Title: Corsen Context
Author: corsenai
Published: Adoolessa 14, 2026
Last modified: Adoolessa 14, 2026
---
Search plugins
# Corsen Context
By [corsenai](https://profiles.wordpress.org/corsenai/)
[Download](https://downloads.wordpress.org/plugin/corsen-context.1.2.0.zip)
* [Details](https://gax.wordpress.org/plugins/corsen-context/#description)
* [Reviews](https://gax.wordpress.org/plugins/corsen-context/#reviews)
* [Installation](https://gax.wordpress.org/plugins/corsen-context/#installation)
* [Development](https://gax.wordpress.org/plugins/corsen-context/#developers)
[Support](https://wordpress.org/support/plugin/corsen-context/)
## Description
**Corsen Context** is the Universal AI Context Layer for WordPress. It turns your
site into an AI-native platform that Claude, ChatGPT, Cursor, Grok, and any MCP-
compatible AI agent can understand — instantly.
#### What it does
Your site gets two new capabilities:
1. **Static Layer** — Automatically generates `/llms.txt` and `/llms-full.txt` files
containing a clean, structured markdown overview of all your published content.
AI agents read these files to understand your site at a glance.
2. **Dynamic Layer** — Exposes a full **Model Context Protocol (MCP)** server at `/
wp-json/corsen-context/v1/mcp` with 4 powerful tools: search your site, get any
page as clean markdown, list content by type, and retrieve the full sitemap.
#### Key Features
* **One-click install** — Zero configuration required. Works out of the box.
* **Full MCP 2025-11-25 compliance** — `initialize`, `ping`, `tools/list`, `tools/
call`, `resources/list`, `resources/read`, `notifications/initialized`.
* **4 AI tools** — `search_site`, `get_page_content`, `list_content`, `get_sitemap`.
* **SEO integration** — Reads Yoast SEO and Rank Math metadata for better descriptions.
* **Security built-in** — Rate limiting, SSRF protection, input validation, security
headers, optional API key auth.
* **Admin settings page** — Choose post types, exclude paths, set rate limits,
toggle features.
* **Dashboard widget** — See your AI context status at a glance.
* **Smart caching** — Content is cached via transients and auto-invalidated on
post save.
* **Content safety** — Only published, public content is ever exposed. Never drafts,
trash, or private pages.
* **Credit line** — “Powered by Corsen Context” in generated files (configurable).
#### How AI Agents Discover Your Site
Once activated, AI agents can find your site through:
1. **robots.txt** — `MCP: https://yoursite.com/wp-json/corsen-context/v1/mcp`
2. **llms.txt** — The credit line includes the MCP endpoint URL
3. **HTML head** — `` meta tag added automatically
4. **Direct URL** — Agents can try `/llms.txt` on any site
#### Requirements
* WordPress 6.0 or higher
* PHP 8.0 or higher
* Pretty permalinks enabled (Settings > Permalinks > anything except “Plain”)
#### Part of a Bigger Ecosystem
Corsen Context is an open-source project by [Corsen AI](https://corsen.ai). The
same core engine powers adapters for Next.js, Express, Astro, and any Node.js server.
WordPress gets a dedicated plugin for the smoothest experience.
* [GitHub Repository](https://github.com/CorsenAI/corsen-context)
* [Full Documentation](https://github.com/CorsenAI/corsen-context#readme)
## Installation
#### From WordPress.org (recommended)
1. Go to Plugins > Add New in your WordPress admin
2. Search for “Corsen Context”
3. Click “Install Now” then “Activate”
4. Done! Visit Settings > Corsen Context to customize.
#### Manual Installation
1. Download the plugin ZIP from [GitHub Releases](https://github.com/CorsenAI/corsen-context/releases)
2. Go to Plugins > Add New > Upload Plugin
3. Upload the ZIP file and activate
4. Configure at Settings > Corsen Context
#### After Activation
Your site immediately has:
* `/llms.txt` — Visit `https://yoursite.com/llms.txt` to see it
* `/llms-full.txt` — Full content version
* MCP endpoint — `https://yoursite.com/wp-json/corsen-context/v1/mcp`
* Dashboard widget — Check your admin dashboard
**Important:** Make sure pretty permalinks are enabled (Settings > Permalinks).
## FAQ
### What is MCP?
Model Context Protocol is an open standard (maintained by Anthropic / Linux Foundation)
that defines how AI agents communicate with data sources. Think of it as a REST
API specifically designed for AI agents. Corsen Context implements MCP spec 2025-
11-25.
### What is llms.txt?
A convention where websites place a `/llms.txt` file (similar to `robots.txt`) containing
a clean, structured markdown overview of the site. AI agents check this file to
quickly understand what content is available.
### Is my content safe?
Absolutely. Only published, public content is ever exposed. The plugin explicitly
filters for `post_status = 'publish'` and respects all WordPress visibility settings.
Draft, pending, private, password-protected, and trashed content is never included.
### Does this slow down my site?
No. All generated content is cached using WordPress transients. The cache is automatically
invalidated when you publish or update posts. The MCP endpoint only processes requests
when an AI agent connects — it adds zero overhead to normal page loads.
### Does it work with page builders?
Yes. Corsen Context uses `apply_filters('the_content')` which processes content
through all active plugins including Elementor, Beaver Builder, Divi, and others.
The rendered content is then converted to clean markdown.
### Can I control which content is exposed?
Yes. In Settings > Corsen Context you can:
* Choose which post types to include (pages, posts, products, custom types)
* Exclude specific URL paths
* Disable MCP, llms.txt, or the entire plugin
### Does it work with WooCommerce?
Yes. Enable the “Products” post type in settings and your WooCommerce products will
be included in llms.txt and available through the MCP tools.
### How do I protect the MCP endpoint?
You can set an API key by defining `CORSEN_CONTEXT_API_KEY` in your `wp-config.php`:
```
define('CORSEN_CONTEXT_API_KEY', 'your-secret-key-here');
```
Requests must then include `X-MCP-Key: your-secret-key-here` header.
### Can I remove the credit line?
Yes. Uncheck “Show Credit” in Settings > Corsen Context. However, the credit helps
grow the open-source ecosystem and we appreciate keeping it enabled.
## Reviews
There are no reviews for this plugin.
## Contributors & Developers
“Corsen Context” is open source software. The following people have contributed
to this plugin.
Contributors
* [ corsenai ](https://profiles.wordpress.org/corsenai/)
[Translate “Corsen Context” into your language.](https://translate.wordpress.org/projects/wp-plugins/corsen-context)
### Interested in development?
[Browse the code](https://plugins.trac.wordpress.org/browser/corsen-context/), check
out the [SVN repository](https://plugins.svn.wordpress.org/corsen-context/), or
subscribe to the [development log](https://plugins.trac.wordpress.org/log/corsen-context/)
by [RSS](https://plugins.trac.wordpress.org/log/corsen-context/?limit=100&mode=stop_on_copy&format=rss).
## Changelog
#### 1.2.0 – 2026-07-13
* Security: Rate limiter now uses REMOTE_ADDR by default; forwarding headers (X-
Forwarded-For/X-Real-IP) are only trusted behind a proxy you opt into via CORSEN_CONTEXT_TRUST_PROXY.
Closes a spoofable rate-limit bypass.
* Security: Rate limiter uses the object cache’s atomic INCR when a persistent
cache (Redis/Memcached) is present, preventing burst overshoot.
* Security: Rate limiting now runs before authentication, so the API key can’t
be brute-forced unthrottled.
* Security: resources/read and get_page_content now validate the URI resolves to
a same-site, non-excluded, http(s) URL before returning content.
* Security: Settings sanitization restricts post types to publicly-registered types.
* Performance: MCP tool responses are cached (transients) and invalidated when
content changes — bounds compute on the public endpoint.
* Fix: resources/list preserves query strings in resource URIs (parity with the
core library).
* Improvement: Configurable enabled tool set via the corsen_context_enabled_tools
filter.
* Improvement: Loads the plugin text domain so strings are translatable.
* Improvement: Uninstall now also clears cached MCP response transients.
#### 1.1.0 – 2026-04-12
* Security: SSRF protection now fails closed when DNS resolution fails
* Security: Fixed PHP ReDoS crash on large HTML payloads (preg_replace null safety)
* Security: Fixed rate limiter TTL renewal bug that converted per-minute into per-
session limits
* Fix: Added max_pages setting to admin UI (was only configurable in code)
* Fix: Uninstall now cleans up all rate-limit transients from database
* Improvement: Added hourly WP-Cron garbage collector for expired rate-limit transients
* Improvement: Better rate limit window tracking with remaining TTL preservation
#### 1.0.0 – 2026-04-08
* Initial release
* Full MCP 2025-11-25 JSON-RPC server with 4 tools
* `initialize`, `ping`, `notifications/initialized` support
* `tools/list`, `tools/call`, `resources/list`, `resources/read`
* llms.txt and llms-full.txt generation with auto-caching
* Admin settings page with post type selection and path exclusion
* Dashboard widget showing AI context status
* Yoast SEO and Rank Math metadata integration
* Rate limiting (configurable, default 100 req/min)
* SSRF protection blocking all private IP ranges
* Security headers on all responses
* Optional API key authentication (timing-safe comparison)
* Cache invalidation on post save/delete
* `` meta tag in HTML head
* Clean uninstall (removes all options and transients)
## Meta
* Version **1.2.0**
* Last updated **3 days ago**
* Active installations **Fewer than 10**
* WordPress version ** 6.0 or higher **
* Tested up to **6.8.5**
* PHP version ** 8.0 or higher **
* Language
* [English (US)](https://wordpress.org/plugins/corsen-context/)
* Tags
* [AI](https://gax.wordpress.org/plugins/tags/ai/)[llms.txt](https://gax.wordpress.org/plugins/tags/llms-txt/)
[mcp](https://gax.wordpress.org/plugins/tags/mcp/)[model context protocol](https://gax.wordpress.org/plugins/tags/model-context-protocol/)
* [Advanced View](https://gax.wordpress.org/plugins/corsen-context/advanced/)
## Ratings
No reviews have been submitted yet.
[Your review](https://wordpress.org/support/plugin/corsen-context/reviews/#new-post)
[See all reviews](https://wordpress.org/support/plugin/corsen-context/reviews/)
## Contributors
* [ corsenai ](https://profiles.wordpress.org/corsenai/)
## Support
Got something to say? Need help?
[View support forum](https://wordpress.org/support/plugin/corsen-context/)
## Donate
Would you like to support the advancement of this plugin?
[ Donate to this plugin ](https://corsen.ai)