Provides tools for operating WordPress sites, including content management (posts, pages, custom post types), media uploads, plugin and theme management, direct editing of files under wp-content with backup/restore, cache purging, and raw REST API access.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type @ followed by the MCP server name and your instructions, e.g., "@wp-mcp create a new post about our services and publish it"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
MCP server that turns Claude Code into a full WordPress operator — content, media, plugins, themes, and direct theme-file editing — on any site, including shared hosting with no SSH/WP-CLI.
Two halves:
bridge/wp-mcp-connector.zip — a small WordPress plugin you upload once per
site. It provides the token-based connection, file endpoints (scoped to
wp-content), a plugin/theme installer, and a standalone rescue.php that can
restore a backup even when a broken PHP edit has taken the site down.
server.mjs — the MCP server registered in Claude Code. It talks to the
plugin plus WordPress's core REST API.
Upload wp-mcp-connector.zip on the site (Plugins → Add New → Upload) and activate it.
wp-admin → Settings → WP MCP → Generate token (pick expiry: 1h / 8h / 24h / 7d). The token is shown once. A new token replaces any previous one.
Tell Claude: connect to https://example.com with token wpmcp_xxx, call it "clientx".
Work: edit theme files, install plugins, write posts, whatever.
Say disconnect from clientx — the token is revoked on the site and forgotten locally.
Next session: generate a fresh token, reconnect.
No standing credentials live anywhere. sites.json (gitignored, chmod 600) holds
only the currently connected sites.
Related MCP server: AutoWP MCP Server
cd ~/mcp/wp-mcp && npm install
claude mcp add --scope user wordpress -- node ~/mcp/wp-mcp/server.mjstool | does |
| connection lifecycle |
| posts, pages, any custom post type |
| local file → media library |
| list / install (wp.org slug or zip URL) / activate / deactivate / update / delete |
| list / install / activate / delete |
| direct files under |
| undo a file write from its automatic |
| purge known page caches (Jetpack Boost, WP Super Cache / W3TC, LiteSpeed) after changes |
| raw REST escape hatch ( |
Every wp_file_write over an existing file first saves <file>.wpmcp-bak.
If an edit to functions.php white-screens the site, wp_file_restore still
works: rescue.php runs without loading WordPress at all.
File access is limited to wp-content. To allow the whole WP root (e.g.
wp-config.php edits), add define('WPMCP_ALLOW_FULL', true); to wp-config.php.
Use HTTPS sites only — the token travels in a header.
Some shared hosts strip the Authorization header; the server also sends
X-WPMCP-Token, which survives everywhere tested.
On multisite, plugin/theme installs need a super-admin's token.
HTML passed to wp_content_create/wp_content_update is wrapped in a
raw-HTML block by default, so WordPress's autop filter can't reformat
structured markup (pass autop_safe: false to opt out).
All requests send a browser-like User-Agent — some shared-host WAFs reject non-browser agents with an opaque 403.
This server cannot be deployed
Security-first WordPress MCP server. 129 tools for Claude, ChatGPT, Gemini. Free on wp.org.
Live SEO workflow tools for Claude Code, Codex, and AI agents.
Manage websites, help documents and customer-support conversations with safe, scoped tools.
Secure MCP Server for WordPress connects AI assistants and agents to WordPress with secure, controlled access. It lets AI interact with WordPress through MCP while helping organizations manage access, enforce policies, protect non-human identities (NHI), and require human approval for sensitive actions. Use it to securely connect tools such as ChatGPT, Claude, and Cursor with WordPress. Marketplace Link: https://wordpress.org/plugins/miniorange-secure-mcp-server/ Official website: https://plugins.miniorange.com/mcp-server-ai-policy-enforcement-wordpress
