Your AI works on your real membership site, with real members and real payments. Membership MCP is built so that you choose what it may do, the riskier changes wait for your approval in your AI app, everything is written down on your own site, and you can stop it at any time.

Reads never change anything

Most of what you’ll ask is a question: who joined, who’s behind on a payment, what a plan costs, what a member can see. Those tools only read. They can’t change a member, a plan or a payment, however the question is worded.

You choose what it may do

When you connect your site, you pick what your AI may do there:

  • Read only: looks up members, payments and content, and changes nothing. Your AI doesn’t even see the tools that make changes.
  • Content: can also draft, publish and update posts and pages. Nothing else.
  • Full access: can also create and change memberships, coupons, members and subscriptions, and issue refunds.

That choice is the site’s Maximum access. It’s the one place you set it: change it later under Settings on the Membership MCP screen. An AI app you connected with read-only access before this choice existed stays read-only until you reconnect it. The tools reference marks every tool as Reads or Changes.

Smaller changes happen in one step

Adding a member, editing a member’s details, enrolling a member in a plan, recording a gift membership, adding a webhook, marking a lesson complete and saving a new post, page, plan or access rule as a draft show a preview by default and are saved when your AI confirms. The plugin doesn’t wait for a separate yes from you for these, so if you want to check one first, ask your AI to show you the preview. Editing an existing post, page, plan, pricing page, coupon or access rule, even a draft, waits for your approval in your AI app (below). Each one is recorded in the Activity log.

Some things are saved as drafts unless you ask to publish:

  • Plans, pricing pages and access rules can be saved as drafts, so nobody can buy or be locked out until you publish them.
  • Posts and pages are saved as drafts unless you ask to publish.

Ask for drafts by saying so: “set this up as a draft.”

Riskier changes stop at a preview and a one-time code

Some changes are hard to undo or touch money or access right away:

  • refunds and subscription cancellations, suspensions and resumes
  • deleting a member, a webhook or a student’s course progress, or removing a corporate sub-account
  • putting a plan, pricing page, access rule, post or page live, creating a pricing page that’s an upgrade path (even as a draft), and creating a coupon (it’s live once saved)
  • editing an existing plan, pricing page, coupon, access rule, post, page, reminder, payment gateway, or MemberPress’s display settings
  • creating a reminder email
  • bulk member imports

For these, the first request never changes anything. Your AI gets back a preview of exactly what will happen, a note for you that it has not run yet, and a one-time code. The change runs only when your AI sends that code back with the same details, so if anything differs, it doesn’t go through. The code works once and expires quickly: after a minute, or five minutes for refunds and cancellations. An old code can’t be reused later.

Approvals happen in your AI app

The plugin never asks you itself: the yes happens in your AI app’s own approval card, and a riskier change runs only when your AI sends back the one-time code from the preview. Claude, ChatGPT and Cursor show that card before they run a tool, unless you’ve set them to run tools without asking. There’s no separate approval queue in WordPress to check. Whoever is chatting with the connected AI is the one who approves, so keep the connection to people you’d trust with your MemberPress admin.

Every action is logged on your site

Every action your AI takes is recorded in the Activity log on the Membership MCP screen in your WordPress admin: which tool, when, what it acted on, the result, and whether it was confirmed. The log lives on your site, so you can review it whenever you like.

The log records what happened, not the full details you typed. Member data stays in MemberPress where it already lives.

You can pause changes

The plugin has a switch that pauses all changes on your site. While it’s on, your AI can still answer questions, but every tool that makes changes is refused. Turn it on before a launch, during a busy week, or any time you want the site left alone.

Some things stay off-limits

  • Your AI can’t delete an administrator, or the person who connected the site.
  • It acts with the permissions of the WordPress administrator who connected the site, and no more.
  • It can’t delete a plan, a coupon or an access rule. Those stay in the MemberPress screens.
  • We never see or store your WordPress password.

Daily limits

Each plan has a daily number of actions: 50 on Free, 250 on Plus and 1,000 on Power. The allowance belongs to your account and is shared across all your sites. Limits reset every day. Every tool is available on every plan; a paid plan only raises the daily number.

The limit is also a guardrail. Your AI can’t run away with your site in a loop of calls, because it stops at the limit. Check your usage explains what counts and what happens when you reach it.