# Wphealthkit MCP server

Source: https://glimind.com/server/mcp-registry%2Fcom.wphealthkit%2Fmcp-server
Registry id: `mcp-registry/com.wphealthkit/mcp-server`
Status: auth-required (checked 2026-10-27T02:27:47.123Z)

## Measurements (30 days)

- Uptime: 100%
- Checks: 216
- Outages (90 days): 0

## Install

```json
{
  "mcpServers": {
    "wphealthkit-mcp-server": {
      "type": "http",
      "url": "https://mcp.wphealthkit.com/mcp"
    }
  }
}
```

Claude Code:

```sh
claude mcp add --transport http wphealthkit-mcp-server https://mcp.wphealthkit.com/mcp
```

## Tools (9)

- `audit_plugin`: Trigger a security audit for a wp.org plugin by slug. Returns an audit ID.
- `audit_plugin_zip`: Trigger an audit from a local ZIP file. Returns an audit ID.
- `audit_plugins_bulk`: Audit all plugin ZIP files in a local directory. Submits in batches of 10, streams results as each completes, and prints a final summary with risk breakdown and
- `check_plugin`: Look up a plugin's security grade, risk level, and findings count from the directory.
- `flag_finding`: Flag a finding as a false positive. The report goes to the WP HealthKit team for review; confirmed patterns result in a scanner rule update that prevents that p
- `get_findings`: Get paginated findings, with optional filters for severity and category.
- `get_fix_prompt`: Get AI-ready fix prompts for an audit's findings, batched by severity.
- `get_report`: Poll the status and full results of an audit by its ID.
- `list_usage`: Check your current usage — audits used this month, tier, and limits.

Measured by Glimind (https://glimind.com): MCP handshake + tool list only, no tool is ever called. CC BY 4.0.