claude-wp-mcp

MCP server for WordPress — lets Claude (or any Model Context Protocol client) read and manage a WordPress site over the built-in WP REST API. No plugin required on the WordPress side.

Works with Claude Code, Claude Desktop, and any other MCP-compatible client (Cursor, Cline, Windsurf, etc.).

Features

• Posts — list, get, create, update, delete

• Pages — list, get, create, update, delete

• Taxonomies — list categories, list tags

• Media — list media library items, upload images/files (from a URL or a local path, one or many in a batch)

• Users — list users

• wp_request escape hatch — call any other /wp-json/... route (any REST namespace, any method) for things not covered by a dedicated tool

• fetch_url — fetch any web page (not limited to the configured WordPress site), get back Markdown plus title/description, e.g. to turn another page's content into a WordPress post/page. Respects robots.txt and paginates long pages. Sites behind a Cloudflare bot challenge can't be solved by a plain HTTP fetch — fetch_url detects that case and errors with guidance to fetch the page via a real browser (e.g. Claude in Chrome) instead

• Works read-only out of the box against any public WordPress site; write operations use a WordPress Application Password (no custom plugin needed)

Related MCP server: WordPressMCP Server

Requirements

• Node.js 18+

• A reachable WordPress site with the REST API enabled (default on any WordPress install)

• For write operations: a WordPress user with an Application Password

Installation

git clone https://github.com/gs4lthung/claude-wp-mcp.git
cd claude-wp-mcp
npm install

Configuration

The server is configured entirely through environment variables:

Generate an application password in wp-admin → Users → Profile → Application Passwords.

Usage

Claude Code

claude mcp add claude-wp-mcp -s user \
  -e WP_BASE_URL=http://localhost:10004 \
  -e WP_USERNAME=<user> \
  -e WP_APP_PASSWORD=<app-password> \
  -- node /path/to/claude-wp-mcp/src/index.js

Omit WP_USERNAME / WP_APP_PASSWORD to run read-only. Verify it's connected with claude mcp list.

Claude Desktop

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "claude-wp-mcp": {
      "command": "node",
      "args": ["/path/to/claude-wp-mcp/src/index.js"],
      "env": {
        "WP_BASE_URL": "http://localhost:10004",
        "WP_USERNAME": "<user>",
        "WP_APP_PASSWORD": "<app-password>"
      }
    }
  }
}

Any other MCP client

Point it at node src/index.js (stdio transport) with the environment variables above.

Tools reference

Security notes

• Use an Application Password, never your real WordPress login password.

• Application Passwords can be scoped to a single site and revoked independently from wp-admin → Users → Profile.

• This server talks directly to the REST API you configure — don't point it at a production site with a write-capable password unless you mean to.

License

MIT