WordPress Manager Plugin for Claude Code

Unified WordPress management and development plugin that orchestrates multiple MCP servers, specialized agents, and knowledge-rich skills to manage self-hosted WordPress sites, Hostinger infrastructure, and guide WordPress development — all from Claude Code.

Architecture

wordpress-manager/
├── .claude-plugin/plugin.json    # Plugin manifest (v2.14.1)
├── .mcp.json                     # MCP server definitions
├── agents/                       # 12 specialized agents
├── commands/                     # 5 slash commands
├── skills/                       # 46 skills (operational + development + content framework)
├── hooks/hooks.json              # 12 safety hooks (PreToolUse)
├── scripts/                      # Dashboard renderer, context scanner, validation
└── servers/wp-rest-bridge/       # Custom MCP server (TypeScript, 148 tools)

MCP Servers

Hostinger MCP (hostinger-mcp)

• Source: hostinger-api-mcp@latest (npm)
• Auth: HOSTINGER_API_TOKEN environment variable
• Capabilities: 119 tools covering hosting, DNS, SSL, email, VPS, domains
• Use: Infrastructure management, DNS updates, SSL certificates, site imports

WP REST Bridge (wp-rest-bridge)

• Source: Custom TypeScript MCP server bundled in servers/wp-rest-bridge/
• Auth: WP_SITES_CONFIG JSON env var with per-site credentials
• Capabilities: 40+ tools for content, media, taxonomies, plugins, users, comments
• Use: Content CRUD, plugin management, user administration, media uploads
• Multi-site: Supports multiple sites via switch_site, list_sites, get_active_site

WordPress.com MCP (External)

• Source: Built-in Claude Code integration (claude.ai)
• Use: WordPress.com hosted sites (content authoring, site settings, editor context)

Agents

Agent collaboration patterns:

• Audit → Fix: wp-security-auditor (finds issues) → wp-security-hardener (implements fixes)
• Delegation: wp-site-manager delegates to specialized agents via its Specialized Agents table

Commands

Skills

Operational Skills (5) — managing live WordPress sites

Local Environment Skill (1) — managing local WordPress dev environments

Development Skills (18) — building WordPress projects

13 core skills integrated from WordPress/agent-skills (GPL-2.0-or-later), plus 5 extended skills (testing, security, i18n, accessibility, headless).

Safety Hooks

Six PreToolUse hooks protect against accidental destructive operations:

Prompt-based (LLM validation):

1. Content Deletion - Confirms before delete_content, delete_media, delete_user, delete_term
2. Plugin Deactivation - Confirms before deactivate_plugin (dependency risk)
3. WordPress Import - Confirms before hosting_importWordpressWebsite (overwrites site)
4. DNS Changes - Confirms before DNS_updateDNSRecordsV1, DNS_resetDNSRecordsV1

Command-based (script validation): 5. Pre-deploy Check - pre-deploy-check.sh validates site reachability and auth before deploy tools 6. Backup Reminder - backup-reminder.sh advisory reminder before import operations

Setup

1. Enable the Plugin

The plugin is registered as a local plugin in ~/.claude/settings.json:

{
  "enabledPlugins": {
    "wordpress-manager@local": true
  }
}

2. Configure Hostinger API Token

Generate a token at Hostinger API Dashboard and add it to your environment:

export HOSTINGER_API_TOKEN="your-api-token"

3. Configure WordPress Sites

Set WP_SITES_CONFIG as a JSON string with your site credentials:

export WP_SITES_CONFIG='[
  {
    "id": "mysite",
    "url": "https://mysite.com",
    "username": "admin",
    "password": "xxxx xxxx xxxx xxxx"
  }
]'
export WP_DEFAULT_SITE="mysite"

Password: Use a WordPress Application Password (Users > Profile > Application Passwords), not the account password.

4. Build the WP REST Bridge

cd ~/.claude/plugins/local/wordpress-manager/servers/wp-rest-bridge
npm install
npx tsc

5. Verify Setup

Run the health check script to validate all connections:

source ~/.claude/mcp-secrets.env
bash ~/.claude/plugins/local/wordpress-manager/scripts/health-check.sh

Tool Inventory

Total: 148 tools available through the unified plugin interface (validated end-to-end).

Development

Project Structure

servers/wp-rest-bridge/src/
├── server.ts              # MCP server entry point (StdioServerTransport)
├── wordpress.ts           # Axios-based WP REST API client (multi-site Map)
├── types.ts               # Zod schemas + TypeScript types
└── tools/
    ├── index.ts            # Tool registry (switch_site, list_sites, get_active_site)
    ├── unified-content.ts  # CRUD for posts, pages, custom post types
    ├── unified-taxonomies.ts # Categories, tags, custom taxonomies
    ├── media.ts            # Upload, list, update, delete media
    ├── plugins.ts          # List, activate, deactivate, search plugins
    ├── users.ts            # User CRUD + role management
    ├── comments.ts         # Comment moderation + CRUD
    └── plugin-repository.ts # Search wordpress.org plugin directory

Build

cd servers/wp-rest-bridge
npx tsc              # Compile TypeScript to build/

Dependencies

• @modelcontextprotocol/sdk ^1.27.1
• axios ^1.7.9
• zod ^3.24.1
• TypeScript 5.7+, Node.js 18+

Version History

License

MIT — Original plugin code. GPL-2.0-or-later — Development skills integrated from WordPress/agent-skills.