{
  "markdown": "<div align=\"center\">\n\n# Bridgistic\n\n**Connect Claude to WordPress safely.**\n\n*Signed requests · scoped keys · approvals on destructive ops · audit logs · snapshots · local MCP setup*\n\n*Also works with [Codex CLI](docs/CODEX_SETUP.md), [Gemini CLI](docs/GEMINI_SETUP.md), and [ChatGPT (public beta)](docs/CHATGPT_SETUP.md) — Bridgistic speaks standard MCP, not just Claude's.*\n\n[![License: GPL v2+](https://img.shields.io/badge/License-GPL_v2%2B-blue.svg)](LICENSE)\n[![WordPress 6.4+](https://img.shields.io/badge/WordPress-6.4%2B-21759b.svg?logo=wordpress&logoColor=white)](https://wordpress.org/)\n[![Node.js 20+](https://img.shields.io/badge/Node.js-20%2B-339933.svg?logo=node.js&logoColor=white)](https://nodejs.org/)\n[![Claude Code Marketplace](https://img.shields.io/badge/Claude_Code-Marketplace-d97757.svg)](#3a-install-in-claude-code)\n\n**Free public version** · by [WordPressistic](https://wordpressistic.com)\n\n</div>\n\n---\n\n## What is Bridgistic?\n\nBridgistic is a safe bridge between Claude and your WordPress site. Instead of handing an AI a full-admin Application Password, you mint a **scoped key** in WordPress and run a **local MCP server** that signs every request with it. The WordPress plugin verifies the signature, enforces the key's scopes, queues destructive operations for human approval, snapshots before risky writes, and logs everything.\n\n```\nClaude Desktop / Claude Code / Codex CLI / Gemini CLI\n        │  (MCP, local)\n        ▼\nBridgistic MCP server  ──  HMAC-signed HTTPS  ──▶  WordPress plugin\n                                                    · scope checks\n                                                    · approval queue\n                                                    · snapshots + rollback\n                                                    · audit log\n```\n\n## What this repo includes (free version)\n\n- **Claude Code plugin marketplace** — install with two slash commands\n- **Local MCP server** (Node 20+, stdio) with 43 WordPress tools\n- **WordPress plugin** with a full admin dashboard: a guided AI / MCP Connections wizard, Keys & Scopes, Multi-Site, Health Check (23 diagnostics), audit Logs, Snapshots, manual + limited scheduled Playbooks, and an Export Package builder\n- HMAC-SHA256 authentication, replay protection, scoped least-privilege keys\n- Example configs, install scripts, and step-by-step docs\n\n## What it does NOT include\n\nThe free version is the complete local bridge, plus a public-beta hosted connector (WP Admin → Bridgistic Cloud) for remote-only clients like ChatGPT. These belong to **Bridgistic SaaS** (separate, private product): AI skills marketplace (SEO/AIO/Schema audits), multi-site agency dashboard, team permissions, advanced logs & snapshots, usage billing, and white-label. See [docs/FREE_VS_PAID.md](docs/FREE_VS_PAID.md).\n\n---\n\n## Quick start\n\n**New here? Read [docs/CONNECT_BRIDGISTIC.md](docs/CONNECT_BRIDGISTIC.md) instead** — one\nstep-by-step guide covering install → key → connect → verify → troubleshooting, written for\nnon-technical site owners. The steps below are the same flow in short form.\n\n### 1. Install the WordPress plugin\n\nDownload `bridgistic-wordpress-plugin.zip` from [Releases](https://github.com/Shubochandrosarker/bridgistic-claude-marketplace/releases) (or build it: `npm install && npm run build && npm run package`), then upload via **WP Admin → Plugins → Add New → Upload** and activate. Details: [docs/WORDPRESS_SETUP.md](docs/WORDPRESS_SETUP.md).\n\n### 2. Generate a key\n\nOpen **WP Admin → Bridgistic → AI / MCP Connections**, pick a connection type and a permission preset (start with **Read-only**), and create a key. **The secret is shown once** — copy it immediately.\n\n### 3a. One-click Claude Desktop extension (recommended — no terminal, no Node.js)\n\nDownload [`bridgistic.mcpb`](https://github.com/Shubochandrosarker/bridgistic-claude-marketplace/releases/latest/download/bridgistic.mcpb), double-click it, and paste your site URL, key ID, and secret when Claude Desktop prompts (the secret is stored securely by the app — no config files, no terminal). Details: [docs/CLAUDE_DESKTOP.md](docs/CLAUDE_DESKTOP.md).\n\n### 3b. Or install in Claude Code\n\n```\n/plugin marketplace add Shubochandrosarker/bridgistic-claude-marketplace\n/plugin install bridgistic@bridgistic-marketplace\n```\n\nThen set your connection in the shell where you run Claude Code:\n\n```bash\nexport BRIDGISTIC_SITE_URL=\"https://example.com\"\nexport BRIDGISTIC_KEY_ID=\"your_key_id\"\nexport BRIDGISTIC_KEY_SECRET=\"your_key_secret\"\n```\n\nRequires Node.js 20+. Details: [docs/CLAUDE_CODE.md](docs/CLAUDE_CODE.md).\n\nAlso available via the [MCP Registry](https://registry.modelcontextprotocol.io) as `io.github.shubochandrosarker/bridgistic`, and on npm:\n\n```bash\nnpx bridgistic-mcp-server\n```\n\n### 3c. Or set up Claude Desktop manually\n\nClone this repo and build the server once:\n\n```bash\ngit clone https://github.com/Shubochandrosarker/bridgistic-claude-marketplace.git\ncd bridgistic-claude-marketplace\nnpm install && npm run build\n```\n\nAdd this to your Claude Desktop config (macOS: `~/Library/Application Support/Claude/claude_desktop_config.json`, Windows: `%APPDATA%\\Claude\\claude_desktop_config.json`):\n\n```json\n{\n  \"mcpServers\": {\n    \"bridgistic\": {\n      \"command\": \"node\",\n      \"args\": [\n        \"/absolute/path/to/bridgistic-claude-marketplace/mcp-server/dist/index.js\"\n      ],\n      \"env\": {\n        \"BRIDGISTIC_SITE_URL\": \"https://example.com\",\n        \"BRIDGISTIC_KEY_ID\": \"your_key_id\",\n        \"BRIDGISTIC_KEY_SECRET\": \"your_key_secret\"\n      }\n    }\n  }\n}\n```\n\nRestart Claude Desktop. Details: [docs/CLAUDE_DESKTOP.md](docs/CLAUDE_DESKTOP.md). The **Bridgistic → AI / MCP Connections** page also generates this config for you, and **Bridgistic → Export Package** downloads it as a ready-made zip.\n\n### 3d. Or connect Codex, Gemini CLI, or ChatGPT\n\nThe same **Bridgistic → AI / MCP Connections** wizard also generates ready-to-paste configs for **OpenAI Codex CLI** and **Gemini CLI** — pick them as the connection type on step 1. See [docs/CODEX_SETUP.md](docs/CODEX_SETUP.md) and [docs/GEMINI_SETUP.md](docs/GEMINI_SETUP.md). ChatGPT only supports remote connectors and needs Bridgistic's hosted cloud connector — free, public beta, linked at **Bridgistic → Bridgistic Cloud** — see [docs/CHATGPT_SETUP.md](docs/CHATGPT_SETUP.md). Managing more than one WordPress site from the same client (any of them)? See [docs/CONNECT_OTHER_AI.md](docs/CONNECT_OTHER_AI.md).\n\n### 4. Test the connection\n\n- In WP Admin: **Bridgistic → AI / MCP Connections → Step 5 → Run test**, or open **Bridgistic → Health Check** for 23 diagnostics with fixes.\n- In Claude: ask it to run `bridgistic_get_site_info` (read-only). Then check **Bridgistic → Logs** — the request should be there.\n\n### Troubleshooting\n\nRun **Bridgistic → Health Check** first — it detects blocked REST APIs, WAF interference, clock drift, permalink problems, and more, each with a fix. Full guide: [plugins/bridgistic/package/TROUBLESHOOTING.md](plugins/bridgistic/package/TROUBLESHOOTING.md).\n\n---\n\n## Security model\n\n- **HMAC-SHA256 signed requests** — the secret never travels on the wire; a timestamp window (±300s) plus single-use nonces block replays.\n- **Scoped keys** — each key carries an explicit permission set (`posts:read`, `db:write`, …) enforced server-side on every call. Presets: Read-only, Content Manager, Safe Admin, Developer Mode.\n- **Approvals** — keys can require human sign-off; destructive operations pause in a queue you decide on in WP Admin.\n- **Snapshots** — automatic reversible captures before destructive writes; one-call rollback.\n- **Secrets at rest** — encrypted (libsodium / AES-256-GCM), shown exactly once at creation, never logged. Rotate any time.\n- **Dangerous tools** (`bridgistic_execute_php`, `bridgistic_db_query`, filesystem writes) require developer scopes and pass through dry-run/approval/snapshot guards. Use Developer Mode only on sites you control.\n\nFull details: [docs/SECURITY.md](docs/SECURITY.md). Found a vulnerability? Please report it privately to support@wordpressistic.com — do not open a public issue.\n\n## Repo layout\n\n```\n.claude-plugin/marketplace.json    Claude Code marketplace manifest\nplugins/bridgistic/                Claude Code plugin (manifest, mcp.json, pre-built server, setup package)\nmcp-server/                        MCP server source (TypeScript)\nwordpress-plugin/bridgistic/       WordPress plugin\ndocs/                              Setup, security, free-vs-paid, roadmap\nscripts/                           validate / package / desktop-package tooling\n```\n\n## Commands\n\n```bash\nnpm install              # once\nnpm run build            # install + compile mcp-server, regenerate plugin server bundle\nnpm run validate         # manifest + structure + secret-scan checks\nnpm run package          # dist/bridgistic-claude-package.zip + dist/bridgistic-wordpress-plugin.zip\nnpm run desktop:package  # dist/bridgistic-desktop-package.zip (.mcpb-ready layout)\nnpm test                 # MCP server contract + integration tests\n```\n\n## Contributing\n\nIssues and PRs are welcome for the free version: bug fixes, docs, health checks, translations, and setup UX. Ground rules:\n\n1. **Never commit secrets** — `npm run validate` scans for them.\n2. Don't weaken the security path (HMAC, scopes, approvals, snapshots) — hardening PRs are very welcome.\n3. WordPress code follows WordPress coding standards (nonces, capability checks, sanitize/escape everything, prefixed names).\n4. Paid/SaaS features are out of scope for this repo.\n\n## Free vs paid direction\n\n**Free = the local secure bridge, plus a public-beta hosted connector** (this repo, complete and maintained). **Paid = Bridgistic SaaS**: skills, agencies, automation. Read [docs/FREE_VS_PAID.md](docs/FREE_VS_PAID.md) and [docs/ROADMAP.md](docs/ROADMAP.md).\n\n## License\n\nGPL-2.0-or-later. © [WordPressistic](https://wordpressistic.com) / Shuvo Sarker.\n",
  "bytes": 9922,
  "sha": "ac9dbb2c6de286ad5356fd54add80c0085406187e9eef4fe31d0e49e5e74240d",
  "repo_slug": "shubochandrosarker/bridgistic-claude-marketplace",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/mcp_io_github_shubochandrosarker_bridgistic_886dd1f1/readme"
}