mcp_get_plugins_health

What mcp_get_plugins_health does on Wordpress

AI agents call mcp_get_plugins_health to retrieve information from Wordpress without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why mcp_get_plugins_health is rated Low

This tool queries plugin status and available update information. It retrieves data about the state of installed plugins and checks for updates, but does not install, activate, deactivate, or modify any plugins. No side effects occur from calling this tool. The severity is low because the information revealed is already accessible to site administrators and does not enable harmful actions on its own.

From the tool's definition Tool name contains 'get' and description states 'Get plugin health status and available updates' - purely retrieves information without modifying data.

The rule that runs mcp_get_plugins_health safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Wordpress, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For mcp_get_plugins_health, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "mcp_get_plugins_health": {}
  }
}

Questions about mcp_get_plugins_health