AI Engine Pro Changelog - Version History & Release Notes

v3.7.8Latest

September 13, 20262.1 MBScanned

Added

Redesigned Dashboard with a providers bento, weekly usage card, daily ideas and an AI visibility card, plus a slimmed Modules tab.
MCP tools to install and update plugins and themes from the WordPress.org directory.
GPT Image 2.5 Sunburst and Flare with the new quality levels.

Fixed

Workspace module no longer switches itself off on sites without a Pro licence.
OpenAI Vector Store no longer retrieves knowledge twice on the default environment, now passes Max Results to file_search, and repairs old vectors tables missing columns.
Uploaded files stay in context on later turns with Claude and other stateless providers.

Improved

The transcription and image edit API endpoints now check the caller can read the supplied attachment.
Smart Search returns embedded pages and custom post types instead of only posts, and the debug info shows the min score and number of posts found.

v3.7.7

September 8, 20262.1 MBScanned

Added

Local Memory now stores the shortcuts and blocks of the last reply, so they persist after a reload.

Fixed

Pairing failures that consumed the token now ask the user to generate a new code.
Connection test no longer always reports success.
Gemini no longer offers Live-only models as chatbots.
Function calling on Google's Standard API.
AI Copilot no longer stretches paragraphs to the full editor width.

Improved

Workspace is now described as available on both iOS and Android in the readme and admin.

v3.7.6

September 5, 20262.1 MBScanned

Added

Support for GPT-6 Astra, including its max reasoning level.

Fixed

Temperature is no longer sent to models that reject it.

Improved

The reasoning dropdown now only shows levels supported by the selected model.

v3.7.5

September 3, 20262.1 MBScanned

Added

Claude Fable 5.1 to the Anthropic models.

Fixed

Anthropic now caps max_tokens to the model's limit instead of returning a 400 error.
Provider errors with a flat body (such as Mistral) and any 4xx/5xx status now show the actual error message.

Improved

Removed the Assistants module following OpenAI's shutdown.
Transcription now uses gpt-transcribe, and Opus 4.1 has been removed.
Built-in tools that can't be used with Chat Completions are now reported in the logs instead of being dropped silently.

v3.7.4Unavailable

September 2, 20262.1 MBScanned

Fixed

Sending a message after a client-side JS function call no longer fails with an invalid_request_error.
MCP OAuth login redirects are no longer cached by page caches and served to the wrong visitor.
Plugin file tools no longer report a refusal as a missing directory.

Improved

The "Done!" placeholder for client-side function calls is now translatable and filterable.

v3.7.3Unavailable

August 26, 20262.1 MBScanned

Fixed

Chatbots using the default environment and model are no longer excluded from the function calling list.
Vision now detects image types from the file contents instead of the extension, so images served through a CDN work.
Magic Wand can read the selected text again in the iframed block editor of WordPress 7.1, re-enabling Suggest Synonyms.

Improved

Completed steps in the Setup Assistant now collapse to a single line.

v3.7.2Unavailable

August 21, 20262.1 MBScanned

Fixed

Editor Assistant endpoints accepted a nonce any visitor could generate, allowing anyone to run AI queries on the site's provider account (reported by Abdullah Kareem via WPScan).
A crafted URL could escape the uploads folder and send any server-readable file to the AI provider (reported by Jashid Sany via WPScan).
Editor Assistant now works for admin-equivalent accounts whose role isn't literally administrator.
Embeddings sharing the same reference no longer stay stuck, and a single unprocessable vector no longer blocks the maintenance queue.
A temperature of 0 is no longer treated as unset and stripped from the request.
Image-only replies from GPT-5 models no longer show "medium" as the answer text.

Improved

Claude Sonnet 5 pricing ($2/$10 is now permanent), dashboard wording, and tested with WordPress 7.1.

Other

🎵 Discuss with others about Ai Engine on [the Discord](https://discord.gg/bHDGh38).
🌴 Keep us motivated with [a little review here](https://wordpress.org/support/plugin/ai-engine/reviews/). Thank you!
🥰 If you want to help us, check our [Patreon](https://www.patreon.com/meowapps). Thank you!
🚀 [Click here](https://trello.com/b/8U9SdiMy/ai-engine-feature-requests) to vote for the features you want the most.

v3.7.1Unavailable

August 14, 20262.1 MBScanned

Added

WPML support in the MCP server, mirroring the Polylang tools.
SEO section in the Modules tab, with robots.txt access for AI crawlers and live stats when SEO Engine is installed.

Improved

MCP self-test now detects AI-crawler blocking, nested .htaccess files and www mismatches, and logs every OAuth authorize refusal.
Internal errors are now hidden behind a filterable public message, and AI Forms no longer show provider errors to visitors.
Shared dashboard synced with the new Board and the AI site analysis.

Fixed

The mwai_mcp_mutate hook now fires on deletions, so cache purges hooked to it run.

v3.7.0Unavailable

August 3, 20262.0 MBScanned

Fixed

Qdrant collections were always created with 1536 dimensions regardless of the embedding model, and default dimensions are now read from the right place.
The MCP access level no longer restricts OAuth connections, and the setting is no longer hidden behind the bearer token.
MCP connections no longer drop at random when the client refreshes its access token.

Improved

Embedding dimensions are no longer locked for OpenAI-compatible models, as that size is only a guess.

v3.6.9

August 2, 20262.0 MBScanned

Fixed

Crash when clicking quickly through discussions, and slow image checks writing into the wrong message.
MCP token refresh being rejected on servers that pass Basic credentials to PHP instead of forwarding the header.
Stored chat messages could run scripts when an admin opened a discussion.

v3.6.8Unavailable

August 1, 20262.0 MBScanned

Fixed

Workspace mobile app connection on servers that don't expose the Authorization header, with clearer pairing errors.
A Context Max Length of zero no longer empties posts, which blocked embeddings sync and blanked chatbot context.

Improved

Transcription now defaults to gpt-4o-mini-transcribe instead of whisper-1.
The mobile connection warning links to the troubleshooting page instead of showing the htaccess snippet.

Added

Logging on the MCP OAuth token endpoint for failing refreshes.

v3.6.7Unavailable

July 31, 20262.0 MBScanned

Added

Workspace is officially launched on [iOS](https://apps.apple.com/app/workspace-for-wordpress/id6794717714).
getDiscussion() to the PHP API, to read a stored discussion without using $mwai_core.

Improved

OpenAI pricing for GPT-5.6 Terra and Luna following the July 30 cut, and corrected o3 which was priced 7.5x too high.
Removed the leftover mcp.js relay and its documentation, and corrected the MCP header comment that still mentioned SSE and OAuth.

v3.6.6Unavailable

July 30, 20262.0 MBScanned

Improved

Minimum PHP version is now 8.1, declared in the plugin header so WordPress blocks activation on older versions.

Fixed

Push All no longer exhausts the memory limit on large sites; post content is now checked in chunks.
Long Japanese and Chinese posts no longer produce empty content, which left their embeddings stale.
Hardened the REST endpoints against client-supplied file paths and API keys, corrected the MCP OAuth route match and guest session cookie, and stopped the chatbot key reaching Editors.
The mwai_mcp_callback filter now receives five arguments from both the Workspace and the MCP endpoint.
Chatbot input is no longer hidden behind the mobile keyboard in fullscreen, and shortcuts are now chips that don't inherit the site's button styles.

Added

CSV and JSON export for the Query and MCP logs, honouring the active filters and sort.

v3.6.5Unavailable

July 29, 20262.0 MBScanned

Added

Elapsed time counter on the AI Forms submit button, matching the chatbot.
Note in the Sync panel that the Sync filters are shared by all environments.

Fixed

Three security issues reported by WPScan (key disclosure to editors, guessable guest sessions, audio transcription file read).
Streaming requests now respect MWAI_SSL_VERIFY and verify TLS certificates (reported by Mohammed Abd Alrahman).
Recurring tasks no longer stay parked after repeated failures, so discussions and logs cleanups run again.
Administrator-equivalent accounts (custom roles with manage_options) are no longer refused at the MCP OAuth consent screen.
A custom JavaScript filter that crashes no longer breaks the chatbot, and raw JavaScript errors are no longer shown to visitors.
The embeddings environment Type field no longer shows "Select" for the Internal (WordPress DB) environment.
The Web Search button now appears in the Workspace composer when pinned.

Improved

Push All now respects the Sync category and language filters, so it no longer seeds posts Sync would not maintain.
Workspace is now available to everyone; Knowledge, MCP Servers and Functions stay Pro.
Removed the unused module_addons and module_blocks option defaults.

v3.6.3Unavailable

July 27, 20262.0 MBScanned

Added

Workspace: a full-screen chat surface in wp-admin, with a model picker across all your environments, conversation history, folders, a prompt library, per-user themes, and edit-and-branch on any message. Available in the Pro, coming later in the Free.
The Workspace can generate and edit images, search the web with each provider's own search tool (OpenAI, Anthropic, Google, OpenRouter), and work on the site itself through the MCP tools, with an approval dialog before any site-changing tool runs.
QR-code pairing for the Workspace mobile companion app, with a revocable Application Password.
Internal (WordPress DB) vector environment that stores embeddings locally, now the default for new installs.
Discussions now show the tool calls and their parameters alongside the embeddings usage, and can be searched server-side by content and title.
Claude Opus 5.

Fixed

Public chat and form endpoints no longer trust client-supplied models, environments, instructions or messages, and internal errors are hidden from visitors; the stateful-response restore is now owner-scoped, so another user's chat ID can no longer resume their conversation.
Content-aware chatbots no longer inject a post the visitor cannot read, so a client-supplied context ID can no longer leak draft or private content.
Chatbot error and notice messages are sanitized before being rendered as HTML, and configuration errors are shown to editors only instead of being printed publicly.
Function calling is more reliable: Claude no longer re-calls tools with the previous message's parameters, multi-round calls on stateless providers keep their feedback blocks instead of clearing them each round, and the Gemini 2.x models work again.
Google model names and capability detection, so image, thinking and web-search models are recognised and preview variants are no longer ambiguous.
OVH replies arriving empty, caused by an oversized max_tokens and a hijacked catalog fetch.
Embeddings re-sync destroying a vector when the new content comes back empty, and guest file listing crashing with a 500.
The usage-limit lock never firing on streaming chatbots, and the Discussions table spinning forever when opened in a background tab.

Improved

MCP server hardening: a failing tool now returns a readable error instead of killing the server for the client, and the tools list is capped at 500 results.
Settings Reset now asks you to type the site host and says plainly that it deletes the API keys, environments, chatbots and themes; more native browser dialogs were replaced with NekoModal across Discussions, Query Logs, Knowledge, Templates and Limits.

AI Engine Pro history.