Provides tools for operating WordPress sites, including content management (posts, pages, custom post types), media uploads, plugin and theme management, direct editing of files under wp-content with backup/restore, cache purging, and raw REST API access.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type @ followed by the MCP server name and your instructions, e.g., "@wp-mcp create a new post about our services and publish it"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
MCP server that turns Claude Code into a full WordPress operator — content, media, plugins, themes, and direct theme-file editing — on any site, including shared hosting with no SSH/WP-CLI.
Two halves:
bridge/wp-mcp-connector.zip — a small WordPress plugin you upload once per
site. It provides the token-based connection, file endpoints (scoped to
wp-content), a plugin/theme installer, and a standalone rescue.php that can
restore a backup even when a broken PHP edit has taken the site down.
server.mjs — the MCP server registered in Claude Code. It talks to the
plugin plus WordPress's core REST API.
Upload wp-mcp-connector.zip on the site (Plugins → Add New → Upload) and activate it.
wp-admin → Settings → WP MCP → Generate token (pick expiry: 1h / 8h / 24h / 7d). The token is shown once. A new token replaces any previous one.
Tell Claude: connect to https://example.com with token wpmcp_xxx, call it "clientx".
Work: edit theme files, install plugins, write posts, whatever.
Say disconnect from clientx — the token is revoked on the site and forgotten locally.
Next session: generate a fresh token, reconnect.
No standing credentials live anywhere. sites.json (gitignored, chmod 600) holds
only the currently connected sites.
Related MCP server: AutoWP MCP Server
cd ~/mcp/wp-mcp && npm install
claude mcp add --scope user wordpress -- node ~/mcp/wp-mcp/server.mjstool | does |
| connection lifecycle |
| posts, pages, any custom post type |
| local file → media library |
| list / install (wp.org slug or zip URL) / activate / deactivate / update / delete |
| list / install / activate / delete |
| direct files under |
| undo a file write from its automatic |
| purge known page caches (Jetpack Boost, WP Super Cache / W3TC, LiteSpeed) after changes |
| raw REST escape hatch ( |
Every wp_file_write over an existing file first saves <file>.wpmcp-bak.
If an edit to functions.php white-screens the site, wp_file_restore still
works: rescue.php runs without loading WordPress at all.
File access is limited to wp-content. To allow the whole WP root (e.g.
wp-config.php edits), add define('WPMCP_ALLOW_FULL', true); to wp-config.php.
Use HTTPS sites only — the token travels in a header.
Some shared hosts strip the Authorization header; the server also sends
X-WPMCP-Token, which survives everywhere tested.
On multisite, plugin/theme installs need a super-admin's token.
HTML passed to wp_content_create/wp_content_update is wrapped in a
raw-HTML block by default, so WordPress's autop filter can't reformat
structured markup (pass autop_safe: false to opt out).
All requests send a browser-like User-Agent — some shared-host WAFs reject non-browser agents with an opaque 403.
This server cannot be installed
Unclaimed servers have limited discoverability.
If you are the server author, to access and configure the admin panel.
Security-first WordPress MCP server. 129 tools for Claude, ChatGPT, Gemini. Free on wp.org.
Live SEO workflow tools for Claude Code, Codex, and AI agents.
Publish to self-hosted WordPress from AI agents: markdown, images, SEO, and Notion sync.
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/srimalonline/wp-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server