WordPress

You are about to run WordPress through an MCP server that gives AI agents direct, secure control over posts, themes, plugins, and site configuration. This lets you manage content, perform maintenance, and automate complex WordPress tasks from natural language via MCP-compatible clients.

How to use

Connect your MCP client (such as Claude Desktop or Cline) to the WordPress MCP Server. You will trigger tasks like creating posts, updating themes, managing plugins, and running maintenance tasks through natural language commands. You can organize content, adjust site structures, and perform advanced operations with safety features like automatic backups and strict permission controls.

Typical workflows include creating blog content, reading or editing theme files, activating plugins, configuring menus and widgets, and performing security or SEO optimizations. Every operation executes within WordPress permissions, with automatic backups created before changes so you can revert if needed.

When you start a session, ensure your MCP client is configured to connect to the WordPress MCP Server using the provided HTTP or STDIO method. You can run tasks like: creating a child theme, activating a plugin, or reading a theme file, all through simple, natural language prompts.

How to install

npm i -g wpmcp@3.0.0

Next, configure your MCP client to connect to the WordPress MCP Server using the STDIO method shown below.

{
  "mcpServers": {
    "wordpress": {
      "command": "npx",
      "args": ["-y", "wpmcp@3.0.0"],
      "env": {
        "WORDPRESS_URL": "https://your-site.com",
        "WORDPRESS_USERNAME": "admin",
        "WORDPRESS_PASSWORD": "your-app-password"
      }
    }
  }
}

Additional setup and notes

Install the WordPress MCP Server Plugin inside your WordPress site. Activate it from Plugins and ensure your WordPress user has edit_themes and edit_plugins capabilities to enable full file operations, shortcode execution, cron management, and advanced features.

Security and backups are built-in: operations run only in allowed directories with safe file extensions, malware checks, PHP syntax validation, and automatic backups before applying changes.

Examples of what you can do

Create a child theme, activate plugins, read theme files, or publish content using natural language prompts.

Example prompts include: reading style.css from your theme, creating a blog post, or listing all drafts.

Project structure and development notes

The server exposes a modular set of tools categorized by WordPress areas, including posts, pages, media, themes, plugins, menus, and more. Development and testing are oriented toward reliable WordPress interactions with built-in safety nets.

Available tools

posts

Create, update, delete, search, schedule, publish, duplicate, and bulk manage blog posts.

pages

Create, update, delete, and manage page hierarchy to structure your site.

media

Upload, update, delete, and manage featured images and media files.

users

Create, update, delete users and manage roles and permissions.

categories

Create, update, delete, and organize content categories.

tags

Create and retrieve tags for content labeling.

comments

Create, update, delete, and moderate user comments.

settings

Get and update site-wide WordPress settings.

seo

Manage meta descriptions, focus keywords, and other SEO elements.

filesystem

Read, write, delete, copy, and move files within allowed directories.

theme_manager

Activate themes, create child themes, and manage theme.json and templates.

plugin_manager

Activate, deactivate, and modify plugin files.

menu_manager

Create menus, add items, and assign to locations.

custom_types

Get and manage custom post types and taxonomies.

shortcodes

List, execute, and verify shortcodes.

cron_jobs

List, schedule, unschedule, and run cron tasks.

widgets

Manage sidebars and widgets across the site.

database

Execute queries, manage options, and inspect tables.

woocommerce

Manage products, orders, customers, inventory, and reports.

gutenberg_blocks

Interact with block types, patterns, reusable blocks, and templates.

security

Monitor site health, perform updates, and inspect logs for security.

performance

Manage cache, perform optimizations, and process images.