Provides WooCommerce management capabilities such as handling products, variations, coupons, retrieving orders and customers, creating unpaid manual orders, updating supported order fields, and analyzing sales, taxes, payments, shipping, discounts, refunds, and related financial data.
Allows AI clients to read and manage WordPress posts, pages, categories, tags, media metadata, and comments within the account's permissions, with configurable change modes requiring approval or allowing direct changes.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type @ followed by the MCP server name and your instructions, e.g., "@JalinWP Show me my latest 5 WooCommerce orders"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Made with passion from Malaysia 🇲🇾
An open-source MCP gateway for WordPress and WooCommerce. Connect an AI client to your site using OAuth, retrieve permitted information, and choose how changes are applied.
This public repository at github.com/fatomate/jalinwp contains JalinWP 0.3.3, its complete plugin source, local test harnesses, documentation, and release tooling. Version 0.3.3 is the initial public GitHub release; the published tag—not a working-tree hash—is the source identity.
Jalin is Malay for weaving or joining a connection; WP is WordPress. The name, like the Jalin Weave mark, is about interlacing AI clients with a site and store through clear, purposeful joins. It does not imply official WordPress or WooCommerce affiliation, or national endorsement. See the brand guidelines.
Area | Capabilities |
WordPress | Read and manage posts, pages, categories, tags, existing media metadata, and comments within the account's permissions. |
WooCommerce | Manage products, variations and coupons; retrieve orders and customers; create unpaid manual orders and update supported order fields. |
Sales And Finance | Analyze sales, tax rates, payment methods, customer fees, shipping, discounts and recorded refunds. Map optional gateway fees, net amounts and affiliate data. |
Page Design | Discover templates, use JalinWP Canvas without theme header/footer wrappers, and create structured Gutenberg content with supported core blocks. |
Connections | Built-in OAuth registration and WordPress consent for ChatGPT and Claude; an optional local Application Password bridge. |
Administration | Separate setup, OAuth connection history, access controls, finance setup, change review and activity screens. Revoke connections and clear inactive history. |
New setups use Read Only. Administrators can explicitly select Reviewed Changes, requiring WordPress approval before execution, or YOLO Mode, allowing supported changes without dashboard approval. Native WordPress permissions, current access controls and OAuth consent still apply in every mode.
See the plugin guide for supported operations and boundaries. This version does not collect payments, issue refunds, edit theme PHP, or provide arbitrary code/SQL execution. Structured design adapters cover a bounded set of core blocks; they are not a general visual-builder editor.
Related MCP server: WP Pinch
Use | Requirements |
WordPress Plugin | WordPress 6.6+, PHP 8.1+, HTTPS and working path-based REST routes. Activate and configure per site; network-wide activation is unsupported. |
Commerce Features | An active WooCommerce installation and an account with the relevant WooCommerce permissions. |
Package ZIPs | Python 3.9+. No PHP, Node.js or WordPress installation is needed just to package the checked-out source. |
Local Integration Tests | Node.js 22+, npm and internet access for the initial pinned dependency/fixture downloads. |
The documented local integration environment is WordPress 6.8.8, PHP 8.3 through Playground/SQLite, and WooCommerce 10.2.2 where loaded. Native MariaDB schema checks are recorded separately. That is an executed test environment, not verification of every supported version. See Validation for exact results and pending hosted-client, authenticated-browser and TLS checks.
From the repository root:
python3 scripts/package.pyThis creates:
dist/jalinwp-0.3.3.zip — installable WordPress plugin.
dist/jalinwp-0.3.3-source.zip — complete development source archive.
Upload the installable ZIP through Plugins → Add New → Upload Plugin on staging. The repository archive and GitHub's automatically generated source ZIP are development archives; use the installable ZIP for WordPress.
Activate JalinWP and open Settings → JalinWP → Connection Setup.
Click Enable For My Account. First-time setup remains Read Only; this explicit setup action (or Check Connection) prepares public OAuth metadata when the confirmed web root is writable. Opening the settings page does not write discovery files.
Copy the displayed connector URL into your AI client's custom MCP connection and choose OAuth. Use automatic client registration where supported.
Sign in to WordPress and approve the requested access. Start with a permitted read.
Use Access Controls to enable financial data access or choose another change mode when needed. Additional OAuth permissions require fresh consent.
The connection URL is /wp-json/jalin-mcp/v1/mcp. Install the ZIP as jalin-mcp-gateway/jalin-mcp-gateway.php for a fresh setup.
See Connection Setup and Connection Recovery.
Location | Purpose |
| Installable plugin source, bundled runtime assets, and templates. |
| Disposable WordPress/PHP-WASM runner, pinned npm lockfiles, and integration wrappers. |
| Current repository packaging and verification tools. |
| Plugin guides, developer/runtime instructions, and retained historical evidence. |
| Repository and release preparation notes. |
| Source map and working guidance for coding agents. |
| Local setup, focused verification and contribution workflow. |
| Vulnerability reporting and security maintenance guidance. |
| Contributor Covenant for community spaces. |
Historical reports under docs/evidence/ and docs/history/ are sanitized references, not current proofs. See repository kit validation for kit-assembly checks and current validation for executed 0.3.3 results.
Public issues and pull requests are welcome. Begin with Contributing, the Code of Conduct, and the Developer Tests Guide. No access to a live WordPress site is required for the local fixture tests.
Useful implementation references:
JalinWP is licensed under GPL-2.0-or-later. See LICENSE. Original implementation for Team Fames. WordPress, WooCommerce and other third-party product names belong to their respective owners; use of those names does not imply endorsement.
This server cannot be deployed
Zero-setup MCP gateway securely connecting AI to your tools with authentication and workflows
Secure MCP Server for WordPress connects AI assistants and agents to WordPress with secure, controlled access. It lets AI interact with WordPress through MCP while helping organizations manage access, enforce policies, protect non-human identities (NHI), and require human approval for sensitive actions. Use it to securely connect tools such as ChatGPT, Claude, and Cursor with WordPress. Marketplace Link: https://wordpress.org/plugins/miniorange-secure-mcp-server/ Official website: https://plugins.miniorange.com/mcp-server-ai-policy-enforcement-wordpress
Multi-tenant MCP gateway for AI commerce. One connection, every store.
Multi-tenant MCP gateway for AI commerce. One connection, every store.