ml-mcp-server

The server exposes highly privileged operations through its 'FluentMCP Pro' tools (e.g., `pro_db_query` for arbitrary SQL, `pro_fs_write` for file system manipulation, `pro_wp_cli_execute` for WP-CLI commands). While these require specific WordPress plugin activation and admin credentials, they represent significant security risks if the AI agent is compromised, misinterprets requests, or operates without stringent external guardrails. Direct access to file systems and database queries can lead to data loss, unauthorized code execution, or full site compromise. All WordPress API requests and responses, including potentially sensitive data, are logged locally to `wordpress-api.log`, which could be a target for attackers if the server's file system is breached. Running this server requires extreme caution and robust AI safety protocols.