Account MCP Prompts: Site Actions
These prompts change your sites: plugins, themes, WordPress, PHP, the CDN, the Image Optimizer, Shield, the Object Cache, domains, backup restores, snapshots and your Manage list, and give you magic login links to wp-admin.
Turn on: Settings → MCP → Site actions. This group is off by default: the account owner turns it on. Every prompt here needs a read-write connection.
Actions marked Asks to confirm make the assistant ask you first. Nothing changes until you answer yes.
Replace each
[placeholder]with your own value.[mysite.com]is the site's domain, as shown in the dashboard.
WordPress admin login
Get a magic login link
Give me a magic login link to the WordPress admin of [mysite.com].The link logs you in to wp-admin without a password, the same way as the dashboard's Magic Login. It works once and expires shortly after it is created, so open it right away. If it doesn't log you in, it was already used or has expired: ask for a new one. The assistant never shows site passwords.
Same in the dashboard: Site Creds
Plugins
Install and activate a plugin
Install and activate the plugin [plugin slug] from wordpress.org on [mysite.com].Plugins come from wordpress.org, by name or slug, up to 5 at a time.
Install plugins without activating them
Install the plugins [plugin slug] and [plugin slug] from wordpress.org on [mysite.com] without activating them.Install a specific plugin version (downgrade)
Asks to confirm
Install version [version] of the plugin [plugin slug] on [mysite.com].Update a plugin
Update the plugin [plugin slug] on [mysite.com] to the latest version.Update all plugins
Update all plugins on [mysite.com] that have updates available.Activate a plugin
Activate the plugin [plugin slug] on [mysite.com].Deactivate a plugin
Deactivate the plugin [plugin slug] on [mysite.com].The InstaWP Connect plugin can't be deactivated here.
Delete a plugin
Asks to confirm
Delete the plugin [plugin slug] from [mysite.com].An active plugin is deactivated first. The plugin's data in the database is kept.
Same in the dashboard: Site Tools
Themes
Install a theme
Asks to confirm
Install the theme [theme slug] from wordpress.org on [mysite.com].Install a theme from a zip URL
Asks to confirm
Install the theme from [theme zip URL] on [mysite.com].Use this for a paid or custom theme: give the https link to its zip file.
Activate a theme
Asks to confirm
Activate the theme [theme slug] on [mysite.com].Update a theme
Update the theme [theme slug] on [mysite.com] to the latest version.Delete a theme
Asks to confirm
Delete the theme [theme slug] from [mysite.com].The active theme can't be deleted: activate another theme first.
WordPress
Update WordPress to the latest version
Asks to confirm
Update WordPress core on [mysite.com] to the latest version.Update WordPress to a specific version
Asks to confirm
Update WordPress core on [mysite.com] to version [version].Downgrade WordPress
Asks to confirm
Downgrade WordPress core on [mysite.com] to version [version].Up to one major version back, and the database keeps its newer schema. Take a backup first.
Same in the dashboard: Update the WordPress Version of a Site
PHP
Change a PHP setting
Set the PHP setting memory_limit on [mysite.com] to 256 MB.A value outside its allowed range is refused and nothing changes. See the ranges with See a site's PHP version and settings.
Change several PHP settings
Set the PHP settings max_execution_time to 120 and upload_max_filesize to 128 MB on [mysite.com].max_execution_time and upload_max_filesize need a paid plan.
Change the PHP version
Change the PHP version of [mysite.com] to [PHP version].Only the PHP versions the site's PHP tab offers can be chosen; any other is refused with the list.
Same in the dashboard: Configure PHP
CDN and images
Change the CDN cache time
Set the CDN server cache time of [mysite.com] to 1 week.Cache times: 3 minutes, 20 minutes, 1 hour, 3 hours, 12 hours, 3 days, 1 week, 1 month, 3 months, 1 year, or do not cache.
Change the browser cache time
Set the CDN browser cache time of [mysite.com] to 3 days.Make the browser cache time match the server
Set the CDN browser cache time of [mysite.com] to match the server cache time.Follow the site's own cache headers
Set the CDN server cache time of [mysite.com] to respect the origin's cache headers.Add a cache exclusion
Add the CDN cache exclusions */cart* and */checkout/* on [mysite.com].Remove a cache exclusion
Asks to confirm
Remove the CDN cache exclusion */checkout/* from [mysite.com].Purge the CDN cache
Purge the CDN cache of [mysite.com].Turn on the Image Optimizer
Turn on the Image Optimizer on [mysite.com].Turn off the Image Optimizer
Turn off the Image Optimizer on [mysite.com].Change image quality
Set the Image Optimizer image quality of [mysite.com] to 75 and mobile image quality to 60.Quality goes from 0 to 100.
Change maximum image widths
Set the Image Optimizer desktop max width of [mysite.com] to 1200 px and mobile max width to 600 px.Widths go from 100 to 4000 px.
Turn CSS or JS minify on or off
Turn on CSS minify and turn off JS minify in the Image Optimizer of [mysite.com].Turn WebP off
Turn off WebP in the Image Optimizer of [mysite.com].Turn on automatic optimization
Turn on automatic optimization in the Image Optimizer of [mysite.com].Same in the dashboard: Configure CDN · Image Optimizer
Object Cache
Turn the Object Cache on
Turn on the object cache on [mysite.com].The site's plan has to include Object Cache: see See a site's Object Cache.
Turn the Object Cache off
Turn off the object cache on [mysite.com].Clear the Object Cache
Clear the object cache of [mysite.com].When the Object Cache is off: "The object cache is off on this site, so there is nothing to clear."
Same in the dashboard: Speed Up Your WordPress Site with Object Cache
Shield
The assistant asks first when you turn the firewall or bot detection off, or when a change can block real visitors (block mode, challenge mode, a higher sensitivity, leaving learning mode).
Set up Shield
Set up Shield on [mysite.com].Shield needs CDN in the site's plan. If it's already set up, the assistant says so.
Turn the firewall on
Turn on the Shield WAF of [mysite.com].Turn the firewall off
Asks to confirm
Turn off the Shield WAF of [mysite.com].Switch the firewall to block mode
Asks to confirm
Set the Shield WAF mode of [mysite.com] to block.Switch the firewall to log mode
Set the Shield WAF mode of [mysite.com] to log.Take the firewall out of learning mode
Asks to confirm
Take the Shield WAF of [mysite.com] out of learning mode.Turn bot detection off
Asks to confirm
Turn off Shield bot detection on [mysite.com].Set bot detection to challenge mode
Asks to confirm
Set the Shield bot detection mode of [mysite.com] to challenge.Set bot detection to log mode
Set the Shield bot detection mode of [mysite.com] to log.Change a bot detection sensitivity
Asks to confirm
Set the Shield IP address sensitivity of [mysite.com] to high.Advanced Shield. Sensitivities are off, low, medium or high, for request integrity, IP address and browser fingerprint, plus the browser fingerprint aggression.
Change the DDoS challenge window
Set the Shield DDoS challenge window of [mysite.com] to 6 hours.Advanced Shield. How long a visitor may browse after passing a challenge: 15 minutes, 30 minutes, 1 hour, 6 hours, 12 hours or 24 hours.
Let ManageWP or ShortPixel through
Turn on ManageWP access and ShortPixel access in the Shield of [mysite.com].Advanced Shield. Lets their servers past bot detection.
Add a trusted IP
Add [IP address] to the Shield trusted IPs of [mysite.com].Add a firewall URL exclusion
Add the Shield WAF URL exclusion [URL pattern] on [mysite.com].Add a bot detection URL exclusion
Add the Shield bot detection URL exclusion [URL pattern] on [mysite.com].Remove a trusted IP
Asks to confirm
Remove [IP address] from the Shield trusted IPs of [mysite.com].Remove a firewall or bot detection URL exclusion
Asks to confirm
Remove the Shield WAF URL exclusion [URL pattern] from [mysite.com].Same in the dashboard: Configure Shield
Domains
To see a site's domains first, use List a site's domains. Domain mapping needs the Starter plan or higher and isn't available on a staging site.
Map a primary domain
Map the domain [domain] to [mysite.com] as the primary domain.The site's WordPress address changes to the domain. Before mapping, add a CNAME record at your DNS provider that points the domain to the site's InstaWP address (the domain list shows the value); with Cloudflare, turn its proxy off. The mapping and SSL certificate are set up in the background, and you get an email. A domain tried in the last 30 minutes can't be tried again yet.
Map an alias domain
Map the domain [alias domain] to [mysite.com] as an alias.The domain also opens the site; the site's address stays the same.
Make a domain primary
Asks to confirm
Set [domain] as the primary domain of [mysite.com].A search and replace of the old address runs on the database by default, as the dashboard recommends.
Make a domain primary without a search and replace
Asks to confirm
Set [domain] as the primary domain of [mysite.com] without a search and replace.Links in the content keep pointing to the old address. To undo a mapping's address change, set the site's own InstaWP address as primary again.
Retry a domain's SSL
Retry the SSL certificate of the domain [domain] on [mysite.com].Same in the dashboard: Reissue SSL on a Mapped Domain
Remove a domain
Asks to confirm
Remove the alias domain [alias domain] from [mysite.com].Only an alias can be removed. To remove the primary domain, set another domain as primary first. The site's own InstaWP address can't be removed.
Same in the dashboard: How to Map a Custom Domain to an InstaWP Site
Backup restores
Take the backup number from the site's backup list (List a site's backups). Only a backup that finished successfully can be restored.
Restore a backup to its site
Asks to confirm
Restore backup #[backup number] to [mysite.com].The site's current files and database are overwritten with the backup. This can't be undone, so make sure you have a recent backup first. The restore runs in the background: to follow it, see Check the latest restore. A second restore of the same site can't start until the first one has finished or failed. An expired site can't be restored in place: create a new site from the backup instead.
Create a new site from a backup
Asks to confirm
Create a new site from backup #[backup number] of [mysite.com].The source site isn't changed. The new site is named copy- plus 3 random letters plus the site's name (a deleted site's copy keeps its name). It gets the same plan as the source site and is billed the same way, so the plan needs room for another site and, on a paid plan, a payment method. Works for expired and deleted sites too. The site is built in the background: ask for your sites list to see when it's active.
Same in the dashboard: Restore a Site from Backup
Snapshots
Re-sync a snapshot
Asks to confirm
Re-sync the snapshot [snapshot name] from its parent site.The snapshot is re-captured in the background. To check when it's done, see Check a snapshot's status.
Re-sync a snapshot from another site
Asks to confirm
Re-sync the snapshot [snapshot name] from the site [source-site.com].Points the snapshot at another site of the same team.
Same in the dashboard: Edit Snapshots
Managed sites
Remove a site from Manage
Asks to confirm
Remove the managed site [managed site URL] from Manage.The InstaWP Connect plugin is disconnected; the WordPress site itself isn't deleted.
Same in the dashboard: Managed Site Overview