Backups · 4 modules
WordPress Backup Plugin MCP that checks the archive still exists.
A WordPress backup plugin MCP answers one question before a risky change: is there a recent backup whose archive still exists? The backup abilities read provider records, start supported backups and expose no archive restore, download or deletion. A record does not prove a remote archive exists or can be restored; check storage and rehearse recovery separately.
What goes wrong without a plugin-aware module
- A backup plugin's "Last backup" line trusted after the archive behind it was deleted
- A plugin update or bulk delete run with no recent backup at all
- An agent handed restore, download or storage credentials it never needed
Worked example
Update a plugin that has broken the site before, with a fresh database backup in hand first.
UpdraftPlus has the most options here; BackWPup jobs scheduled with WP-Cron can also be started. All-in-One WP Migration uses its native export steps and status records, and Duplicator is read-only. The status and list calls work on GoBuildWP Free; starting the backup is Pro. A completed status does not independently verify every item inside an archive.
wppilot/backup-statusFreeReports the last backup and its result, the last successful one, what it contained and where it was sent, in site time and UTC, without ever returning an archive path or a download link.
wppilot/backup-triggerProStarts a database-only UpdraftPlus backup through the plugin's own scheduler. It returns at once as queued, and is refused while another backup is running or within 15 minutes of the last one it started.
wppilot/backup-statusFreeCalled again until the new backup reports success, failed or cancelled. Queued is not a backup.
wppilot/backup-listFreeShows the recent sets with size and storage names, so a suspiciously small archive is noticed before it is relied on.
What to check yourself. Only then run the update. If the plugin's archive lives only in remote storage, status marks it unverified; for a change you could not undo, open the storage service and confirm the file is there. Restoring stays in UpdraftPlus's own screen, with a person at it.
Modules
4 modules compared
The three backup abilities are shared, so every row counts the same three; on Duplicator the one change ability, backup-trigger, refuses to start a build. Each module loads only when its plugin is active. The Edition column shows how much of each one GoBuildWP Free covers; the rest needs Pro. Open a module for its full ability list, requirements and safety notes.
| Module | Edition | Abilities | Inspect / change / destructive | Covers |
|---|---|---|---|---|
| All-in-One WP Migration | Free 2 + Pro 1 | 3 | 2 / 1 / 0 | newest finished export and its size, count of complete exports, export or import in progress, start a full export on hosts that block requests to themselves |
| UpdraftPlus | Free 2 + Pro 1 | 3 | 2 / 1 / 0 | last backup and its verdict, backup sets with contents and size, storage destination names, running and next scheduled jobs |
| Duplicator | Free 2 + Pro 1 | 3 | 2 / 1 / 0 | backups from Duplicator's own table, complete, building, failed and cancelled states, sizes and creation times, the fresh-backup gate |
| BackWPup | Free 2 + Pro 1 | 3 | 2 / 1 / 0 | job runs read from BackWPup's logs, errors and warnings per run, next scheduled run per job, start a WP-Cron job |
Why it matters
What plugin-aware changes for backups
Each backup plugin keeps a different truth. UpdraftPlus records a verdict for its latest job only, BackWPup writes results into log files that outlive the archives they describe, Duplicator builds its backups from a browser tab with no server-side start, and All-in-One WP Migration keeps no history at all, only the finished export files in a folder. An agent that reads one plugin's screen and assumes the others behave the same will report a backup that no longer exists, which is worse than reporting none.
A first safe workflow
Ask the agent for backup status before anything else, on each site you manage, and compare its answer with the plugin's own screen. Where they differ, the difference is usually a deleted archive or a job that never finished, and that is worth knowing before a bad update rather than after. With GoBuildWP Pro, then switch on the fresh-backup requirement, so destructive calls wait until one exists.
How to tell it worked
Read the status after any backup you start, until the plugin reports a result. Before a risky change, confirm the newest successful backup is recent enough and that its archive still exists; a remote-only copy is reported as unverified, so check it in the storage service if the change is one you could not undo.
Choosing and checking backups
Which backup plugin gives an agent the most to work with
The four supported plugins keep records of very different quality, and that decides how much an AI agent can honestly tell you. The module table cannot show it, because the same three ability names answer for all of them; what changes is the evidence behind each answer.
- UpdraftPlus keeps the richest history: a file list and a size per entity (database, plugins, themes, uploads, others) for every set, with files and database on separate schedules. Its weak spot is the verdict. Only the latest job records success or failure, so every older set reads result unknown. It is also the only plugin where a Pro start can choose full, database-only or files-only.
- Duplicator gives an exact state for every build, old or new, because each row carries a status number for complete, still building, failed or cancelled. Its free edition has no schedule and no server-side start, so the agent can confirm a build a person ran and never begin one. Duplicator Pro, and Duplicator releases older than its current rewrite, are not read.
- BackWPup is organised around jobs, and results come from each run's log header, error and warning counts included. Logs outlive archives, so only runs written to a local folder are checked against the disk; runs sent to remote storage are counted but marked unverified. Pro can start jobs BackWPup schedules through WP-Cron, not jobs started by link.
- All-in-One WP Migration keeps no records at all beyond the finished .wpress files in its backups folder, so each export is dated by when it finished and a failed one leaves no trace. A file counts only when the plugin's own archive check passes. Pro can start a full export: GoBuildWP runs the plugin's own export steps on the server in short WP-Cron slices instead of relying on the plugin's requests to itself. It starts one at most once an hour and only when the disk has room for about twice the newest export, because the free plugin never deletes an export and has no schedule.
Picking for a site an agent will maintain
If the plugin is not chosen yet, decide which gap you can live with: unknown verdicts on older UpdraftPlus sets, a person in wp-admin for every Duplicator build, BackWPup taking its own log's word for off-site copies, or All-in-One WP Migration exports piling up on the same server as the site. For an agent that should hold a risky change until a backup exists and then start one itself, UpdraftPlus or a WP-Cron BackWPup job is the workable pair. For a site where every backup is a deliberate human act before a migration, Duplicator's exact build states are enough.
One site, two backup plugins: how the answers combine
Agencies often inherit sites where a host-installed backup plugin sits next to the one the client chose. backup-status reads every supported plugin that is active, answers per provider, and then names the newest successful backup across all of them. That summary is convenient and easy to misread: a successful Duplicator build from this morning satisfies it even while the UpdraftPlus job that ships copies off-site has been failing for a week.
Read the per-provider lines, not only the headline. Ask the agent to report each plugin's last success separately and to flag any provider whose last job failed. On GoBuildWP Pro the Require a fresh backup setting also accepts any active provider, so the same caution applies to it: the gate proves a recent backup exists somewhere on the record, not that the one you would restore from is current.
What an agent never receives from a backup plugin
Every answer is limited to times, results, contents, sizes, storage names, labels and error or warning counts. Archive paths and file names, download links, job nonces and storage credentials are never read into a result, and the abilities need an account with the manage_options capability. That ceiling is deliberate: an agent that cannot see where an archive lives cannot fetch it, copy it or pass it on, which matters when the archive holds the whole user table.
It also means some checks stay with a person. Confirming that a remote copy really sits in Google Drive, S3 or on an FTP server means opening that service yourself, and restores happen in the backup plugin's own screen. The backups reference lists the fields each ability returns.
A pre-change backup check to paste into any client
This prompt works whichever of the four supported plugins is installed, because it asks for evidence rather than a plugin-specific action: “Before I change anything, report backup status for every backup plugin on this site. For each, give the last successful backup in site time, what it contained, its size against the set before it, and whether the archive was checked on disk or taken from the plugin's record. Tell me if the database was missing from the newest successful set.”
Then judge the answer against the change you are about to make:
- A database-only backup covers a bulk post edit or a settings change, not a plugin or theme update that replaces files.
- A set much smaller than the one before usually means an entity was skipped or a job was cut short. Look at it before relying on it.
- Queued or running is not a backup. Read status again until the plugin records a result; if a queued job never moves, check whether WP-Cron runs on the site.
- An archive marked deleted or unverified needs a person to check the storage before any change you could not undo.
- Rehearse an actual restore on a staging copy from time to time. No status read proves an archive restores cleanly.
Where this sits next to updates and undo
A backup check is the first half of a safe change. The safe updates workflow builds on it, and the change ledger and rollback covers undoing a GoBuildWP write, which is a separate and narrower tool than restoring a backup: rollback reverses one recorded change, a restore puts back the whole site as it was.
FAQ
Backups and AI, answered
Can an AI agent restore a WordPress backup?
No. The backup abilities read status and history and can start a backup where the plugin allows it, but nothing restores, downloads or deletes an archive, and no archive path, download link or storage credential is ever returned. Restoring stays in the backup plugin's own screen, with a person in front of it.
Which backup plugins can be triggered?
With GoBuildWP Pro, UpdraftPlus (full, database-only or files-only) BackWPup jobs that BackWPup schedules with WP-Cron, and a full All-in-One WP Migration export (Pro runs the plugin's own export steps itself and refuses, with the reason, when the installed release lacks what it needs); GoBuildWP Free reads all four but starts none. Duplicator's free edition builds backups from a browser tab and has no server-side start, so it is read-only here. A start is refused while a backup is running and for 15 minutes after the last one GoBuildWP started, an hour for All-in-One WP Migration, whose exports the free plugin never deletes.
What does "Require a fresh backup" do?
It is a Pro setting under Settings > Backups, off by default. While it is on, any call rated destructive or critical is refused unless a supported backup plugin reports a successful backup newer than the age you choose, 24 hours by default. It fails closed: with no readable backup plugin those calls are refused with a message that says why. Reads and ordinary writes are never held.
Start in Read Only, then add what the site runs
Connect your AI client to the free MCP foundation and check what it can see. The free plugin already covers the basics for All-in-One WP Migration, UpdraftPlus, Duplicator and BackWPup; add Pro when a job needs more.