mcp-core.php
1 month ago
mcp-oauth.php
1 month ago
mcp-rest.php
2 months ago
mcp.conf
1 year ago
mcp.js
8 months ago
mcp.md
8 months ago
mcp.php
1 month ago
wpai-connectors.php
1 month ago
wpai-gateway-availability.php
2 months ago
wpai-gateway-directory.php
2 months ago
wpai-gateway-image-model.php
2 months ago
wpai-gateway-model.php
2 months ago
wpai-gateway-providers.php
2 months ago
wpai-gateway.php
2 months ago
mcp-rest.php
266 lines
| 1 | <?php |
| 2 | |
| 3 | class Meow_MWAI_Labs_MCP_Rest { |
| 4 | // Bump the suffix when build_schema_from_args() changes so old cached schemas are ignored. |
| 5 | private $cache_key = 'mwai_mcp_tools_cache_v2'; |
| 6 | private $allowed = [ 'posts', 'pages', 'media' ]; |
| 7 | |
| 8 | public function __construct() { |
| 9 | add_action( 'rest_api_init', [ $this, 'rest_api_init' ] ); |
| 10 | } |
| 11 | |
| 12 | public function rest_api_init() { |
| 13 | add_filter( 'mwai_mcp_tools', [ $this, 'register_rest_tools' ] ); |
| 14 | add_filter( 'mwai_mcp_callback', [ $this, 'handle_call' ], 10, 4 ); |
| 15 | } |
| 16 | |
| 17 | public function register_rest_tools( $prevTools ) { |
| 18 | $cached = get_transient( $this->cache_key ); |
| 19 | |
| 20 | if ( !$cached ) { |
| 21 | $tools = []; |
| 22 | $server = rest_get_server(); |
| 23 | $routes = $server->get_routes(); |
| 24 | |
| 25 | foreach ( $this->allowed as $resource ) { |
| 26 | $base = "/wp/v2/{$resource}"; |
| 27 | $item = "{$base}/(?P<id>[\d]+)"; |
| 28 | |
| 29 | if ( isset( $routes[ $base ] ) ) { |
| 30 | foreach ( $routes[ $base ] as $endpoint ) { |
| 31 | if ( !empty( $endpoint['methods']['GET'] ) ) { |
| 32 | $tools[ "list_{$resource}" ] = [ |
| 33 | 'name' => "list_{$resource}", |
| 34 | 'description' => "List {$resource}", |
| 35 | 'category' => 'Dynamic REST', |
| 36 | 'inputSchema' => $this->build_schema_from_args( $endpoint['args'] ), |
| 37 | 'outputSchema' => $this->build_output_schema(), |
| 38 | 'accessLevel' => 'read', |
| 39 | ]; |
| 40 | break; |
| 41 | } |
| 42 | } |
| 43 | } |
| 44 | |
| 45 | if ( isset( $routes[ $item ] ) ) { |
| 46 | foreach ( $routes[ $item ] as $endpoint ) { |
| 47 | if ( !empty( $endpoint['methods']['GET'] ) ) { |
| 48 | $tools[ "get_{$resource}" ] = [ |
| 49 | 'name' => "get_{$resource}", |
| 50 | 'description' => "Get single {$resource} by ID", |
| 51 | 'category' => 'Dynamic REST', |
| 52 | 'inputSchema' => $this->build_schema_from_args( $endpoint['args'] ), |
| 53 | 'outputSchema' => $this->build_output_schema(), |
| 54 | 'accessLevel' => 'read', |
| 55 | ]; |
| 56 | break; |
| 57 | } |
| 58 | } |
| 59 | } |
| 60 | |
| 61 | if ( isset( $routes[ $base ] ) ) { |
| 62 | foreach ( $routes[ $base ] as $endpoint ) { |
| 63 | if ( !empty( $endpoint['methods']['POST'] ) ) { |
| 64 | $tools[ "create_{$resource}" ] = [ |
| 65 | 'name' => "create_{$resource}", |
| 66 | 'description' => "Create {$resource}", |
| 67 | 'category' => 'Dynamic REST', |
| 68 | 'inputSchema' => $this->build_schema_from_args( $endpoint['args'] ), |
| 69 | 'outputSchema' => $this->build_output_schema(), |
| 70 | 'accessLevel' => 'write', |
| 71 | ]; |
| 72 | break; |
| 73 | } |
| 74 | } |
| 75 | } |
| 76 | |
| 77 | if ( isset( $routes[ $item ] ) ) { |
| 78 | foreach ( $routes[ $item ] as $endpoint ) { |
| 79 | $methods = array_keys( $endpoint['methods'] ); |
| 80 | if ( array_intersect( [ 'POST', 'PUT', 'PATCH' ], $methods ) ) { |
| 81 | $tools[ "update_{$resource}" ] = [ |
| 82 | 'name' => "update_{$resource}", |
| 83 | 'description' => "Update {$resource}", |
| 84 | 'category' => 'Dynamic REST', |
| 85 | 'inputSchema' => $this->build_schema_from_args( $endpoint['args'] ), |
| 86 | 'outputSchema' => $this->build_output_schema(), |
| 87 | 'accessLevel' => 'write', |
| 88 | ]; |
| 89 | break; |
| 90 | } |
| 91 | } |
| 92 | } |
| 93 | |
| 94 | if ( isset( $routes[ $item ] ) ) { |
| 95 | foreach ( $routes[ $item ] as $endpoint ) { |
| 96 | if ( !empty( $endpoint['methods']['DELETE'] ) ) { |
| 97 | $tools[ "delete_{$resource}" ] = [ |
| 98 | 'name' => "delete_{$resource}", |
| 99 | 'description' => "Delete {$resource}", |
| 100 | 'category' => 'Dynamic REST', |
| 101 | 'inputSchema' => $this->build_schema_from_args( $endpoint['args'] ), |
| 102 | 'outputSchema' => $this->build_output_schema(), |
| 103 | 'accessLevel' => 'admin', |
| 104 | ]; |
| 105 | break; |
| 106 | } |
| 107 | } |
| 108 | } |
| 109 | } |
| 110 | |
| 111 | set_transient( $this->cache_key, $tools, DAY_IN_SECONDS ); |
| 112 | $cached = $tools; |
| 113 | } |
| 114 | |
| 115 | return array_merge( array_values( $cached ), $prevTools ); |
| 116 | } |
| 117 | |
| 118 | private function build_schema_from_args( $args ) { |
| 119 | $schema = [ |
| 120 | 'type' => 'object', |
| 121 | 'properties' => [], |
| 122 | 'required' => [], |
| 123 | ]; |
| 124 | |
| 125 | // JSON Schema keys worth forwarding from WordPress REST arg definitions. |
| 126 | // PHP callbacks (sanitize_callback/validate_callback) and WP-only keys (arg_options, |
| 127 | // required) are intentionally excluded - clients would choke on them. |
| 128 | $allowed_keys = [ |
| 129 | 'type', 'description', 'enum', 'default', 'format', |
| 130 | 'items', 'properties', 'additionalProperties', |
| 131 | 'minimum', 'maximum', 'exclusiveMinimum', 'exclusiveMaximum', 'multipleOf', |
| 132 | 'minLength', 'maxLength', 'pattern', |
| 133 | 'minItems', 'maxItems', 'uniqueItems', |
| 134 | 'oneOf', 'anyOf', 'allOf', |
| 135 | ]; |
| 136 | |
| 137 | foreach ( $args as $name => $def ) { |
| 138 | $property = []; |
| 139 | foreach ( $allowed_keys as $key ) { |
| 140 | if ( array_key_exists( $key, $def ) ) { |
| 141 | $property[ $key ] = $def[ $key ]; |
| 142 | } |
| 143 | } |
| 144 | if ( !isset( $property['type'] ) ) { |
| 145 | $property['type'] = 'string'; |
| 146 | } |
| 147 | if ( !isset( $property['description'] ) ) { |
| 148 | $property['description'] = ''; |
| 149 | } |
| 150 | |
| 151 | $schema['properties'][ $name ] = $property; |
| 152 | |
| 153 | if ( !empty( $def['required'] ) ) { |
| 154 | $schema['required'][] = $name; |
| 155 | } |
| 156 | } |
| 157 | |
| 158 | return $schema; |
| 159 | } |
| 160 | |
| 161 | private function build_output_schema() { |
| 162 | return [ |
| 163 | 'type' => 'object', |
| 164 | 'properties' => [ |
| 165 | 'content' => [ |
| 166 | 'type' => 'array', |
| 167 | 'items' => [ |
| 168 | 'type' => 'object', |
| 169 | 'properties' => [ |
| 170 | 'type' => [ |
| 171 | 'type' => 'string', |
| 172 | 'description' => 'Block type, e.g. text or image', |
| 173 | ], |
| 174 | 'text' => [ |
| 175 | 'type' => 'string', |
| 176 | 'description' => 'Human-readable content', |
| 177 | ], |
| 178 | ], |
| 179 | 'required' => [ 'type', 'text' ], |
| 180 | ], |
| 181 | ], |
| 182 | ], |
| 183 | 'required' => [ 'content' ], |
| 184 | ]; |
| 185 | } |
| 186 | |
| 187 | public function handle_call( $existing, $tool, $args, $id ) { |
| 188 | if ( !empty( $existing ) ) { |
| 189 | return $existing; |
| 190 | } |
| 191 | |
| 192 | $tools = get_transient( $this->cache_key ); |
| 193 | if ( !isset( $tools[ $tool ] ) ) { |
| 194 | return $existing; |
| 195 | } |
| 196 | |
| 197 | // Security check is already done in the MCP auth layer |
| 198 | // If we reach here, the user is authorized to use MCP |
| 199 | |
| 200 | list( $action, $resource ) = explode( '_', $tool, 2 ); |
| 201 | $path = "/wp/v2/{$resource}"; |
| 202 | $method = 'GET'; |
| 203 | |
| 204 | if ( in_array( $action, [ 'get', 'update', 'delete' ], true ) ) { |
| 205 | if ( empty( $args['id'] ) ) { |
| 206 | return [ |
| 207 | 'jsonrpc' => '2.0', |
| 208 | 'id' => $id, |
| 209 | 'error' => [ |
| 210 | 'code' => -32602, |
| 211 | 'message' => 'Missing parameter: id', |
| 212 | ], |
| 213 | ]; |
| 214 | } |
| 215 | $path .= '/' . intval( $args['id'] ); |
| 216 | } |
| 217 | |
| 218 | switch ( $action ) { |
| 219 | case 'create': |
| 220 | case 'update': |
| 221 | $method = 'POST'; |
| 222 | break; |
| 223 | case 'delete': |
| 224 | $method = 'DELETE'; |
| 225 | break; |
| 226 | default: |
| 227 | $method = 'GET'; |
| 228 | break; |
| 229 | } |
| 230 | |
| 231 | $request = new WP_REST_Request( $method, $path ); |
| 232 | |
| 233 | if ( $method === 'GET' ) { |
| 234 | foreach ( $args as $key => $value ) { |
| 235 | $request->set_param( $key, $value ); |
| 236 | } |
| 237 | } |
| 238 | else { |
| 239 | $request->set_body_params( $args ); |
| 240 | } |
| 241 | |
| 242 | $response = rest_do_request( $request ); |
| 243 | |
| 244 | if ( is_wp_error( $response ) || $response->get_status() >= 400 ) { |
| 245 | $error_obj = is_wp_error( $response ) ? $response : $response->as_error(); |
| 246 | |
| 247 | // Return error in old format for backward compatibility |
| 248 | // The execute_tool method will detect this and not re-wrap it |
| 249 | return [ |
| 250 | 'jsonrpc' => '2.0', |
| 251 | 'id' => $id, |
| 252 | 'error' => [ |
| 253 | 'code' => (int) ( $error_obj->get_error_code() ?: $response->get_status() ), |
| 254 | 'message' => $error_obj->get_error_message(), |
| 255 | 'data' => $error_obj->get_error_data() ?: null, |
| 256 | ], |
| 257 | ]; |
| 258 | } |
| 259 | |
| 260 | $data = $response->get_data(); |
| 261 | |
| 262 | // Return just the data - execute_tool will wrap it properly |
| 263 | return $data; |
| 264 | } |
| 265 | } |
| 266 |