July Product Update: Bulk Operations Everywhere, Expanded MCP Controls, and Sharper Reporting

by on July 31, 2026

Ask Your Favorite AI

Copy the link to a markdown format of this article for ChatGPT, Claude, Gemini, or your favorite AI.

July was a big month for automation. Twenty features shipped. The Bulk Operations suite now covers themes, plugins, users, cron jobs, firewall rules, caching, and authentication from a single interface. Pressable MCP added tools for managing collaborators and revoking access account-wide. Reporting picked up a PDF export, historical charts, and new API endpoints, and site security got a self-serve HSTS interface and file editing controls.

Bulk Operations: A Full Administrative Toolkit

1. Bulk Theme Installation & Deletion

Two new operations, Install Themes and Remove Themes, let you batch-deploy or purge theme files across your entire site portfolio.

  • Install Themes fetches, installs, and activates the latest version of a WordPress.org directory theme by folder slug across selected sites.
  • Remove Themes permanently deletes specified theme files across multiple sites using comma or space-delimited slugs.
  • The system automatically prevents deletion of a site’s currently active theme and bypasses inactive or offline environments.
  • Installation and removal run asynchronously, with initial job requests and skip states logged per row in the Bulk Operations history.

How to get started: Log in to MyPressable, go to Tools > Bulk Operations, select your theme utility, enter the slug or slugs, choose your target sites, and run the batch.

2. Bulk Plugin Installation, Activation & Deactivation

Three new utilities, Install Plugins, Activate Plugins, and Deactivate Plugins, bring the same batch approach to plugin management.

  • Install Plugins fetches, installs, and activates single or multiple plugins by directory slug, with duplicate checks that skip sites where the plugin is already present.
  • Activate Plugins toggles pre-existing, inactive plugins to active across targeted sites without touching site files.
  • Deactivate Plugins safely deactivates specific plugins across multiple sites at once, useful during troubleshooting or security incidents, while preserving the underlying plugin files.
  • Operations are restricted to active site environments, with individual results, skips, and errors logged per row.

How to get started: Log in to MyPressable, go to Tools > Bulk Operations, select your plugin utility, enter the target slugs, choose your sites, and run the batch.

3. Major Bulk Operations Suite Expansion

Seven new tools landed in one release: Create WordPress User, Reset WordPress User Password, Reset WordPress Owner Password, Create Cron Job, Delete Cron Job, Activate Theme, and Refresh Firewall Rules.

  • Create WordPress User provisions accounts in batch with unified username and email mapping and role selection (Administrator, Editor, Author, and so on).
  • Reset WordPress User Password rotates credentials for a specific account across target properties using User ID, email, or login name, generating secure randomized passwords.
  • Reset WordPress Owner Password targets and rotates administrative credentials for primary site owner accounts across selected properties automatically.
  • Create Cron Job schedules asynchronous platform cron tasks with interval options (hourly, daily, bi-daily, weekly) and custom WP-CLI or server commands.
  • Delete Cron Job removes matching scheduled tasks across multiple sites based on exact command-string comparison.
  • Activate Theme sequentially activates pre-installed themes across targeted properties by folder slug.
  • Refresh Firewall Rules re-syncs site security configurations against upstream provider rulesets in a single pass.
  • Inactive, offline, or non-applicable sites are bypassed automatically, and results are logged per row in the Bulk Operations history.

How to get started: Log in to MyPressable, go to Tools > Bulk Operations, select your utility, configure your parameters, and run the batch.

4. Bulk Application Performance Monitoring (APM) Toggles

A new Toggle APM option lets you start or stop diagnostic trace captures across multiple environments at once.

  • Site targeting supports individual selection, your entire active portfolio, or a CSV upload of site IDs.
  • Enabling APM starts a standardized 30-minute diagnostic trace capture per site before switching off automatically. Disabling it through the bulk menu stops the capture immediately.
  • The batch engine skips inactive sites and any properties already matching your target tracking state.
  • The selection screen automatically filters out properties where your profile lacks explicit management permissions.

How to get started: Log in to MyPressable, go to Tools > Bulk Operations, select Toggle APM, choose your target status, and pick your batch.

5. Bulk Basic Authentication Management

A new Toggle Basic Auth option enables or disables frontend password protection across multiple properties at once.

  • Options include globally enabling basic authentication to install credential gates or disabling it to remove them.
  • Properties already matching your selected target state are skipped automatically.
  • Sandbox environments and inactive sites are bypassed, with skip reasons logged in your history.

How to get started: Log in to MyPressable, go to Tools > Bulk Operations, select Toggle Basic Auth, choose your target state, and select your batch.

6. Bulk CDN Cache Purging

A new Purge CDN Cache option replaces manual, single-site edge cache flushes with one batch process.

  • Site selection supports individual checkboxes, your full portfolio, or a CSV list of site IDs.
  • Rate-limiting rules, such as a property being cleared within the last 60 seconds, are detected and surfaced with a clear inline warning instead of a generic failure message.
  • Properties where your account lacks verified administrative permissions are filtered out of the selection automatically.

How to get started: Log in to MyPressable, go to Tools > Bulk Operations, select Purge CDN Cache, choose your target sites, and run the batch.

7. Bulk Site Deletion Tool with Multi-Layer Confirmation Gates

A new Delete Site operation in the Bulk Operations menu lets authorized account holders and administrators decommission multiple site environments in a single background run, with confirmation gates built in given how permanent the action is.

  • The command purges site files, databases, and platform configurations in one batch run and automatically releases any active add-on licenses.
  • A double-blind confirmation requires typing the literal string DELETE on both the client and server side before the request goes through.
  • Site selection is scoped to properties you own or hold delete-site privileges on, and limited to sites in live, disabled, or failed-restore states.
  • Properties with active dependencies, such as a domain-level email order, or an in-progress removal are skipped and logged automatically without stopping the rest of the batch.
  • Deletions are permanent and processed independently per site. Bulk restoration is intentionally excluded to protect data integrity.

How to get started: Log in to MyPressable, go to Tools > Bulk Operations, select Delete Site, choose eligible properties, complete the typed confirmation prompt, and run the batch.

Pressable MCP: New Administrative Tools

8. AI Assistant Collaborator Management Tools

Pressable MCP gained 11 new tools for managing collaborators. Your connected AI assistant can now audit account access and update user permissions across multiple sites using simple prompts.

  • Lookup tools let you search, list, count, and summarize collaborator access across your entire account, including default team members assigned to new sites.
  • Batch update tools add, remove, or modify site collaborators across groups of users in a single request.
  • Targeted role management grants or revokes specific roles for groups of collaborators without touching their other active permissions.
  • Every update returns a detailed status report per user, so you can confirm changes or see why one was skipped.

How to get started: Connect your AI tool to MyPressable through Settings > MCP Authentication, then ask your assistant to audit or manage collaborators.

9. Site Creator Attributes for Dashboard, API, and MCP

Core site metadata now surfaces creator details across MyPressable, the REST API, and MCP. Account report exports are no longer needed to verify who provisioned a site.

  • A new Created By field appears in the Site Information block on the site Overview page, showing the user’s display name or primary email.
  • The single-site API endpoint now returns creator name and email alongside core environment data.
  • The Pressable MCP server schema exposes creator fields as well, letting connected AI assistants query and report site creation origins.
  • For sites created before September 2025, the field returns an empty value rather than defaulting to the current account owner, preserving historical accuracy.

How to get started: Log in to MyPressable, select a site, and check the Site Information card on the Overview page. For programmatic access, update your API integration or query your connected MCP assistant.

10. Global MCP Token Revocation

A new Revoke All MCP Tokens action gives you an instant, account-wide cutoff for every active MCP authentication method.

  • A single-action control lives under Settings > MCP Authentication.
  • Revocation also disconnects third-party OAuth sessions, such as Claude or ChatGPT, forcing immediate re-authentication.
  • Only MCP-layer bearer tokens and OAuth scopes are reset. Standard user sessions, API keys, and site permissions are untouched.
  • A browser-level confirmation prompt guards against accidental revocation during active AI sessions.

How to get started: Log in to MyPressable, go to Settings > MCP Authentication, and click Revoke All MCP Tokens.

Security and Site Controls

11. Dashboard Controls for File Editing and Modification Constants

Direct dashboard toggles now replace manual configuration file edits for file editing and modification restrictions.

  • A new File Editing field sits inside the WordPress Details block on the site Overview page.
  • Toggle switches disable the native admin file editor and block core, plugin, and theme installs, updates, or deletions.
  • Changes apply immediately to the live environment.
  • Every toggle interaction is logged to the site’s Activity log for a clear audit trail.
  • Any profile with verified administrative permissions on the site can access the controls.

How to get started: Log in to MyPressable, select your site, open the Overview page, and adjust the modification options in the WordPress Details area.

12. Self-Serve HSTS Domain Management UI

An integrated HSTS configuration card on the Domains page replaces the ticket-dependent workflow for HTTP Strict Transport Security.

  • The card tracks HSTS enforcement status across all active domains on the site.
  • Plain-language status labels (Off, Subdomains, Subdomains + preload, Preload only) replace technical directive arrays.
  • A Manage dropdown next to each domain lets you extend or roll back subdomain coverage and toggle preload status.
  • Confirmation prompts on subdomain expansion explain the browser-blocking risks before you commit.
  • Reference links route to official preload submission databases for off-platform registration.

How to get started: Log in to MyPressable, select your site, and go to the Domains tab.

Reporting and Performance

13. Customizable Dispatch Timing for Plugin Update Reports

The weekly plugin and theme update notification report now supports custom day and time scheduling.

  • A dedicated scheduling block sits within the site notification settings.
  • Day and time pickers (configured in UTC) let you set delivery for any day and hour.
  • Accounts that don’t change anything keep the legacy Sunday night schedule with no configuration required.

How to get started: Log in to MyPressable, go to Settings > Sites, and update the plugin and theme update report delivery preferences.

14. API Restore Progress Endpoints & v2 Multisite Support Flag

Two new read-only endpoints expose real-time backup restoration progress, alongside a new multisite identification field.

  • GET /v1/sites/<site_id>/restores returns a paginated, chronological list of every restore run on a site, newest first.
  • GET /v1/sites/<site_id>/restores/<restore_id> returns status and logs for a single restore event.
  • Restore queries return a status string (in_progress, completed, or failed) with a logMessages array of sequential runtime lines.
  • Status tracking relies on polling the newest entry in the list endpoint rather than webhooks.
  • The v2 site details payload now includes a multisiteSupport boolean flag for consistent network-type verification across API versions.
  • The new endpoints require active sites_read or sites_edit scopes on your existing API token.

How to get started: Review the response formats and status values in the API documentation, and update your scripts to use the new v1 endpoints and v2 fields.

15. Unified PDF Export for Account-Wide Performance Reports

A native PDF export lets you compile mobile and desktop speed diagnostics for your entire portfolio into one document.

  • A Download PDF button lives inside the existing Site Performance Report card.
  • Clicking it triggers a background compilation that bundles all active sites and delivers the final PDF by email.
  • Each site’s breakdown includes side-by-side desktop and mobile metrics across four performance areas, all six Core Web Vitals, and active theme and plugin manifests.
  • Sites missing speed report history are grouped into a dedicated appendix section rather than excluded from the document.

How to get started: Log in to MyPressable, open the Reports dashboard, and click Download PDF on the Site Performance Report card.

16. Historical Performance Charts

A new performance trend graph tracks desktop and mobile optimization scores over time.

  • A dedicated history card on the speed diagnostics dashboard plots separate desktop and mobile trends.
  • A dropdown in the card header switches between 6-month and 12-month views.
  • Newly created sites show an empty-state message explaining that history populates as automated speed reports run over time.
  • The card was added to the page’s navigation shortcut menu.

How to get started: Log in to MyPressable, select your site, and open the Performance tab.

17. PHP Worker Plan Limits in Usage Charts

The PHP Workers Usage chart now plots your site’s metrics directly against your plan’s physical limits.

  • A static threshold line represents your plan’s total PHP worker allowance, including any active add-ons.
  • Average, minimum, and maximum worker usage are plotted directly against that limit line.
  • You can see exactly when a site needs additional PHP workers or a plan upgrade.

How to get started: Log in to MyPressable, open your site’s dashboard, and select the CPU metrics tab.

Developer Tools and Site Management

18. WordPress Beta Version Selection

A new Beta Version release channel gives you self-serve access to pre-release WordPress core testing.

  • Beta Version now appears alongside Current Stable Version in the WordPress Version dropdown on the site Overview page.
  • Selecting it subscribes the environment to the rolling WordPress beta pipeline, automatically applying new beta builds as they’re published upstream.
  • Supported across Production, Staging, and Sandbox environments for risk-free regression testing.

How to get started: Log in to MyPressable, go to your site’s Overview page, and update the WordPress Version selector to Beta Version.

19. Direct CSV Attachments for Site Log Exports

PHP, webserver, and activity log exports now arrive as direct CSV email attachments instead of browser-redirect links.

  • Clicking Send Logs on any log screen attaches a pre-formatted CSV directly to the system email.
  • Log files that exceed standard email attachment limits fall back to secure download links automatically.
  • You can open, save, or drag log data straight into a spreadsheet or diagnostic tool without a manual “Save As” step.

How to get started: Go to your site’s dashboard in MyPressable, navigate to a log tab, and click Send Logs.

20. Official Open-Source DDEV Add-on

A stable 1.0 release of our open-source DDEV integration automates data and media sync between local environments and your sites.

  • ddev pull pressable downloads database instances and media attachments and runs local web address find-and-replace automatically.
  • ddev push pressable deploys local databases and media assets to staging, restoring staging URLs and flushing cache on completion.
  • --skip-files and --skip-db flags let you sync only the data layer or only file uploads.
  • The add-on uses each site’s built-in SSH infrastructure, removing the need for control panel API tokens or configuration changes.
  • Push is restricted to non-production staging properties, with a required command-line confirmation to prevent accidental live data overwrites.

How to get started: In your local terminal, initialize your project as a WordPress project type and run ddev add-on get pressable/ddev-pressable. Add your site’s SSH username to your local environment variables to start syncing.

The full release history is always available in the Pressable Changelog.

Read More Articles in Hosting Essentials

Hosting Essentials

Is WordPress Easy to Learn?

Is WordPress Easy to Learn? A Beginner’s Guide Powering more than 43% of the Internet, WordPress is a popular choice when it comes to building websites. Website owners are drawn to this platform for many […]

Man sitting on couch using laptop on his laptop
Hosting Essentials

A Quick Guide to WordPress Multisite Hosting

If you are responsible for updating multiple websites, the last thing you want to do is hop from one WordPress account to another — logging on and off repeatedly. You want to be able to run […]