WPPilot — WordPress MCP Server

Connect Claude, Codex, Cursor, VS Code and Antigravity to WordPress over the Model Context Protocol — with permissions, confirmations and change evidence that stay on your site.

WPPilot turns your WordPress site into an MCP server, built on the WordPress Abilities API and the official WordPress MCP Adapter. AI clients discover, inspect and execute typed WordPress abilities through a compact three-tool interface instead of loading hundreds of one-off endpoints into context.

It is a control layer, not an AI wrapper. No AI model is bundled — external MCP clients bring their own model access, and policy is enforced server-side on your install.

• 🌐 Website: https://wppilot.co

• 📚 Documentation: https://wppilot.co/docs

• 🔌 Client setup guides: https://wppilot.co/wordpress-mcp

Quick start

1. Download the latest wppilot.zip from Releases and install it as wp-content/plugins/wppilot. A GitHub “Source code (zip)” download is not installable — it lacks vendor/ and uses the wrong folder name.

2. Activate WPPilot.

3. Open WPPilot → Configuration and leave Production Safe selected.

4. Open WPPilot → Connect, choose your AI client, and follow the OAuth or Application Password route.

Canonical MCP endpoint:

https://example.com/wp-json/mcp/wppilot

OAuth-authenticated clients use /wp-json/mcp/wppilot-oauth. The older /wp-json/mcp/mcp-adapter-default-server route still resolves as a legacy alias, but new configurations should use the canonical path above.

Related MCP server: WordPress MCP Server

Supported AI clients

Claude Code · Claude Desktop · Claude on the web · Codex · Cursor · VS Code · GitHub Copilot · Antigravity CLI · Antigravity IDE · Windsurf · Zed · Cline · Roo Code · Kilo Code · Amazon Q · OpenCode

Per-client setup guides: https://wppilot.co/wordpress-mcp

Authentication

• OAuth 2.1 with PKCE and dynamic client registration. Access tokens last 1 hour, refresh tokens 14 days, and every authorization is listed under Connected Apps in WordPress so it can be revoked individually.

• Application Passwords as a fallback for clients that cannot run a browser flow.

Neither is a product licence. WPPilot needs no activation key, entitlement check or subscription service to run.

Safety model

On top of the profile: WordPress user capabilities still apply, individual abilities can be switched off, destructive operations require an explicit confirmation flag, writes are rate-limited per credential, and supported changes are recorded in a redacted change ledger with rollback.

WPPilot Pro — 991 plugin-aware abilities

The free plugin in this repository is the complete MCP foundation: connection, authentication, safety profiles, Gutenberg workflows, diagnostics, change evidence and 42 core abilities.

WPPilot Pro adds 991 further abilities across 51 integrations — typed operations that understand each plugin's own data model rather than writing generic content. Modules load only when their plugin is detected, and each loads in isolation, so a missing or broken plugin cannot stop the rest of the registry from registering.

Why plugin-aware matters

A page builder does not store a page as HTML. It stores an element tree, references to shared classes and design tokens, template rules and dynamic bindings. Writing generated markup into that store is how a layout stops opening in its own editor.

Pro gives the agent that builder's own vocabulary — bricks-patch-elements, elementor-create-atomic-widget, divi-apply-global-preset, etch-get-query-preview — so it can read a schema before it proposes a change.

Page-builder guides

Beyond integrations

• Persistent agent memory — approved context that carries between sessions, so an agent does not relearn your stack every conversation.

• Human approval queue — holds an agent write until a person approves it, with email notification. The agent receives a structured “pending” response, not a false success.

• Integration health reporting — see which modules loaded, which were skipped, and why.

• Plugin-aware skill packs — guided sequences that encode the read-before-write workflow for the plugins you run.

Compare Free vs Pro · Pricing · All integrations

WPPilot Pro is a commercial plugin and is not distributed from this repository.

Requirements

• WordPress 6.9 or newer

• PHP 8.0 or newer

• HTTPS for any remotely reachable connection

• WPPilot Chat additionally requires WordPress 7.0 and an AI provider configured through the WordPress AI Client

Privacy

The MCP endpoint is self-hosted; there is no WPPilot relay. When WPPilot Chat is used, WordPress sends conversation history, selected attachments, site instructions, tool definitions and relevant tool results to the AI provider you configured. Suggested policy text is available in Settings → Privacy → Policy Guide.

Documentation

In-repo: docs/ARCHITECTURE.md · docs/SAFETY.md · SECURITY.md

Security

Report suspected vulnerabilities privately — see SECURITY.md. Do not open a public issue for a vulnerability, and never include production credentials or customer data.

Licence

GPL-2.0-or-later. See LICENSE and LICENSES/ for the full SPDX texts.