Novamira Review 2026: Full PHP Access for Your AI Agent

“Novamira gives you unrestricted control over this WordPress installation.” That line opens the briefing Novamira gives a connected AI agent.

It isn’t marketing. On our test site, one call ran our own PHP and read back the site’s versions, table count and active plugins.

We connected our own MCP client to a clean WordPress install and tried each part of it.

This Novamira review covers what that power buys you, where its guardrails stop, and who should run this WordPress MCP server.

Quick verdict: should you give an AI agent Novamira?

Yes, on a development or staging site with backups. No other plugin we tested lets an agent build and fix things this directly.

No, on a live store or client site. Novamira says the same on its own setup screen.

• Best for: developers and agencies who build or debug WordPress sites with Claude Code, Codex or Cursor.
• Not ideal for: production sites, shared admin teams, or anyone who wants an agent limited to content.

The full score, pros and cons are in the review box below.

How we tested it (and what we didn’t)

We installed Novamira 1.12.12 on a clean WordPress 7.1.3 site with PHP 8.3. Then we connected our own MCP client with an Application Password.

We listed its abilities, ran PHP through it and read files. We also walked through every admin screen it adds.

What we didn’t test: WP-CLI, which our test server didn’t have, the OAuth flow, Novamira Visual, and the Pro features.

What does “unrestricted control” look like in practice?

Smaller than you’d expect at first. Our client saw just three MCP tools, and their definitions came to about 2.9 KB.

Those three tools are a doorway. One lists abilities, one describes them, and one runs them. Behind that doorway sat 36 abilities on our test site.

The one that matters is execute-php. It runs any PHP you send, with WordPress loaded. Our call returned the WordPress and PHP versions, the table count and the active plugins.

File abilities read, write, edit and delete files. Others queue block editor changes, save designs, write skills and create one-time admin and upload links.

The Abilities Hub counted 43 abilities, with 41 on. The two that were off run WP-CLI, which our test server didn’t have.

How do you connect Novamira to Claude or Codex?

It takes about five minutes, most of it in a four-step wizard.

For the client side, see our guide to connecting an MCP server to Claude, Cursor and ChatGPT.

Where does Novamira draw its safety lines?

Mostly in its warnings, not in hard limits. The setup screen says it plainly: development and staging only, and always keep backups.

• A confirm step. Turning on AI Abilities needs a ticked box and a browser confirmation.
• Admins only. Novamira needs an administrator account, and anonymous calls got a 401 in our test.
• A sandbox for new PHP files. Files the agent creates go to a sandbox you can review in wp-admin.
• Self-protection rules. Its briefing tells the agent never to modify, deactivate or delete Novamira itself.
• Ability switches. The Abilities Hub removes any ability you switch off from discovery and execution.

None of that limits a working execute-php call. Any PHP means any database query, any file and any user account.

Do Read Mode and Ghost Mode make it safe for production?

Not on their own, and Novamira says so. Both are Pro features, and both pages carry a “not a security feature” warning.

Read Mode removes Novamira’s write abilities, PHP and WP-CLI included. Novamira calls it production ready, but the agent still signs in as an administrator.

Ghost Mode hides Novamira’s menu, notices and plugin rows from administrators you don’t pick. They can still find it and connect an AI.

That hiding cuts both ways. On a shared site, a teammate may never notice that an agent has full access.

What does Novamira tell your AI agent?

More than most servers. Its agent-context briefing lists the WordPress and PHP versions and every installed plugin.

It also gives orders. On our test server, it told the agent to open its first reply with a PHP security notice.

That notice ships inside the plugin and appears when your PHP version predates a listed fix. It’s useful, but it shows how far Novamira can steer the agent.

Updates work differently from most plugins. Novamira isn’t on WordPress.org, so updates come from its own licence server, which receives your site’s domain and plugin version. The source code is on GitHub if you want to check.

Is Novamira free, and what does Pro add?

The core plugin is free and open source under the AGPL-3.0 licence. Everything in this review except Read Mode and Ghost Mode works without paying.

• Read Mode, for agents that should only look.
• Ghost Mode, to hide Novamira from other administrators.
• Specializations for page builders, themes, block libraries, custom fields, SEO and form plugins.
• Memory that persists between sessions.

Check novamira.ai for current Pro prices. We couldn’t confirm them for this review, so we haven’t quoted any.

Novamira alternatives worth a look

• AI Engine: curated tools that never run PHP, plus an optional YOLO add-on for Novamira-style power on staging.
• WordPress MCP Adapter: the official route, with three tools and only the abilities your plugins register.
• Royal MCP: refuses settings changes by default and returns an undo token for destructive writes.
• Elementor MCP: if your agent only needs to build Elementor pages.

New to the protocol? Our plain-English MCP explainer covers how servers, tools and clients fit together.

Frequently asked questions

Should you install Novamira?

Install Novamira on a staging site if you build or fix WordPress sites with an AI coding agent. No other server in our tests gave an agent this much reach with so little setup.

Keep it off live sites. This WordPress MCP server can touch every file and table. Its safety features are warnings, a confirm step and Pro-only Read Mode.

Start with a fresh backup, approve each action in your client, and let the agent do the heavy lifting there.