Agent Abilities for MCP vs WPS Hide Login
Compare WordPress plugins and tools side by side. Pick products with “Compare” in the software directory.
| Feature | Agent Abilities for MCP v1.9.0 · checked 23 Oct 2026 Free · ★ 4.8/5 Visit Details | WPS Hide Login v1.9.19 · checked 23 Oct 2026 Free · ★ 4.8/5 Visit Details |
|---|---|---|
| At a glance | ||
| Active installs | 700+ | 2M+ |
| Last updated | October 16, 2026 | August 13, 2026 |
| Editions | Agent Abilities for MCP | WPS Hide Login |
| Pros | Every ability is off until enabled, and agents act as a real WordPress user; Audit log of every call, including denied attempts, with CSV export; Read-only mode, force-draft, rate limit and IP allowlist switches; OAuth sign-in or Application Passwords, with a connection checker; Bundles the official MCP Adapter, nothing else to install | Moves the login page to a custom URL with no core file changes; Restores the standard login when deactivated; Supports multisite network settings |
| Cons | Requires WordPress 6.9 or newer; Large plugin with many settings to review before use; Page builder layouts are refused rather than edited; Tools other plugins publish straight to the adapter's default server are outside its controls | Hiding the URL is not a substitute for login rate limiting; Forgotten login URLs lock editors out until the plugin is disabled; Maintained without guaranteed free support |
| Features (Security plugins checklist) | ||
| Firewall | — | No |
| Malware scan | — | No |
| Login protection | — | Yes |
| Two-factor login | — | No |
| Activity log | — | No |
| Free version | — | Yes |
| More features | ||
| Other features | MCP server endpoint built on the bundled MCP Adapter, OAuth server with client registration, tokens and consent, Activity log of every tool call with daily pruning, Read-only mode that stops every write ability, High-risk abilities locked behind a separate switch, Rate limit, IP allowlist and force-to-draft, Site Brief text sent to agents at session start, Connection Doctor that diagnoses endpoint problems, Bridges abilities registered by other plugins, Refuses writes to page-builder-owned content, WP-CLI command to export the ability catalog, Email notification digest | Custom login URL slug, Custom redirect page for blocked wp-admin visitors, Blocks direct access to wp-login.php and wp-admin, Network settings on multisite, Site Health test for the login URL |
| Integrations | ||
| E-commerce | WooCommerce | — |
| Plugins | Advanced Custom Fields, Yoast SEO, Rank Math, All in One SEO, Slim SEO, The Events Calendar, Event Tickets, Avada / Fusion Builder, GeoDirectory, WPML, WordPress MCP Adapter | — |
| Requires WordPress | 6.9 | 4.1 |
| Requires PHP | 7.4 | 7.0 |
| Tested up to | 7.1 | 7.1 |
| Phones home | No | No |
| Custom tables | 5 | — |