WordPress MCP lets a compatible AI app use tools provided by a WordPress service or site. Depending on the route and permissions, those tools may read site information and make changes—not just answer questions. Start by choosing the right WordPress MCP route, checking its permissions, and asking the assistant to propose work before you approve any write.
What is WordPress MCP?
Model Context Protocol (MCP) is an open standard that gives AI applications a consistent way to connect to external data, tools, and workflows. For WordPress, an MCP server can expose selected operations to a client such as Claude, Cursor, or ChatGPT. The assistant can use the returned site context to answer a request, and may be able to perform an operation if its tools and permissions allow it.
As an Amazon Associate I earn from qualifying purchases.
The practical distinction is important: an MCP connection is not automatically read-only. WordPress.com says that enabling its MCP service turns on both Read and Write tool groups by default. A client may ask before using a tool, but that is not a replacement for configuring permissions carefully or reviewing consequential changes.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →WordPress.com compares MCP to USB-C as a way to standardize connections. Treat that as an analogy for compatibility, not a promise that every MCP server is equally secure or exposes the same tools.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Which WordPress MCP route do you need?
“WordPress MCP” describes several distinct projects. Choose based on what you want the assistant to work on; their setup instructions and capabilities are not interchangeable.
| Route | What it connects to | Typical purpose | Key distinction |
|---|---|---|---|
| WordPress.com MCP | WordPress.com sites and eligible self-hosted sites connected through Jetpack | Site content and supported site-management operations | Hosted service using browser-based OAuth 2.1; tools depend on eligibility, role, and settings. |
| WordPress.org Plugin Directory MCP | The Plugin Directory submission workflow | Read plugin guidelines, validate readmes, check submission status, and submit plugins | It is not a general remote-control server for an arbitrary self-hosted website. Submissions still go through the normal review process. |
| WordPress MCP Adapter | WordPress abilities registered by a site or extension | Developer-built integrations that expose selected abilities as MCP tools and resources | It translates registered abilities; the developer still has to implement appropriate permission checks. |
| WordPress Studio MCP | Local sites managed in WordPress Studio | Local development tasks such as site controls, WP-CLI operations, and screenshots | A local development workflow, not the same as giving an external agent access to a public production site. |
WordPress.com’s documentation, checked October 7, 2026, says the hosted service is available on paid WordPress.com plans, while a free site has access for its first 30 days after creation. A self-hosted site connected through Jetpack needs Jetpack AI or Jetpack Complete. Plan eligibility and client support can change, so check the current service requirements for your site before connecting.
For the Plugin Directory route, the WordPress Plugin Handbook lists a WordPress.org account, an MCP-compatible client, and Node.js 18 or later among the quick-setup requirements. That route concerns plugin submissions, not managing site pages. The Adapter and Studio routes are for developers and local work, respectively.
Free tools Windows power users keep installed
One-click scans. No signup required.
Can you connect WordPress to Claude, Cursor, or ChatGPT?
Yes, but the connection method depends on the route and the client. WordPress.com’s current instructions describe Claude Desktop connecting through its connector directory and ChatGPT through its plugin; other clients use the WordPress.com MCP endpoint, https://public-api.wordpress.com/wpcom/v2/mcp/v1, with the client’s own setup process. The service uses a browser-based OAuth 2.1 authorization flow, and its documented hosted setup does not require installing additional server software.
WordPress.com lists Claude Desktop, Claude Code, ChatGPT, Cursor, Codex, and VS Code among the clients or setup routes covered in its documentation. This is not a guarantee that every client has identical features or that every configuration remains current. Follow the instructions for your specific client rather than copying a configuration snippet meant for a different app.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
The Plugin Directory server has its own setup flow and currently names Claude Desktop, Claude Code, Cursor, and VS Code in quick setup. WordPress Studio is configured from Studio settings. Neither setup should be substituted for the hosted WordPress.com connection.
9 useful jobs you can hand an AI assistant
The following are possible jobs supported by operation families in the WordPress.com tool catalog, not a promise that every site or connected client will have each operation. Tool availability can depend on plan, hosting platform, account role, and tool settings. The live tool catalog for your connection is the authority on what it can actually do.
1. Get a site and plugin inventory
Ask for a summary of supported site settings, installed plugins, plugin versions, and available updates. Keep the first request read-only: have the assistant report what it found, then ask for recommendations separately. That makes it easier to distinguish the site’s current state from proposed maintenance.
2. Summarize basic statistics
Ask for supported totals or a summary over a selected date range—for example, views, visitors, or publishing activity if those operations are available. The documented statistics tools do not promise every analytics breakdown: they do not include all details such as top posts or per-URL data. If you need that level of reporting, use an analytics tool that explicitly provides it.
3. Find an existing post or page
Use public-content search, filtered content lists, or retrieval of a specific post or page to locate material. Draft, private, and pending content is different: ask for a list operation with the relevant status filter rather than assuming public search will find it. Be specific about titles, dates, or status when the site has many similar items.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
4. Prepare a new post or page as a draft
The WordPress.com authoring catalog says new posts and pages default to draft. Ask for a draft, then review the text, links, claims, and formatting in WordPress before publishing. Publishing is a consequential write: a publish operation can make the content live immediately, so do not treat a generated draft as approved copy.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →5. Revise one section instead of rewriting a page
The catalog supports listing top-level blocks and replacing, inserting, or removing a selected block. A safer request is to retrieve the existing section, show you the proposed replacement, and apply the edit only after you confirm it. A block-level edit is more targeted than replacing an entire page, but it is not necessarily a visual preview of how the finished page will render.
6. Review comments and prepare moderation
Available comment operations include listing, retrieving, creating, updating, and deleting comments. Start by asking for a moderation shortlist or proposed replies. Approving, changing, replying to, or deleting comments alters visible site content, so review the target and the proposed action before authorizing it.
7. Inspect media and improve its text metadata
Media tools can list or retrieve items and update fields such as alt text and captions. Ask the assistant to propose wording before saving: an update may appear wherever that media item is used, not just in the screen where you first noticed it. Uploading, generating, and deleting media are also documented operations, but deletion can permanently remove a file used by existing content.
8. Check activity, backup readiness, or scan status
Site operations can include recent activity, backup readiness or storage information, and Jetpack Scan status; an authorized scan may also be queued. Use these checks to understand reported status and decide when to investigate further. They are not a complete security audit, and a readiness or storage status is not proof that every site change can be recovered.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
9. Inspect design context before proposing a visual change
Site editor context can include the active theme, design presets, applied styles, and registered blocks. Ask what styles and blocks the site already uses before requesting a design adjustment. The catalog recommends theme-aligned preset slugs rather than hard-coded colors and sizes, and checking content warnings after saves. This helps ground a proposal in the site’s existing design system; it does not guarantee a visual preview.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.How to use WordPress MCP more safely
Safety comes from the permissions and review process around the connection, not from the name MCP or an instruction telling the assistant to be careful. WordPress.com’s controls allow administrators to customize individual tools and groups; site-level settings override account defaults, and the authenticated user’s role also constrains available tools.
- Confirm the route and target. Establish whether the assistant will work with a WordPress.com or Jetpack-connected site, the Plugin Directory, custom registered abilities, or a local Studio site. Do not connect a production site when you intend to work only on a local development copy.
- Check enabled tools before connecting. On WordPress.com, review the MCP Read and Write groups and the site-level settings. Because both groups are enabled by default when MCP is turned on, disable tools you do not need rather than assuming the connection starts read-only.
- Begin with the smallest useful scope. For exploration, enable only necessary read tools where the service allows it. If writes are required, grant only the relevant tools and use an account whose WordPress role is appropriate to the task.
- Ask for a proposal before a write. Have the assistant identify the target and explain the intended change. For an edit, request the current content and proposed replacement before applying it; for a deletion, verify exactly which item is affected.
- Confirm and inspect the result. WordPress.com’s documented catalog requires the agent to explain a write, update, or delete, request explicit confirmation, and send
user_confirmed: true. Destructive actions require presenting the target before asking for confirmation. This is a mechanism in that catalog, not a guarantee that every MCP server enforces the same rule. - Review the changed site in WordPress. Check the saved page, comment, media item, or setting in its normal interface. For a draft, review the content before publishing; for a production change, verify the result and any warnings.
Some documented deletions—including media, categories, tags, and terms—may have no trash or recovery path. Treat deletion and publishing as higher-consequence actions: stop, verify the target and effect, and do not proceed merely because an assistant says it has completed the request.
What site data reaches the AI?
Tool results and relevant site content are included as context in the AI request so the assistant can complete the task. Avoid sharing content you are not authorized to send, particularly private or sensitive material. WordPress.com states that data from its MCP tools is not used to train AI models and is used once as part of the original request. That statement is specific to WordPress.com’s service; it should not be generalized to another MCP server, AI client, or provider.
Recommended Free Tools
What changes for developers building a custom WordPress MCP connection?
The official MCP Adapter translates registered WordPress Abilities into MCP tools and resources. The Adapter does not make an ability safe by itself. The ability implementation needs suitable input and output schemas and a permission callback that enforces the capabilities required for the operation, alongside an execution callback that performs it.
WordPress developer documentation attributes three default abilities to WordPress 6.9: core/get-site-info, core/get-user-info, and core/get-environment-info. That is a version-specific implementation detail, not a guarantee that every site exposes those abilities through every MCP server. Developers should verify the actual registered abilities and access controls on the target site.
How to choose the right route
- You want supported management tools for a hosted or Jetpack-connected site: investigate WordPress.com MCP and confirm plan eligibility, role access, and tool settings.
- You want help submitting a plugin to WordPress.org: use the Plugin Directory MCP workflow; it is not a general site-management connection.
- You are building your own integration around site-specific operations: investigate the MCP Adapter and implement capability checks in each ability.
- You want an assistant to work with a local development site: consider WordPress Studio MCP and keep that workflow distinct from production access.
For each option, compare the target, hosting or plan requirements, permission scope, client setup, and task type. A route that can edit posts is not automatically suitable for plugin submission work, and a local tool is not the same as authorization to alter a live site.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
