# claudeus_wp_search__oembed_proxy

Get oEmbed data via proxy. Retrieve oEmbed data for external URLs through WordPress proxy.

Agent View of the PolicyLayer registry record for `claudeus_wp_search__oembed_proxy`. HTML page: https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-search--oembed-proxy

## Facts

- Tool: `claudeus_wp_search__oembed_proxy`
- Server: Claudeus WordPress MCP (`deus-h/claudeus-wp-mcp`) — https://policylayer.com/tools/deus-h-claudeus-wp-mcp.md
- Homepage: https://github.com/deus-h/claudeus-wp-mcp
- Risk category: Read (Low risk)
- Registry record: grade F, identity unverified
- Server rate-limited: no
- Parameters: 0
- Recommended policy verdict: Allowed

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "claudeus_wp_search__oembed_proxy",
    "arguments": {}
  }
}
```

## Why claudeus_wp_search__oembed_proxy is rated Low

The tool fetches oEmbed metadata (embed previews, structured data) from external URLs via WordPress proxy. This is fundamentally a retrieval operation (Read category). However, severity is elevated to medium rather than low because: (1) proxying through WordPress to external URLs creates potential for SSRF attacks if the URL parameter is not properly validated, allowing an AI agent to probe internal networks or…

From the tool's own definition: "Tool name and description indicate it 'retrieves oEmbed data for external URLs through WordPress proxy' — a read-only query operation with no stated side effects."

## Use case

AI agents call claudeus_wp_search__oembed_proxy to retrieve information from Claudeus WordPress MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

## Recommended policy (PolicyLayer)

Verdict: **Allowed**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Claudeus WordPress MCP:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "claudeus_wp_search__oembed_proxy": {}
  }
}
```

## Other tools on Claudeus WordPress MCP (144)

- `claudeus_wp_astra__delete_custom_layout` — Destructive — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-astra--delete-custom-layout.md
- `claudeus_wp_comments__delete_comment` — Destructive — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-comments--delete-comment.md
- `claudeus_wp_comments__spam` — Destructive — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-comments--spam.md
- `claudeus_wp_comments__trash` — Destructive — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-comments--trash.md
- `claudeus_wp_content__delete_block` — Destructive — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-content--delete-block.md
- `claudeus_wp_content__delete_block_revision` — Destructive — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-content--delete-block-revision.md
- `claudeus_wp_content__delete_page` — Destructive — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-content--delete-page.md
- `claudeus_wp_content__delete_page_revision` — Destructive — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-content--delete-page-revision.md
- `claudeus_wp_content__delete_post` — Destructive — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-content--delete-post.md
- `claudeus_wp_content__delete_post_revision` — Destructive — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-content--delete-post-revision.md
- `claudeus_wp_media__delete` — Destructive — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-media--delete.md
- `claudeus_wp_menus__delete_menu` — Destructive — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-menus--delete-menu.md
- `claudeus_wp_menus__delete_menu_item` — Destructive — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-menus--delete-menu-item.md
- `claudeus_wp_plugins__delete` — Destructive — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-plugins--delete.md
- `claudeus_wp_taxonomy__delete_category` — Destructive — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-taxonomy--delete-category.md
- `claudeus_wp_taxonomy__delete_tag` — Destructive — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-taxonomy--delete-tag.md
- `claudeus_wp_templates__delete_template` — Destructive — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-templates--delete-template.md
- `claudeus_wp_templates__delete_template_part` — Destructive — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-templates--delete-template-part.md
- `claudeus_wp_users__delete_user` — Destructive — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-users--delete-user.md
- `claudeus_wp_users__revoke_app_password` — Destructive — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-users--revoke-app-password.md
- `claudeus_wp_widgets__delete_widget` — Destructive — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-widgets--delete-widget.md
- `claudeus_wp_health__run_all_tests` — Execute — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-health--run-all-tests.md
- `claudeus_wp_health__test_loopback` — Execute — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-health--test-loopback.md
- `claudeus_wp_plugins__activate` — Execute — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-plugins--activate.md
- `claudeus_wp_astra__get_custom_layout` — Read — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-astra--get-custom-layout.md
- `claudeus_wp_astra__get_custom_layouts` — Read — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-astra--get-custom-layouts.md
- `claudeus_wp_astra__get_mega_menu` — Read — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-astra--get-mega-menu.md
- `claudeus_wp_astra__get_settings` — Read — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-astra--get-settings.md
- `claudeus_wp_comments__get_comment` — Read — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-comments--get-comment.md
- `claudeus_wp_comments__get_comments` — Read — https://policylayer.com/tools/deus-h-claudeus-wp-mcp/claudeus-wp-comments--get-comments.md
- …and 114 more: https://policylayer.com/tools/deus-h-claudeus-wp-mcp.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=deus-h-claudeus-wp-mcp · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/deus-h-claudeus-wp-mcp