WingMind AI

WingMind AI is an AI agent that lives in your WordPress admin. Ask it about your site, or tell it what to change. It can rewrite a page, add a team member with the photo you dropped in, redirect a broken URL, or update a plugin. Each site change it makes is logged with a snapshot, so you can see what happened and roll it back.

Web Bird Digital built WingMind AI to manage our own client sites before releasing it as a plugin.

What it does

• Fullscreen agent. Open it from Dashboard → WingMind AI, or from the tab at the top right of any admin screen. Chats are saved, so you can pick one up again later.
• Block editor sidebar. Ask about the page you’re editing, or have the agent edit it. Undo last change reverts its edit in one click.
• Classic sites. Works in the Classic Editor, including metabox fields such as ACF, and with widgets, classic menus, Additional CSS, and Customizer settings.
• Audit log and rollback. The agent saves a before and after snapshot of each site change. Review them under Tools → AI Audit Log and roll back the ones you don’t want.
• Attachments. Drop images, PDFs, Word documents, or HTML files into the chat. The agent reads them, and can add images to the Media Library.
• Screenshots. The agent can capture a full page or a single element to check its own work.
• Your brand. Give it a site description, design style, writing tone, and house rules. It writes in your site’s language.
• Skills. Type /seo-audit, /design, or another slash command and the agent follows a step-by-step playbook. /unslop strips the AI tone out of your copy. Developers can add their own skills with a filter.

Modes

• Ask. Read-only. The agent looks at anything you can see and changes nothing.
• Agent. Creates and edits content, media, menus, users, and settings. It asks you to confirm before anything destructive, such as deleting a page.
• Site Editor. Templates, headers, footers, navigation, global styles, widgets, and plugin, theme, and WordPress updates.
• Plan. The agent writes a plan as a markdown file and changes nothing else. Load it in Agent mode when you’re ready to run it.

What it works with

• Posts, pages, custom post types, media, menus, categories, tags, users, and site settings.
• Block themes: templates, template parts, global styles, and synced patterns.
• Plugins and themes: search the wordpress.org directory, install, activate, and update. WordPress core updates as well.
• WooCommerce: products and variations, orders, customers, coupons, shipping, tax, and webhooks.
• Gravity Forms: forms, fields, entries, feeds, and submissions.
• Yoast SEO: SEO titles and meta descriptions for posts, categories, and tags.
• Redirection: redirects and the 404 log.
• WordPress Abilities API: tools that other plugins register show up for the agent.

The WooCommerce, Gravity Forms, Yoast SEO, and Redirection tools appear only when that plugin is active.

Bring your own agent with the MCP relay

This one is for developers. If you already work in Claude Code or another MCP client, the MCP relay lets that agent drive WingMind instead of the built-in AI.

One relay subscription covers unlimited sites. Link your relay account on each site you manage, and your agent can work on any of them from the same MCP connection. Those sites don’t need an API key or a managed subscription.

To connect, go to Users → Profile → WingMind AI and link your relay account. Then open a WingMind chat and click Connect remote Agent. Your agent’s tool calls and replies show up in that chat as it works.

Your agent never gets a WordPress password. Its tool calls run in the open WingMind tab with your own permissions, so it gets the same tools, mode limits, confirmation prompts, and audit log as the built-in agent. Close the tab and it loses access.

Prompts to try

• “Update the About Us page with our new team member James. Their photo is attached.”
• “Design a pricing page that compares our three plans.”
• “Audit the site navigation and suggest a clearer menu structure.”
• “Create a contact form with name, email, phone, and message fields.”
• “Find the most common 404s and redirect each one to the closest matching page.”
• “Which plugins and themes have updates waiting?”
• “/seo-audit”

Connecting an AI model

The simplest option is a managed subscription. Web Bird handles the AI connection, and the subscription includes usage credit. Or choose from Anthropic Claude or Google Gemini under Settings → WingMind AI and add that provider’s API key for the site. Administrators can also save a personal Claude or Gemini key in their own browser, on their Profile or in the WingMind browser extension; it takes priority for their own chats. Developers on the MCP relay plan can skip the API key and use their own agent.

Privacy and local data

• Stored in WordPress — Plugin settings, optional BYOK key (site option), chat sessions, agent audit log entries (90-day retention), and setup state. Administrators may also store a personal Claude or Gemini key in the browser (localStorage; origin-scoped, not synced to Web Bird).

• Plan files — Plans drafted in Plan mode are markdown files under wp-content/uploads/wbdai-plans/, grouped by status (open, closed, cancelled). Plan mode and plan tools require the upload_files capability. On Apache the plugin writes an .htaccess that denies direct web access; plans are only ever served over REST to logged-in users with upload_files. On nginx, deny that location yourself:

  location ^~ /wp-content/uploads/wbdai-plans/ {
deny all;
return 403;
}

• Sent to Anthropic or Google — When the agent runs: your messages, attachments, tool results, and assembled system context, to the AI provider in use. Site and personal keys call the provider directly from the browser. With a managed subscription, the browser calls Anthropic through Web Bird’s relay, or calls Google with a key minted via Web Bird.
• Sent to Web Bird — With an active managed subscription: activation tokens, site URL, site secret, usage/telemetry events, and billing actions. On Claude, each request and response also passes through Web Bird’s relay, which records its token counts for billing. Nothing is sent to Web Bird when you use your own key only. Users who link an MCP relay account also send their relay link details, and while a remote agent is connected, its tool calls and their results pass through the relay (see External services).
• Not collected from visitors — The agent UI and external calls run in wp-admin for logged-in users with edit_posts; front-end visitors are not tracked by this plugin.
• Uninstall — Deactivate keeps all plugin data. Delete keeps data unless you enable Delete plugin data when this plugin is deleted under Settings → WingMind AI (off by default). When that option is on, delete removes settings, chat sessions, the AI audit log, and Plan mode files under uploads/wbdai-plans/. Post meta the agent may have written (for example SEO descriptions) is always left on your content. See the FAQ below.
  

  External services

  These requests run in wp-admin for logged-in users with edit_posts. Site visitors never hit these services.

Anthropic Claude API

When Claude is the AI provider, WingMind AI uses Anthropic’s Claude API (https://api.anthropic.com/v1/messages) to reply in chat, read attachments, run tools, summarize long chats, and write confirmation summaries.

When you send a message, the browser sends Anthropic the API key, the conversation, uploads, tool results, and site context. That context can include settings, block library summaries, the open document, and loaded skill playbooks. The same payload goes out when the agent continues a tool turn.

A site or personal key calls Anthropic directly from the browser. A managed subscription sends the same requests to Web Bird’s relay, which forwards them to Anthropic (see WingMind relay below).

This service is provided by Anthropic: Commercial Terms of Service, Privacy Policy.

Google Gemini API

When Gemini is the AI provider, WingMind AI uses Google Gemini (https://generativelanguage.googleapis.com/v1beta/) to reply in chat, read attachments, and run tools.

When you send a message, the browser sends Google the API key and the same payload described for Claude above.

A managed subscription gets a short-lived key from Web Bird, then the browser still calls Google. BYOK and a personal browser key use the key you supplied.

This service is provided by Google: Gemini API Additional Terms of Service, Google Privacy Policy.

Web Bird subscription backend

A managed subscription uses https://aibackend.webbird.net.au for activation, billing, key minting (a token for the Claude relay, or a Gemini key), quotas, and telemetry. Your own keys do not use this service.

Each authenticated request includes your site URL. Activation also sends the activation token. On Claude, the relay reports usage for billing and quotas (see below). On Gemini, telemetry reports per-turn usage, including event id, optional turn id, event type, token counts, and Flex inference.

This service is provided by Web Bird Digital: terms of use, privacy policy.

WingMind relay

Used by WordPress users who link an MCP relay account, and by managed subscriptions on Claude. Nothing is sent otherwise.

Linking the account sends https://aibackend.webbird.net.au the one-time link token, your site URL, your WordPress user ID, and your display name. Each time you click Connect remote Agent, the plugin asks the backend for a one-time token (sending your display name and the chat ID), and the browser opens a WebSocket to the relay server the backend names.

While connected, the relay carries your agent’s tool calls to the browser and the results back to your agent. Results can include post content, settings, attachments, and screenshots, the same data the built-in agent would send to its AI provider.

With a managed subscription on Claude, the browser sends each Claude request (conversation, uploads, tool results, and site context) to the relay with a short-lived site token. The relay forwards it to Anthropic unchanged, returns the reply, and reports the reply’s token counts and model to the Web Bird backend for billing.

This service is provided by Web Bird Digital: terms of use, privacy policy.

Web Bird Digital domain names

The following domain names are officially owned and managed by Web Bird Digital: web.bird.digital webbird.com.au webbird.net.au wbd.au webbirddigital.net.au webbirddigital.com.au
Where data, including emails or managed connection setup details are sent to any of these domains, this data will be handled as outlined in our privacy policy.

Where do I get help?

Email support@webbird.com.au or use the contact form. Documentation lives at web.bird.digital/wingmind-ai.