Summary: AbedinTech designed, built, and hardened AI Content & SEO Assistant — a custom AI WordPress plugin that lets AI assistants such as Claude safely read and edit a site’s content, media, Elementor pages, and SEO over the Model Context Protocol (MCP) with a one-click OAuth 2.1 connection. Every risky change is held for owner approval, logged, and reversible. The plugin ships 24+ tool modules, 470 automated tests, continuous integration across PHP 7.4–8.3, and a clean WordPress.org Plugin Check — making it directory-ready, not just an internal tool.

To be useful an AI needs to touch content — but unrestricted access invites mistakes and security exposure on production sites.

Connecting an AI client to WordPress meant pasting API keys into URLs and granting broad, unaudited permissions.

Every edit to a client site must be reviewable, reversible, logged — and ideally re-brandable per client.

Owner approval queue

Every risky action — publish, delete, admin-level, or page-builder change — is held for the site owner to approve or deny, including a secure “approve from your phone” email link. Draft-only work runs freely; anything that touches the live site waits for a human.

Scoped permissions & full audit trail

Granular scopes (read, write:content, write:media, admin), capability checks, a complete activity log, rate limiting, and an optional IP allowlist mean you always know exactly what the AI can do — and exactly what it did.

Surgical content editing

A precision patch tool applies atomic, diff-based edits — insert, replace, or append exact snippets — with a dry-run preview, instead of risky full-page rewrites. This makes AI edits safer for live pages and far cheaper to run at scale.

SEO, GEO & AI-search optimization built in

Beyond classic SEO (Rank Math / Yoast-aware meta, FAQ and JSON-LD schema, internal linking, 301 redirects and a 404 log), the plugin ships Generative Engine Optimization (GEO) features: an AI-crawler policy and an llms.txt manifest that help pages get discovered and cited by AI answer engines such as ChatGPT, Perplexity, and Google’s AI results.

Insights & white-label client reporting

Read-only Google Search Console and GA4 integration surface what’s actually working, and a one-click, white-label report turns live data into a client-ready deliverable. Agencies can rebrand the entire plugin per client and run it across unlimited sites via WordPress Multisite.

The plugin implements MCP over OAuth 2.1 end to end — dynamic client registration, token exchange, and RFC-compliant discovery — so any compliant AI client can connect without the owner ever pasting a secret. Security was designed in, not bolted on: Google tokens are encrypted at rest, the media importer is hardened against SSRF, all content writes are sanitized, and nothing that touches a live page bypasses the approval queue. A schema-versioned data layer migrates cleanly on upgrade, and uninstalling removes every option, table, and scheduled task the plugin created.

“We wanted AI to do real work on client sites without ever giving up control. This plugin is that guarantee — every change is scoped, reviewable, and logged before it ever goes live.”

— AbedinTech

What This Project Shows We Can Build for You

This case study demonstrates AbedinTech’s capability in custom WordPress plugin development, AI automation and integration, secure API and OAuth engineering, and AI-era SEO (SEO + GEO/AIO). If you want a custom AI tool, a WordPress plugin, or an AI-assisted content and SEO workflow built to production standards, we can take it from concept to directory-ready release.