WordPress

# Secure MCP Server for WordPress Turn any WordPress site into a fully working MCP server. Connect **Claude, ChatGPT, Cursor, Gemini, Windsurf**, or any MCP-compatible client and let AI **read, create, and manage your WordPress content through chat** — safely, with you in control. Unlike integrations that hand AI full admin access, every action is scoped to the **roles and abilities you allow**, authenticated with self-hosted **OAuth 2.1** — the AI never sees your WordPress password. ## What your AI can do — 300+ tools, and growing Manage virtually any part of your WordPress site through natural language. The connector exposes your site's real capabilities to AI and **adapts to whatever your site runs** — any content type, any custom fields, your page builder, your store, your SEO setup. - **Run your content** — create, edit, publish, schedule, organize, and clean up posts, pages, media, categories, tags, and revisions. - **Operate your store** — manage products, orders, customers, coupons, and sales reporting end to end. - **Edit your designs** — update text, images, links, and styling in your page builder without breaking layouts. - **Administer your site** — custom post types and fields, SEO metadata, user accounts and roles, comment moderation, and more. - **Works with your stack** — automatically detects and supports popular plugins (WooCommerce, Elementor, Kadence, ACF, Yoast, and others) plus any custom content types your site defines — so capabilities expand as your site does. From everyday edits to full store operations and site administration — if it's part of running your WordPress site, your AI can do it, scoped to exactly the permissions you allow. ## Security & governance (built in, no limits) - **OAuth 2.1** self-hosted authorization: no API keys, no shared passwords. - **Role-based AI access**: grant specific tools per WordPress role. - **One-click tool controls**: turn any ability on or off. - **Full audit log**: every AI action recorded with who, what, and when. - Built natively on the **WordPress Abilities API**. ## Prerequisite This connector requires the free **Secure MCP Server** plugin installed and active on your WordPress site. It's what exposes your site's abilities to AI and handles the OAuth security. 👉 **Install it here:** https://wordpress.org/plugins/miniorange-secure-mcp-server/ ## Get started 1. **Install & activate** the [Secure MCP Server plugin](https://wordpress.org/plugins/miniorange-secure-mcp-server/) on your WordPress site. 2. **Create an agent** and grant it abilities for the WordPress roles you choose. 3. **Connect** your AI through the miniOrange - paste your site URL and approve access. **Learn more:** https://plugins.miniorange.com/mcp-server-ai-policy-enforcement-wordpress

First seen 2 Oct 2026. Evidence as of 2 Oct 2026.