wp-claude-mcp
Two WordPress plugins that let AI assistants like Claude manage a site's posts, pages, settings and styling through the Model Context Protocol. There are 21 actions, and each one checks the connected user's WordPress permissions.
Period
- Apr 2026
Role
- Sole author and maintainer
Type
- Source on GitHub
Tools
Why
WordPress's REST API wasn't made for AI clients. There's no way for a model to discover what it's allowed to do or what shape the input should be. WordPress 6.9 added an Abilities API and there's an official MCP adapter plugin, so I built on those instead of writing my own server.
How it's built
The first plugin is about 40 lines. It flips a flag that decides which registered abilities get exposed over MCP. Exposing one doesn't mean anyone can call it, since every ability still runs its own permission check.
The second plugin registers 21 abilities across posts, pages, media search, site settings, custom CSS, footer scripts, and read only access to categories, tags, menus and comments. Each one has a JSON Schema for its input and output and checks the right WordPress capability, so if you connect as an Editor you get editorial tools but not site settings. Version 1.2 added pagination info, hints that tell the client which tools are read only or destructive, and error messages that suggest what to try next.
One fix worth mentioning
WordPress strips script tags out of post content for security, so letting the AI add analytics or a widget script through a post wasn't going to work. Instead of getting around the sanitizer, the script lives in a site option and gets printed in the footer.
Limits
Media is search only, with no uploads. There are no automated tests, just manual testing against a live site.