Server · #370 trending MCP repo · ↗ +1 stars this week

MCP Wordpress

docdyhr/mcp-wordpress

MCP Server to manage a Wordpress CMS system.

Install ↓GitHub ↗

Stars: 114
This week: +1
Forks: 17
Open issues: 1
Skills inside: 7

Star trend · last 9 days+1 ★

Get started

Add it to your agent

claude mcp add wordpress -- npx -y mcp-wordpress

Run in your terminal. Add --scope project to share it with your team through .mcp.json.

codex mcp add wordpress -- npx -y mcp-wordpress

Saved to ~/.codex/config.toml.

{
  "mcpServers": {
    "wordpress": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-wordpress"
      ]
    }
  }
}

Add to ~/.cursor/mcp.json (or .cursor/mcp.json in a project).

{
  "servers": {
    "wordpress": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "mcp-wordpress"
      ]
    }
  }
}

Add to .vscode/mcp.json, then start it from the MCP view in Copilot Chat.

gemini mcp add wordpress npx -y mcp-wordpress

Saved to .gemini/settings.json.

Inside this repo

7 skills

dependabot- Comprehensive guide for configuring and managing GitHub Dependabot. Use this skill when users ask about creating or optimizing dependabot.yml files, managing Dependabot pull requests, configuring dependency update strategies, setting up grouped updates, monorepo patterns, multi-ecosystem groups, s.claude/skills/dependabotdocs-sync-auditRun a read-only documentation drift audit for a feature, PR, branch, release, API, configuration change, workflow, CLI, package, or repository area. Use when the user asks whether docs are stale, missing, inconsistent with code, or need updates after code changes. Checks README files, setup guides, .claude/skills/docs-sync-auditgithub-actions-hardeningSecurity hardening reviewer for GitHub Actions workflow files (.github/workflows/*.yml). Reasons about the Actions threat model that pattern matchers and general code linters miss — untrusted-input script injection, privileged triggers running fork code, mutable action references, and over-scoped to.claude/skills/github-actions-hardeningmcp-implementation-security-reviewReview the implementation source code of MCP (Model Context Protocol) servers, clients, and tool handlers against a security baseline — authentication, sessions, rate limiting, input-schema validation, official-SDK usage, RCE vectors, and the OWASP MCP Top 10 — producing a report with file/line evid.claude/skills/mcp-implementation-security-reviewmcp-release-qaVerify an MCP server before release by exercising a real protocol session, comparing runtime capabilities with source and documentation, testing failure paths, and recording reproducible evidence. Use when shipping or reviewing an MCP server, tool, resource, prompt, catalog, or install path..claude/skills/mcp-release-qamcp-security-auditAudit MCP (Model Context Protocol) server configurations for security issues. Use this skill when: - Reviewing .mcp.json files for security risks - Checking MCP server args for hardcoded secrets or shell injection patterns - Validating that MCP package-runner dependencies use exact reviewed versions.claude/skills/mcp-security-audittest-gap-auditRun a read-only audit for missing, weak, stale, or mis-scoped test coverage. If the user does not name a scope, audit the full repository and identify important code paths, routes, features, services, workflows, and contracts that lack proper tests. If the user names a feature, PR, branch, route, wo.claude/skills/test-gap-audit

Documentation

README

View on GitHub ↗

🚀 MCP WordPress Server

The Most Comprehensive WordPress MCP Server

Manage WordPress sites with natural language through AI tools like Claude Desktop

Quick Start • Why This MCP Server? Installation Options • Documentation • Examples

🎉 v3.3.21 - CI-Tested on Node 22/24

🎯 Why This MCP Server?

Transform WordPress management from complex admin panels to simple conversations:

❌ Before: Login → Admin Panel → Navigate → Click → Fill Forms → Save
✅ After:  "Create a new blog post about AI trends with SEO optimization"

Key Advantages:

🏆 Most Complete: 73 tools vs 20-30 in alternatives
⚡ Fastest Setup: 2-click Claude Desktop installation via DXT
🔒 CI-Tested: 2750+ tests across Node 22/24, CodeQL + Trivy security scanning
🎯 TypeScript Native: 100% type safety, best-in-class developer experience
🌐 Multi-Site: Manage up to 50 WordPress sites from one place

🚀 Quick Start

Get up and running in under 5 minutes:

Prerequisites

WordPress: Version 5.6+ with REST API enabled
Claude Desktop: Latest version installed
Application Password: Generated from WordPress admin panel

3-Step Setup

1️⃣ Generate WordPress Application Password

WordPress Admin → Users → Profile → Application Passwords → Add New

2️⃣ Install MCP Server (Choose One)

Option A: DXT Extension (Easiest)

# Download and install in Claude Desktop
curl -L https://github.com/docdyhr/mcp-wordpress/releases/latest/download/mcp-wordpress.dxt -o mcp-wordpress.dxt
# Then: Claude Desktop → Extensions → Install → Select DXT file

Option B: NPM Global Install

npm install -g mcp-wordpress

3️⃣ Test Your Connection

In Claude: "Test my WordPress connection"
Response: "✅ Authentication successful! Connected to: Your Site Name"

📺 Watch 2-minute Setup Video | 📖 Detailed Setup Guide

⚡ Installation Options

🏆 Recommended: Claude Desktop Extension (DXT)

Easiest installation - just 2 clicks!

Download: mcp-wordpress.dxt (3.4MB)
Install: Claude Desktop → Extensions → Install → Select DXT file
Configure: Enter your WordPress site URL and credentials

✅ Zero command line required ✅ Easy updates ✅ Built-in security

📖 Complete DXT Setup Guide →

🚀 Alternative: NPX (Power Users)

# Run directly - always latest version
npx -y mcp-wordpress

# Interactive setup wizard
npm run setup

🔧 Other Options

💻 NPM Setup - Local development
🐳 Docker Setup - Production deployment
🔧 Manual Build - Custom builds

📋 Configuration

Single Site (.env)

WORDPRESS_SITE_URL=https://myblog.com
WORDPRESS_USERNAME=admin
WORDPRESS_APP_PASSWORD=xxxx xxxx xxxx xxxx xxxx xxxx

Claude Desktop Config

{
  "mcpServers": {
    "mcp-wordpress": {
      "command": "npx",
      "args": ["-y", "mcp-wordpress"],
      "env": {
        "WORDPRESS_SITE_URL": "https://myblog.com",
        "WORDPRESS_USERNAME": "admin",
        "WORDPRESS_APP_PASSWORD": "xxxx xxxx xxxx xxxx xxxx xxxx"
      }
    }
  }
}

📖 Complete Configuration Guide — multi-site, JWT, Docker, production environments

🔐 Authentication

WordPress Application Passwords are recommended:

WordPress Admin → Users → Profile → Application Passwords → Add New
Copy the generated password into your config

Alternative methods: JWT, Basic Auth, API Key — see Authentication Configuration

🌟 What Makes This Special

Feature	This Server	Competition
Tools Available	73 tools	20-30 tools
Claude Desktop DXT	✅ 2-click install	❌ Manual setup
Multi-Site Support	✅ Up to 50 sites	❌ Single site
TypeScript	✅ 100% TypeScript, strict mode	⚠️ Partial/None
Performance Monitoring	✅ Real-time analytics	❌ Basic only
Test Coverage	✅ 2750+ tests, ~76% line coverage	⚠️ Limited
Security Scanning	✅ CodeQL + Trivy in CI	⚠️ Unknown

📋 Available Tools (73 Tools)

Content Management

📝 Posts (6 tools) - Create, edit, delete, and list posts and custom post types
📄 Pages (6 tools) - Manage static pages and revisions
🖼️ Media (5 tools) - Upload, manage media library and files
🔍 SEO (11 tools) - Content analysis, metadata, schema markup, SERP tracking, keyword research

User & Community

👥 Users (6 tools) - User management and profiles
💬 Comments (7 tools) - Comment moderation and management
🏷️ Taxonomies (10 tools) - Categories and tags management

Site Management

⚙️ Site Settings (6 tools) - Site configuration and statistics
🔐 Authentication (3 tools) - Auth testing and management
⚡ Cache Management (4 tools) - Performance caching control
📊 Performance Monitoring (6 tools) - Real-time metrics and optimization
🛠️ System (3 tools) - Version, plugin, and theme inspection

📖 Complete Tool Documentation | Live API Reference

🤖 Examples

💬 "Create a new blog post about AI trends with SEO optimization"
💬 "Check my WordPress site performance and provide optimization recommendations"
💬 "Find all draft posts older than 30 days and provide a summary"
💬 "Batch update all client sites with the new privacy policy footer"
💬 "List all posts from my client-blog site"

📖 More Examples | Real-World Workflows

🧪 Testing & Security

npm test              # Full test suite (2750/2750 passing, 94 files)
npm run test:security # Security tests (371/371 passing)
npm run health        # System health check

📖 Security Documentation — OWASP coverage, penetration testing, compliance

🛠️ Troubleshooting

npm run health         # System check
DEBUG=true npm run dev # Debug logging
npm run fix:rest-auth  # Fix WordPress 401 errors

Error	Solution
`401 Unauthorized`	Regenerate application password
`403 Forbidden`	Check user role (Editor+ required)
`404 Not Found`	Verify `WORDPRESS_SITE_URL`
`Connection Timeout`	Check WordPress REST API access

📖 Full Troubleshooting Guide

📚 Documentation

Getting Started

Quick Start Guide - Get running in 5 minutes
Installation Guide - Detailed setup instructions
Configuration Guide - All configuration options
Authentication Setup - WordPress auth methods

User Guides

Basic Usage - Common tasks and workflows
Advanced Workflows - Complex automation
Multi-Site Management - Managing multiple sites
Troubleshooting - Common issues and solutions

Integration Guides

Claude Desktop - Complete Claude integration
VS Code - VS Code extension setup
Cline - Cline AI assistant integration
Developer Guide - Build your own MCP client

Developer Documentation

API Reference - Complete tool documentation
Architecture - System design and decisions
Contributing - Development guidelines
Build System - Build and release

Deployment & Operations

Docker Deployment - Container deployment
Publishing Troubleshooting - Fix publishing issues
Security Best Practices - Production security
Caching - Performance and caching guide

🔧 Requirements

WordPress 5.0+ with REST API enabled
HTTPS recommended for production
Application Passwords enabled (WordPress 5.6+)

Role	Access
Administrator	Full access to all functions
Editor	Posts, pages, comments, media
Author	Own posts and media
Contributor	Own posts (drafts only)
Subscriber	Read only

🚀 Next Steps

Ready to transform your WordPress management?

🏆 Download DXT Extension - Easiest setup (2 minutes)
⚡ Try NPX Method - Power user setup (5 minutes)
📚 Explore All Tools - See what's possible
💬 Join Discussions - Get help and share ideas

🔗 Similar Projects

Automattic WordPress MCP - Official WordPress MCP server by Automattic

📋 Changelog

v3.3.21 (July 2026)

🔒 Security Hardening - SSRF denylist, HTTPS enforcement, logger redaction, dependency floor updates
🐳 Docker Release Reliability - Bounded publish-job timeouts and corrected retry-on-hang logic
📚 DOX Documentation - Hierarchical AGENTS.md contract tree for per-directory work guidance

See CHANGELOG.md for the complete, release-by-release history.

v3.3.14 (June 2026)

🔒 Security Updates - Patch moderate Hono vulnerabilities, update allowlisted npm-bundled advisories
🧪 CI - Smoke-test improvements and Node 24 validation

v3.x Series (2025–2026)

🏗️ Modular Architecture - Domain-specific operation modules and composition pattern
🔄 Fault Tolerance - Circuit breaker pattern with automatic recovery
📊 2200+ Tests - Comprehensive test suite across security, cache, server, client, config, utils, tools, and performance
⚡ Caching Layer - CachedWordPressClient with configurable TTL; 50–70% faster repeat requests
🌐 Multi-Site - Up to 50 WordPress sites from one configuration file
🔐 4 Auth Methods - App Passwords (recommended), JWT, Basic, API Key
🐳 Docker & DXT - One-click Claude Desktop extension and Docker Hub image

For the full history see CHANGELOG.md.

🙏 Acknowledgments

Special thanks to Stephan Ferraro for the upstream project that inspired this implementation.

⭐ Found this helpful? Give us a star on GitHub! ⭐

Releases

Recent versions

All releases ↗