MCP Command Kit

Turn any WordPress site into a Model Context Protocol (MCP) server, so an AI agent can run the whole site from a chat.

Turn any WordPress site into a Model Context Protocol (MCP) server, so an AI agent can run the whole site from a chat.

MCP Command Kit is a self-hosted WordPress plugin that exposes your site to MCP-capable AI clients — Claude Code, Cursor, VS Code, and anything else that speaks MCP. Ask in plain language ("publish these drafts", "bump every Summer Sale price 20%", "why is checkout 500-ing?") and your agent does it, using WordPress's own functions, permissions, and hooks.

Self-hosted — runs on your site, no external service, no account, no data leaves your server.

Full control — content, media, users, plugins, themes, files, the database, WooCommerce, and Elementor.

Safe by design — capability checks, safe/power modes, per-IP and per-key rate limiting, an audit log, and one-command rollback.

83 tools across 11 domains, exposed through a lean discovery gateway so agents stay fast.

How it works

Once activated, your site answers MCP JSON-RPC at https://your-site.com/wp-json/mcp-command-kit/v1/mcp , authenticated with a Bearer API key or a WordPress Application Password. Clients that support remote HTTP MCP connect to that URL directly; a local stdio bridge is available for clients that only speak stdio.

What's included — 83 tools

Only 7 tools are advertised up front (the discovery gateway); the rest are reached through wpmcp_run to keep the agent's context small.

Domain Tools

Gateway wpmcp_discover , wpmcp_info , wpmcp_run , wpmcp_batch

Content posts, taxonomies, terms, comments

Media list, get, sideload from URL, update, delete

Users list, get, create, update

Plugins list, activate, deactivate, install

Themes list, active, switch, read file

Files list, read, write (auto-checkpointed)

Options & DB allowlisted option get/update, serialization-safe search-replace

Recovery checkpoint create/list/get/restore/delete

Diagnostics site info, health check, diagnostics, audit log, debug

WooCommerce products, variations, coupons, orders, customers, sales reports

Elementor pages, document data, widget/container add, templates, globals

Elementor tools create real, editable widgets — not embedded HTML.

Safety model

Every request passes through five layers:

Authentication — bcrypt-hashed API key or WordPress Application Password; no anonymous access.

Capability check — each tool runs as a real WordPress user and requires that user's capability.

Safe mode (default on) — blocks destructive operations.

Power mode (default off) — required for write/management operations.

Rate limiting — a per-IP flood guard (300/min) plus a per-key request budget (120/min).

Every action is written to an audit log , files_write auto-snapshots before overwriting, and search_replace is serialization-safe , defaults to dry-run, and only touches an allowlist of core tables.

Requirements

WordPress 6.4+ and PHP 7.4+

A self-hosted WordPress site with the REST API reachable

Node 18+ (only if you use the bridge)

Licensed GPL-2.0-or-later .

{  "mcpServers": {    "wordpress": {      "url": "https://your-site.com/wp-json/mcp-command-kit/v1/mcp",      "headers": { "Authorization": "Bearer wpmcp_your_api_key" }    }  }}