List the WordPress sites this server can manage. Every other tool requires a site argument set to one of these ids.

Get WordPress site information (name, description, URL, timezone)

Get WordPress site settings (title, tagline, timezone, date format)

Update WordPress site settings

List available REST API namespaces (plugins may add custom endpoints)

List WordPress posts with optional filters

Get a single post by ID

Create a new WordPress post

Update an existing post

Delete a post (moves to trash, or permanently if force=true)

Search posts by keyword

List WordPress pages

Get a single page by ID

Create a new WordPress page

Update an existing page

Delete a page (moves to trash, or permanently if force=true)

List WordPress users

Get the currently authenticated user

Get a user by ID

Create a new WordPress user

Update an existing user

Delete a user (requires reassign parameter)

List all installed plugins

Get plugin details by slug

Activate an installed plugin (via cvrt-mcp-endpoints, avoids the often-blocked core route)

Deactivate an installed plugin (via cvrt-mcp-endpoints)

Delete an installed plugin (via cvrt-mcp-endpoints; deactivates first)

List all installed themes

Get the currently active theme

Get theme details by stylesheet name

Activate a theme (switch themes)

List media library items

Get a media item by ID

Update media item metadata (title, alt text, caption)

Delete a media item

List all categories

Create a new category

Update a category

Delete a category

List all tags

Create a new tag

Update a tag

Delete a tag

List comments

Get a comment by ID

Create a comment on a post

Update a comment (approve, edit content, etc.)

Delete a comment

Batch moderate comments by status

Search WordPress.org plugin repository

Install a plugin from WordPress.org by slug

Update a single plugin to latest version

Update all plugins with available updates

Install a plugin from a ZIP URL (GitHub releases, custom sources)

Search WordPress.org theme repository

Install a theme from WordPress.org by slug

Update a single theme to latest version

Update all themes with available updates

Delete an inactive theme

Install a theme from a ZIP URL (GitHub releases, custom sources)

Get WordPress version and update status

Get comprehensive system information

Check for WordPress core, plugin, and theme updates

Update WordPress to the latest version

Flush permalink rewrite rules

Clear all caches and transients

List all database tables with sizes

Search and replace strings in database (serialization-safe)

Optimize all database tables

Delete old post revisions

Delete spam and trashed comments

List WordPress options with optional prefix filter

Get a single option value

Create or update an option

Delete an option

Get multiple options at once

List all navigation menus

Get registered menu locations

Get a menu with all its items

Create a new navigation menu

Delete a navigation menu

Add an item to a menu

Delete a menu item

Update a navigation menu (rename)

Update a menu item (title, URL, position, parent)

Assign a menu to a theme location

List all registered sidebars

Get all widgets in a sidebar

List all available widget types

Get a widget's details

Add a widget to a sidebar

Update a widget's settings

Remove a widget from its sidebar

Reorder widgets within a sidebar

Move a widget to a different sidebar

Get site health status and score

Get detailed debug information

Get PHP configuration details

Get plugin health status and available updates

Get WordPress cron jobs status

Manually trigger a cron hook

List all public post types with their schema and counts

Get detailed schema for a post type

List posts of any custom post type

Create a post of any custom post type

Update a custom post type post

Delete a custom post type post

List all registered taxonomies

Get taxonomy details and schema

List terms for any taxonomy (categories, tags, custom taxonomies)

Create a term in any taxonomy

Update a term in any taxonomy

Delete a term from any taxonomy

Assign taxonomy terms to a post

List WordPress users with role/search filters

Get user details by ID

Create a new WordPress user

Update an existing user

Delete a user and reassign their content

List all available WordPress user roles

Change a user's role

Get all meta data for a user

Update meta data for a user

List media library items with filtering

Get detailed media item info (sizes, metadata)

Upload media to WordPress from an external URL

Update media item metadata (title, alt text, caption)

Delete a media item

Delete multiple media items at once

Regenerate image thumbnails for a media item

Get media library statistics (counts by type, total size)

Get full Elementor page build (containers, widgets, settings tree)

Get flat list of all Elementor elements on a page (easier to search/filter than tree)

Get a single Elementor element with full settings

Update settings on a single Elementor element (merge by default). With widget_type, replaces the widget in place (same id, position and parent), e.g. turn a V4 placeholder into a V3 html widget; the type must be registered with Elementor.

Get Elementor page-level settings (hide title, custom CSS, etc.)

Update Elementor page-level settings

List all Elementor library templates (headers, footers, singles, loop items, popups)

Get theme builder display conditions for an Elementor template

Get Elementor global kit settings (colors, fonts, typography, spacing, button defaults)

Update Elementor global kit settings (colors, fonts, typography)

Search all Elementor pages for specific widgets, settings, or text content

List all ACF field groups with their fields

Get ACF field group with full field configuration

Create an ACF field group with fields

Update an existing ACF field group

Delete an ACF field group

Export a field group in ACF JSON format (for import/backup)

Import ACF field groups from JSON export format

Get all ACF field values for a post

Update multiple ACF field values for a post

Get a single ACF field value for a post

Update a single ACF field value for a post

List WooCommerce products

Get WooCommerce product details

Create a WooCommerce product

Update a WooCommerce product

Delete a WooCommerce product

List variations for a variable product

Create a product variation

Update a product variation

Delete a product variation

List product attributes

List terms for an attribute

Create a product attribute

Create a term for an attribute

List product categories

Create a product category

Update a product category

Delete a product category

List product tags

List WooCommerce orders

Get WooCommerce order details

Update order status

Add a note to an order

Get order notes

List WooCommerce customers

Get customer details

Create a customer

Update a customer

Get customer's order history

List WooCommerce coupons

Get coupon details

Create a coupon

Update a coupon

Delete a coupon

Get sales report

Get top selling products

Get stock status report

Get all product meta data

Update product meta data

Bulk update product stock

Get the cvrt-order-fulfillment plugin settings. Secret values are returned as { set: boolean }, never raw.

Update cvrt-order-fulfillment settings. Only provide the keys you want to change. A blank/omitted secret keeps the stored value (never wipes it). Keys: clickup_token, clickup_list_id, clickup_assignee_id, agent_token, webhook_secret, github_updater_token, slack_webhook_url.

Pipeline health: which credentials are set, ClickUp list/assignee, when the print agent last polled, and print-queue counts.

Print-queue state: status counts (pending/printing/printed/failed) and the recent jobs with their errors.

Reset a print job to pending so the agent prints it again.

Manually (force) run fulfillment for an order: renders the packing slip, creates the ClickUp task, notifies Slack. Bypasses the idempotency guard, so it can create a duplicate ClickUp task. Audit-logged.

Force an immediate plugin-update check (bypassing PUC's throttle) and report whether a newer version is available. Throttled to about once per 30s.

Install a pending cvrt-order-fulfillment update via WordPress's own upgrader (same code path as the wp-admin one-click update). Reports { applied, from, to }. Audit-logged.

Legal document status for a site: which documents are required, filled and published, plus a single compliant flag. Impressum and Datenschutz are always required; AGB and Widerruf become required when WooCommerce is active.

List all legal document types with their required/filled state and linked page.

Get one legal document including its ordered sections.

Replace a legal document. Sections are ordered; omit slug to derive it from the heading. The plugin ships no legal prose - it stores and renders what it is given.

Render a document to normalized HTML without saving. Useful to preview the heading hierarchy and slug ids before writing.

Get which page a legal document is linked to: linked, page_id, the page's post status, and ok (linked AND published). A required document only counts as reachable, and legal_status only turns compliant, when ok is true. Requires cvrt-legal 0.4.2+.

Link a legal document to its WordPress page (post type page only; posts and products are refused). The rendered document is written into the page's post_content at once (mirrored: true, false while the document is empty) and on every later save, so a deactivated plugin still leaves the text on the page. Linking impressum/datenschutz also fills the consent banner's imprint/privacy link if that is still unset (banner_linked). page_id 0 unlinks. Requires cvrt-legal 0.4.2+.

Append a section to a legal document. Returns the resolved slug, which is what shortcodes address.

Update a section. The slug is never rewritten, so shortcodes already placed on a page keep working when a heading is renamed.

Delete a section from a legal document.

Get the cookie consent banner configuration.

Configure the consent banner and every tracking credential the site uses. Nothing is handed to the browser until the visitor accepts - this plugin owns GTM, GA4 and Ahrefs Web Analytics precisely because it owns the gate. Search-engine verification meta tags are NOT here; those belong to cvrt-seo-manager because they fire no request.

Get the banner theme: preset name, CSS custom property overrides and the rendered CSS.

Set the banner theme preset and/or individual CSS custom properties. Only --cvrt-consent-* properties are accepted.

Get cvrt-legal settings. Secret values are returned as { set: boolean }, never raw.

Get every logged consent decision for one consent_id (the banner's own record of what it asked and what the visitor chose). Requires manage_options. Logging itself stays off until legal_put_consent's log_enabled is set, which should only happen after the Datenschutz document has an 'einwilligungsnachweis' section describing it. Requires cvrt-legal 0.5.0+.

Aggregate consent decision counts by action and banner_version over a day range (both from and to are optional, default the last 30 days; the range cannot exceed 366 days). Requires manage_options. Logging itself stays off until legal_put_consent's log_enabled is set, which should only happen after the Datenschutz document has an 'einwilligungsnachweis' section describing it. Requires cvrt-legal 0.5.0+.

Export the raw consent decision log as CSV for a day range (same optional from/to rules as legal_consent_log_stats). Returns { filename, csv }; the csv is the full file text, ready to write out as-is. Requires manage_options. Logging itself stays off until legal_put_consent's log_enabled is set, which should only happen after the Datenschutz document has an 'einwilligungsnachweis' section describing it. Requires cvrt-legal 0.5.0+.

Update cvrt-legal settings. github_token (PUC auto-updates on a private repo) is write-only: a blank value keeps the stored one. required_override forces a document required or not ({agb: false}).

Get the Impressum fields (company, address, register, VAT id, ...) the generator fills into both Impressum and Datenschutz, plus which required ones are missing. Requires cvrt-legal 0.7.0+.

Set Impressum fields. Merges: only the keys given change; an empty string clears a field. Regenerates every generated document. Requires cvrt-legal 0.7.0+.

Get a generated document's state: active, library loaded, the selection (ticked modules, options, kept custom sections) and the sections it writes. Requires cvrt-legal 0.7.0+.

Tick or untick modules and options, then regenerate the document (the Datenschutz tab over the API). Merges into the stored selection; unknown module or option keys are refused. Sections tied to a switch (Einwilligungsnachweis, Barrierefreiheits-Werkzeug) follow that switch and are not ticked here. Requires cvrt-legal 0.7.0+.

Get the imported text library of a generated document (the texts come from websites/bin/legal-v4/privacy, the plugin ships none). Requires cvrt-legal 0.7.0+.

Import the text library of a generated document and regenerate it if active. Give the library inline or as library_file, a local .json path (e.g. websites/bin/legal-v4/privacy/library-datenschutz.json). A library using the 'accessibility' flag needs cvrt-legal 0.8.0+ on the site first.

Restore a generated document to how it was before the generator first wrote it, and stop generating it. Requires cvrt-legal 0.7.0+.

Get the social-media section configurator: networks on offer, which are switched on with their profile URLs, and the rendered preview. Requires cvrt-legal 0.6.0+.

Switch social networks and set their profile URLs (https only), then rewrite the Datenschutz social-media section; with nothing on, the section is removed. Requires cvrt-legal 0.6.0+.

Get the imported social-media text modules. Requires cvrt-legal 0.6.0+.

Import the social-media text modules, inline or as modules_file (websites/bin/legal-v4/social-media/library.json). Careful: importing while nothing is ticked removes an existing section; call legal_put_social with the current networks right after. Requires cvrt-legal 0.6.0+.

Get the self-hosted accessibility tool's settings (enabled, position, colour, tools, statement link) and the tools on offer. Requires cvrt-legal 0.8.0+.

Configure the self-hosted accessibility tool (replaces the Ally widget; no third-party request, needs no consent). Merges: omitted keys keep their value. Switching enabled rewrites a generated Datenschutz (section Barrierefreiheits-Werkzeug). Returns the stored settings. Requires cvrt-legal 0.8.0+.

Get the markup repair report: totals per rule (fixed / open) and per page what was repaired and what is still open, i.e. what the site's own markup must fix. Each page is recorded at most once a day, newest 100 pages. Requires cvrt-legal 0.9.0+.

Clear the markup repair report, e.g. after fixing the source, so new page views record afresh. Requires cvrt-legal 0.9.0+.

cvrt-fields status: plugin version, definition counts per kind, whether ACF / Elementor / Elementor Pro are active, JSON sync state and JSON read error.

Get cvrt-fields settings. The GitHub update token is returned as { set: boolean }, never raw; also the JSON sync path and whether it is writable.

Update cvrt-fields settings. github_token is write-only and stored encrypted; a blank or omitted token keeps the stored one. clear_github_token: true deletes it.

List the available field types (text, date_picker, image, relationship, ...) with their settings.

Values usable in field-group location rules: post types, page templates, taxonomies, options pages, user forms.

Editor form schema of one definition kind (fields and their options). Read it before fields_create_definition / fields_update_definition.

List all definitions of one kind from every source (database, JSON, PHP) with their _source.

Get one definition by kind and key.

Create a definition (field group, post type, taxonomy or options page). Fails with 409 when the key exists.

Replace a definition. 409 cvrt_fields_json_shadowed means a read-only JSON file still overrides the database copy.

Delete a database definition. Stored field values stay in post/term/user meta and options.

Copy a JSON-sourced definition into the database. Only JSON definitions can be synced.

Get cvrt-seo-manager status (version, configured, dependencies).

Get cvrt-seo-manager settings. Secret values are returned as { set: boolean }, never raw.

Update cvrt-seo-manager settings. Provide only keys to change; a blank/omitted secret preserves the stored value.

Get the SEO meta for a post.

Update the SEO meta for a post.

Delete (reset) the SEO meta for a post.

Get the SEO analysis (score, issues) for a post.

List SEO meta across posts.

Bulk update SEO meta across multiple posts.

Get the SEO meta for a taxonomy term.

Update the SEO meta for a taxonomy term.

Delete (reset) the SEO meta for a taxonomy term.

Run the keyword analysis check.

List all redirects.

Create a redirect.

Get a redirect by id.

Update a redirect by id.

Delete a redirect by id.

List the 404/redirect monitor log entries.

Clear the 404/redirect monitor log.

Create a redirect directly from a monitor log entry.

Get sitemap status.

Ping search engines with the sitemap.

Submit URLs to IndexNow.

Export cvrt-seo-manager settings.

Import cvrt-seo-manager settings.

Export post SEO meta as CSV.

Import post SEO meta from CSV.

Export redirects.

Import redirects.

Run a migration import (e.g. from RankMath GLOBAL settings) into cvrt-seo-manager.