---
title: Connected AI tools for WordPress
canonical: https://wpsecurityninja.com/connected-ai-tools/
---
# Let your AI tools read what Security Ninja already found

Turn on Connected AI tools under Overview and an MCP client can ask which tests failed, which vulnerabilities are open, and which core files look wrong. Off until you save. Read only.

- [Try Free](https://wordpress.org/plugins/security-ninja/)
- [How to enable it](https://wpsecurityninja.com/docs/connected-ai-tools/)

## Your scans stay in WordPress. Your AI tool asks.

Security Ninja registers read-only WordPress Abilities so an MCP client can discover them. Nothing leaves the site until a logged-in administrator asks through a connected tool.

### Run your usual scans

Security Tests, Vulnerability Scanner, and Core Scanner already save results in the dashboard. Connected AI tools only reads what is already there.

### Turn on the switch under Overview

Open Security Ninja → Overview, enable Connected AI tools (MCP), and click Save. The default is off.

### Install MCP Adapter and connect your client

Activate the official MCP Adapter plugin, create an Application Password for an administrator, then point Cursor, Claude, WPVibe, or a similar client at the site MCP endpoint. You do not paste an API key into Security Ninja.

## Highlights

- Security tests
- Vulnerabilities
- Core scanner
- Pro: malware and attacks

## MCP in the product, not a separate glue layer

The abilities ship inside Security Ninja. Your AI app still needs a path to the site. You do not add a second plugin only to translate Security Ninja into MCP.

- Built into Free and Pro
- Administrators only
- Up to 50 items per answer

[Setup details](https://wpsecurityninja.com/docs/connected-ai-tools/)

## What Free can answer

With the switch on, a connected tool can read failed and warning security tests, open plugin, theme, and WordPress vulnerabilities, and core files that are modified, missing, or unknown. Each answer uses the latest saved scan and lists up to 50 items.

- Failed and warning tests with a short explanation
- Open vulnerabilities from the Vulnerability Scanner
- Modified, missing, and unknown core files

[Read the docs](https://wpsecurityninja.com/docs/connected-ai-tools/)

## What Pro adds

Pro also shares malware findings (file path and a short label), which protections are on, and firewall blocks plus blocked logins for the last 24 hours, 7 days, and 30 days.

- Malware findings from the Malware Scanner
- Firewall, country blocking, 404 guard, login protection, 2FA, scheduled scans
- Attack counts for 24 hours, 7 days, and 30 days

[Compare Free vs Pro](https://wpsecurityninja.com/pricing/)

## What a call never does

Asking does not start a scan, change a setting, ban an IP, or delete a file. A scan that has never run returns data_status never_run. A clean finished scan returns ready with an empty list.

- Read only, every time
- Only manage_options administrators can discover or run abilities
- Security Ninja does not push findings to an outside AI service on its own

[How exposure works](https://wpsecurityninja.com/docs/connected-ai-tools/)

## The switch is free. Pro shares more of the same scan data.

### Free

Optional MCP access to tests, vulnerabilities, and core findings from the latest saved scan.

- Connected AI tools switch under Overview
- Failed and warning tests
- Open vulnerabilities and core findings
- Off by default, read only

[Download Free](https://wordpress.org/plugins/security-ninja/)

### Pro

Everything in Free, plus malware findings, protection status, and attack counts, with the tools that block and clean threats.

- Everything in Free
- Malware findings, protection status, attack counts
- Cloud Firewall, malware scanner, and cleanup
- Login protection, 2FA, and webhooks

[See Pro pricing](https://wpsecurityninja.com/pricing/)

## FAQ

### Is Connected AI tools free?

Yes. The switch is in the free plugin on WordPress 6.9 or newer. Pro shares extra findings when the same switch is on.

### Do I need WordPress 6.9?

Yes. Connected AI tools uses WordPress Abilities, which need WordPress 6.9 or newer. On older WordPress versions the rest of Security Ninja still works.

### Is Security Ninja an MCP server?

No. Security Ninja registers read-only abilities. An MCP client such as the official MCP Adapter, or a tool that already talks to WordPress, discovers and calls them.

### Do I paste an API key into Security Ninja?

No. There is no Security Ninja connector and no API key field for this feature. You connect the AI tool you already use to the site.

### Does asking start a new scan?

No. Answers come from the latest saved results. If that scan has not run yet, the answer is empty.

### What does Pro change?

On Pro, the same switch can also return malware findings, which protections are on, and firewall blocks plus blocked logins for 24 hours, 7 days, and 30 days.

### Which plugin version includes this?

Connected AI tools ships in Security Ninja 5.311. Older sites keep working as they are until you update.

## Turn on the switch when you are ready

Start free with Connected AI tools on WordPress 6.9 or newer, or go Pro for Cloud Firewall, malware cleanup, 2FA, and webhooks.

[Try Free](https://wordpress.org/plugins/security-ninja/)