Provides comprehensive WordPress site management with 59 tools across content creation, user management, media library, comments, taxonomies, site settings, authentication, caching, and performance monitoring. Supports multi-site configurations and multiple authentication methods including Application Passwords and JWT.
🚀 MCP WordPress Server
The Most Comprehensive WordPress MCP Server
Manage WordPress sites with natural language through AI tools like Claude Desktop
Quick Start • Why This MCP Server? Installation Options • Documentation • Examples
🎉 v2.12.0 - Modular Architecture & Fault Tolerance!
🎯 Why This MCP Server?
Transform WordPress management from complex admin panels to simple conversations:
Key Advantages:
🏆 Most Complete: 59 tools vs 20-30 in alternatives
⚡ Fastest Setup: 2-click Claude Desktop installation via DXT
🔒 Production Ready: 2200+ tests, security audited, battle-tested
🎯 TypeScript Native: 100% type safety, best-in-class developer experience
🌐 Multi-Site: Manage unlimited WordPress sites from one place
🚀 Quick Start
Get up and running in under 5 minutes:
Prerequisites
WordPress: Version 5.6+ with REST API enabled
Claude Desktop: Latest version installed
Application Password: Generated from WordPress admin panel
3-Step Setup
1️⃣ Generate WordPress Application Password
2️⃣ Install MCP Server (Choose One)
Option A: DXT Extension (Easiest)
Option B: NPM Global Install
3️⃣ Test Your Connection
📺 Watch 2-minute Setup Video | 📖 Detailed Setup Guide
⚡ Installation Options
🏆 Recommended: Claude Desktop Extension (DXT)
Easiest installation - just 2 clicks!
Download:
mcp-wordpress.dxt(3.4MB)Install: Claude Desktop → Extensions → Install → Select DXT file
Configure: Enter your WordPress site URL and credentials
✅ Zero command line required ✅ Automatic updates ✅ Built-in security
🚀 Alternative: NPX (Power Users)
🔧 Other Options
💻 NPM Setup - Local development
🐳 Docker Setup - Production deployment
🔧 Manual Build - Custom builds
📋 Configuration Examples
Single Site Setup
Environment Variables (.env)
Claude Desktop Config
Multi-Site Agency Setup
Configuration File (mcp-wordpress.config.json)
Development Environment
Local WordPress with Docker
MCP WordPress Development Config
Production Deployment
Server Environment Variables
Docker Production Setup
JWT Authentication Setup
WordPress Plugin Configuration
MCP Configuration
🌟 What Makes This Special
🏆 Feature Comparison
Feature | This Server | Competition |
Tools Available | 59 tools | 20-30 tools |
Claude Desktop DXT | ✅ 2-click install | ❌ Manual setup |
Multi-Site Support | ✅ Unlimited sites | ❌ Single site |
TypeScript | ✅ 100% coverage | ⚠️ Partial/None |
Performance Monitoring | ✅ Real-time analytics | ❌ Basic only |
Test Coverage | ✅ 2200+ tests, comprehensive coverage | ⚠️ Limited |
Production Ready | ✅ Security audited | ⚠️ Unknown |
🚀 Core Capabilities
WordPress Management
59 WordPress Tools across 10 categories
Multi-Site Support - Manage unlimited WordPress installations
Flexible Authentication - App Passwords, JWT, Basic Auth, API Key
Real-Time Sync - Instant updates across all connected tools
Performance & Reliability
⚡ Intelligent Caching - 50-70% performance improvement
📊 Real-Time Monitoring - Performance metrics and optimization insights
🔒 Production Ready - Security-reviewed, 96.17% line coverage with Vitest testing framework
🔄 Zero Downtime - Graceful error handling and automatic recovery
Developer Experience
100% TypeScript - Complete type safety and IntelliSense
🐳 Docker Support - Production-ready containerization
📚 Auto-Generated Docs - API documentation with live examples
🔧 Extensible - Custom tool development framework
🌐 Multi-Site Configuration
Perfect for agencies and developers managing multiple WordPress sites:
Use with site parameter: wp_list_posts --site="main-site"
📖 Complete Multi-Site Setup Guide
🔐 Authentication Setup
WordPress Application Passwords (Recommended)
WordPress Admin → Users → Profile
Scroll to Application Passwords
Enter name: "MCP WordPress Server"
Click Add New Application Password
Copy the generated password
Alternative Methods
JWT Authentication - With JWT plugin
Basic Authentication - Username/password (dev only)
API Key Authentication - With API Key plugin
📖 Complete Authentication Guide
📋 Available Tools (59 Tools)
Content Management
📝 Posts (6 tools) - Create, edit, delete, list posts and revisions
📄 Pages (6 tools) - Manage static pages and revisions
🖼️ Media (6 tools) - Upload, manage media library and files
User & Community
👥 Users (6 tools) - User management and profiles
💬 Comments (7 tools) - Comment moderation and management
🏷️ Taxonomies (10 tools) - Categories and tags management
Site Management (Monitoring & Admin)
⚙️ Site Settings (7 tools) - Site configuration and statistics
🔐 Authentication (6 tools) - Auth testing and management
⚡ Cache Management (4 tools) - Performance caching control
📊 Performance Monitoring (6 tools) - Real-time metrics and optimization
📖 Complete Tool Documentation | Live API Reference
🤖 Claude Desktop Integration
🎯 Real-World Use Cases
Content Creation & Management:
Site Management & Analytics:
Bulk Operations:
⚙️ Configuration Methods
Option 1: DXT Extension (Recommended)
No configuration needed - built-in secure credential management!
Option 2: NPX in Claude Desktop
📚 Examples
Basic Content Management
Create and Publish a Blog Post
Media Management
Advanced Workflows
SEO-Optimized Content Creation
Bulk Operations
Site Management
Performance Monitoring
User Management
Multi-Site Management
Working with Multiple Sites
🎨 Real-World Workflows
Content Marketing Agency Workflow
Scenario: Managing 20+ client blogs with consistent SEO optimization
E-commerce Store Management
Scenario: Managing product launches and inventory updates
News Website Operations
Scenario: Breaking news and content moderation
Educational Institution Portal
Scenario: Course management and student communications
Non-Profit Organization
Scenario: Fundraising campaigns and volunteer coordination
🚀 Advanced Automation Examples
Smart Content Workflows
Automated SEO Optimization
Content Gap Analysis
Maintenance Automation
Site Health Monitoring
User Management Automation
Performance Optimization
Intelligent Cache Management
🎯 Industry-Specific Solutions
Healthcare Practices
Legal Firms
Real Estate Agencies
Restaurants & Food Service
📖 More Examples | Use Case Library
🛠️ Troubleshooting Guide
Quick Diagnostics
Connection Issues
Authentication Problems
Performance Issues
Common Error Solutions
Error | Cause | Solution |
| Invalid credentials | Regenerate application password |
| Insufficient permissions | Check user role (Editor+ required) |
| Wrong site URL | Verify WORDPRESS_SITE_URL |
| HTTPS issues | Add SSL exception or use HTTP |
| Network/firewall | Check WordPress REST API access |
| Config file format | Validate JSON syntax |
| WordPress plugins | Disable conflicting plugins |
| Too many requests | Implement request throttling |
WordPress-Specific Issues
REST API Not Available
Application Password Issues
Multi-Site Configuration Problems
Environment-Specific Solutions
Claude Desktop Integration
Docker Deployment Issues
NPX Runtime Problems
Getting Help
Self-Diagnostics
Debug Information Collection
Community Support
🧪 Testing & Status
Current Test Status ✅
Main Test Suite: 512/512 passed (100%) with Vitest
Security Tests: 40/40 passed (100%)
Performance Tests: 8/8 passed (100%)
CI/CD Pipeline: Fully functional with Vitest integration
Test Your Installation
🔒 Security Status
Comprehensive Security Testing
Our security posture is continuously monitored through automated testing and vulnerability scanning:
Security Area | Status | Tests | Coverage |
XSS Protection | ✅ Secure | 6/6 passing | Script injection, URL validation, HTML sanitization |
SQL Injection | ✅ Secure | 3/3 passing | Query parameterization, input validation |
Path Traversal | ✅ Secure | 3/3 passing | File path validation, directory restrictions |
Input Validation | ✅ Secure | 9/9 passing | Length limits, format validation, sanitization |
Authentication | ✅ Secure | 7/7 passing | Bypass prevention, token validation |
Rate Limiting | ✅ Secure | 3/3 passing | DoS protection, request throttling |
Information Disclosure | ✅ Secure | 2/2 passing | Error sanitization, sensitive data protection |
Penetration Testing | ✅ Secure | 12/12 passing | Comprehensive attack simulation |
Security Features
🛡️ Input Sanitization: All user inputs are validated and sanitized
🔐 Authentication Security: Multi-method auth with bypass prevention
⚡ Rate Limiting: Built-in protection against abuse and DoS attacks
🔍 Vulnerability Scanning: Daily automated security scans
📊 Real-time Monitoring: Continuous security status updates
🚨 Automated Alerts: Immediate notification of security issues
Security Testing Commands
Security Compliance
OWASP Top 10: Complete protection against common vulnerabilities
CVE Monitoring: Automated scanning for known vulnerabilities
Security Headers: Proper HTTP security headers implementation
Data Protection: Sensitive credential redaction and secure storage
Access Control: Role-based permissions and authentication validation
📖 Complete Security Documentation | Security Test Results
🐛 Troubleshooting
Common Issues
"Cannot connect to WordPress"
Verify
WORDPRESS_SITE_URLTest REST API:
curl https://your-site.com/wp-json/wp/v2/
"Authentication failed"
Check username and application password
Ensure Application Passwords are enabled
Run
npm run setupto reconfigure
"Tools not appearing in Claude"
Restart Claude Desktop after configuration
Check Claude Desktop config file format
Get Help
📚 Documentation
Getting Started
Quick Start Guide - Get running in 5 minutes
Installation Guide - Detailed setup instructions
Configuration Guide - All configuration options
Authentication Setup - WordPress auth methods
User Guides
Basic Usage - Common tasks and workflows
Advanced Workflows - Complex automation
Multi-Site Management - Managing multiple sites
Troubleshooting - Common issues and solutions
Integration Guides
Claude Desktop - Complete Claude integration
VS Code - VS Code extension setup
Cline - Cline AI assistant integration
Custom Clients - Build your own MCP client
Developer Documentation
API Reference - Complete tool documentation
Architecture - System design and decisions
Contributing - Development guidelines
Plugin Development - Extend functionality
Deployment & Operations
Docker Deployment - Container deployment
Publishing Troubleshooting - Fix publishing issues
Security Best Practices - Production security
Performance Tuning - Optimization guide
Monitoring - Logging and metrics
🔧 Requirements
WordPress 5.0+ with REST API enabled
HTTPS recommended for production
User with appropriate permissions
Application Passwords enabled (WordPress 5.6+)
WordPress User Roles
Role | Access |
Administrator | Full access to all functions |
Editor | Posts, pages, comments, media |
Author | Own posts and media |
Contributor | Own posts (drafts only) |
Subscriber | Read only |
📦 Installation Options
NPM Package
Docker Images
Distribution Channels
NPM:
mcp-wordpressDocker Hub:
docdyhr/mcp-wordpressGitHub: Latest releases
🚀 Next Steps
Ready to transform your WordPress management?
🏆 - Easiest setup (2 minutes)
⚡ - Power user setup (5 minutes)
📚 - See what's possible
💬 - Get help and share ideas
🔗 Similar Projects
Looking for alternatives or complementary tools? Check out these WordPress MCP implementations:
Automattic WordPress MCP - Official WordPress MCP server by Automattic
📋 Changelog
v2.12.0 (December 2024) 🎉
🏗️ Modular Architecture - Split large files into domain-specific operation modules
🔄 Circuit Breaker Pattern - Fault tolerance for external API calls with automatic recovery
📊 2200+ Tests - Comprehensive test suite with operations and performance helper coverage
📚 Deprecation Documentation - Clear migration timeline for deprecated modules
🔒 Security Improvements - Updated dependencies and consolidated CI/CD workflows
v2.5.4+ (August 2024)
🆕 Multi-Site DXT Extension - New UI toggle for managing multiple WordPress sites in Claude Desktop
🔧 Enhanced Configuration - Auto-detection of multi-site configuration files
⚡ Performance Improvements - Optimized caching and request handling
🛡️ Security Updates - Enhanced input validation and dependency updates
🐛 Bug Fixes - Resolved hook path issues and improved error handling
📚 Documentation - Updated setup guides and troubleshooting information
v2.5.0 (July 2024)
🚀 Production Ready - Comprehensive testing suite with 96%+ coverage
🔒 Security Framework - Full security validation and penetration testing
📊 Performance Analytics - Real-time monitoring and optimization tools
🎯 Tool Enhancements - 59 WordPress management tools across 10 categories
v2.0.0 (June 2024)
🏗️ Architecture Overhaul - Migrated to modern TypeScript architecture
🌐 Multi-Site Support - Complete multi-site WordPress management
💾 Intelligent Caching - 50-70% performance improvement
🔐 Authentication Methods - Support for 4 authentication types
🙏 Acknowledgments
Special thanks to Stephan Ferraro for the upstream project that inspired this implementation.
⭐ Found this helpful?