How Grok Build handles this
Grok Build is open in your project and you have just deployed, so the live site's cache is empty. You type which site to warm. Grok Build calls list_sites to match the handle, then start_preloader on it. The plugin on that site begins crawling its sitemap in the background, a few pages at a time through WP-Cron, so the first visitors after the deploy get stored pages.
For the status, you ask and it calls get_preloader_status. That is a read: it says whether a run is active and how far through the URL list it has got. To end a crawl early, ask for stop_preloader, and the pages already warmed stay cached. If a site refuses the start, usually because its preloader module is off, Grok Build shows the error from the tool call, and you can ask it to read that site's settings.
You sign in to xSpeed Hub once in the browser and Grok Build keeps the credentials it receives on your machine. That makes the machine and the account the thing to think about: anyone who can use that Grok Build session can call a tool the connection allows. Grok Build starts in Ask mode, which prompts for anything a rule has not already allowed, so start_preloader waits for you until you say otherwise. A rule such as MCPTool(xspeedhub__get_*) allows the reads, and a deny rule holds in every mode. Always-approve and the classifier-based Auto mode remove the prompt, and the Hub has no confirmation step of its own. Since the session is in your terminal, you can scroll back later and see exactly which site each start named and what the status said at the time.
Set up Grok Build once
Already connected? Skip to the prompts. Alternatives and troubleshooting are on the Grok Build guide.
1Put your sites in xSpeed Hub
Sign in at app.xspeedcache.com with Google or email; the Hub is free and has no site cap. Then connect each WordPress site from its own dashboard: click Connect Hub in the xSpeed Cache top bar, then Connect via xSpeed Hub. Each site needs the free xSpeed Cache plugin.
2Add xSpeed Hub with grok mcp add
Run this once. Add --scope project to write the server to .grok/config.toml in the current directory instead of your user config, which is only sensible if the repo never holds a token. Grok Build handles the OAuth flow for a remote server on its own.
grok mcp add --transport http xspeedhub https://app.xspeedcache.com/xspeed/mcp
3Sign in from the TUI
Start grok and open /mcps. Select xspeedhub and press i to authenticate, or just use a Hub tool and let the browser flow start on first use. Sign in to xSpeed Hub and approve access. There is no token to paste; Grok Build stores the credentials it receives in ~/.grok/mcp_credentials.json. If the connection fails, run grok mcp doctor xspeedhub.
/mcps
Full Grok Build setup, sign-in options and FAQ
Before you send a prompt that changes something
Reads change nothing on your sites, though contact_support emails xSpeed support. Writes run once your connection allows them, so your client's approval prompt and a read-only connection (the token's Read-only everywhere switch, or a Viewer sign-in) are the gates that matter. Grok Build starts in Ask mode, which prompts for anything a rule has not already allowed, so a Hub write tool prompts until you say otherwise. You can allow the reads with a rule such as MCPTool(xspeedhub__get_*) in the permission section of your config, and leave the writes unmatched. Evaluation runs deny, then ask, then allow. Two other modes remove the prompt: Always-approve, from /always-approve, Ctrl+O or --always-approve, approves tool calls unless a deny rule or a hook stops them, and Auto lets a classifier approve tools it judges safe. If a Hub write must never run unprompted, add a deny rule. The Hub itself has no confirmation step.
What do I ask?
Three prompts written for Grok Build. More for this job are below.
Deploy is done. Use xSpeed Hub to warm the shop site and show me the preloader status.
With xSpeed Hub, check the preloader on blog. If it is running, tell me how many URLs are left.
Use xSpeed Hub to stop the preloader on docs, then check that its status says stopped.
What happens, step by step
The first visitor to an uncached page pays for building it. The preloader fixes that by visiting your pages first. Through xSpeed Hub an agent can start the crawl on one site or on every site in a workspace, watch how far it has got, and stop it. The crawl runs inside WordPress in the background; the agent only starts it, reads its progress and stops it.
01
Check the cache and the preloader
get_cache_status tells the agent whether page caching is on, because there is nothing to fill when it is off. get_preloader_status shows whether a crawl is already running, so the agent does not start a second one.
02
Make sure the preloader is switched on
The preloader module is off on a fresh install, and the site refuses start_preloader until it is on. The agent can read the module with get_settings and, if you agree, switch it on with update_settings on the preloader module. The Hub tells the agent to briefly confirm intent before an update_settings call, but that is guidance to the agent, not a lock.
03
Start the crawl
start_preloader makes the site read its sitemap, follow any nested sitemap indexes, drop URLs that your cache exclusion rules skip, and queue the rest. The call returns once the queue is built; the pages are then fetched in the background, a few per run. For every site at once the agent passes site: "all", and the Hub starts the sites one after another with a one-second pause.
04
Watch the progress
get_preloader_status reports whether a crawl is running, how many URLs it has processed out of the total, the last URL it visited and the most recent errors. It works on one site at a time, so for several sites the agent calls it once per site.
05
Read what failed
A page that answers 403 or 406 usually means a server firewall is blocking the warmer by its user-agent, not that the page is broken. The status message names the user-agent to allow. A crawl that queues no URLs is reported as an error with the reason, not as a success.
06
Stop it if the server struggles
stop_preloader ends a running crawl. It is safe mid-run: pages already warmed stay cached. The agent can stop one site or every site in the workspace.
Reference
| Start and stop | start_preloader and stop_preloader (write) |
|---|---|
| Progress | get_preloader_status (read): running or not, processed out of total, last URL, recent errors |
| What gets crawled | The sitemap (the WordPress one at /wp-sitemap.xml unless you set another), nested indexes followed, excluded URLs skipped |
| Needs | The preloader module switched on (it is off by default) and page caching on |
| Pages per run | 5 by default, 1 to 50, set in the preloader module |
| Schedule setting | manual, hourly, daily or weekly, set in the preloader module |
| Every site at once | start_preloader and stop_preloader accept site: "all"; get_preloader_status does not |
| Fan-out pacing | Sites start one after another with a 1 second pause, one result per site |
| Warmer user-agent | xSpeed-Warmer/1.0, the string a firewall rule would need to allow |
| Stopping | Safe mid-run; warmed pages stay cached |
| Read-only access | A Viewer member's sign-in, or the connection token with Read-only everywhere on: start_preloader and stop_preloader are refused; get_preloader_status works. An OAuth sign-in by anyone else gets the scopes the client asks for. |
| Confirmation | None on the Hub; your client's prompt is the gate |
Rules worth keeping
- Warm after a purge, not instead of one. The Hub tells the agent that starting the preloader after a purge saves the next visitor from paying for the rebuild.
- A crawl requests every page in the sitemap, so it adds load to the origin. Start with one site, and on a small host keep Pages per run low or stop the crawl if the site slows.
- start_preloader and stop_preloader are write tools. The Hub calls the preloader low-risk and only asks the agent to confirm when the target site is unclear or the call covers every site, so your client's approval prompt and read-only access (a Viewer sign-in, or the connection token with Read-only everywhere on) are the gates that matter.
- A fan-out only starts the crawls. Check each site with get_preloader_status afterwards, and treat some sites failing to start as a partial result, not a failure of the whole call.
Good to know with Grok Build
Always-approve skips prompts for the preloader writes too, unless a deny rule or a hook stops them, so add a deny rule for any tool that must never run unprompted. Auto lets a classifier approve what it judges safe, which is not a lock either. Because Grok Build keeps its sign-in on your machine, on a shared or borrowed machine sign in as a Viewer member or use the connection token with Read-only everywhere on, and the Hub then refuses every write tool and get_preloader_status still works.
More prompts for this job
They work in any client connected to xSpeed Hub.
Use xSpeed Hub to start the preloader on shop and tell me how many URLs it queued.
Using xSpeed Hub, how far through its crawl is blog? Show processed against total and any errors.
With xSpeed Hub, purge the cache on docs, then warm it again.
Use xSpeed Hub to start the preloader on every site in my workspace and tell me which ones refused.
Use xSpeed Hub to stop the preloader on shop. It is slowing the server down.
The preloader on shop says it is disabled. Use xSpeed Hub to turn the module on, then start the crawl.
Using xSpeed Hub, which of my sites has no running crawl and a low hit ratio?
Frequently asked questions
Keep going
Warm the cache with other agents
More with Grok Build
Documentation
- How to warm your cache ahead of visitors
- How to crawl your sitemap
- How to enable Page Cache
- Managing your fleet with xSpeed Hub
- How to write prompts for xSpeed Hub
- Grok Build + xSpeed
- Every AI agent that works with xSpeed
From the blog