the user's upload_files<\/code> capability; pass that URL as featured_image_url<\/code> to create or update content without uploading a duplicate. closehub\/update-post-slug<\/code> accepts a post ID and slug, then returns the normalized unique slug and resulting URL. closehub\/get-post<\/code> returns a content_hash<\/code>; use it with closehub\/replace-gutenberg-block<\/code>, a zero-based block_path<\/code>, the current block name, and one replacement serialized block so a stale read cannot overwrite newer content. These abilities default to the post<\/code> type but accept a post_type<\/code> input for any other post type registered with an admin UI \u2014 pages, WooCommerce products (including product types WooCommerce's own MCP abilities don't support, such as subscriptions), or custom post types. Authenticate with OAuth as a WordPress user, or use the same CloseHub API key as a Bearer token for a shared Claude Team connector. The API key acts with the capabilities of the WordPress user who last generated it.<\/p>\n\nSettings:<\/strong> One page under Settings \u2192 CloseHub (Network Admin \u2192 Settings \u2192 CloseHub on multisite) shows the API key, the CloseHub endpoint, the MCP server URL, and the user the key acts as. The same API key connects CloseHub and Claude.<\/p>\n\nClaude Team:<\/strong> In Claude, add a custom connector with the MCP server URL<\/strong> from Settings \u2192 CloseHub, choose No sign-in<\/strong>, and add a request header named authorization<\/code> with the value Bearer <your API key><\/code>. The URL uses a ?rest_route=<\/code> query to help preserve the header when a server rewrite strips it from \/wp-json\/<\/code> requests. Everyone sharing this connector has the WordPress permissions of the user who last generated the key. Regenerating the key disconnects CloseHub and every Claude user until updated. OAuth per-user sign-in remains available under Advanced<\/strong>.<\/p>\n\nWhen WPML is active, create-post and POST \/closehub\/v1\/posts<\/code> also accept language<\/code> and an optional translation_of<\/code> source post ID. The connector assigns the new post to the requested language and joins it to the source post's translation group. List\/get\/create responses include the language and translation-group details. Existing posts retain their language on update.<\/p>\n\nFor WooCommerce, MCP clients with the manage_woocommerce<\/code> capability can retrieve an order summary for a date range, including order count, total sales, average order value, and matching orders.<\/p>\n\nIt also exposes a set of \"site\" abilities for the CLOSE web go-live checklist \u2014 configuration steps that used to be manual or wp-cli only. Each requires the WordPress capability noted below.<\/p>\n\n
Available MCP site abilities:<\/strong><\/p>\n\n\nclosehub\/search-replace-domain<\/code> (manage_options<\/code>) \u2014 Replace old_domain<\/code> with new_domain<\/code> across post content, options, comments, and meta tables, re-serializing serialized values safely. Skips wp_posts.guid<\/code>. Pass dry_run: true<\/code> to preview the number of rows that would change per table without writing anything. Example: { \"old_domain\": \"staging.example.com\", \"new_domain\": \"example.com\" }<\/code>.<\/li>\nclosehub\/set-robots-txt<\/code> (manage_options<\/code>) \u2014 Write content<\/code> to robots.txt<\/code>, physically if the site root is writable, otherwise served virtually through the robots_txt<\/code> filter. Example: { \"content\": \"User-agent: *\\nDisallow:\\nSitemap: https:\/\/example.com\/sitemap.xml\" }<\/code>.<\/li>\nclosehub\/set-post-noindex<\/code> (edit_post<\/code> on the target post_id<\/code>) \u2014 Set or clear the noindex robots meta for one post\/page using whichever SEO plugin (Rank Math or Yoast) is active. Example: { \"post_id\": 42, \"noindex\": true }<\/code>.<\/li>\nclosehub\/flush-permalinks<\/code> (manage_options<\/code>) \u2014 Regenerate rewrite rules, equivalent to wp rewrite flush<\/code>. Takes no parameters.<\/li>\nclosehub\/get-htaccess<\/code> (manage_options<\/code>, read-only) \u2014 Return whether .htaccess<\/code> exists and its current content. Takes no parameters.<\/li>\nclosehub\/set-site-settings<\/code> (manage_options<\/code>) \u2014 Update the site timezone and\/or admin email; at least one is required. Example: { \"timezone\": \"Europe\/Madrid\", \"admin_email\": \"client@example.com\" }<\/code>.<\/li>\nclosehub\/reassign-posts-author<\/code> (edit_others_posts<\/code>) \u2014 Reassign every post of post_type<\/code> (default post<\/code>) from from_author_id<\/code> to to_author_id<\/code>, with a per-post success result. Example: { \"from_author_id\": 3, \"to_author_id\": 1 }<\/code>.<\/li>\nclosehub\/install-wp-org-plugin<\/code> (install_plugins<\/code>) \u2014 Install (without activating) a plugin from the WordPress.org plugin directory by slug<\/code>. Example: { \"slug\": \"two-factor\" }<\/code>.<\/li>\nclosehub\/list-unused-plugins<\/code> (activate_plugins<\/code>, read-only) \u2014 List installed plugins that are not currently active, as removal candidates. Takes no parameters.<\/li>\nclosehub\/update-plugins-and-core<\/code> (update_plugins<\/code> and update_core<\/code>) \u2014 Update every plugin with an available update and WordPress core to the latest version, with a per-plugin success result. Takes no parameters.<\/li>\nclosehub\/create-site-user<\/code> (create_users<\/code>, plus promote_users<\/code> when role<\/code> is administrator<\/code>) \u2014 Create a WordPress user for the site's client. role<\/code> defaults to editor<\/code>; username<\/code> defaults to the local part of email<\/code> when omitted. Example: { \"email\": \"client@example.com\", \"role\": \"editor\" }<\/code>.<\/li>\nclosehub\/clear-cache<\/code> (rocket_purge_cache<\/code> or manage_options<\/code>) \u2014 Purge the page cache of the active caching plugin (currently WP Rocket). scope<\/code> is all<\/code> (default, whole site) or posts<\/code> (only the given post_ids<\/code>; IDs that don't match a post are reported back in invalid_post_ids<\/code>). Pass minify: true<\/code> to also clear minified CSS\/JS files. Returns 503<\/code> when no supported cache plugin is active. On multisite it purges only the site the MCP request is made against; on a subdirectory network, purging the main site with WP Rocket also clears the subsites' cached pages, since they live inside the main site's cache folder. Example: { \"scope\": \"posts\", \"post_ids\": [ 42, 57 ] }<\/code>.<\/li>\n<\/ul>\n\nWhat it replaces:<\/strong><\/p>\n\n\n- WordPress Application Password (username + password)<\/li>\n
- WooCommerce REST API consumer key and consumer secret<\/li>\n
- Gravity Forms API key<\/li>\n<\/ul>\n\n
You only need to share two things with CloseHub:<\/strong><\/p>\n\n\n- Your site URL<\/li>\n
- The generated API key (found at Settings \u2192 CloseHub)<\/li>\n<\/ol>\n\n
Available endpoints:<\/strong><\/p>\n\n\nGET \/closehub\/v1\/ping<\/code> \u2014 verify the connection<\/li>\nPOST \/closehub\/v1\/posts<\/code> \u2014 publish or draft a post (or another post type via post_type<\/code>), including optional SEO metadata (Rank Math or Yoast), featured image, categories, and WPML language<\/code>\/translation_of<\/code> when WPML is active<\/li>\nPUT \/closehub\/v1\/posts\/{id}<\/code> \u2014 update a post's (or other post type's) title, content, excerpt, status, SEO metadata, featured image, or categories<\/li>\nGET \/closehub\/v1\/woocommerce\/orders<\/code> \u2014 fetch order data (requires WooCommerce)<\/li>\nGET \/closehub\/v1\/gravity-forms\/forms<\/code> \u2014 list forms (requires Gravity Forms)<\/li>\nGET \/closehub\/v1\/gravity-forms\/forms\/{id}<\/code> \u2014 get form details<\/li>\nGET \/closehub\/v1\/gravity-forms\/forms\/{id}\/entries<\/code> \u2014 count form entries by date range<\/li>\nPOST \/closehub\/v1\/elm-releases<\/code> \u2014 create an Easy License Manager release for a product (by product_id<\/code> or product_sku<\/code>) and update its WooCommerce download file to the given zip_url<\/code> in one call; optional tested<\/code>, requires<\/code>, requires_php<\/code>, upgrade_notice<\/code><\/li>\nPUT \/closehub\/v1\/elm-releases\/{id}<\/code> \u2014 update fields on an existing release (all optional) and, if zip_url<\/code> is given, its product's download file<\/li>\n<\/ul>\n\nWooCommerce, Gravity Forms, and Easy License Manager endpoints return a clear error if those plugins are not active \u2014 they are not required.<\/p>\n\n
Multisite networks:<\/strong><\/p>\n\nOn a WordPress Multisite network, the same endpoints listed above are shared by every site in the network \u2014 there is no separate namespace or key to manage. Activate the plugin network-wide and go to Network Admin \u2192 Settings \u2192 CloseHub<\/strong> to find one API key shared by the whole network. Every request to those endpoints automatically returns a sites<\/code> array with one entry per site in the network (site_id<\/code>, url<\/code>, and that site's data or an error<\/code> message), instead of a single site's result \u2014 handy when a network is used to run the same company in multiple languages.<\/p>\n\n\n\n- Upload the
closehub-connector<\/code> folder to \/wp-content\/plugins\/<\/code>.<\/li>\n- Activate the plugin through the Plugins<\/strong> screen in WordPress admin.<\/li>\n
- Go to Settings \u2192 CloseHub<\/strong>.<\/li>\n
- Copy the Site URL<\/strong> and API Key<\/strong> shown on that page.<\/li>\n
- Paste both values into CloseHub under your project's WordPress connection settings.<\/li>\n<\/ol>\n\n\n
\nWhere do I find my API key?<\/h3><\/dt>\nGo to Settings \u2192 CloseHub<\/strong> in your WordPress admin. The key is displayed there along with a copy button.<\/p><\/dd>\nCan I regenerate the API key?<\/h3><\/dt>\nYes. Click Regenerate Key<\/strong> on the Settings \u2192 CloseHub page. The old key stops working immediately \u2014 update CloseHub with the new key right away.<\/p><\/dd>\nHow do I connect Claude Team when OAuth discovery is blocked?<\/h3><\/dt>\nGo to Settings \u2192 CloseHub<\/strong>, copy the MCP server URL<\/strong>, choose No sign-in<\/strong> authentication in Claude Team, and add a request header named authorization<\/code> with the value Bearer <your API key><\/code> (use the Copy button next to the header). Everyone using that connector shares the WordPress permissions of the user shown under Acts as user<\/strong>.<\/p><\/dd>\nDo I need WooCommerce or Gravity Forms installed?<\/h3><\/dt>\nNo. Both are optional. If they are not active, those endpoints return a 503<\/code> response with a clear message instead of crashing.<\/p><\/dd>\nHow is the API key secured?<\/h3><\/dt>\nThe key is stored in wp_options<\/code> (or network-wide in wp_sitemeta<\/code> on multisite), never exposed on the frontend, transmitted only via HTTPS, and verified using constant-time comparison (hash_equals<\/code>) to prevent timing attacks. It is never logged or included in REST responses.<\/p><\/dd>\nCan I use this plugin on a multisite network?<\/h3><\/dt>\nYes. When network-activated, the plugin generates one API key shared by every site in the network (managed from Network Admin \u2192 Settings \u2192 CloseHub<\/strong> instead of a per-site Settings page), and the same REST endpoints automatically query every site and return combined, per-site results. On a regular, non-multisite install, everything works exactly as a single site as described above.<\/p><\/dd>\nIs this plugin affiliated with WooCommerce or Gravity Forms?<\/h3><\/dt>\nNo. It integrates with those plugins using their public PHP APIs but is not developed, endorsed, or supported by WooCommerce or Gravity Forms.<\/p><\/dd>\n\n<\/dl>\n\n\n
1.3.0<\/h4>\n\n\n- Simplified settings into a single page: the CloseHub API key now also authenticates MCP (Claude Team) as a Bearer token, acting as the user who last generated it. The separate
chm_<\/code> shared token and the API\/MCP tabs were removed; Claude Team connectors using a chm_<\/code> token must be updated to use the API key.<\/li>\n<\/ul>\n\n1.2.1<\/h4>\n\n\n- Added a revocable shared MCP Bearer token for Claude Team connections when OAuth discovery is blocked by the web server. The token uses the permissions of its WordPress creator and can be rotated or revoked from the MCP settings tab. (#47)<\/li>\n
- Added a query-routed MCP server URL for hosts where the
\/wp-json\/<\/code> rewrite drops the authorization<\/code> header, and made the complete Bearer chm_...<\/code> value copyable for Claude Team setup. (#47)<\/li>\n- Split CloseHub settings into API and MCP tabs on single sites and multisite networks. (#47)<\/li>\n<\/ul>\n\n
1.2.0<\/h4>\n\n\n- Added WordPress Multilingual Plugin (WPML) support to MCP and REST content creation, including optional language assignment and translation-group linking. (#30)<\/li>\n
- Added MCP image uploads from base64 to the Media Library, with validation, quota checks, attachment metadata safeguards, and reuse as a post's featured image. (#40)<\/li>\n
- Added a branded OAuth consent screen that clearly discloses the public CloseHub MCP abilities being authorized. (#41)<\/li>\n
- Added the
closehub\/clear-cache<\/code> MCP ability for supported caching plugins, starting with WP Rocket. (#35)<\/li>\n- Fixed CloseHub content and site abilities not being exposed as direct tools by the default MCP server.<\/li>\n
- Fixed Claude and other hosted MCP clients that identify themselves with a Client ID Metadata Document: OAuth authorization now validates that document directly when no prior dynamic registration exists, and advertises that capability in the authorization-server metadata. Re-registering the same verified client is idempotent and refreshes its stored metadata instead of failing on a duplicate client ID. (#34)<\/li>\n
- Added
POST \/closehub\/v1\/elm-releases<\/code> to create an Easy License Manager release and update the product's WooCommerce download file in one call, unblocking automated premium-plugin releases. Accepts optional tested<\/code>, requires<\/code>, requires_php<\/code>, and upgrade_notice<\/code>. Preserves any other downloadable files already on the product instead of replacing them. Returns 503<\/code> if Easy License Manager is not active. (#19)<\/li>\n- Added
PUT \/closehub\/v1\/elm-releases\/{id}<\/code> to update fields on an existing release (and its product's download file) without creating a duplicate release for the same version.<\/li>\n- Fixed a crash on PHP 8+ when a route's numeric
id<\/code>\/product_id<\/code> argument was validated: is_numeric<\/code> was registered directly as validate_callback<\/code>, but WordPress calls it with 3 arguments and the internal function only accepts 1. Affected \/posts\/{id}<\/code>, \/gravity-forms\/forms\/{id}<\/code>, and both new elm-releases<\/code> routes.<\/li>\n<\/ul>\n\n1.1.2<\/h4>\n\n\n- Fixed MCP OAuth discovery on Apache-managed sites, including reliable handling of the protected-resource and authorization-server metadata routes after activation, URL changes, or regeneration. (#27)<\/li>\n
- Added precise Gutenberg block replacement through MCP, with content-hash concurrency protection and block-path\/type validation, plus an MCP ability to update a post slug and return its normalized URL. (#29)<\/li>\n<\/ul>\n\n
1.1.1<\/h4>\n\n\n- Added 11 MCP \"site\" abilities covering the CLOSE web go-live checklist: domain search-replace, robots.txt content, per-page noindex, permalink flush,
.htaccess<\/code> read, timezone\/admin email, bulk post-author reassignment, WordPress.org plugin install, unused-plugin listing, plugin\/core updates, and client user creation. See the Description section for the full list and required capabilities.<\/li>\n- Added