WordPress MCP Server
Enables interaction with WordPress sites through the WordPress REST API, providing tools for creating, retrieving, and updating posts with support for different publication statuses.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@WordPress MCP Servercreate a new post titled 'Weekly Update' with status draft"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
WordPress MCP Server
A Model Context Protocol (MCP) server for WordPress integration, compatible with Windows, macOS, and Linux.
Overview
This MCP server enables interaction with WordPress sites through the WordPress REST API. It provides tools for creating, retrieving, and updating posts using JSON-RPC 2.0 protocol.
Related MCP server: WordPress MCP Server
Installation
Clone the repository
Install dependencies:
npm installBuild the project:
npm run buildConfiguration
Add the server to your MCP settings file with environment variables for WordPress credentials:
{
"mcpServers": {
"wordpress": {
"command": "node",
"args": ["path/to/build/index.js"],
"env": {
"WORDPRESS_SITE_URL": "https://your-wordpress-site.com",
"WORDPRESS_USERNAME": "your-username",
"WORDPRESS_PASSWORD": "your-app-password"
}
}
}
}The environment variables are:
WORDPRESS_SITE_URL: Your WordPress site URL
WORDPRESS_USERNAME: WordPress username
WORDPRESS_PASSWORD: WordPress application password
You can also provide these credentials in the request parameters if you prefer not to use environment variables.
Available Methods
create_post
Creates a new WordPress post.
Parameters:
siteUrl: (optional if set in env) WordPress site URL
username: (optional if set in env) WordPress username
password: (optional if set in env) WordPress application password
title: Post title
content: Post content
status: (optional) 'draft' | 'publish' | 'private' (default: 'draft')
get_posts
Retrieves WordPress posts.
Parameters:
siteUrl: (optional if set in env) WordPress site URL
username: (optional if set in env) WordPress username
password: (optional if set in env) WordPress application password
perPage: (optional) Number of posts per page (default: 10)
page: (optional) Page number (default: 1)
update_post
Updates an existing WordPress post.
Parameters:
siteUrl: (optional if set in env) WordPress site URL
username: (optional if set in env) WordPress username
password: (optional if set in env) WordPress application password
postId: ID of the post to update
title: (optional) New post title
content: (optional) New post content
status: (optional) 'draft' | 'publish' | 'private'
Security Note
For security, it's recommended to use WordPress application passwords instead of your main account password. You can generate an application password in your WordPress dashboard under Users → Security → Application Passwords.
Example Usage
Using environment variables:
{
"jsonrpc": "2.0",
"id": 1,
"method": "create_post",
"params": {
"title": "My New Post",
"content": "Hello World!",
"status": "draft"
}
}Without environment variables:
{
"jsonrpc": "2.0",
"id": 1,
"method": "create_post",
"params": {
"siteUrl": "https://your-wordpress-site.com",
"username": "your-username",
"password": "your-app-password",
"title": "My New Post",
"content": "Hello World!",
"status": "draft"
}
}Requirements
Node.js 20.0.0 or higher
WordPress site with REST API enabled
WordPress application password for authentication
License
MIT License - See LICENSE file for details
Available Tools
3 toolscreate_postC
Create a new WordPress post
| Name | Required | Description | Default |
|---|---|---|---|
| content | Yes | Post content | |
| password | No | WordPress password (overrides WORDPRESS_PASSWORD env var) | |
| siteUrl | No | WordPress site URL (overrides WORDPRESS_SITE_URL env var) | |
| status | No | Post status (draft, publish, etc.) | draft |
| title | Yes | Post title | |
| username | No | WordPress username (overrides WORDPRESS_USERNAME env var) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It states 'Create' implies a write operation but fails to mention authentication requirements, potential side effects (e.g., publishing status), or error handling. This leaves significant gaps for a mutation tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence with zero wasted words. It's front-loaded with the core action, making it easy to scan and understand quickly without unnecessary elaboration.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a mutation tool with 6 parameters, no annotations, and no output schema, the description is incomplete. It lacks details on authentication, post-creation behavior (e.g., default status), error cases, or how it differs from sibling tools, leaving critical context gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema fully documents all 6 parameters. The description adds no additional parameter semantics beyond what's in the schema, such as explaining relationships between parameters or usage nuances, meeting the baseline for high schema coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb ('Create') and resource ('new WordPress post'), making the purpose immediately understandable. However, it doesn't differentiate from sibling tools like 'update_post' beyond the basic action, missing explicit distinction about when to create versus update.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus alternatives like 'update_post' or 'get_posts'. The description lacks context about prerequisites, such as authentication or site setup, leaving usage unclear beyond the basic action.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_postsC
Get WordPress posts
| Name | Required | Description | Default |
|---|---|---|---|
| page | No | Page number | |
| password | No | WordPress password (overrides WORDPRESS_PASSWORD env var) | |
| perPage | No | Number of posts per page | |
| siteUrl | No | WordPress site URL (overrides WORDPRESS_SITE_URL env var) | |
| username | No | WordPress username (overrides WORDPRESS_USERNAME env var) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden of behavioral disclosure. 'Get WordPress posts' implies a read operation, but it doesn't specify whether this requires authentication, how it handles pagination, what the return format is, or any rate limits. The description is too minimal to provide meaningful behavioral context beyond the basic action.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description 'Get WordPress posts' is extremely concise—just three words—and front-loaded with the core action. There is no wasted language or unnecessary elaboration, making it efficient for quick understanding. It earns a high score for brevity and directness.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (5 parameters, no annotations, no output schema), the description is incomplete. It doesn't explain what the tool returns, how authentication works (implied by parameters but not stated), or any behavioral traits. With no output schema and minimal description, it fails to provide enough context for effective use by an AI agent.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has 100% description coverage, with clear documentation for all 5 parameters (e.g., 'page', 'perPage', 'siteUrl'). The description adds no additional meaning beyond what the schema provides, such as explaining parameter interactions or usage examples. According to the rules, with high schema coverage (>80%), the baseline score is 3, as the schema does the heavy lifting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description 'Get WordPress posts' clearly states the verb ('Get') and resource ('WordPress posts'), making the basic purpose understandable. However, it lacks specificity about what 'Get' entails (e.g., listing, retrieving, filtering) and doesn't distinguish it from sibling tools like 'create_post' or 'update_post', which are clearly different operations. This makes it vague but not tautological.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives. It doesn't mention any context, prerequisites, or exclusions, such as when to use it over other post-related tools or under what conditions it's appropriate. This leaves the agent without usage direction beyond the basic purpose.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
update_postC
Update an existing WordPress post
| Name | Required | Description | Default |
|---|---|---|---|
| content | No | New post content | |
| password | No | WordPress password (overrides WORDPRESS_PASSWORD env var) | |
| postId | Yes | Post ID to update | |
| siteUrl | No | WordPress site URL (overrides WORDPRESS_SITE_URL env var) | |
| status | No | New post status (draft, publish, etc.) | |
| title | No | New post title | |
| username | No | WordPress username (overrides WORDPRESS_USERNAME env var) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. While 'Update' implies a mutation operation, the description doesn't mention authentication requirements (though parameters suggest them), permission levels, whether changes are reversible, or what happens to unspecified fields. This is inadequate for a mutation tool with zero annotation coverage.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence that states the core purpose without any wasted words. It's appropriately sized and front-loaded, making it easy for an agent to quickly understand what the tool does.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a mutation tool with 7 parameters, no annotations, and no output schema, the description is insufficient. It doesn't explain authentication requirements (implied by parameters but not stated), error conditions, return values, or behavioral nuances. The agent would need to rely heavily on the schema and trial-and-error.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema has 100% description coverage, so all parameters are documented in the schema itself. The description adds no additional parameter information beyond what's already in the schema, which is acceptable given the high schema coverage. The baseline of 3 reflects that the schema does the heavy lifting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('Update') and resource ('an existing WordPress post'), making the purpose immediately understandable. However, it doesn't differentiate from the sibling 'create_post' tool beyond the obvious 'existing' vs 'new' distinction, which is why it doesn't reach a perfect score.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives like 'create_post' or 'get_posts'. There's no mention of prerequisites, constraints, or typical use cases, leaving the agent to infer usage from the tool name alone.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
3 tool updates
v1.0.0- First observed
create_post - First observed
get_posts - First observed
update_post
TDQS
Each tool has a clearly distinct purpose targeting different CRUD operations: create_post for creation, get_posts for retrieval, and update_post for modification. There is no overlap or ambiguity between these functions, making it easy for an agent to select the correct tool.
All tool names follow a consistent verb_noun pattern (create_post, get_posts, update_post) with no deviations in style or convention. This predictability enhances readability and usability for agents.
With only 3 tools, the set feels thin for a WordPress server, as it lacks delete_post and other common operations like managing pages or media. While the tools cover basic post CRUD, the scope is limited and may not support full agent workflows.
The tool surface is significantly incomplete for WordPress management. It includes create, get, and update for posts but omits delete_post, as well as tools for pages, media, users, or settings, leaving notable gaps that could cause agent failures in broader tasks.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
WordPress MCP server: publish posts, AI images, SEO and full site management, self-hosted
WordPress MCP server: generate SEO posts, AI images, autoblog & WooCommerce on your self-hosted site
Security-first WordPress MCP server. 129 tools for Claude, ChatGPT, Gemini. Free on wp.org.
A basic MCP server to operate on the Postman API.
Related MCP Servers
- AlicenseNot gradedqualityDmaintenanceA server enabling seamless interaction between AI models and WordPress sites with secure, standardized communication using the WordPress REST API for comprehensive site management.436161MIT
- AlicenseNot gradedqualityNot gradedmaintenanceA server that enables integration between Claude Desktop and WordPress, allowing for AI-assisted blogging through a Message Control Protocol implementation.-
- AlicenseNot gradedqualityBmaintenanceA local server that enables Claude or other MCP tools to manage WordPress posts and media via REST API.32MIT
- AlicenseAqualityBmaintenanceMCP server for WordPress REST API that enables managing posts, pages, media, comments, categories, tags, and users through 20 tools.20MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/Leonelberio/the-wordpress-mcp-server'
If you have feedback or need assistance with the MCP directory API, please join our Discord server