🚀 MCP WordPress Server

The Most Comprehensive WordPress MCP Server

Manage WordPress sites with natural language through AI tools like Claude Desktop

Quick Start • Why This MCP Server? Installation Options • Documentation • Examples

🎉 v3.3.21 - CI-Tested on Node 20/22/24

🎯 Why This MCP Server?

Transform WordPress management from complex admin panels to simple conversations:

❌ Before: Login → Admin Panel → Navigate → Click → Fill Forms → Save
✅ After:  "Create a new blog post about AI trends with SEO optimization"

Key Advantages:

• 🏆 Most Complete: 71 tools vs 20-30 in alternatives
• ⚡ Fastest Setup: 2-click Claude Desktop installation via DXT
• 🔒 CI-Tested: 2750+ tests across Node 20/22/24, CodeQL + Trivy security scanning
• 🎯 TypeScript Native: 100% type safety, best-in-class developer experience
• 🌐 Multi-Site: Manage up to 50 WordPress sites from one place

🚀 Quick Start

Get up and running in under 5 minutes:

Prerequisites

• WordPress: Version 5.6+ with REST API enabled
• Claude Desktop: Latest version installed
• Application Password: Generated from WordPress admin panel

3-Step Setup

1️⃣ Generate WordPress Application Password

WordPress Admin → Users → Profile → Application Passwords → Add New

2️⃣ Install MCP Server (Choose One)

Option A: DXT Extension (Easiest)

# Download and install in Claude Desktop
curl -L https://github.com/docdyhr/mcp-wordpress/releases/latest/download/mcp-wordpress.dxt -o mcp-wordpress.dxt
# Then: Claude Desktop → Extensions → Install → Select DXT file

Option B: NPM Global Install

npm install -g mcp-wordpress

3️⃣ Test Your Connection

In Claude: "Test my WordPress connection"
Response: "✅ Authentication successful! Connected to: Your Site Name"

📺 Watch 2-minute Setup Video | 📖 Detailed Setup Guide

⚡ Installation Options

🏆 Recommended: Claude Desktop Extension (DXT)

Easiest installation - just 2 clicks!

1. Download: mcp-wordpress.dxt (3.4MB)
2. Install: Claude Desktop → Extensions → Install → Select DXT file
3. Configure: Enter your WordPress site URL and credentials

✅ Zero command line required ✅ Easy updates ✅ Built-in security

📖 Complete DXT Setup Guide →

🚀 Alternative: NPX (Power Users)

# Run directly - always latest version
npx -y mcp-wordpress

# Interactive setup wizard
npm run setup

🔧 Other Options

• 💻 NPM Setup - Local development
• 🐳 Docker Setup - Production deployment
• 🔧 Manual Build - Custom builds

📋 Configuration

Single Site (.env)

WORDPRESS_SITE_URL=https://myblog.com
WORDPRESS_USERNAME=admin
WORDPRESS_APP_PASSWORD=xxxx xxxx xxxx xxxx xxxx xxxx

Claude Desktop Config

{
  "mcpServers": {
    "mcp-wordpress": {
      "command": "npx",
      "args": ["-y", "mcp-wordpress"],
      "env": {
        "WORDPRESS_SITE_URL": "https://myblog.com",
        "WORDPRESS_USERNAME": "admin",
        "WORDPRESS_APP_PASSWORD": "xxxx xxxx xxxx xxxx xxxx xxxx"
      }
    }
  }
}

📖 Complete Configuration Guide — multi-site, JWT, Docker, production environments

🔐 Authentication

WordPress Application Passwords are recommended:

1. WordPress Admin → Users → Profile → Application Passwords → Add New
2. Copy the generated password into your config

Alternative methods: JWT, Basic Auth, API Key — see Authentication Configuration

🌟 What Makes This Special

| Feature | This Server | Competition | | -------------------------- | ---------------------------------- | --------------- | | Tools Available | 71 tools | 20-30 tools | | Claude Desktop DXT | ✅ 2-click install | ❌ Manual setup | | Multi-Site Support | ✅ Up to 50 sites | ❌ Single site | | TypeScript | ✅ 100% TypeScript, strict mode | ⚠️ Partial/None | | Performance Monitoring | ✅ Real-time analytics | ❌ Basic only | | Test Coverage | ✅ 2750+ tests, ~76% line coverage | ⚠️ Limited | | Security Scanning | ✅ CodeQL + Trivy in CI | ⚠️ Unknown |

📋 Available Tools (71 Tools)

Content Management

• 📝 Posts (6 tools) - Create, edit, delete, list posts and revisions
• 📄 Pages (6 tools) - Manage static pages and revisions
• 🖼️ Media (5 tools) - Upload, manage media library and files
• 🔍 SEO (11 tools) - Content analysis, metadata, schema markup, SERP tracking, keyword research

User & Community

• 👥 Users (6 tools) - User management and profiles
• 💬 Comments (7 tools) - Comment moderation and management
• 🏷️ Taxonomies (10 tools) - Categories and tags management

Site Management

• ⚙️ Site Settings (6 tools) - Site configuration and statistics
• 🔐 Authentication (3 tools) - Auth testing and management
• ⚡ Cache Management (4 tools) - Performance caching control
• 📊 Performance Monitoring (6 tools) - Real-time metrics and optimization
• 🛠️ System (1 tool) - Version checking

📖 Complete Tool Documentation | Live API Reference

🤖 Examples

💬 "Create a new blog post about AI trends with SEO optimization"
💬 "Check my WordPress site performance and provide optimization recommendations"
💬 "Find all draft posts older than 30 days and provide a summary"
💬 "Batch update all client sites with the new privacy policy footer"
💬 "List all posts from my client-blog site"

📖 More Examples | Real-World Workflows

🧪 Testing & Security

npm test              # Full test suite (2750/2750 passing, 94 files)
npm run test:security # Security tests (371/371 passing)
npm run health        # System health check

📖 Security Documentation — OWASP coverage, penetration testing, compliance

🛠️ Troubleshooting

npm run health         # System check
DEBUG=true npm run dev # Debug logging
npm run fix:rest-auth  # Fix WordPress 401 errors

| Error | Solution | | -------------------- | ---------------------------------- | | 401 Unauthorized | Regenerate application password | | 403 Forbidden | Check user role (Editor+ required) | | 404 Not Found | Verify WORDPRESS_SITE_URL | | Connection Timeout | Check WordPress REST API access |

📖 Full Troubleshooting Guide

📚 Documentation

Getting Started

• Quick Start Guide - Get running in 5 minutes
• Installation Guide - Detailed setup instructions
• Configuration Guide - All configuration options
• Authentication Setup - WordPress auth methods

User Guides

• Basic Usage - Common tasks and workflows
• Advanced Workflows - Complex automation
• Multi-Site Management - Managing multiple sites
• Troubleshooting - Common issues and solutions

Integration Guides

• Claude Desktop - Complete Claude integration
• VS Code - VS Code extension setup
• Cline - Cline AI assistant integration
• Developer Guide - Build your own MCP client

Developer Documentation

• API Reference - Complete tool documentation
• Architecture - System design and decisions
• Contributing - Development guidelines
• Build System - Build and release

Deployment & Operations

• Docker Deployment - Container deployment
• Publishing Troubleshooting - Fix publishing issues
• Security Best Practices - Production security
• Caching - Performance and caching guide

🔧 Requirements

• WordPress 5.0+ with REST API enabled
• HTTPS recommended for production
• Application Passwords enabled (WordPress 5.6+)

| Role | Access | | ----------------- | ----------------------------- | | Administrator | Full access to all functions | | Editor | Posts, pages, comments, media | | Author | Own posts and media | | Contributor | Own posts (drafts only) | | Subscriber | Read only |

🚀 Next Steps

Ready to transform your WordPress management?

1. 🏆 Download DXT Extension - Easiest setup (2 minutes)
2. ⚡ Try NPX Method - Power user setup (5 minutes)
3. 📚 Explore All Tools - See what's possible
4. 💬 Join Discussions - Get help and share ideas

🔗 Similar Projects

• Automattic WordPress MCP - Official WordPress MCP server by Automattic

📋 Changelog

v3.3.21 (July 2026)

• 🔒 Security Hardening - SSRF denylist, HTTPS enforcement, logger redaction, dependency floor updates
• 🐳 Docker Release Reliability - Bounded publish-job timeouts and corrected retry-on-hang logic
• 📚 DOX Documentation - Hierarchical AGENTS.md contract tree for per-directory work guidance

See CHANGELOG.md for the complete, release-by-release history.

v3.3.14 (June 2026)

• 🔒 Security Updates - Patch moderate Hono vulnerabilities, update allowlisted npm-bundled advisories
• 🧪 CI - Smoke-test improvements and Node 24 validation

v3.x Series (2025–2026)

• 🏗️ Modular Architecture - Domain-specific operation modules and composition pattern
• 🔄 Fault Tolerance - Circuit breaker pattern with automatic recovery
• 📊 2200+ Tests - Comprehensive test suite across security, cache, server, client, config, utils, tools, and performance
• ⚡ Caching Layer - CachedWordPressClient with configurable TTL; 50–70% faster repeat requests
• 🌐 Multi-Site - Up to 50 WordPress sites from one configuration file
• 🔐 4 Auth Methods - App Passwords (recommended), JWT, Basic, API Key
• 🐳 Docker & DXT - One-click Claude Desktop extension and Docker Hub image

For the full history see CHANGELOG.md.

🙏 Acknowledgments

Special thanks to Stephan Ferraro for the upstream project that inspired this implementation.

⭐ Found this helpful? Give us a star on GitHub! ⭐