Skip to content

Is MCP a Risk for Your WordPress Site?

Supercharge your WP with these powerful, lightweight modules and enhancements

Why Your WordPress Schema Isn’t Showing in Google

…and How to Check What’s Really Published You’ve installed an SEO plugin, configured your structured data, filled in
Read More

Is Ignoring AI Discoverability the Bigger Risk?

AI discoverability can sound more alarming than it really is. Talk about MCP, AI agents and machine-readable websites for long enough and it is easy to imagine an enthusiastic robot being handed the keys to WordPress and allowed to wander through the admin area making decisions nobody asked it to make. That is not an unreasonable thing to be cautious about. Giving automated systems unnecessary access to a website would be a bad idea. But it also muddles together several very different ways machines can interact with public information, and that can make the safer option appear to be doing nothing at all.

The problem with doing nothing is that it does not make the website invisible to machines. Search engines already crawl public pages, AI systems can encounter public content, and structured data is already being used to explain products, organisations, articles and the relationships between them. The more useful question is therefore not whether machines should be allowed to know anything about your website. It is whether you want them piecing its meaning together entirely for themselves, or whether you provide a controlled and consistent representation of the public information you actually want understood.

MCP does not have to mean handing over control

Model Context Protocol, or MCP, is capable of enabling much broader interactions than simple website discovery, so the concern around access is understandable. The important bit is what an individual MCP implementation actually exposes. Vibe Press Tools Discover module uses MCP specifically as a public, read-only discovery layer. It does not provide an AI agent with WordPress administration access, arbitrary database access or tools for changing VPT settings, editing posts or modifying the site. The service has to be deliberately enabled, its public nature explicitly acknowledged and it operates over HTTPS outside local development environments.

What compatible agents receive instead is a bounded view of approved public knowledge. They can understand what kinds of content the site publishes, search that approved content, find and retrieve semantic entities, resolve public URLs and follow approved relationships between them. They can also inspect the Schema actually being published on a public page, retrieve an approved Markdown representation and find recently updated content. In other words, the MCP layer is there to help a machine understand the public website, not run it.

That distinction is important because “AI access” is too broad a phrase to be particularly useful. Letting an agent perform administrative actions is one thing. Giving it a cleaner description of a product page that anyone can already visit is another.

The quieter risk is leaving machines to work everything out themselves

WordPress websites are rarely as simple internally as they appear from the front. A product might have information stored in Secure Custom Fields or ACF, another plugin may generate part of its Schema, Elementor handles the visible presentation and a custom snippet adds something else again. All of those systems can be perfectly legitimate while still leaving the machine-readable version of the site slightly fragmented.

You can end up with the same organisation described using conflicting identities, useful product information that exists in WordPress but never reaches structured outputs, or Schema that looks correct in its source configuration but is not actually appearing where expected on the public site. None of that necessarily makes the page bad for a human reader. It simply means machines have more inference to do.

This is where the Discover module is intended to supplement the SEO tools already doing their job rather than replace them. Its Site Knowledge Map can inspect the structures behind the website, while Runtime Truth checks what is genuinely being rendered publicly instead of assuming that configured code must be producing the expected result. Semantic Intelligence then gives those discovered fields and content models approved meanings that can be shared across the machine-facing outputs you choose to publish.

The goal is not to manufacture another version of the website. It is to make the different versions of the same public knowledge agree with one another. Schema, llms.txt and MCP each solve a different part of the problem

Schema remains an important part of that picture because it describes entities and relationships in a form search engines and other structured-data consumers can understand. Vibe Press Tools Discover module can inspect existing Schema producers, compare them with what is actually rendered and help identify gaps, overlaps or identity problems without assuming that VPT should automatically replace whatever is already working.

Explore Vibe Press Tools and the Discover module.

Machine-readable publishing adds another layer. On Vibe Suite itself, for example, Vibe Press Tools Discover module generates our llms.txt alongside the other public discovery mechanisms on the site. The point of that file is not to replace the sitemap, robots controls or conventional SEO, and we do not treat its existence as a magic ranking switch. It gives compatible machine consumers another deliberately formed route into the public content we consider useful.

Approved Markdown representations can provide cleaner versions of individual content entities, while MCP goes a step further by letting compatible agents query the same governed knowledge rather than relying entirely on a static document. Because these outputs are built around approved semantic mappings and content scope, they can describe the same website from different directions without each inventing its own interpretation.

That consistency is where the SEO relationship becomes interesting. MCP itself is not something we would describe as a Google ranking factor, and publishing an llms.txt file does not earn a site an automatic search advantage. The benefit is more fundamental: the investment already being made in content, Schema and search optimisation is less likely to sit alongside a confused machine-readable version of the same website.

Good AI discoverability is really about control

There is a temptation to frame AI readiness as opening a website up to everything, but we think the more useful approach is almost the opposite. Decide which public content matters, decide what the important fields mean, decide which machine representations should expose them and verify what actually reaches the frontend. Anything uncertain can remain unapproved rather than being published because an automated system guessed correctly most of the time.

That is also why Vibe Press Tools Discover module keeps MCP Discovery optional and inherits the public semantic permissions already being used for machine publishing rather than creating a completely separate universe of AI data. If a piece of information has not been approved for that public machine-readable context, switching on MCP should not suddenly make it appear there.

The risk of ignoring all of this is not that Google will penalise a site for failing to install an MCP server. It is that websites are becoming understandable through more than one machine-facing route while the information behind those routes is often still managed independently. Search engines may see Schema, an AI agent may read page content, another system may prefer Markdown, and a compatible MCP client may increasingly expect a structured discovery route. If each one receives a slightly different story, the site owner has surrendered more control over interpretation than they needed to.

Vibe Press Tools Discover module is designed to bring those layers closer together. Existing SEO tools can continue handling the search optimisation they are good at, while VPT concentrates on the underlying knowledge, runtime Schema, machine publishing and controlled AI discovery around it. The result is not an AI agent running the website. It is a website doing a better job of explaining itself.

And as machine discovery becomes a more normal part of how public information is found and interpreted, that may prove considerably safer than simply hoping every machine works it out correctly on its own.

Supercharge your WP with these powerful, lightweight modules and enhancements

Vibe Suite 2026 - Check out our awesome apps & plugins or learn more about us!
Privacy Overview

Vibe Suite uses cookies and similar technologies to provide essential website functions, remember your privacy choices and help maintain security.

With your permission, optional technologies help us understand website activity, recognise campaign and representative referrals, and provide interactive features such as maps, translation and Google reCAPTCHA.

Essential technologies remain active where necessary for the service you request. Optional technologies requiring consent are disabled until you choose to allow them.

You can accept all optional categories, reject them or manage your choices individually. Further information about the technologies and providers we use is available in our Cookie Policy.