Cowboy MCP 1.6.0: your agent can now update plugins and themes — safely
Cowboy MCP 1.6.0 lets your AI agent install, update, and delete WordPress plugins and themes — with an automatic file backup, a database checkpoint, and a post-update health check that rolls back automatically if the site breaks. Updates finally get the same safety net as everything else: journaled, undoable, and confirmed before anything destructive runs.
What this means for you
Keeping plugins and themes current is the single most important thing you can do for a WordPress site's security — and also the scariest, because a bad update can take the whole site down. This release removes the fear. Your agent can do the updating for you, and every step is reversible.
What's new
- Install, update, and delete plugins and themes. New tools let an agent pull plugins and themes straight from WordPress.org and manage them in place — no WP-CLI and no shell access, just pure PHP.
- A real safety net on every update. Before touching anything, the plugin takes a file backup and a database checkpoint. After updating it runs a health check, and if the site is broken it restores the previous version automatically.
- Updates show up where you look. Listing your plugins and themes now reports which ones have updates available, so you can see what's outdated at a glance.
- Auto-checkpoint, on by default. A new "Auto-checkpoint before plugin & theme updates" setting means a restore point is always waiting, even if you forget to ask for one.
- PHP 8.0 and 8.1 fix. A return-type syntax issue that could cause a fatal error on PHP older than 8.2 is resolved.
Because every install, update, and delete is journaled, wp_undo_change can roll any plugin or theme back to the exact version it was before.
Try it
Update all plugins — back up first.
Read the full 1.6.0 changelog on WordPress.org.