--- title: "July Product Update: Bulk Operations Everywhere, Expanded MCP Controls, and Sharper Reporting" url: "https://pressable.com/blog/july-product-update-bulk-operations-everywhere-expanded-mcp-controls-and-sharper-reporting/" published: 2026-07-31 modified: 2026-07-30 author: Suzanne Kolpakov featured_image: "https://i0.wp.com/pressable.com/wp-content/uploads/2026/07/july-product-update-blog-image-scaled.png?fit=2048%2C1152&ssl=1" categories: - name: Hosting Essentials url: "https://pressable.com/blog/category/hosting-essentials/?format=md" --- July was a big month for automation. Twenty features shipped. The Bulk Operations suite now covers themes, plugins, users, cron jobs, firewall rules, caching, and authentication from a single interface. Pressable MCP added tools for managing collaborators and revoking access account-wide. Reporting picked up a PDF export, historical charts, and new API endpoints, and site security got a self-serve HSTS interface and file editing controls. ## Bulk Operations: A Full Administrative Toolkit ### [1. Bulk Theme Installation & Deletion](https://pressable.com/changelog/feature-release-bulk-theme-installation-deletion-operations/) Two new operations, Install Themes and Remove Themes, let you batch-deploy or purge theme files across your entire site portfolio. - Install Themes fetches, installs, and activates the latest version of a WordPress.org directory theme by folder slug across selected sites. - Remove Themes permanently deletes specified theme files across multiple sites using comma or space-delimited slugs. - The system automatically prevents deletion of a site’s currently active theme and bypasses inactive or offline environments. - Installation and removal run asynchronously, with initial job requests and skip states logged per row in the Bulk Operations history. **How to get started:** Log in to MyPressable, go to Tools > Bulk Operations, select your theme utility, enter the slug or slugs, choose your target sites, and run the batch. ### [2. Bulk Plugin Installation, Activation & Deactivation](https://pressable.com/changelog/feature-release-bulk-plugin-installation-activation-operations/) Three new utilities, Install Plugins, Activate Plugins, and Deactivate Plugins, bring the same batch approach to plugin management. - Install Plugins fetches, installs, and activates single or multiple plugins by directory slug, with duplicate checks that skip sites where the plugin is already present. - Activate Plugins toggles pre-existing, inactive plugins to active across targeted sites without touching site files. - Deactivate Plugins safely deactivates specific plugins across multiple sites at once, useful during troubleshooting or security incidents, while preserving the underlying plugin files. - Operations are restricted to active site environments, with individual results, skips, and errors logged per row. **How to get started:** Log in to MyPressable, go to Tools > Bulk Operations, select your plugin utility, enter the target slugs, choose your sites, and run the batch. ### [3. Major Bulk Operations Suite Expansion](https://pressable.com/changelog/feature-release-major-bulk-operations-suite-expansion/) Seven new tools landed in one release: Create WordPress User, Reset WordPress User Password, Reset WordPress Owner Password, Create Cron Job, Delete Cron Job, Activate Theme, and Refresh Firewall Rules. - Create WordPress User provisions accounts in batch with unified username and email mapping and role selection (Administrator, Editor, Author, and so on). - Reset WordPress User Password rotates credentials for a specific account across target properties using User ID, email, or login name, generating secure randomized passwords. - Reset WordPress Owner Password targets and rotates administrative credentials for primary site owner accounts across selected properties automatically. - Create Cron Job schedules asynchronous platform cron tasks with interval options (hourly, daily, bi-daily, weekly) and custom WP-CLI or server commands. - Delete Cron Job removes matching scheduled tasks across multiple sites based on exact command-string comparison. - Activate Theme sequentially activates pre-installed themes across targeted properties by folder slug. - Refresh Firewall Rules re-syncs site security configurations against upstream provider rulesets in a single pass. - Inactive, offline, or non-applicable sites are bypassed automatically, and results are logged per row in the Bulk Operations history. **How to get started:** Log in to MyPressable, go to Tools > Bulk Operations, select your utility, configure your parameters, and run the batch. ### [4. Bulk Application Performance Monitoring (APM) Toggles](https://pressable.com/changelog/feature-release-bulk-application-performance-monitoring-apm-toggles/) A new Toggle APM option lets you start or stop diagnostic trace captures across multiple environments at once. - Site targeting supports individual selection, your entire active portfolio, or a CSV upload of site IDs. - Enabling APM starts a standardized 30-minute diagnostic trace capture per site before switching off automatically. Disabling it through the bulk menu stops the capture immediately. - The batch engine skips inactive sites and any properties already matching your target tracking state. - The selection screen automatically filters out properties where your profile lacks explicit management permissions. **How to get started:** Log in to MyPressable, go to Tools > Bulk Operations, select Toggle APM, choose your target status, and pick your batch. ### [5. Bulk Basic Authentication Management](https://pressable.com/changelog/feature-release-bulk-basic-authentication-management/) A new Toggle Basic Auth option enables or disables frontend password protection across multiple properties at once. - Options include globally enabling basic authentication to install credential gates or disabling it to remove them. - Properties already matching your selected target state are skipped automatically. - Sandbox environments and inactive sites are bypassed, with skip reasons logged in your history. **How to get started:** Log in to MyPressable, go to Tools > Bulk Operations, select Toggle Basic Auth, choose your target state, and select your batch. ### [6. Bulk CDN Cache Purging](https://pressable.com/changelog/feature-release-bulk-cdn-cache-purging/) A new Purge CDN Cache option replaces manual, single-site edge cache flushes with one batch process. - Site selection supports individual checkboxes, your full portfolio, or a CSV list of site IDs. - Rate-limiting rules, such as a property being cleared within the last 60 seconds, are detected and surfaced with a clear inline warning instead of a generic failure message. - Properties where your account lacks verified administrative permissions are filtered out of the selection automatically. **How to get started:** Log in to MyPressable, go to Tools > Bulk Operations, select Purge CDN Cache, choose your target sites, and run the batch. ### [7. Bulk Site Deletion Tool with Multi-Layer Confirmation Gates](https://pressable.com/changelog/feature-release-bulk-site-deletion-tool-with-multi-layer-confirmation-gates/%E2%86%97) A new Delete Site operation in the Bulk Operations menu lets authorized account holders and administrators decommission multiple site environments in a single background run, with confirmation gates built in given how permanent the action is. - The command purges site files, databases, and platform configurations in one batch run and automatically releases any active add-on licenses. - A double-blind confirmation requires typing the literal string DELETE on both the client and server side before the request goes through. - Site selection is scoped to properties you own or hold delete-site privileges on, and limited to sites in live, disabled, or failed-restore states. - Properties with active dependencies, such as a domain-level email order, or an in-progress removal are skipped and logged automatically without stopping the rest of the batch. - Deletions are permanent and processed independently per site. Bulk restoration is intentionally excluded to protect data integrity. How to get started: Log in to MyPressable, go to Tools > Bulk Operations, select Delete Site, choose eligible properties, complete the typed confirmation prompt, and run the batch. ## Pressable MCP: New Administrative Tools ### [8. AI Assistant Collaborator Management Tools](https://pressable.com/changelog/feature-release-ai-assistant-collaborator-management-tools/) Pressable MCP gained 11 new tools for managing collaborators. Your connected AI assistant can now audit account access and update user permissions across multiple sites using simple prompts. - Lookup tools let you search, list, count, and summarize collaborator access across your entire account, including default team members assigned to new sites. - Batch update tools add, remove, or modify site collaborators across groups of users in a single request. - Targeted role management grants or revokes specific roles for groups of collaborators without touching their other active permissions. - Every update returns a detailed status report per user, so you can confirm changes or see why one was skipped. **How to get started:** Connect your AI tool to MyPressable through Settings > MCP Authentication, then ask your assistant to audit or manage collaborators. ### [9. Site Creator Attributes for Dashboard, API, and MCP](https://pressable.com/changelog/feature-release-site-creator-attributes-for-dashboard-api-and-mcp/) Core site metadata now surfaces creator details across MyPressable, the REST API, and MCP. Account report exports are no longer needed to verify who provisioned a site. - A new Created By field appears in the Site Information block on the site Overview page, showing the user’s display name or primary email. - The single-site API endpoint now returns creator name and email alongside core environment data. - The Pressable MCP server schema exposes creator fields as well, letting connected AI assistants query and report site creation origins. - For sites created before September 2025, the field returns an empty value rather than defaulting to the current account owner, preserving historical accuracy. **How to get started:** Log in to MyPressable, select a site, and check the Site Information card on the Overview page. For programmatic access, update your API integration or query your connected MCP assistant. ### [10. Global MCP Token Revocation](https://pressable.com/changelog/feature-release-global-mcp-token-revocation/) A new Revoke All MCP Tokens action gives you an instant, account-wide cutoff for every active MCP authentication method. - A single-action control lives under Settings > MCP Authentication. - Revocation also disconnects third-party OAuth sessions, such as Claude or ChatGPT, forcing immediate re-authentication. - Only MCP-layer bearer tokens and OAuth scopes are reset. Standard user sessions, API keys, and site permissions are untouched. - A browser-level confirmation prompt guards against accidental revocation during active AI sessions. **How to get started:** Log in to MyPressable, go to Settings > MCP Authentication, and click Revoke All MCP Tokens. ## Security and Site Controls ### [11. Dashboard Controls for File Editing and Modification Constants](https://pressable.com/changelog/feature-release-dashboard-controls-for-file-editing-and-modification-constants/) Direct dashboard toggles now replace manual configuration file edits for file editing and modification restrictions. - A new File Editing field sits inside the WordPress Details block on the site Overview page. - Toggle switches disable the native admin file editor and block core, plugin, and theme installs, updates, or deletions. - Changes apply immediately to the live environment. - Every toggle interaction is logged to the site’s Activity log for a clear audit trail. - Any profile with verified administrative permissions on the site can access the controls. **How to get started:** Log in to MyPressable, select your site, open the Overview page, and adjust the modification options in the WordPress Details area. ### [12. Self-Serve HSTS Domain Management UI](https://pressable.com/changelog/feature-release-self-serve-hsts-domain-management-ui/) An integrated HSTS configuration card on the Domains page replaces the ticket-dependent workflow for HTTP Strict Transport Security. - The card tracks HSTS enforcement status across all active domains on the site. - Plain-language status labels (Off, Subdomains, Subdomains + preload, Preload only) replace technical directive arrays. - A Manage dropdown next to each domain lets you extend or roll back subdomain coverage and toggle preload status. - Confirmation prompts on subdomain expansion explain the browser-blocking risks before you commit. - Reference links route to official preload submission databases for off-platform registration. **How to get started:** Log in to MyPressable, select your site, and go to the Domains tab. ## Reporting and Performance ### [13. Customizable Dispatch Timing for Plugin Update Reports](https://pressable.com/changelog/feature-release-customizable-dispatch-timing-for-plugin-update-reports/) The weekly plugin and theme update notification report now supports custom day and time scheduling. - A dedicated scheduling block sits within the site notification settings. - Day and time pickers (configured in UTC) let you set delivery for any day and hour. - Accounts that don’t change anything keep the legacy Sunday night schedule with no configuration required. **How to get started:** Log in to MyPressable, go to Settings > Sites, and update the plugin and theme update report delivery preferences. ### [14. API Restore Progress Endpoints & v2 Multisite Support Flag](https://pressable.com/changelog/feature-release-api-restore-progress-endpoints-v2-multisite-support-flag/) Two new read-only endpoints expose real-time backup restoration progress, alongside a new multisite identification field. - `GET /v1/sites//restores` returns a paginated, chronological list of every restore run on a site, newest first. - `GET /v1/sites//restores/` returns status and logs for a single restore event. - Restore queries return a status string (in\_progress, completed, or failed) with a logMessages array of sequential runtime lines. - Status tracking relies on polling the newest entry in the list endpoint rather than webhooks. - The v2 site details payload now includes a multisiteSupport boolean flag for consistent network-type verification across API versions. - The new endpoints require active sites\_read or sites\_edit scopes on your existing API token. **How to get started:** Review the response formats and status values in the API documentation, and update your scripts to use the new v1 endpoints and v2 fields. ### [15. Unified PDF Export for Account-Wide Performance Reports](https://pressable.com/changelog/feature-release-unified-pdf-export-for-account-wide-performance-reports/) A native PDF export lets you compile mobile and desktop speed diagnostics for your entire portfolio into one document. - A Download PDF button lives inside the existing Site Performance Report card. - Clicking it triggers a background compilation that bundles all active sites and delivers the final PDF by email. - Each site’s breakdown includes side-by-side desktop and mobile metrics across four performance areas, all six Core Web Vitals, and active theme and plugin manifests. - Sites missing speed report history are grouped into a dedicated appendix section rather than excluded from the document. **How to get started:** Log in to MyPressable, open the Reports dashboard, and click Download PDF on the Site Performance Report card. ### [16. Historical Performance Charts](https://pressable.com/changelog/feature-release-historical-performance-charts/) A new performance trend graph tracks desktop and mobile optimization scores over time. - A dedicated history card on the speed diagnostics dashboard plots separate desktop and mobile trends. - A dropdown in the card header switches between 6-month and 12-month views. - Newly created sites show an empty-state message explaining that history populates as automated speed reports run over time. - The card was added to the page’s navigation shortcut menu. **How to get started:** Log in to MyPressable, select your site, and open the Performance tab. ### [17. PHP Worker Plan Limits in Usage Charts](https://pressable.com/changelog/feature-release-php-worker-plan-limits-in-usage-charts/) The PHP Workers Usage chart now plots your site’s metrics directly against your plan’s physical limits. - A static threshold line represents your plan’s total PHP worker allowance, including any active add-ons. - Average, minimum, and maximum worker usage are plotted directly against that limit line. - You can see exactly when a site needs additional PHP workers or a plan upgrade. **How to get started:** Log in to MyPressable, open your site’s dashboard, and select the CPU metrics tab. ## Developer Tools and Site Management ### [18. WordPress Beta Version Selection](https://pressable.com/changelog/feature-release-wordpress-beta-version-selection/) A new Beta Version release channel gives you self-serve access to pre-release WordPress core testing. - Beta Version now appears alongside Current Stable Version in the WordPress Version dropdown on the site Overview page. - Selecting it subscribes the environment to the rolling WordPress beta pipeline, automatically applying new beta builds as they’re published upstream. - Supported across Production, Staging, and Sandbox environments for risk-free regression testing. **How to get started:** Log in to MyPressable, go to your site’s Overview page, and update the WordPress Version selector to Beta Version. ### [19. Direct CSV Attachments for Site Log Exports](https://pressable.com/changelog/feature-release-direct-csv-attachments-for-site-log-exports/) PHP, webserver, and activity log exports now arrive as direct CSV email attachments instead of browser-redirect links. - Clicking Send Logs on any log screen attaches a pre-formatted CSV directly to the system email. - Log files that exceed standard email attachment limits fall back to secure download links automatically. - You can open, save, or drag log data straight into a spreadsheet or diagnostic tool without a manual “Save As” step. **How to get started:** Go to your site’s dashboard in MyPressable, navigate to a log tab, and click Send Logs. ### [20. Official Open-Source DDEV Add-on](https://pressable.com/changelog/feature-release-official-open-source-ddev-add-on/) A stable 1.0 release of our open-source DDEV integration automates data and media sync between local environments and your sites. - `ddev pull pressable` downloads database instances and media attachments and runs local web address find-and-replace automatically. - `ddev push pressable` deploys local databases and media assets to staging, restoring staging URLs and flushing cache on completion. - `--skip-files` and `--skip-db` flags let you sync only the data layer or only file uploads. - The add-on uses each site’s built-in SSH infrastructure, removing the need for control panel API tokens or configuration changes. - Push is restricted to non-production staging properties, with a required command-line confirmation to prevent accidental live data overwrites. **How to get started:** In your local terminal, initialize your project as a WordPress project type and run `ddev add-on get pressable/ddev-pressable`. Add your site’s SSH username to your local environment variables to start syncing. The full release history is always available in the[ Pressable Changelog](https://pressable.com/changelog/).