Shilpi MCP server

Connect Claude, ChatGPT or any MCP-capable agent to a WordPress site running the Shilpi theme, and let it build and edit that site through scoped abilities rather than server access.

This repository holds the public interface: the registry manifest, the tool list, the authentication guide and example client configurations. The server itself ships inside the Shilpi theme and runs on your own WordPress install, so there is no service to sign up for and no third party sits between the agent and your site.

• Product and pricing: https://shilpibuilder.com/

• Documentation: https://shilpibuilder.com/docs/

• Permission model, explained: https://shilpibuilder.com/abilities-not-access/

Why this exists

Most WordPress page builders store a layout in their own format. An agent asked to edit such a page has to learn a proprietary widget tree, guess at its invariants and hope the vendor does not change them.

Shilpi stores a page as three plain fields: body HTML, a real stylesheet, and focused JavaScript. An agent editing a Shilpi page is editing markup it already understands. What it needs from the site is not raw access but vocabulary: which global classes exist, which design variables are defined, and what the house rules are. That is what these tools provide.

Related MCP server: sitepilot-mcp

Endpoints

The server runs on your own site. Replace example.com with your domain.

Both endpoints require an active licence. Without one they return 404, and no credential will authenticate. Switching the server off in Shilpi → Dashboard → Connect an AI agent removes both endpoints, which makes it a genuine kill switch rather than a setting.

Requirements

• WordPress 6.4 or newer

• PHP 8.0 or newer

• HTTPS, required for OAuth

• The Shilpi theme, active, with a valid licence

Getting connected

See docs/authentication.md for the OAuth flow and the application-password fallback, and examples/ for ready-to-paste client configuration.

Abilities

Every tool is scoped. There is no filesystem access, no SSH, and no route to wp-config.php or to theme and plugin files. Writing PHP snippets is a temporary permission the site owner grants at Shilpi → Security and revokes in one click.

The list below is generated from a live install running Shilpi 1.9.4. Counts change between releases, and the WooCommerce Kit plugin adds its own tools when it is active.

Pages, posts and templates

Design system

Structure and content

Code and assets

Agent instructions

Skills are how the site tells the agent its own conventions. You can upload your own Markdown skill to add house rules, and the agent reads it before writing.

What the server cannot do

This is the part worth reading before you connect anything.

• No filesystem access. It cannot read or write theme or plugin files.

• No shell, no SSH, no wp-config.php.

• No customers, orders, addresses or payment data through the WooCommerce tools.

• Writing PHP is off by default and is a permission with an off switch, not a setting you enable and forget.

• Uploading JavaScript requires an account with unfiltered_html.

Licence

The contents of this repository (manifest, docs and examples) are released under the MIT licence. The Shilpi theme itself is commercial software; see https://shilpibuilder.com/pricing/.