WordPress MCP Server

Instructions

Implementation Reference

• src/index.ts:447-518 (handler)

  Handler function that constructs update data from inputs, calls makeWPRequest to POST to /wp-json/wp/v2/users/{userId}, and returns success/error message.
  async ({ siteUrl, username, password, userId, newUsername, email, newPassword, name, firstName, lastName, url, description, locale, nickname, slug, roles, }) => { try { const userData: Record<string, any> = {}; if (newUsername) userData.username = newUsername; if (email) userData.email = email; if (newPassword) userData.password = newPassword; if (name) userData.name = name; if (firstName) userData.first_name = firstName; if (lastName) userData.last_name = lastName; if (url) userData.url = url; if (description) userData.description = description; if (locale) userData.locale = locale; if (nickname) userData.nickname = nickname; if (slug) userData.slug = slug; if (roles) userData.roles = roles; if (Object.keys(userData).length === 0) { return { content: [ { type: "text", text: "No update data provided. Please specify at least one field to update.", }, ], }; } const user = await makeWPRequest<WPUser>({ siteUrl, endpoint: `users/${userId}`, method: "POST", auth: { username, password }, data: userData }); return { content: [ { type: "text", text: `Successfully updated user:\nID: ${user.id}\nUsername: ${user.name || newUsername || "Unchanged"}\nEmail: ${email || "Unchanged"}`, }, ], }; } catch (error) { return { content: [ { type: "text", text: `Error updating user: ${error instanceof Error ? error.message : String(error)}`, }, ], }; } }
• src/index.ts:429-446 (schema)

  Zod schema defining all input parameters for the update-user tool, including site credentials, user ID, and optional fields to update.
  { siteUrl: z.string().url().describe("WordPress site URL"), username: z.string().describe("WordPress username"), password: z.string().describe("WordPress application password"), userId: z.union([z.string(), z.number(), z.literal("me")]).describe("User ID or 'me' for current user"), newUsername: z.string().optional().describe("New login name for the user"), email: z.string().email().optional().describe("New email address for the user"), newPassword: z.string().optional().describe("New password for the user"), name: z.string().optional().describe("New display name for the user"), firstName: z.string().optional().describe("New first name for the user"), lastName: z.string().optional().describe("New last name for the user"), url: z.string().url().optional().describe("New URL of the user"), description: z.string().optional().describe("New description of the user"), locale: z.enum(["", "en_US"]).optional().describe("New locale for the user"), nickname: z.string().optional().describe("New nickname for the user"), slug: z.string().optional().describe("New alphanumeric identifier for the user"), roles: z.array(z.string()).optional().describe("New roles assigned to the user"), },
• src/index.ts:426-519 (registration)

  Registration of the 'update-user' tool using server.tool() with name, description, input schema, and handler function.
  server.tool( "update-user", "Update an existing WordPress user", { siteUrl: z.string().url().describe("WordPress site URL"), username: z.string().describe("WordPress username"), password: z.string().describe("WordPress application password"), userId: z.union([z.string(), z.number(), z.literal("me")]).describe("User ID or 'me' for current user"), newUsername: z.string().optional().describe("New login name for the user"), email: z.string().email().optional().describe("New email address for the user"), newPassword: z.string().optional().describe("New password for the user"), name: z.string().optional().describe("New display name for the user"), firstName: z.string().optional().describe("New first name for the user"), lastName: z.string().optional().describe("New last name for the user"), url: z.string().url().optional().describe("New URL of the user"), description: z.string().optional().describe("New description of the user"), locale: z.enum(["", "en_US"]).optional().describe("New locale for the user"), nickname: z.string().optional().describe("New nickname for the user"), slug: z.string().optional().describe("New alphanumeric identifier for the user"), roles: z.array(z.string()).optional().describe("New roles assigned to the user"), }, async ({ siteUrl, username, password, userId, newUsername, email, newPassword, name, firstName, lastName, url, description, locale, nickname, slug, roles, }) => { try { const userData: Record<string, any> = {}; if (newUsername) userData.username = newUsername; if (email) userData.email = email; if (newPassword) userData.password = newPassword; if (name) userData.name = name; if (firstName) userData.first_name = firstName; if (lastName) userData.last_name = lastName; if (url) userData.url = url; if (description) userData.description = description; if (locale) userData.locale = locale; if (nickname) userData.nickname = nickname; if (slug) userData.slug = slug; if (roles) userData.roles = roles; if (Object.keys(userData).length === 0) { return { content: [ { type: "text", text: "No update data provided. Please specify at least one field to update.", }, ], }; } const user = await makeWPRequest<WPUser>({ siteUrl, endpoint: `users/${userId}`, method: "POST", auth: { username, password }, data: userData }); return { content: [ { type: "text", text: `Successfully updated user:\nID: ${user.id}\nUsername: ${user.name || newUsername || "Unchanged"}\nEmail: ${email || "Unchanged"}`, }, ], }; } catch (error) { return { content: [ { type: "text", text: `Error updating user: ${error instanceof Error ? error.message : String(error)}`, }, ], }; } } );
• src/index.ts:158-194 (helper)

  Helper function makeWPRequest used by the handler to make authenticated HTTP requests to WordPress REST API endpoints.
  async function makeWPRequest<T>({ siteUrl, endpoint, method = 'GET', auth, data = null, params = null }: { siteUrl: string; endpoint: string; method?: 'GET' | 'POST' | 'PUT' | 'DELETE'; auth: { username: string; password: string }; data?: any; params?: any; }): Promise<T> { const authString = Buffer.from(`${auth.username}:${auth.password}`).toString('base64'); try { const response = await axios({ method, url: `${siteUrl}/wp-json/wp/v2/${endpoint}`, headers: { 'Authorization': `Basic ${authString}`, 'Content-Type': 'application/json', }, data: data, params: params }); return response.data as T; } catch (error) { if (axios.isAxiosError(error) && error.response) { throw new Error(`WordPress API error: ${error.response.data?.message || error.message}`); } throw error; } }
• src/index.ts:59-64 (schema)

  TypeScript interface WPUser used as return type for makeWPRequest in the handler.
  interface WPUser { id: number; name?: string; slug?: string; roles?: string[]; }