MCP Plugin for Joomla - Templates

Templates 1.0.6 (latest release)

Monday, 26 October 2026 Buy a licence

Security

get_template_style masks parameters that look like secrets (API keys, tokens, passwords) as *. Sending * back to update_template_style keeps the stored value.

Templates 1.0.5

Wednesday, 23 September 2026

Fixed

get_template_style_params no longer crashes with a fatal "Undefined constant LIBXML_RECOVER" on hosting whose libxml build does not define that constant; the XML parser flag is now guarded with a safe fallback.

Templates 1.0.4

Thursday, 10 September 2026

Changed

Release notes are now in English and shown in Joomla's Update view (changelog URL).

Templates 1.0.3

Sunday, 06 September 2026

Added

Language packs de-DE, es-ES, it-IT, nl-NL, pt-BR: translation of the plugin labels and its parameters.

Templates 1.0.2

Friday, 04 September 2026

Security

update_template_file (writing a template file = code execution) now requires the Super User right (global core.admin), aligned with Joomla core which reserves template file saving to Super Users. Previously the right targeted the com_templates asset, which the Administrator group holds — so an Administrator could trigger this tool.

Templates 1.0.1

Thursday, 03 September 2026

Security

MCP tool rights aligned with the Joomla ACL: an action is refused if the token's account lacks the matching right.
Reads filtered by access level and state (no more leaking drafts or restricted content); version history and settings require edit rights.
Anti-SSRF protection on server-triggered downloads.

Templates 1.0.0

Tuesday, 01 September 2026