15 versions
AI Engine Pro history.
Every release of AI Engine Pro is archived here with its changelog, file size, and security scan result. Use the archive to roll back to a stable release or audit what changed between updates.
15 of 15 releases scanned clean
v3.8.9Latest
October 30, 20262.4 MBScanned
Added
- GPT-6.1 Terra model.
- Restore link in Recent Changes, which opens the version from before an AI edit.
Improved
- Connect card now offers a choice between a direct connection (recommended) and the Meow Apps relay, with labels under each choice explaining what it brings, and the address to copy now sits in the Copy step.
- Connect card opens on the direct connection for Claude and ChatGPT, with the directory and the ChatGPT app one click away.
- Image Studio's edit link now only accepts a media ID.
Fixed
- Chatbot now explains why a file could not be sent to OpenAI, instead of showing OpenAI's "Expected an ID that begins with file" error.
- OpenRouter model list now waits up to 30 seconds to load, for slow hosts.
October 27, 20262.3 MBScanned
Fixed
- Security: Shop Managers can no longer edit administrator accounts through MCP, and the plugin and theme file tools now follow DISALLOW_FILE_EDIT.
- Security: Forms and the Public API can no longer read protected uploads, the Google voice chatbot no longer exposes its API key, voice chats cannot replace someone else's conversation, and only admins can read the logs.
- Security: Guests can no longer reset their usage limits with a fake IP header, while proxies and Cloudflare are still recognized.
- Security: Chatbot replies now drop embedded frames and forms, and guest uploads are capped at 20 per hour.
- Chatbots keep web search, MCP servers and their reasoning settings after calling a function, which also stops Claude's "Invalid signature in thinking block" error.
- Chatbots keep their Knowledge context after calling a function on every provider, including Google, OpenRouter and other compatible providers.
- Syncing a large OpenAI Vector Store no longer times out, each step stops after about 25 seconds and the next one continues from there.
- The chatbot preview in the Chatbots tab shows the conversations held before 3.8.7 again instead of starting empty.
- Content Studio no longer shows each section heading twice when the model repeats it.
- MCP tools now accept text request ids as the JSON-RPC spec allows.
- Re-setting a featured image through MCP no longer fails, terms can be removed, and featured image errors say why.
- Admin scripts refresh when only the UI library changes instead of staying cached.
Added
- MCP tab showing the week's activity, recent changes with links to each WordPress diff, connections, access and tools.
- Settings backups with a restore in Maintenance, and settings now save only what changed.
- Chatbots panel in Workspace to chat with the site's own chatbots, using their instructions, model and Knowledge.
- Gemini 4 models such as gemini-4-argon now get vision, PDF, web search, Google Maps and thinking, as features follow the version number.
- Keepalives for streams that stay silent from the start, so nginx no longer cuts them at 120 seconds.
- The header shows the installed version and, when a newer one is out, how to update or renew.
Improved
- The MCP connect card guides you through Claude's directory first, confirms when your assistant reaches the site, points ChatGPT users to the official AI Engine app with Developer mode as the direct option, says the connector stores no password and none of your content, and offers an optional, unticked Meow Apps news signup.
- MCP stays off on updated sites that never stored the setting, only new installs get it on by default.
- The MCP Connection Test warns when the host strips the Authorization header and gives the .htaccess line, and AI Engine reads that header from Apache when WordPress cannot see it.
- The MCP post list accepts several post types or statuses at once, returns everything when asked for all posts, understands an author given by name, and the post count and post list tools return clearer data.
- In the Knowledge tab, creating an environment moved into the environment dropdown and Create New became Add Manually.
- New Meow Apps dashboard, from the latest shared common code.
- The admin now works on tablets, with the header, columns and Chatbots toolbar no longer breaking.
- The header lights the button of the screen you are on.
- Various labels and links, including the Dashboard footer now pointing to the Getting started guide and the Discussions setting pointing to the Discussions tab.
October 23, 20262.3 MBScanned
Fixed
- Security: Voice chatbots now only run functions attached to their own chatbot.
- Security: Editors on MCP can no longer publish other content types or file references through a decoy fields object, and Public API tools and MCP servers stay restricted to administrators.
- Security: Cross-Site requests are now matched on their real REST route, so other REST calls can no longer skip the nonce check by mimicking its URL.
- Security: Contributors can no longer take over a live chatbot through WordPress' embed preview, and outside post content a shortcode can no longer replace a live chatbot's prompt, model or API key.
- Security: The Gemini file upload now verifies TLS.
- Security: The MCP sign-in page can no longer be framed by another site, shows where the app sends you, and warns when an app calls itself Claude or ChatGPT without being it.
- Insights logs work again on sites whose logs table predates 2.5.6, since tables now get their missing columns on update.
- Chatbots and forms no longer stay blank when one of their settings contains entity text like ".
- Posts containing an escaped "<" (like "<48 dB") no longer lose everything after it in Knowledge and Content-Aware.
- AI Forms in chatbot mode now use the chatbot's own Max Tokens, model and temperature instead of hidden form values that cut replies at 4096 tokens.
- Messages, uploads, stopping a reply and loading a conversation now follow the right chatbot's discussion when a chat id belongs to another chatbot.
- Claude no longer rejects the answer after a function call when Knowledge is on (Invalid signature in thinking block).
- When a thinking model spends its whole Max Tokens reasoning, the reply now says so instead of showing the raw reasoning as the answer.
- Knowledge no longer retries rows of deleted environments, and large OpenAI Vector Stores sync page by page instead of timing out.
- MCP connections no longer drop when a client revokes the token it just replaced after a refresh, and sign-in responses say which site answered.
- Links in the GDPR consent text are now clickable instead of shown as raw text.
- The site-wide popup chatbot no longer leaves a screen of blank space at the bottom of the page on themes that give the body a height.
- The user's IP is shown again under their name in Discussions and Insights for logged-in users, and in the discussion details.
- Chatbot names with & no longer show &.
- Admin screens no longer load blank, and the header now shows the Free and Pro tiles.
- Links on other plugins' screens are no longer tagged as AI Engine traffic.
- OVHcloud and Sakana AI now follow one rule: hidden until switched on with MWAI_OVH or MWAI_SAKANA, and always shown where an environment of that type exist
Added
- Explore AI Engine, a ten-goal tour from the dashboard that follows you as a slim bar onto each screen, with Knowledge guidance in the chatbot settings.
- Workspace mobile app on the dashboard, with QR code, store links and a status line once a phone is paired.
- Sakana AI (Fugu and Namazu) as a native provider, hidden until switched on with MWAI_SAKANA.
- Read-only access for Claude and ChatGPT MCP connections, with a switch per connection in Connected Apps.
- Clean Up button in Knowledge for rows of deleted environments and orphans.
- The mwai_openai_body filter, to set any OpenAI parameter AI Engine leaves to the defaults, like high quality for the chatbot's image tool.
Improved
- Redesigned the dashboard with a Your AI card for models and providers, a This week chart compared with last week, shuffleable idea tiles and per-company AI visibility bars.
- Glass now takes its colors from the lights you pick for the visitor's bubbles, the launcher and the accent, and the theme editor preview opens with a sample conversation that is never saved or sent to the AI.
- New popup chatbots now open in the macOS frame and header, while existing chatbots keep the frame they already have.
- The MCP screen now shows how many tools each set brings and how many AI Engine has in all.
- MCP deletes without force now always go to the trash (products, events, media and comments too) or refuse clearly, and deletes that would be permanent ask the AI to check with the user first.
- The Settings screen, dashboard cards and feature showcase are now translatable, and Knowledge, Privacy First and Content Studio wording is clearer.
- Every Pro link in the admin now points to the AI Engine page and is tagged, Pro-locked buttons open it instead of doing nothing, and Pro chatbot modes show their Pro pill for free users.
- The License tab was redesigned, with an Activate your license link for Pro buyers who have not entered a key yet.
- The Pro update check now reports whether MCP was used in the last 30 days and how many phones are paired.
- The chatbot preview in the admin now keeps its own history, and the dashboard uses the same spacing as the other tabs.
v3.8.3Unavailable
October 1, 20262.2 MBScanned
Added
- Abilities to MCP, so tools registered by plugins through the WordPress Abilities API work over MCP and in Workspace, appear in MCP Logs, and are labelled Ability or Native in the renamed MCP Tools & Abilities list.
- Cached tokens are now counted and priced at the cached rate for OpenAI, Anthropic, DeepSeek, OpenRouter and Claude Fable 5, and Insights shows cached tokens per query.
- OpenAI requests carry a prompt cache key per chatbot, so repeated prompts and tools are billed at the cached rate.
- A reply cut by Max Tokens now ends with a short notice instead of stopping mid-sentence, in chatbots and forms.
- A chatbot limited to one file shows the attached file name and a remove button before sending, like the multi-file mode.
- Prices for Gemini text models, so their queries are costed and dollar limits apply to them.
- The mwai_openrouter_body filter, to add any OpenRouter parameter to a request, such as provider routing.
Improved
- The MCP settings were reorganized, with the Connect card filling its block, Connections and MCP Settings under it, tool sets and WordPress abilities under the tools list, and the bearer token masked in the Claude Code commands.
- The Files Manager lists files uploaded by every user and guest instead of only your own, and expired files are cleaned up every hour instead of once a day.
- New chatbots start with their texts in the site language instead of always in English, existing chatbots are untouched.
- OpenRouter requests are attributed to AI Engine instead of each site, and the existing filters still let a site credit itself.
- Workspace chats are grouped under Today and Yesterday in the user timezone instead of UTC.
Fixed
- The Editor Assistant no longer fails with Feedback session expired after applying edits, saved queries no longer store API keys, and it now sees paragraphs edited after the page loaded.
- Claude, Gemini and other non-OpenAI chatbots on an OpenAI Vector Store now receive the matching knowledge instead of an empty context.
- Non-streamed errors from OpenRouter, Mistral, OVH and custom providers are shown as a message instead of raw JSON.
- Gemini replies cut by Max Tokens end with the notice instead of an empty-reply error, and Gemini errors wrapped in a list are readable.
- Picking an environment without a model now asks for one instead of sending another provider's default model and failing with a 404.
- An AI Form repeated on a page answers in its own copy, and a streamed form error no longer floods the PHP log.
- GPT-6 Astra can generate images, its model entry was missing the image generation tool.
- Uploads that fail now say why, with the size limit when the file is too large, instead of an unknown error or a wrong invalid file type message.
- An empty completion request is refused before reaching the provider, and Suggest Synonyms without a selection returns a clear error instead of a fatal.
- MCP tool failures, like a missing post, reach the AI as a readable tool error instead of a protocol error.
- ChatGPT MCP connections no longer drop when several of its sessions share one connection, and revoking an app disconnects all of its sessions at once.
- When AI Engine manages the WordPress Connectors, an empty key no longer wipes a saved one, and keys already saved in WordPress are reused.
- Syncing a single post that gets skipped (ignored, language filter, or filtered out) now says why instead of doing nothing.
- Copying a masked MCP command by hand copies the real token, and Knowledge asks to pick an environment instead of showing the first-run screen.
- On touch screens the Stop button works with a single tap, while a quick double tap on Send still cannot cancel the message.
- A failed license check shows the real reason straight away, and a successful retry no longer keeps saying the Pro version is disabled.
- Two PHP warnings on every logs request when Insights is off.
v3.8.2Unavailable
September 25, 20262.2 MBScanned
Added
- Connect an AI assistant card in the MCP settings, which checks the host, guides you through Claude, ChatGPT or Claude Code step by step, and confirms the connection works.
- The license section now names the actual problem (server unreachable, not activated on this site, expired) instead of an unknown error, and lets you copy the diagnosis for support.
Improved
- The MCP settings and the readme now state that connections are direct, with no relay, no fee or cap, and credentials staying on the site.
Fixed
- A site that cannot reach the license server no longer hangs the admin for minutes: connection diagnostics run once instead of once per URL, and the license check times out after 20 seconds instead of 45.
- MCP connections no longer break when a client, such as ChatGPT, reuses a refresh token that was already replaced.
- Chatbots with streaming disabled no longer slide the window up when a reply starts, which hid the Glass header and could make the page jump.
- Add-ons now keep their own visitor params as sent; only denied keys are matched by their canonical name and only messages is folded into one key.
v3.8.1Unavailable
September 24, 20262.2 MBScanned
Fixed
- Security: visitors could override a chatbot's or form's model, instructions or environment with renamed parameters. Fixed, and the Advisor widget now escapes its output.
- Embeddings were skipped on pages made with a page builder (Breakdance, Oxygen, Bricks...).
- Models of a Custom (OpenAI-compatible) environment could not receive images.
- The discussions list with several lists on one page, empty discussions, and its menu while scrolling.
- The admin crashed when a chatbot's ID was changed, and a crash in one settings tab no longer locks the whole screen.
- Stopped or edited Workspace replies no longer come back duplicated.
- A streamed reply was rebuilt when it finished, reloading its images.
- Dev Tools no longer polls the server every second while open.
Added
- Glass, a new chatbot theme with colored light under frosted glass, a dark and a light mode, and a mode that follows the visitor's device.
- Templates in the Content Studio, shared with the classic generator.
- Every text the chatbot says on its own can be translated or changed with the mwai_chatbot_texts filter, plus a new Empty State Hint parameter.
Improved
- Every chatbot theme was polished: proper headings, lists and tables in replies, an empty state that introduces the bot, message actions beside the bubble, and a message field that keeps its height on every WordPress theme.
- Timeless and Messages have refreshed defaults (larger text, rounder corners, a white pane), and Messages drops its bubble tails. Customized themes keep their own values.
- Redesigned the dashboard's AI Visibility card, with visits, score and the top AI companies from SEO Engine, and an example you can hide when it is not installed.
- Pictures sent by visitors appear as a photo card, and message actions can be reached with the keyboard.
- The mwai_image MCP tool accepts an aspect ratio, and images requested without a size are now square instead of 21:9 on Gemini.
- Workspace now tells you when your site refuses a rename, a delete or a save, instead of failing silently.
- Deleting or resetting a chatbot, a theme or a template now asks first.
v3.8.0Unavailable
September 17, 20262.1 MBScanned
Added
- Models API Pro module, so coding agents and OpenAI-compatible apps can use your site's AI models with one key, with usage tracked in Insights.
- Editor Access for MCP, letting Editors connect with their own account and work on content only.
- Paste a file into the chatbot to upload it, and hover the reply timer to stop a response in progress.
Improved
- Rebuilt the Images, Playground and Content screens as studios, with image versions and brush edits, side-by-side model comparison, a guided brief-to-draft flow and shared presets.
- Knowledge sync now reports why posts were skipped instead of only the count.
- Excluded notes, archives and the Brewfile from the released package.
Fixed
- Daily, weekly and monthly limits in Absolute mode no longer trip early.
- Image, media and post creation routes now check permissions before acting.
- Listing chatbots no longer fatals on the free plugin when a chatbot uses functions.
September 13, 20262.1 MBScanned
Added
- Redesigned Dashboard with a providers bento, weekly usage card, daily ideas and an AI visibility card, plus a slimmed Modules tab.
- MCP tools to install and update plugins and themes from the WordPress.org directory.
- GPT Image 2.5 Sunburst and Flare with the new quality levels.
Fixed
- Workspace module no longer switches itself off on sites without a Pro licence.
- OpenAI Vector Store no longer retrieves knowledge twice on the default environment, now passes Max Results to file_search, and repairs old vectors tables missing columns.
- Uploaded files stay in context on later turns with Claude and other stateless providers.
Improved
- The transcription and image edit API endpoints now check the caller can read the supplied attachment.
- Smart Search returns embedded pages and custom post types instead of only posts, and the debug info shows the min score and number of posts found.
Why archive
Sometimes the latest release isn't the one you need. The archive lets you pin AI Engine Pro to a known-good version, or roll back while a bug is investigated. Every release stays scanned and reachable.