Six new checks including security and accessibility, plus PDF, CSV and shareable report links. Existing scans, tokens and MCP connections are unchanged.<\/p>","1.1.0":"
Adds a one-click site scan with inline fixing \u2014 no setup, no API key. Your existing MCP connection, tokens and audit history are unchanged. If screens look unstyled after updating, refresh once.<\/p>","1.0.2":"
Security update. Token permissions are now enforced strictly. Your existing tokens are migrated automatically and will keep working. Please review your tokens after updating to narrow their scope.<\/p>"},"ratings":{"1":0,"2":0,"3":0,"4":0,"5":2},"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3667552,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3667552,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3667627,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3667627,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.0","1.0.1","1.0.2","1.1.0","1.2.0"],"block_files":[],"assets_screenshots":{"screenshot-1.jpg":{"filename":"screenshot-1.jpg","revision":3683452,"resolution":"1","location":"assets","locale":"","width":1280,"height":960},"screenshot-10.jpg":{"filename":"screenshot-10.jpg","revision":3683452,"resolution":"10","location":"assets","locale":"","width":1280,"height":960},"screenshot-2.jpg":{"filename":"screenshot-2.jpg","revision":3683452,"resolution":"2","location":"assets","locale":"","width":1280,"height":960},"screenshot-3.jpg":{"filename":"screenshot-3.jpg","revision":3683452,"resolution":"3","location":"assets","locale":"","width":1280,"height":960},"screenshot-4.jpg":{"filename":"screenshot-4.jpg","revision":3683452,"resolution":"4","location":"assets","locale":"","width":1280,"height":960},"screenshot-5.jpg":{"filename":"screenshot-5.jpg","revision":3683452,"resolution":"5","location":"assets","locale":"","width":1280,"height":960},"screenshot-6.jpg":{"filename":"screenshot-6.jpg","revision":3683452,"resolution":"6","location":"assets","locale":"","width":1280,"height":960},"screenshot-7.jpg":{"filename":"screenshot-7.jpg","revision":3683452,"resolution":"7","location":"assets","locale":"","width":1280,"height":960},"screenshot-8.jpg":{"filename":"screenshot-8.jpg","revision":3683452,"resolution":"8","location":"assets","locale":"","width":1280,"height":960},"screenshot-9.jpg":{"filename":"screenshot-9.jpg","revision":3683452,"resolution":"9","location":"assets","locale":"","width":1280,"height":960}},"screenshots":{"1":"One click, no setup at all. Broken links, missing alt text, missing meta descriptions, oversized media, orphaned files, security and accessibility problems \u2014 scored out of 100.","2":"Fix it from the report. Write alt text, replace a dead link or trash a file you no longer need. No AI and no API key.","3":"Twelve checks, run one at a time so nothing times out. Results appear as they land, and you can cancel at any point.","4":"Every scan is kept, so you can watch the score climb. The optional email arrives only when something actually changed.","5":"Send the report on. Save it as a PDF, export it as a CSV, or create a public link with an expiry you choose. Before you create one you are told exactly what the recipient will and will not see.","6":"Set the schedule once and leave it. Choose how often the site scans itself and where the report goes \u2014 or switch it off entirely.","7":"The dashboard opens with your health score, then the MCP endpoint, live figures and the most recent calls.","8":"Connecting Claude Desktop, Cursor or VS Code is the optional upgrade \u2014 the scan and inline fixing need none of it.","9":"Every ability is its own switch, and every token is scoped to exactly what you allow. Tokens are SHA-256 hashed and shown once.","10":"Every call recorded with its payload, duration and the exact reason it failed. Inline repairs are logged here too. Exportable to CSV."}},"plugin_section":[],"plugin_tags":[1953,17214,17210,31034,151481],"plugin_category":[54],"plugin_contributors":[265081],"plugin_business_model":[],"class_list":["post-309314","plugin","type-plugin","status-publish","hentry","plugin_tags-accessibility","plugin_tags-alt-text","plugin_tags-broken-link-checker","plugin_tags-seo-audit","plugin_tags-site-health","plugin_category-security-and-spam-protection","plugin_contributors-builtbytanin","plugin_committers-builtbytanin"],"banners":{"banner":"https:\/\/ps.w.org\/my-site-hand\/assets\/banner-772x250.png?rev=3667627","banner_2x":"https:\/\/ps.w.org\/my-site-hand\/assets\/banner-1544x500.png?rev=3667627","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/my-site-hand\/assets\/icon-128x128.png?rev=3667552","icon_2x":"https:\/\/ps.w.org\/my-site-hand\/assets\/icon-256x256.png?rev=3667552","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/my-site-hand\/assets\/screenshot-1.jpg?rev=3683452","caption":"One click, no setup at all. Broken links, missing alt text, missing meta descriptions, oversized media, orphaned files, security and accessibility problems \u2014 scored out of 100."},{"src":"https:\/\/ps.w.org\/my-site-hand\/assets\/screenshot-2.jpg?rev=3683452","caption":"Fix it from the report. Write alt text, replace a dead link or trash a file you no longer need. No AI and no API key."},{"src":"https:\/\/ps.w.org\/my-site-hand\/assets\/screenshot-3.jpg?rev=3683452","caption":"Twelve checks, run one at a time so nothing times out. Results appear as they land, and you can cancel at any point."},{"src":"https:\/\/ps.w.org\/my-site-hand\/assets\/screenshot-4.jpg?rev=3683452","caption":"Every scan is kept, so you can watch the score climb. The optional email arrives only when something actually changed."},{"src":"https:\/\/ps.w.org\/my-site-hand\/assets\/screenshot-5.jpg?rev=3683452","caption":"Send the report on. Save it as a PDF, export it as a CSV, or create a public link with an expiry you choose. Before you create one you are told exactly what the recipient will and will not see."},{"src":"https:\/\/ps.w.org\/my-site-hand\/assets\/screenshot-6.jpg?rev=3683452","caption":"Set the schedule once and leave it. Choose how often the site scans itself and where the report goes \u2014 or switch it off entirely."},{"src":"https:\/\/ps.w.org\/my-site-hand\/assets\/screenshot-7.jpg?rev=3683452","caption":"The dashboard opens with your health score, then the MCP endpoint, live figures and the most recent calls."},{"src":"https:\/\/ps.w.org\/my-site-hand\/assets\/screenshot-8.jpg?rev=3683452","caption":"Connecting Claude Desktop, Cursor or VS Code is the optional upgrade \u2014 the scan and inline fixing need none of it."},{"src":"https:\/\/ps.w.org\/my-site-hand\/assets\/screenshot-9.jpg?rev=3683452","caption":"Every ability is its own switch, and every token is scoped to exactly what you allow. Tokens are SHA-256 hashed and shown once."},{"src":"https:\/\/ps.w.org\/my-site-hand\/assets\/screenshot-10.jpg?rev=3683452","caption":"Every call recorded with its payload, duration and the exact reason it failed. Inline repairs are logged here too. Exportable to CSV."}],"raw_content":"\n
Scan your WordPress site for broken links, missing image alt text, missing SEO meta descriptions and accessibility problems \u2014 and fix them without leaving the report.<\/strong><\/p>\n\n Activate the plugin and it starts scanning straight away. No token, no API key, no Node.js, no terminal. About thirty seconds later you get a health score out of 100 and a list of real problems on your own site.<\/p>\n\n Twelve checks, run one at a time so nothing times out.<\/p>\n\n Broken link checker<\/strong> \u2014 checks the links in your recent posts and pages and reports only the ones that are genuinely gone. Only a 404 or 410 counts. Anything ambiguous is retried a different way and left alone rather than reported as a false alarm.<\/p>\n\n Missing alt text<\/strong> \u2014 images your visitors using screen readers cannot see, and search engines cannot read.<\/p>\n\n Missing meta descriptions<\/strong> \u2014 published posts and pages with no SEO description, for Yoast SEO and RankMath.<\/p>\n\n Accessibility basics<\/strong> \u2014 links that announce nothing to a screen reader, \"click here\" links, more than one main heading, and headings that skip a level. Structural checks only; it does not claim to be a full WCAG audit.<\/p>\n\n Images missing dimensions<\/strong> \u2014 the cause of pages that jump around while they load, which Google measures as a Core Web Vital.<\/p>\n\n Images missing lazy loading<\/strong> \u2014 pictures further down a post that something has opted out, so visitors download them before they are ever seen.<\/p>\n\n Oversized media<\/strong> \u2014 files big enough to slow your pages down, with the space you would get back.<\/p>\n\n Orphaned files<\/strong> \u2014 uploads that nothing on your site appears to use.<\/p>\n\n Thin content<\/strong> \u2014 published pages with very few words. Read with judgement: a contact page is supposed to be short, and pages built from a shortcode, gallery or embed are left out.<\/p>\n\n Plugin and core health<\/strong> \u2014 pending updates, an unsupported PHP version, missing HTTPS, errors visible to visitors, a stalled cron.<\/p>\n\n Exposed WordPress files<\/strong> \u2014 readme.html, license.txt and a debug log left publicly readable. The first hands an attacker your exact version; the last can contain server paths and credentials.<\/p>\n\n XML-RPC<\/strong> \u2014 reported as a notice, with the tradeoff stated plainly. It is a brute-force vector, but the WordPress mobile app and Jetpack need it, so this is only worth turning off if you use neither. Sites running Jetpack are skipped entirely.<\/p>\n\n A list of complaints is not much use on its own. Write alt text straight into the report, replace a dead link, or trash a file you no longer need \u2014 one row at a time, with the score climbing as you go.<\/p>\n\n No AI and no API key required for any of it.<\/strong><\/p>\n\n Your score is kept over time, so you can watch the site improve, and you can have a short report emailed to you when something changes.<\/p>\n\n A report is more useful when the person who needs to act on it can read it.<\/p>\n\n Shared reports are redacted on purpose<\/strong>. They show the score, each check by name, and how many issues it found. They never show file names, page addresses, server paths, post or media IDs, edit links, or your plugin, theme, PHP and WordPress versions \u2014 and the two security checks are left out entirely, because publishing those would be publishing a vulnerability report about your own server. The page tells you exactly what a recipient will and will not see before you create the link, every link can be revoked instantly, and the report is a snapshot: re-scanning your site never changes what you already sent.<\/p>\n\n Everything above works on its own. Connecting an AI assistant is an upgrade, not a requirement.<\/p>\n\n Built on the open standard Model Context Protocol (MCP)<\/strong> developed by Anthropic, this plugin exposes safely-gated capabilities to clients like Claude Desktop<\/strong>, Cursor<\/strong>, VS Code<\/strong> and Windsurf<\/strong>, so they can work on your site in plain language.<\/p>\n\n Included modules:<\/strong> Content (9 abilities), SEO (6), Diagnostics (7), Media (6), Users (5), WooCommerce (12, registers only when WooCommerce is active). That is 33 abilities on a standard install, or 45 with WooCommerce. Every one is an individual switch, and a token can only call what you allow.<\/p>\n\n The site scan and inline fixing need none of the following. These apply only if you choose to connect an AI assistant:<\/p>\n\n My Site Hand is available in English and Bengali. If you speak another language, you can help \u2014 no coding needed:<\/p>\n\n https:\/\/translate.wordpress.org\/projects\/wp-plugins\/my-site-hand\/<\/p>\n\n New to translating? Start here: https:\/\/make.wordpress.org\/polyglots\/handbook\/translating\/first-steps\/<\/p>\n\n When the check-broken-links ability is called via the MCP API, this plugin sends HTTP HEAD requests to URLs found in your post content to verify they are reachable. No personal user data is transmitted \u2014 only a standard HTTP request is made to each URL being checked. This is triggered only when explicitly called by an authorized API token holder.<\/p>\n\n The Broken Links check in the Site Health scan sends HTTP HEAD requests (and, where a server refuses HEAD, a single ranged GET) to the links found in your 50 most recent published posts and pages, to see whether they still resolve. The request identifies this plugin and your site URL in its user agent. No personal user data is transmitted. Results are cached for 12 hours. This runs when you start a scan from the admin, and during the scheduled scan if you leave that enabled \u2014 on sites with more than 500 published posts the link check is skipped on the schedule. Turning scheduled reports off in My Site Hand \u2192 Settings<\/strong> stops the scheduled scan entirely.<\/p>\n\n The Exposed WordPress Files and XML-RPC checks ask your own site, over HTTP, whether \/readme.html, \/license.txt, \/wp-config-sample.php, \/wp-content\/debug.log and \/xmlrpc.php answer to an anonymous visitor. These are loopback requests to your own domain, not to any third party, and no data is sent in them. Results are cached for 12 hours. If your host blocks loopback requests, both checks report that they could not run rather than reporting your files as safe.<\/p>\n\n Creating a share link stores a redacted snapshot of your scan in your own database and serves it from your own site at a tokenized URL. Nothing is uploaded anywhere. The page is sent with X-Robots-Tag: noindex, nofollow, every link expires, and you can revoke one at any time.<\/p>\n\n No data is sent to any third-party analytics or tracking service by this plugin.<\/p>\n\n\n Search for My Site Hand<\/strong> in your WordPress dashboard, install, and activate it. You land on Site Health and the first scan starts by itself. That is the whole setup.<\/p>\n\n Connecting an AI assistant is optional, and fully guided:<\/p>\n\n Yes, among other things. It checks the links in your 50 most recent published posts and pages and reports the ones that are genuinely gone. Unlike a dedicated link crawler it does not run continuously in the background, so it will not slow your site down \u2014 it runs when you start it, or on a schedule you choose.<\/p><\/dd>\n It tries hard not to. Only 404 and 410 count as gone. Anything ambiguous \u2014 a 403, a 405, a server error \u2014 is retried a different way, and if it is still unclear the link is not reported at all. A single false alarm would make you distrust the whole report.<\/p><\/dd>\n Yes, and you can write the alt text straight into the report without opening the media library or the post editor. The score updates as you go.<\/p><\/dd>\n It checks four structural problems: links that announce nothing to a screen reader, \"click here\" link text, more than one H1 on a page, and heading levels that skip. It is a useful first pass, not a full WCAG audit, and it does not claim to be one.<\/p><\/dd>\n Yes. The missing meta description check reads whichever of the two is active.<\/p><\/dd>\n No. The scan and inline fixing work on their own, with nothing to install and nothing to configure. Connecting Claude, Cursor or VS Code is an optional upgrade.<\/p><\/dd>\n No. It runs only when you start it, or on the schedule you choose, and it works in small batches so no single request runs long enough to time out. Scheduled scans skip the link check on sites with more than 500 published posts.<\/p><\/dd>\nWhat it finds<\/h3>\n\n
Fix it from the report<\/h3>\n\n
Send the report to a client<\/h3>\n\n
\n
Optional: let an AI assistant do the work<\/h3>\n\n
\n
Security<\/h3>\n\n
\n
What you need<\/h3>\n\n
\n
mcp-remote<\/code>) runs on your own computer.<\/li>\nHelp translate this plugin<\/h3>\n\n
External Services<\/h3>\n\n
Link Checker (SEO Module)<\/h4>\n\n
Link Checker (Site Health scan)<\/h4>\n\n
Requests this plugin makes to your own site<\/h4>\n\n
Shared report links<\/h4>\n\n
\n
mcp-remote<\/code> bridge on your computer, the second (auto-generated, with your token) connects it.<\/li>\n\n
Is this a broken link checker?<\/h3><\/dt>\n
Will it report links that are not really broken?<\/h3><\/dt>\n
Can it find images with no alt text?<\/h3><\/dt>\n
Does it check accessibility?<\/h3><\/dt>\n
Does it work with Yoast SEO and RankMath?<\/h3><\/dt>\n
Do I need an AI assistant, an API key or a token to use this?<\/h3><\/dt>\n
Does the scan slow my site down?<\/h3><\/dt>\n