by Royal Plugins 0 (0 reviews)

Royal AI Firewall

Name: Royal AI Firewall
Author: Royal Plugins

See every AI agent on your site. Decide who gets your content — block, allow, or log-only for GPTBot, ClaudeBot, PerplexityBot, and 60+ others.

Royal AI Firewall ranks #25,066 among WordPress.org plugins with 20+ active installations, is #2,643 of 4,589 in the Security category, and was last updated Sep 9, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Compatible with WP 7.1.2

v1.0.8 Current Version v1.0.8

Updated 2 weeks ago Last Update on 09 Sep, 2026

Refreshed 9 hours ago Last Refreshed on

#2,643 of 4,589 in Security Downloads -59.5% this week

View on WordPress.org

Rank

#25,066

— No change

Active Installs

20+

+53.8%

KW Avg Position

N/A

— No change

Downloads

794

+3 today

Support Resolved

— No change

Rating

Review 0 out of 5

0 (0 reviews)

Next Milestone 30

Total Progress 50%

20+ 30+

6,803

Ranks to Climb

Growth Needed

8,000,000

Active Installs

Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

Exact install estimates within tiers
Track install growth over time
Milestone progress predictions

Upgrade to Pro

Need 5 more installs to reach 30+

Rank Changes

Current #25,066

Change

Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Upgrade to Pro

Active Installs 0,000,000+

Growth +0.0%

Peak 0,000,000

Downloads Growth

Downloads

Growth

Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

0.0

0 reviews

Overall 0%

0 (0%)

Track This Plugin

Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.

Start Tracking Free

Plugin Details

Version: 1.0.8
Last Updated: Sep 09, 2026
Requires WP: 6.4+
Tested Up To: 7.1.2
PHP Version: 8.0 or higher
Author: Royal Plugins

Support & Rating

Rating: ☆ ☆ ☆ ☆ ☆ 0
Reviews: 0
Support Threads: 0
Resolved: 0%

Keywords

AI bot firewall mcp security

Upgrade to Pro

Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.

Upgrade Now

Similar Plugins

Adminify – White Label, Admin Menu Editor, Login Customizer

6K+ installs

#2,760

Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits

Akismet Anti-spam: Spam Protection

5M+ installs

Wordfence Security - Firewall, Malware Scan, and Login Security

5M+ installs

#11

Really Simple Security - Simple and Performant Security (formerly Really Simple SSL)

Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention

View all Security-and-spam-protection plugins

Frequently Asked Questions

Common questions about Royal AI Firewall

Yes, if you use Cloudflare for DDoS protection, general WAF rules, SSL/TLS, or caching. Keep Cloudflare's core protections on. This plugin handles only the AI-bot-specific layer at WordPress, so you can dial down Cloudflare's AI Audit / AI Labyrinth / custom AI-blocking WAF rules. The setup wizard's Cloudflare screen lists exactly which CF toggles to flip.

No. Googlebot, Bingbot, Applebot, and DuckDuckBot are protected from accidental blocking. The per-bot dropdown is disabled for these bots by default. To block any of them, you must explicitly enable the "Search engine override" toggle in Settings, which warns clearly that blocking Googlebot removes your site from Google Search.

Yes. Edge-firewall security plugins run their own firewalls before WordPress loads, so AI bots they block won't appear in this plugin's dashboard — but the two layers don't conflict. The plugin auto-detects popular security plugins on activation and shows compatibility notes.

Yes. The plugin hooks into the WordPress Abilities API (WP 6.9+) and logs every ability invocation regardless of which MCP server triggers it. If Royal MCP 1.4.33 or later is installed, an additional first-party bridge captures every MCP tool call with full detail.

By default, data is preserved. The plugin's tables and logs survive uninstall so a reinstall picks up where you left off. To delete everything on uninstall, check the "Delete all logs, tables, and options when the plugin is uninstalled" toggle in Settings → Data before deactivating.

Almost always a caching plugin caching the REST API response. The plugin already does four things to prevent this — a cache-buster query string on every dashboard request, nocache_headers() + DONOTCACHEPAGE constant on the handler, explicit Cache-Control: no-store response headers, and built-in compatibility filters that opt out of caching for the most common cache plugins. If you use a different cache plugin or a server-side cache (nginx fastcgi_cache, Cloudflare Page Rules, Varnish), exclude the path /wp-json/royal-ai-firewall/* from REST API caching in that plugin's settings.

A fresh bot catalog ships with every Royal AI Firewall release, so every time you update the plugin through your wp-admin → Plugins screen you get the newest catalog automatically — no outbound network call required. Plugin updates typically ship every 2–4 weeks, faster after major AI-vendor launches. If you want catalogs fresher than the per-release cadence, an optional Settings toggle ("Keep catalog updated between releases") opts in to one HTTP GET per day to fingerprints.royalplugins.com. That toggle is off by default; no outbound HTTP call is ever made until you turn it on.

No, not by default. Out of the box the plugin makes zero outbound HTTP calls. The bot catalog ships bundled with the plugin and refreshes on every plugin update. If you explicitly enable the "Keep catalog updated between releases" toggle in Settings or on the final wizard step, the plugin will then make one HTTP GET per day to fetch a fresher catalog — but only after that opt-in, and only that one call. Turning the toggle back off immediately unschedules the cron. No telemetry, license checks, or analytics calls are ever made regardless of toggle state.

No. Every feature ships in the free release on WordPress.org. No upgrade prompts, no license keys, no SaaS subscription.

The plugin's classifier and per-bot controls work at the WordPress layer regardless of which CDN sits in front. The dedicated Cloudflare detection and setup wizard step are Cloudflare-specific because Cloudflare's AI controls are the most common source of operator confusion. Other CDNs that pass AI bot traffic through to WordPress will appear normally in the dashboard.