@elementor/angie-sdkSAFE
Add Angie Chat Anywhere
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Based on MCP version: 1.20.1
An SDK for extending Angie AI Assistant capabilities.
This SDK enables you to create custom MCP servers that Angie can discover and use to run your plugin features.
Table of Contents
- Background
- How It Works
- Supported MCP Features
- Installation
- Quick Start
- Async Registration
- Triggering Angie with Prompts
- MCP Server Example
- Adding Instructions to MCP Servers
- Registering Tools
- Tool Annotations
- Handling Tool Calls
- Best Practices
- Remote SSE and HTTP Streamable MCP servers
- Error Handling
- Changelog
- Demo Plugin
- Embedded Angie in any web page
- Debugging & Testing
- FAQ
Background
Angie is a WordPress AI Assistant that can perform almost any task on a WordPress website.
Angie is fully extensible, so plugin developers can easily integrate their own features, allowing Angie to use and control them.
Angie is built on an MCP-based architecture, enabling you to create custom MCP servers that expose your plugin's capabilities for Angie to access.
To learn about MCP:
The SDK was designed specifically to address these issues:
- Run MCP in the Browser
The SDK allows you to run an MCP server as a JavaScript module in the browser, so there is no need for creating a
c0d2ac73ab78OBSERVED · 2026-10-12Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add angie-sdk -- npx -y @elementor/[email protected]
{
"mcpServers": {
"angie-sdk": {
"command": "npx",
"args": [
"-y",
"@elementor/[email protected]"
]
}
}
}Exposed tools (13)
9 read · 4 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
analyze-page-seo | read | |
apply-css | write | |
close-chat | read | |
get-invoice-status | read | Look up the status of an invoice by ID. |
list-catalog-items | read | List recent product titles. |
manage-post-types | write | |
my-tool | read | |
propose-css | read | |
read-textarea | read | |
run-fireworks | write | |
search-help-articles | read | Search help center articles by query. |
security-check | read | |
update-textarea | write |
Trust audit
SAFEgrade B · trust 86/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (5 observation(s))
- Network
- declared (1 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (12)
streamable-http
.wp-env.json
import { AngieMcpSdk } from '../../dist/index.js';import { AngieMcpSdk, LAYOUT_SIDEBAR, McpAppDisplayMode, getAngieIframe } from '../../dist/index.js';import { AngieMcpSdk, LAYOUT_FLOATING_CHAT } from '../../dist/index.js';import { AngieMcpSdk, LAYOUT_SIDEBAR } from '../../dist/index.js';import { AngieMcpSdk, LAYOUT_FLOATING_CHAT, LAYOUT_SIDEBAR } from '../../dist/index.js';if curl -fsS http://127.0.0.1:8080/demo/load-sidebar-v2-full-config/ >/dev/null; then
VIDEO_PROOF_URL: http://127.0.0.1:8080/demo/load-sidebar-v2-full-config/
@modelcontextprotocol/sdk, fireworks-js, zod, typescript, vite, @wordpress/env
@elementor/angie-logger, @elementor/oidc-auth, @eslint/js, @types/jest, @types/node, @typescript-eslint/eslint-plugin, @typescript-eslint/parser, eslint
Gates applied: no_behavioural_pass, no_license.
c0d2ac73ab78full audit observations/trust-audit/mcp-server/elementor__angie-sdk.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-12 | c0d2ac73ab78 | SAFE | B | 86 | first audit |
Questions
What is the @elementor/angie-sdk MCP server?
Add Angie Chat Anywhere
What tools does @elementor/angie-sdk expose?
13 in total: 9 read-only, 4 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is @elementor/angie-sdk safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (86/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does @elementor/angie-sdk need?
No credential environment variables were found in its source, so it appears to need none.
How does @elementor/angie-sdk run?
It speaks streamable-http, so it runs as a service you connect to over the network. It is published on npm as @elementor/angie-sdk at 1.8.0.
How current is this page?
The grade is for one exact copy of the source (c0d2ac73ab78), read on 2026-10-12. The repository is watched and re-audited when it changes.