WordPress MCP Server

What is WordPress MCP Server?

A Model Context Protocol (MCP) server that enables AI assistants to interact with WordPress sites through the WordPress REST API. It provides tools for managing WordPress content programmatically, including creating, retrieving, and updating posts. The server is designed for developers and site administrators who want to automate content management via AI.

How to use WordPress MCP Server?

Install Node.js v18+, clone the repository, install dependencies, and build the server. Configure MCP by adding the server to your MCP settings file (e.g., cline_mcp_settings.json) with the built index.js as the command. The server exposes three tools: create_post, get_posts, and update_post, each requiring your WordPress site URL, username, and an application password.

Key features of WordPress MCP Server

• Create new WordPress posts with customizable title, content, and status
• Retrieve WordPress posts with pagination support
• Update existing posts with new content or status
• Secure authentication using WordPress application passwords
• Error handling with descriptive response messages
• Supports draft, publish, and private post statuses

Use cases of WordPress MCP Server

• AI assistant helping writers draft and publish blog posts
• Automated content publishing from a headless CMS or script
• Batch updating post metadata or status across a WordPress site
• Creating private posts for internal documentation workflows
• Integrating with AI coding tools to manage WordPress content

FAQ from WordPress MCP Server

What prerequisites are required?

Node.js v18 or higher, a WordPress site with the REST API enabled (default since WordPress 4.7+), and a WordPress application password for authentication.

How do I authenticate with WordPress?

Generate an application password from your WordPress admin panel (Users → Profile → Application Passwords). Use that password (with username and site URL) in each tool request. Never use your main WordPress password.

What tools does the server provide?

Three tools: create_post (create a new post), get_posts (retrieve posts with pagination), and update_post (update an existing post by ID). All require siteUrl, username, and password; optional parameters include status, perPage, page, title, and content.

How are responses formatted?

All tools return JSON with a success boolean. On success, data contains the WordPress API response. On failure, error provides a descriptive message covering invalid request, missing parameters, authentication failures, or network issues.

What security considerations should I follow?

Always use HTTPS URLs for your WordPress site. Use application passwords instead of your main password. Keep application passwords secure and do not share them. Consider limiting access with WordPress roles and capabilities. Regularly rotate application passwords.