"Audit my last 50 published posts, find the ones missing meta descriptions, generate them from the post body, and apply them."
seo-audit-onpageseo-update-metaThe AI runs in a loop, with a full audit trail on every call.
Download our free MCP for WordPress and Elementor
Manual WordPress work is over.
Connect any WordPress site to Claude, Lovable, Cursor, and Windsurf. Get 450+ tools ready to control Elementor, WooCommerce, ACF, Gutenberg, Rank Math, and Internal Link Juicer.
No API keys. The 3-step wizard handles OAuth for you.
Compatible AI tools
Controlled plugins and systems
What you can do from the prompt
450+ tools written 100% from scratch on the official WordPress 6.9 Abilities API. No bundled third-party code.
Built for people who operate sites
Six real workflows that MCP for WordPress solves without opening wp-admin.
"Clone this home page into a new landing page, replace spring sale with summer sale across every widget, and swap the hero image."
elementor-clone-pageelementor-replace-textelementor-update-widget-settingEach step creates a snapshot for rollback.
"Generate 20 blog post outlines based on the brand voice, save them as drafts, and queue them for review."
posts-create (x20, status=draft)Bulk generation in a single conversation.
"Onboard a new client: read the posts, audit SEO, propose a sitemap, and configure redirects."
multi-tool workflowsingle OAuthEverything in one OAuth connection, without switching windows.
"Run this snippet with wp eval, check debug.log, then update a specific ACF field."
wp-evaldebug-logacf-update-fieldExpose things that used to require SSH directly inside the AI conversation.
"Create a Black Friday landing page in Elementor, upload 12 new products to Woo with galleries, and create a 20% off coupon valid for one week."
elementor-create-pagewoocommerce-create-productwoocommerce-create-couponLaunch the whole store without opening wp-admin. You just talk to the AI.
Built with production security
All code is ours, written from scratch on the official WordPress 6.9 Abilities API. Nothing bundled, nothing forked, no embedded third-party code.
OAuth 2.1 with Dynamic Client Registration
RFC 7591 + PKCE S256 + refresh-token rotation with reuse detection (RFC 9700) + revocation (RFC 7009).
Per-request user rebind
wp_set_current_user on every request closes the MCP confused-deputy vulnerability class.
Snapshots on every destructive action
Every destructive tool requires the mcp_invoke_destructive_tools capability and snapshots the affected post first.
Three-level rate limiter
Independent token buckets per IP, per user, and per destructive tool.
Origin allowlist
Mitigates the DNS rebinding + CSRF class from CVE-2025-49596.
Tokens stored only as SHA-256
Refresh-token reuse revokes the entire lineage. Audit logs redact sensitive keys.
Ready in 3 steps
No API keys, no manually copied headers. The wizard handles the OAuth handshake for you.
- 01
Upload the plugin
In wp-admin: Plugins > Add New > Upload Plugin. Choose the .zip and click Install Now.
- 02
Activate
Click Activate. The wizard opens automatically. You do not need to configure anything first.
- 03
Connect your AI
Choose Claude.ai or ChatGPT, paste the URL into the AI Custom connector, log in to WordPress, and click Allow. Done.
Requirements: WordPress 6.9+ · PHP 8.1+
Start in 60 seconds. Free forever.
GPL-3.0. We earn through consulting, custom integrations, and managed setup. The plugin is and always will be free.
Works with