Cloudways MCP 2.0 Adds Log Access and WordPress Fleet Management to Your AI Agent

Your AI agent could already restart a service or pull a Git deployment from a chat window. With Cloudways MCP 2.0, it can also read your application logs and manage every WordPress site on your account in a single conversation.

Using a Cloudways API key today? It stops working on October 15, 2026. 

What’s New at a Glance

• More than 300 tools in total, up from about 244 in v1.2
• A new set of log tools that fetches application access and error logs
• A full Cloudways Site Manager toolset for themes, plugins, users, auto-updates, and fleet-wide actions
• New Projects and SSH Keys categories
• New application controls for PHP versions and web rules
• Access tokens as the only way to authenticate

Logs and Diagnostics

When a site misbehaves, the first step is usually finding evidence. Cloudways MCP 2.0 puts that evidence within reach of your agent. The new get_app_logs tool fetches application access or error logs, so your agent can read the same lines you would otherwise open over SSH.

Logs rarely tell the whole story on their own, so the agent can combine them with the performance and activity data already available. For this, the agent can now combine precise log data with telltale signs such as a slow page or a plugin change.

The table below covers the tools that help you diagnose a problem. The log tool and the two Site Manager tools are new in 2.0, and the rest are existing tools that work well alongside them.

Tool	What it adds	Sample prompt
get_app_logs	Application access or error logs	“Show the Apache error logs for app 67890 on server 12345”
wp_manager_activity_logs_list	Who changed what on a WordPress site, filterable by user, IP address, and action	“List the WordPress activity logs for app 6418530 on server 1624911”
wp_manager_update_history_list	Auto-update records for one app	“List the last 10 auto-update history records for app 6418530 on server 1624911”
analytics_app_php	Slow pages and active PHP processes	“Show slow PHP pages for app 67890 in the last hour”
analytics_app_mysql	Running queries and the slow query log	“Show slow MySQL queries for app 67890”
analytics_app_traffic	Top IPs, bots, URLs, and status codes	“Show top IPs hitting app 67890 in the last hour”
security_suite_app_events_list	A running feed of security events	“Show recent security events for app 12345”
staging_logs_get	Staging sync and deployment activity	“Show the recent staging deployment logs for app 393 on server 12345”

Note that WordPress activity logs require a Cloudways Site Manager Pro subscription.

Here is how you can use these tools to get a quick look into what is happening under the hood of the applications deployed on your Cloudways servers.

One Incident, Start to Finish

Picture a Monday morning when a client’s WordPress site starts loading slowly. You ask your agent what changed on the site overnight.

The agent starts with traffic analytics and finds nothing unusual, so a spike is ruled out. It then checks slow PHP pages and sees one URL taking far longer than the rest. A look at the MySQL slow log shows a query tied to that page running well past its usual time. The agent pulls the error log from the same window and finds repeated warnings from a single plugin. Finally, it opens the WordPress activity log and sees that the plugin was updated at 2 AM by the auto-update schedule.

You ask the agent to deactivate the plugin. It does, the page recovers, and the agent confirms the load time with a fresh look at the PHP analytics. The whole investigation takes one conversation, with no switching between dashboards and no SSH session.

Cloudways Site Manager

Cloudways Site Manager brings WordPress administration into your agent’s reach. Tool names still use the wp_manager prefix, so that is the name you will see in your agent’s tool calls and in the documentation. A single request can touch one site or hundreds, which makes this release especially useful for agencies and anyone running a large number of WordPress apps.

Cloudways Site Manager offers a Free plan (subject to applicable terms and plan limitations) and a Pro plan. Pro features cost $3 per app per month, and your agent will flag that cost before it upgrades apps on your behalf.

Themes and Plugins

Your agent can install, update, activate, deactivate, and delete themes and plugins. It can also install a custom theme or plugin from a public ZIP file URL, which is handy for premium plugins hosted outside the WordPress directory.

Users and One-Click Login

Create users, change roles, reset passwords, and remove accounts through conversation. Your agent can also return a single sign-on (SSO) link for any user, so reaching a site’s admin area takes one request.

Auto-Updates

Your agent can read and adjust auto-update schedules, manage the pages used for visual regression checks, set who receives notifications, and review the full update history for any app.

Fleet-Wide Actions

Several bulk tools accept up to 300 apps at once. With these tools, you can update a plugin across many sites, refresh data for a group of sites, reschedule auto-updates, or move a batch of apps between plans with one instruction.

Here is a look at what these tools can do:

Tool	What it does	Sample prompt
wp_manager_dashboard_list_sites	Lists every WordPress site on your account with its Cloudways Site Manager status	“List all WordPress sites I manage across my account”
wp_manager_site_available_updates	Shows pending core, plugin, and theme updates	“Which updates are available for my WordPress app 6418530 on server 1624911?”
wp_manager_site_manage_updates	Runs a managed update batch, using safe updates by default	“Update WordPress core to the latest version on app 6418530 on server 1624911 using safe updates”
wp_manager_dashboard_bulk_updates	Updates plugins, themes, or core across many apps in one call	“Update the Wordfence plugin on apps 654321 and 654322 using safe update”
wp_manager_plugin_install	Installs plugins from wordpress.org or the marketplace	“Install the Wordfence Security plugin on my WordPress app 5940225 on server 1296262”
wp_manager_theme_upload	Installs a custom theme from a public ZIP URL	“Upload this theme ZIP as twentytwentythree.zip on app 5940225, server 1296262”
wp_manager_user_create	Creates a WordPress user with a chosen role	“Create an editor user ‘john_doe’ with email [email protected] on app 5940225, server 1296262”
wp_manager_user_sso_login	Returns a login link for a user	“Get SSO login URL for user ID 5 on app 5940225, server 1296262”
wp_manager_auto_updates_get_settings	Shows the auto-update schedule for an app	“Show me the auto-update settings for app 6418530 on server 1624911”
wp_manager_auto_updates_bulk_schedule	Reschedules auto-updates for many apps	“Reschedule app 6418530 to auto-update on Wednesday, slot 3”
wp_manager_site_performance	Returns the site performance score	“Show the site performance score for app 6418530 on server 1624911”
wp_manager_apps_bulk_change_plan	Moves many apps between Free and Pro	“Upgrade apps 654321 and 654322 to Cloudways Site Manager Pro”

More Control Over Servers and Applications

Several additions extend tools you already use. Your agent can now change an app’s PHP version, manage header and redirect rules on Flexible and Velocity apps, and adjust server packages, backup settings, and maintenance windows. 

Tool	What it does	Sample prompt
app_php_version_update	Upgrades or downgrades the PHP version of an app	“Upgrade app 67890 on server 12345 from PHP 8.2 to PHP 8.3”
app_web_rules_update	Creates or replaces header and redirect rules	“Unset the X-Content-Type-Options header on app 67890, server 12345”
app_web_rules_get	Shows the current web rules	“Show the web rules for app 67890 on server 12345”
server_package_update	Installs, removes, or upgrades server packages	“Upgrade PHP to 8.2 on server 12345”
server_maintenance_window_update	Sets the days and time for platform updates	“Schedule the maintenance window for server 12345 to Sunday 3 AM UTC”
server_backup_settings_update	Changes backup frequency, retention, and local backup options	“Enable local backups and set backup retention to 15 days on server 12345”
server_clone	Clones a server with its apps, settings, domains, and cron jobs	“Clone server 12345 to a new DigitalOcean 2GB server in NYC with the same apps and settings”

Projects and SSH Keys

Projects let you group servers and apps by client or purpose, so your agent can work with a whole client environment at once. SSH Keys let your agent add, rename, and revoke public keys on servers, applications, and system users, which makes onboarding and offboarding a developer a short conversation.

Tool	What it does	Sample prompt
project_create	Creates a project and attaches apps to it	“Create a new project called ‘Client Acme’ and attach apps 12345 and 67890 to it”
project_list	Lists projects and their members	“Show me my Cloudways projects”
ssh_key_create	Adds a public key to a server, app, or system user	“Add the SSH key labeled laptop-deploy to server 12345”
ssh_key_delete	Revokes a key	“Revoke SSH key 9876 from server 12345”

Agency Tools

Agencies can use the AgencyOS tools, which power Client Billing & Reporting, to manage clients, services, price plans, tax rates, and reports. Your agent can also list invoices across the agency or for a single client. Invoice creation and reminders are currently not available through MCP. 

Choosing the Right Token Scope

Every connection to Cloudways MCP now uses an access token, and each token carries a scope. Read-Only lets your agent look and report. Limited Access allows only the endpoints or groups you pick. Full Access allows everything your account can do.

A good habit is to begin every new integration with a Read-Only token and widen the scope only when a workflow needs it. Note that some read operations, such as retrieving application credentials or login links, return access details, so treat even a Read-Only token as sensitive.

Tools that delete servers or end subscriptions make the case clearly, since a narrower token keeps an unintended instruction from causing damage.

Task	Suggested scope	Example tools
Check server health, traffic, and logs	Read-Only	get_app_logs, monitoring_server_graph, analytics_app_php
Review WordPress activity and update history	Read-Only	wp_manager_activity_logs_list, wp_manager_update_history_list
Deploy code and restart services	Limited Access	git_pull, service_restart
Manage WordPress plugins and updates	Limited Access	wp_manager_plugin_update, wp_manager_site_manage_updates
Create, scale, or delete servers	Full Access	server_create, server_scale, server_delete
Bulk unsubscribe apps or disable activity logs	Full Access	wp_manager_apps_bulk_unsubscribe, wp_manager_activity_logs_disable

How Tool Discovery Works

With more than 300 tools available, loading every definition into your AI client at the start of a conversation would use up a large share of its context window. Cloudways MCP keeps the initial load small. Your client sees a default set of 60 high-frequency tools plus 5 meta tools that let the agent find and run everything else on demand.

Meta tool	Purpose
list_available_toolsets	Shows the available tool categories
get_toolset_tools	Loads the tool definitions for one category
execute_tool	Runs a tool from a category
get_write_tools	Lists the tools that make changes
operation_status	Checks progress on long-running actions such as server creation or backups

When you ask for something outside the default set, such as a malware scan or a WordPress user change, the agent moves from list_available_toolsets to get_toolset_tools and then execute_tool. You never need to name a tool. If a request seems like it should work and the agent hesitates, mention the feature or action in your prompt so it can find the right toolset.

Action Required Before October 15

Two changes take effect on Thursday, October 15, 2026.

Your API Key Stops Working

If your MCP client or workflow still uses an API key, it will lose access to your Cloudways account on that date until you connect a new access token. If you have already switched, you can skip this part.

To switch now, follow these steps.

1. Log in to your Cloudways account.
2. Open API Integration from the profile menu in the top right corner.
3. Generate a new access token and choose a Read-Only, Limited Access, or Full Access scope.
4. Update your MCP client or workflow with the new token.

Generate your access token.

The API v1 Base URL Reaches End of Life

Cloudways is moving its Application Programming Interface (API) to a new base URL as part of ongoing improvements to its endpoints. The v1 URL stops working on the same date.

	API v1	API v2
Base URL	https://api.cloudways.com/api/v1/providers	https://api.cloudways.com/api/v2/providers
Stops working	Thursday, October 15, 2026	Not applicable

If you call the Cloudways API directly from scripts or integrations, search your code for the v1 address and replace it with the v2 address before the deadline.

How to Upgrade to Cloudways MCP 2.0

1. Toggle the Cloudways MCP server off and on in your client’s settings. If your client does not support toggling, quit and restart it.
2. Generate a new access token and update your client configuration.
3. Ask your agent to list the available toolsets to confirm the new tools appear.

Start Exploring

The full tool list, organized by category, is in the Cloudways MCP Server Tools documentation. If you are connecting for the first time, the MCP setup guide covers the process from start to finish. We would love to hear what you build and what you want next, so send feedback through Cloudways Support.

Conclusion

Cloudways MCP 2.0 gives your AI agent the ability to investigate a problem from the logs outward and to manage WordPress at the scale of a whole portfolio. Scoped access tokens keep that power in check, and the discovery system keeps your client fast despite a toolset that has grown past 300 tools.

Before October 15, generate your access token and update your client. After that, open your AI client and ask it something you would normally do by hand, such as reading the latest error log or updating a plugin across every site you manage.

 

Frequently Asked Questions

What happens if I miss the October 15 deadline?
Your agent and any workflows using an API key lose access to your Cloudways account until you connect a new access token. Nothing else about your account changes, and reconnecting takes a few minutes.

How do I know whether I have already switched?
If your MCP client is configured with a token generated from the API Integration page, you are set. Your tokens are listed on that page. Any client still configured with your old API key needs the update described above.

Does the base URL change affect me if I only use MCP?
No. Cloudways MCP 2.0 automatically uses the new base URL for its operations. You do not need to make any changes to your AI agent. 

I call the API directly. What do I change?
If you call Cloudways platform API directly, you need to replace the v1 base URL with the v2 base URL and authenticate with an access token in place of the API key.

Will my old API key work with the v2 URL?
No. API keys are being deprecated and replaced with Access tokens. Please generate your access token and replace your current API key with properly scoped tokens. 

Which scope should I choose?
Start with Read-Only. Move to Limited Access Scope when you need specific actions. Use Full Access only when you want your agent to have complete control.

What happens if my agent tries something my token does not allow?
The agent will display an appropriate error message describing the issue. The agent will also provide appropriate resolution steps covering the required scope for your request. 

Can I create more than one token?
Yes. In fact, we strongly recommend creating a unique token for each workflow so that you can easily keep scope isolated and confined to the requirements of the workflow. 

Can I revoke or rotate a token, and does it expire?
You can set the expiration date for each token at the time of creation. In addition, you can easily revoke/rotate a token anytime from your account’s API Integration screen. We strongly recommend revoking a token if you suspect any credential misuse or leakage.

Do team members need their own tokens?
This depends on the access you wish to offer to the team members. The best practice is to scope each token to the permission you think are essential for the tasks team members need to perform using that token. 

Why can’t my agent find a tool I know exists?
Most tools load on demand. Rephrase your request with the name of the feature or action, and the agent can locate the right toolset.

How many tools will my client show?
You will only see the default set at first. The rest load when the agent needs them.

Which MCP clients work with Cloudways MCP?
All MCP clients using the standard json based MCP settings work with Cloudways MCP. Popular options include Claude, Cursor, Devin/Windsurf, and Cline. 

Why does my agent keep checking the status of an action?
Long actions such as server creation, backups, and scaling run in the background and return an operation ID. The agent checks progress with operation_status until the action finishes.

What logs can my agent read?
Your agent can fetch application access or error logs, WordPress activity logs, and auto-update history. 

Do I need Cloudways Site Manager Pro?
Activity logs, auto-update tools, and site performance scoring require Pro. Basic plugin, theme, and user management works on the Free plan, subject to applicable plan terms.

How much does Pro cost?
Pro costs $3 per app per month.Your agent is designed to warn you before it upgrades apps.

Are there limits on bulk actions?
Bulk tools accept up to 300 apps in a single request.

Can my agent delete things by mistake?
Tools that delete servers, apps, or data exist, which is why scoped tokens matter. A Read-Only token removes that risk. In some cases, your agent may ask your permission before executing a destructive action. However, you should never rely on this check, Always use a properly scoped token to avoid any accidental destructive action on the part of your agent.

What data does my AI client see?

Your AI agent only sees the data that is returned by the tools called during an operation. In most cases, the information is already visible on the Cloudways platform dashboard to the logged-in users with appropriate credentials/permissions. Some tools return access details by design, such as application credentials and login links, and logs can contain sensitive values. Review what your AI provider retains, and use a properly scoped token to limit what your agent can retrieve. 

Where can I find the full tool list?
See the Cloudways MCP Server Tools documentation.

Who do I contact if something breaks?
In case you see an operation failure or a toolcall returning unexpected results, take a screenshot and record all relevant information. Reach out to Cloudways Support with this information so that our engineers can reconstruct the incident and take any required remedial actions.

 

DISCLAIMER: Any references to third-party companies, trademarks, or logos in this document (including WordPress, Apache, MySQL, PHP, Wordfence, Claude, Cursor, Devin, Windsurf, and Cline) are for informational purposes only and do not imply any affiliation with, sponsorship by, or endorsement of those third parties.