🚀 MCP WordPress Server
The Most Comprehensive WordPress MCP Server
Manage WordPress sites with natural language through AI tools like Claude Desktop
Quick Start • Why This MCP Server?
Installation Options • Documentation • Examples
🎉 v3.3.21 - CI-Tested on Node 22/24
🎯 Why This MCP Server?
Transform WordPress management from complex admin panels to simple conversations:
❌ Before: Login → Admin Panel → Navigate → Click → Fill Forms → Save
✅ After: "Create a new blog post about AI trends with SEO optimization"
Key Advantages:
- 🏆 Most Complete: 73 tools vs 20-30 in alternatives
- ⚡ Fastest Setup: 2-click Claude Desktop installation via DXT
- 🔒 CI-Tested: 2750+ tests across Node 22/24, CodeQL + Trivy security scanning
- 🎯 TypeScript Native: 100% type safety, best-in-class developer experience
- 🌐 Multi-Site: Manage up to 50 WordPress sites from one place
🚀 Quick Start
Get up and running in under 5 minutes:
Prerequisites
- WordPress: Version 5.6+ with REST API enabled
- Claude Desktop: Latest version installed
- Application Password: Generated from WordPress admin panel
3-Step Setup
1️⃣ Generate WordPress Application Password
WordPress Admin → Users → Profile → Application Passwords → Add New
2️⃣ Install MCP Server (Choose One)
Option A: DXT Extension (Easiest)
# Download and install in Claude Desktop
curl -L https://github.com/docdyhr/mcp-wordpress/releases/latest/download/mcp-wordpress.dxt -o mcp-wordpress.dxt
# Then: Claude Desktop → Extensions → Install → Select DXT file
Option B: NPM Global Install
npm install -g mcp-wordpress
3️⃣ Test Your Connection
In Claude: "Test my WordPress connection"
Response: "✅ Authentication successful! Connected to: Your Site Name"
📺 Watch 2-minute Setup Video | 📖
Detailed Setup Guide
⚡ Installation Options
🏆 Recommended: Claude Desktop Extension (DXT)
Easiest installation - just 2 clicks!
- Download:
mcp-wordpress.dxt (3.4MB)
- Install: Claude Desktop → Extensions → Install → Select DXT file
- Configure: Enter your WordPress site URL and credentials
✅ Zero command line required ✅ Easy updates ✅ Built-in security
📖 Complete DXT Setup Guide →
🚀 Alternative: NPX (Power Users)
# Run directly - always latest version
npx -y mcp-wordpress
# Interactive setup wizard
npm run setup
🔧 Other Options
📋 Configuration
Single Site (.env)
WORDPRESS_SITE_URL=https://myblog.com
WORDPRESS_USERNAME=admin
WORDPRESS_APP_PASSWORD=xxxx xxxx xxxx xxxx xxxx xxxx
Claude Desktop Config
{
"mcpServers": {
"mcp-wordpress": {
"command": "npx",
"args": ["-y", "mcp-wordpress"],
"env": {
"WORDPRESS_SITE_URL": "https://myblog.com",
"WORDPRESS_USERNAME": "admin",
"WORDPRESS_APP_PASSWORD": "xxxx xxxx xxxx xxxx xxxx xxxx"
}
}
}
}
📖 Complete Configuration Guide — multi-site, JWT, Docker, production environments
🔐 Authentication
WordPress Application Passwords are recommended:
- WordPress Admin → Users → Profile → Application Passwords → Add New
- Copy the generated password into your config
Alternative methods: JWT, Basic Auth, API Key — see
Authentication Configuration
🌟 What Makes This Special
| Feature | This Server | Competition |
|---|
| Tools Available | 73 tools | 20-30 tools |
| Claude Desktop DXT | ✅ 2-click install | ❌ Manual setup |
| Multi-Site Support | ✅ Up to 50 sites | ❌ Single site |
| TypeScript | ✅ 100% TypeScript, strict mode | ⚠️ Partial/None |
| Performance Monitoring | ✅ Real-time analytics | ❌ Basic only |
| Test Coverage | ✅ 2750+ tests, ~76% line coverage | ⚠️ Limited |
| Security Scanning | ✅ CodeQL + Trivy in CI | ⚠️ Unknown |
📋 Available Tools (73 Tools)
Content Management
- 📝 Posts (6 tools) - Create, edit, delete, and list posts and custom post types
- 📄 Pages (6 tools) - Manage static pages and revisions
- 🖼️ Media (5 tools) - Upload, manage media library and files
- 🔍 SEO (11 tools) - Content analysis, metadata, schema markup, SERP tracking, keyword research
User & Community
- 👥 Users (6 tools) - User management and profiles
- 💬 Comments (7 tools) - Comment moderation and management
- 🏷️ Taxonomies (10 tools) - Categories and tags management
Site Management
- ⚙️ Site Settings (6 tools) - Site configuration and statistics
- 🔐 Authentication (3 tools) - Auth testing and management
- ⚡ Cache Management (4 tools) - Performance caching control
- 📊 Performance Monitoring (6 tools) - Real-time metrics and optimization
- 🛠️ System (3 tools) - Version, plugin, and theme inspection
📖 Complete Tool Documentation | Live API Reference
🤖 Examples
💬 "Create a new blog post about AI trends with SEO optimization"
💬 "Check my WordPress site performance and provide optimization recommendations"
💬 "Find all draft posts older than 30 days and provide a summary"
💬 "Batch update all client sites with the new privacy policy footer"
💬 "List all posts from my client-blog site"
📖 More Examples | Real-World Workflows
🧪 Testing & Security
npm test # Full test suite (2750/2750 passing, 94 files)
npm run test:security # Security tests (371/371 passing)
npm run health # System health check
📖 Security Documentation — OWASP coverage, penetration testing, compliance
🛠️ Troubleshooting
npm run health # System check
DEBUG=true npm run dev # Debug logging
npm run fix:rest-auth # Fix WordPress 401 errors
| Error | Solution |
|---|
401 Unauthorized | Regenerate application password |
403 Forbidden | Check user role (Editor+ required) |
404 Not Found | Verify WORDPRESS_SITE_URL |
Connection Timeout | Check WordPress REST API access |
📖 Full Troubleshooting Guide
📚 Documentation
Getting Started
User Guides
Integration Guides
Developer Documentation
Deployment & Operations
🔧 Requirements
- WordPress 5.0+ with REST API enabled
- HTTPS recommended for production
- Application Passwords enabled (WordPress 5.6+)
| Role | Access |
|---|
| Administrator | Full access to all functions |
| Editor | Posts, pages, comments, media |
| Author | Own posts and media |
| Contributor | Own posts (drafts only) |
| Subscriber | Read only |
🚀 Next Steps
Ready to transform your WordPress management?
- 🏆
Download DXT Extension -
Easiest setup (2 minutes)
- ⚡ Try NPX Method - Power user setup (5 minutes)
- 📚 Explore All Tools - See what's possible
- 💬 Join Discussions - Get help and share ideas
🔗 Similar Projects
📋 Changelog
v3.3.21 (July 2026)
- 🔒 Security Hardening - SSRF denylist, HTTPS enforcement, logger redaction, dependency floor updates
- 🐳 Docker Release Reliability - Bounded publish-job timeouts and corrected retry-on-hang logic
- 📚 DOX Documentation - Hierarchical AGENTS.md contract tree for per-directory work guidance
See CHANGELOG.md for the complete, release-by-release history.
v3.3.14 (June 2026)
- 🔒 Security Updates - Patch moderate Hono vulnerabilities, update allowlisted npm-bundled advisories
- 🧪 CI - Smoke-test improvements and Node 24 validation
v3.x Series (2025–2026)
- 🏗️ Modular Architecture - Domain-specific operation modules and composition pattern
- 🔄 Fault Tolerance - Circuit breaker pattern with automatic recovery
- 📊 2200+ Tests - Comprehensive test suite across security, cache, server, client, config, utils, tools, and
performance
- ⚡ Caching Layer -
CachedWordPressClient with configurable TTL; 50–70% faster repeat requests
- 🌐 Multi-Site - Up to 50 WordPress sites from one configuration file
- 🔐 4 Auth Methods - App Passwords (recommended), JWT, Basic, API Key
- 🐳 Docker & DXT - One-click Claude Desktop extension and Docker Hub image
For the full history see CHANGELOG.md.
🙏 Acknowledgments
Special thanks to Stephan Ferraro for the upstream project that inspired this
implementation.
⭐ Found this helpful? Give us a star on GitHub! ⭐
