Two WordPress MCP servers built around undo
Flex MCP vs GoBuildWP: roll back a session, and check each restore.
Flex MCP vs GoBuildWP pits two undo designs against each other. Flex logs before and after snapshots, then reverses one change, a whole AI conversation in order, or redoes it. GoBuildWP reverses one supported change, a filtered set or a whole agent session, redo included, then reads the result back and reports any field that did not return to its old value. Irreversible writes are listed rather than skipped. The table starts with those rows.
Active release checked 2 October: the listing showed Flex MCP 3.6.0 on 2 October 2026. The separate free local WP MCP Hub routes existing site servers; it is not a replacement server or a feature unique to GoBuildWP.
Feature by feature
Undo rows first, then who may call what
Flex's cells all come from one source, its WordPress.org listing, read directly on 2 October 2026 for logs, rollback, transport and rate limits. Other integration rows retain their earlier documented scope; these are vendor claims, not runtime results. The rollback rows sit on top because that is where Flex puts its own emphasis.
- Yes
- Partly
- No
- Not documented
| Feature | Flex MCP | GoBuildWP |
|---|---|---|
| Undo a batch or session | Yes: Rolls back a whole AI conversation, in order.2 | Yes: A whole agent session newest first, with redo, refused and named if a target changed since; or a batch or filtered set, 200 at most. |
| Undo one change | Yes: Undo and redo for a single change.2 | Yes: Reverses supported recorded writes while their snapshots remain available; irreversible actions and expired records are excluded. |
| Verified restore | Partly: Documents same-origin rendered-HTML verification and expected_hash/dry_run write checks; not a browser visual test or proof of matched restore behavior.2 | Yes: After every undo the site is read again and set against the stored before-image; mismatched fields are listed by name. |
| Writes made through other MCP servers | Not documented: Not documented by Flex MCP. | Yes: Free records writes made through Elementor's and WooCommerce's own MCP servers, and EDD's and TranslatePress's abilities, with undo where they can be put back. On WordPress 7.1 an off-by-default setting also holds them to the safety profile and a person's approval. |
| Change log | Yes: A change log with before and after snapshots.2 | Yes: A redacted ledger keyed to the agent credential, 90 days deep, with CSV and JSON export. |
| Scheduled tasks | Yes: AI tasks from hourly to monthly, with templates.2 | Yes: In Free, and read-only: alt-text, accessibility and content audits daily or weekly, with an email of what changed. No general scheduler. |
| Chat inside wp-admin | Yes: A built-in chat agent and a Copilot.2 | Yes: Chat in wp-admin (WordPress 7.0+), bound by the same profiles and confirmation as outside clients, with per-person daily and monthly token limits in Pro. |
| Who confirms a destructive call | Partly: An Ask User mode inside its own chat agent.2 | Yes: Confirmation-gated calls use the model flag by default. In person-approves mode they need a human decision through supported client elicitation or a wp-admin link. Ordinary writes need a per-ability rule or Pro approval policy to wait too. |
| Safety profiles and read-only | Yes: Eight preset profiles, including WordPress Read Only.2 | Yes: Three profiles, from Read Only through Developer Full Access, and per-ability switches beneath them. |
| Multisite and many sites | Yes: Multisite support; a separate free local WP MCP Hub routes several existing site servers through one client connection.21 | Yes: One connection per site or one GoBuildWP Cloud link for many; across a multisite network, an ability can run on a sibling site under that site's profile and log. |
| Updates and backups across sites | Partly: The free WP MCP Hub routes several sites' servers through one client connection; bulk updates or backup status across them are not described in these sources.1 | Yes: GoBuildWP Cloud lists pending updates and backup status, free for 3 connected sites. Pro adds reviewed bulk plugin/theme updates with per-site backup options. Eligible guarded updates compare selected checks and attempt file recovery on failure; recovery can fail and does not restore database changes. |
| OAuth 2.1 sign-in | Yes: OAuth 2.1 with PKCE, DCR and discovery, with Application Passwords as fallback.2 | Yes: OAuth 2.1 and PKCE; CIMD registration first, DCR when a client needs it; revocation per app. |
| Transport | Yes: Modern stateless POST on MCP 2026-07-28; legacy initialize/SSE for older clients.2 | Yes: Streamable HTTP on modern 2026-07-28 and legacy 2025-11-25, 2025-06-18, 2024-11-05. MCP Tasks is available on the modern transport since Free 1.15.0; background execution requires a job-backed ability. Local clients can also use stdio through WP-CLI on the site's machine. |
| Rate limits | Yes: 180 authenticated requests/minute per user; 30 unauthenticated requests/minute per IP.2 | Yes: Writes limited per credential rather than per IP address. |
| Elementor | Partly: Supported; depth not documented.2 | Yes: Documented to the element: Free has 18 abilities for classic and atomic Elementor; Pro adds 52. |
| Other page builders | Partly: Divi supported; depth not documented.2 | Yes: Pro writes Divi 5 layouts, and Oxygen, WPBakery and Etch pages among others. |
| WooCommerce | Yes: A free WooCommerce tool set.2 | Yes: Free: 13 abilities that read the store and edit one product at a time. Pro adds 52 (refunds, sales reporting, FunnelKit step sales), HPOS-safe. |
| Form plugins | Yes: Free: WPForms, Gravity Forms, Forminator and Contact Form 7.2 | Yes: Free reads WPForms, Gravity Forms, Contact Form 7 and Forminator forms and entries, contact data withheld. Pro edits the first three like Flex, plus Formidable and Ninja Forms; Forminator gets label tweaks only. |
| SEO plugins | Yes: Yoast, Rank Math and Google Search Console.2 | Yes: Free sets a post's title, description and robots in Yoast, Rank Math, SmartCrawl, Slim SEO and three more; Pro edits the rest of Yoast and Rank Math, as Flex does. |
| Backup plugins | Partly: Its own Stifli Backup Tools integration.2 | Yes: Free checks UpdraftPlus, Duplicator, BackWPup and All-in-One WP Migration status. Pro can kick off an UpdraftPlus, BackWPup or All-in-One WP Migration backup and block destructive calls until one is fresh. |
| Security plugins or layer | Partly: AiPatch security scanner integration.2 | Yes: Wordfence and Solid Security findings and lockouts in Free; reviewed hardening, IP blocks and scan requests in Pro. Supported configuration has recovery; scan starts have no undo. |
| Price and usage caps | Free; no paid plan is mentioned.2 | Free has no per-call metering charge; per-credential write limits apply; Pro costs $39–$99.99 a year, or $59.99–$199.99 once. |
Weighing more than Flex MCP and GoBuildWP? The best WordPress MCP server comparison puts every option on one table. Running several sites, GoBuildWP Cloud adds reviewed bulk plugin updates with backup options, backup status for every site and one safety policy across sites.
A test you can repeat on staging
A three-change conversation, undone on each server
Undo the same three edits
In one conversation, have the agent retitle a page, change one custom field and add a menu item. Roll the conversation back in Flex; on GoBuildWP, open that session on the Changes screen and press Undo session. List what each restored.
Edit by hand, then undo
Repeat the three edits, then change the page title yourself before undoing. Note which server refuses and names your edit, and which one silently overwrites or skips it.
Try the redo path
After the rollback, redo on both and compare the page with its post-agent state. GoBuildWP's redo-session checks each change against the state it first produced, so note whether either reports a difference.
Where Flex MCP leads
Where Flex's automation and free tier go further
From Flex's WordPress.org listing, read 29 September 2026. Three points where Flex is ahead.
Scheduled tasks that act
Flex runs AI tasks hourly to monthly from templates, and they may write. GoBuildWP's schedule, included in Free, only reruns read-only audits.
Form and store writes at no cost
Flex's free plugin covers WPForms, Gravity Forms, Forminator and Contact Form 7, and lists 61 WooCommerce tools. GoBuildWP Free reads those forms and the store and edits single products; form editing and most store writes are Pro.
A hub for several sites
The separate free WP MCP Hub is a local router connecting one client to several existing site servers. Flex documents eight profiles; keep the router, site-server policy and multisite-network behavior distinct.
Where GoBuildWP leads Flex MCP
What a checked restore and a scoped token add
GoBuildWP's side, set against what Flex's listing documents.
A field-by-field restore report
Flex documents before and after snapshots, rendered-HTML verification and expected_hash checks on writes. GoBuildWP's check sits on the undo side: after a restore it reads the live values back, sets them beside the before-image and lists each mismatched field. Which check catches more is a question for a matched staging fixture, not one this page answers.
A session undo that stops for later edits
Before undoing a session, GoBuildWP checks whether anything else changed a target after the agent did. If something did, nothing is written and the conflict is named: which change, which fields, which later edit.
One log across MCP servers
GoBuildWP Free also records writes made through Elementor's and WooCommerce's own MCP servers, with undo where they can be put back, so a session that used more than one server can be reviewed and reversed in one place.
Confirmation outside the plugin's chat
Flex's Ask User mode belongs to its own chat agent. GoBuildWP's person-approves mode covers confirmation-gated calls from external clients, using supported elicitation or a wp-admin link. Ordinary writes need their own rule.
Preview and a queue before anything is written
For abilities with a preview projector, GoBuildWP can compute a change before applying it (mandatory preview is opt-in), and Pro's approval queue, once switched on, holds writes for a person. Flex's listing documents neither.
Coverage Flex does not list
Pro converts a page to another builder as a separate draft, reporting losses element by element, drives 26 cache and optimisation layers, and works in WPML, Polylang and Weglot.
Who should pick which
Two session rollbacks: which checks do you need?
Choose GoBuildWP when
- You want each undo checked against the before-image, field by field.
- People must approve deletes that come from outside clients such as Claude or Cursor.
- The site depends on Elementor depth, other builders, caches or translation plugins.
Flex MCP is a good fit when
- One client setup should reach several sites through a hub.
- Scheduled AI tasks should make changes, not only report.
- Form editing and WooCommerce writes must be free.
Pricing and hosting model
Both free to start; where the money goes
Flex MCP
Flex MCP is a free plugin on WordPress.org with no paid plan mentioned. Its listing, rechecked on 2 October 2026, allows 180 authenticated requests a minute per user and 30 unauthenticated requests a minute per IP address.
GoBuildWP
GoBuildWP Free costs nothing and has no per-call metering charge; per-credential write limits apply. Pro, which carries builders beyond Elementor, caches, and store, form and SEO work past what Free covers, is $39–$99.99 a year, or $59.99–$199.99 once.
FAQ
Undo, redo and schedules: Flex and GoBuildWP questions
Flex's listing says it is the only WordPress MCP server with undo. Is it?
No. On 29 September 2026 Respira, Royal MCP, EMCP and GoBuildWP also document undo. Both document session recovery and redo, bounded by supported operations and retained records. Flex documents rendered-HTML verification and expected_hash checks; GoBuildWP checks later edits and restored fields. Matched runtime behavior remains untested.
How does GoBuildWP's session undo differ from Flex's conversation rollback?
GoBuildWP files each write under its session: one MCP connection, one wp wppilot mcp serve process, or one credential and client until it has been idle for 30 minutes. wppilot/undo-session reverses that session newest first, but only after checking that nothing else changed a target since; if something did, it changes nothing and names the conflict. It stops at the first restore that fails verification, and wppilot/redo-session puts the session back under the same checks. Flex now documents rendered-HTML verification and expected_hash checks. A matched, versioned session-restore fixture is still needed to compare conflict and recovery behavior.
Can GoBuildWP run AI tasks on a timer like Flex?
Only audits. GoBuildWP Free reruns its alt-text, content and accessibility audits daily or weekly with no agent attached and emails what changed. It never writes on a schedule, while Flex's tasks can.
Is Flex MCP paid?
Its WordPress.org listing mentions no paid plan. GoBuildWP Free is also free; Pro is sold per site.
Sources, checked 2 October 2026
Flex MCP vs GoBuildWP: the sources behind each row
The current listing was checked directly on 2 October for selected release/transport/recovery facts; older integration details retain their stated dates. The separate WP MCP Hub repository documents local routing. These are publisher claims, not matched runtime results.
- 1. WP MCP Hub repositorySeparate free local multi-site router, checked 2 October. Requires site servers; not another replacement connector.
- 2. Flex MCP on WordPress.orgDirect listing rechecked 2 October 2026: free logs/rollback, current transport, rate limits and rendered-HTML verification. Other cells retain their 29 September research scope.
- GoBuildWP changelog
- GoBuildWP capability directory
- GoBuildWP pricing
Undo the same three edits on both.
Install GoBuildWP Free next to Flex on a staging copy, run the three-change test above, and keep whichever restore you can trust.