1. Conduid
  2. Content
  3. Wordpress
MCP server · Content

Wordpress

MCP Server to manage a Wordpress CMS system.

55Fair

Scored 4 hours ago · breakdown

About Wordpress

Wordpress is an MCP server published by docdyhr in the Content category: mCP Server to manage a Wordpress CMS system.

The repository has 111 stars and 17 forks, with the last commit 10 hours ago. Recent commit activity is the strongest signal that reported issues will get attention.

Install

Claude Code
claude mcp add wordpress-08fc -- npx -y mcp-wordpress
npx
npx -y mcp-wordpress

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Wordpress

Powered by Claude · Grounded in docs

I know everything about Wordpress. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

Static checks derived from the repository 2 hours ago. Heuristics on the source, not an audit.

  • ✓README presentThe repository ships documentation.
  • ✓License declaredUsable under a stated license.
  • ✓Tests presentA test suite exists in the repository.
  • ✓Dependencies pinnedA lockfile pins dependency versions.
  • !No dynamic code executionSource scan found eval or shell execution. Review how tool inputs reach it before granting credentials.

1 check has not been run yet.

Releases

v4.1.6v4.1.6 · 12 Oct 20264.1.6 (2026-10-12) 🐛 Bug Fixes performance: fit trends against time and treat idle caches as no data (#274)…
v4.1.5v4.1.5 · 12 Oct 20264.1.5 (2026-10-12) 🐛 Bug Fixes seo: cache SEO results for their TTL in seconds, keyed by every input (#273)…
v4.1.4v4.1.4 · 10 Oct 20264.1.4 (2026-10-10) 🐛 Bug Fixes performance: keep history snapshots by when they were taken (#272)…
v4.1.3v4.1.3 · 10 Oct 20264.1.3 (2026-10-10) 🐛 Bug Fixes performance: round alert values and label cache hit-rate scope (#270)…
v4.1.2v4.1.2 · 10 Oct 20264.1.2 (2026-10-10) 🐛 Bug Fixes tools: decode entities in post, page and media titles (#269)…

README

MCP Toplist

🚀 MCP WordPress Server

The Most Comprehensive WordPress MCP Server

Manage WordPress sites with natural language through AI tools like Claude Desktop

Quick Start • Why This MCP Server? Installation Options • Documentation • Examples

CI/CD Pipeline GitHub Stars NPM Version NPM Downloads NPM Total Downloads Docker Pulls Coverage Status

TypeScript CodeQL Docker License

🎉 v3.3.21 - CI-Tested on Node 22/24

🎯 Why This MCP Server?

Transform WordPress management from complex admin panels to simple conversations:

❌ Before: Login → Admin Panel → Navigate → Click → Fill Forms → Save
✅ After:  "Create a new blog post about AI trends with SEO optimization"

Key Advantages:

  • 🏆 Most Complete: 71 tools vs 20-30 in alternatives
  • ⚡ Fastest Setup: 2-click Claude Desktop installation via DXT
  • 🔒 CI-Tested: 2750+ tests across Node 22/24, CodeQL + Trivy security scanning
  • 🎯 TypeScript Native: 100% type safety, best-in-class developer experience
  • 🌐 Multi-Site: Manage up to 50 WordPress sites from one place

🚀 Quick Start

Get up and running in under 5 minutes:

Prerequisites

  • WordPress: Version 5.6+ with REST API enabled
  • Claude Desktop: Latest version installed
  • Application Password: Generated from WordPress admin panel

3-Step Setup

1️⃣ Generate WordPress Application Password

WordPress Admin → Users → Profile → Application Passwords → Add New

2️⃣ Install MCP Server (Choose One)

Option A: DXT Extension (Easiest)

# Download and install in Claude Desktop
curl -L https://github.com/docdyhr/mcp-wordpress/releases/latest/download/mcp-wordpress.dxt -o mcp-wordpress.dxt
# Then: Claude Desktop → Extensions → Install → Select DXT file

Option B: NPM Global Install

npm install -g mcp-wordpress

3️⃣ Test Your Connection

In Claude: "Test my WordPress connection"
Response: "✅ Authentication successful! Connected to: Your Site Name"

📺 Watch 2-minute Setup Video | 📖 Detailed Setup Guide

⚡ Installation Options

🏆 Recommended: Claude Desktop Extension (DXT)

Easiest installation - just 2 clicks!

  1. Download: mcp-wordpress.dxt (3.4MB)
  2. Install: Claude Desktop → Extensions → Install → Select DXT file
  3. Configure: Enter your WordPress site URL and credentials

✅ Zero command line required ✅ Easy updates ✅ Built-in security

📖 Complete DXT Setup Guide →

🚀 Alternative: NPX (Power Users)

# Run directly - always latest version
npx -y mcp-wordpress

# Interactive setup wizard
npm run setup

🔧 Other Options

📋 Configuration

Single Site (.env)

WORDPRESS_SITE_URL=https://myblog.com
WORDPRESS_USERNAME=admin
WORDPRESS_APP_PASSWORD=xxxx xxxx xxxx xxxx xxxx xxxx

Claude Desktop Config

{
  "mcpServers": {
    "mcp-wordpress": {
      "command": "npx",
      "args": ["-y", "mcp-wordpress"],
      "env": {
        "WORDPRESS_SITE_URL": "https://myblog.com",
        "WORDPRESS_USERNAME": "admin",
        "WORDPRESS_APP_PASSWORD": "xxxx xxxx xxxx xxxx xxxx xxxx"
      }
    }
  }
}

📖 Complete Configuration Guide — multi-site, JWT, Docker, production environments

🔐 Authentication

WordPress Application Passwords are recommended:

  1. WordPress Admin → Users → Profile → Application Passwords → Add New
  2. Copy the generated password into your config

Alternative methods: JWT, Basic Auth, API Key — see Authentication Configuration

🌟 What Makes This Special

Feature This Server Competition
Tools Available 71 tools 20-30 tools
Claude Desktop DXT ✅ 2-click install ❌ Manual setup
Multi-Site Support ✅ Up to 50 sites ❌ Single site
TypeScript ✅ 100% TypeScript, strict mode ⚠️ Partial/None
Performance Monitoring ✅ Real-time analytics ❌ Basic only
Test Coverage ✅ 2750+ tests, ~76% line coverage ⚠️ Limited
Security Scanning ✅ CodeQL + Trivy in CI ⚠️ Unknown

📋 Available Tools (71 Tools)

Content Management

  • 📝 Posts (6 tools) - Create, edit, delete, list posts and revisions
  • 📄 Pages (6 tools) - Manage static pages and revisions
  • 🖼️ Media (5 tools) - Upload, manage media library and files
  • 🔍 SEO (11 tools) - Content analysis, metadata, schema markup, SERP tracking, keyword research

User & Community

  • 👥 Users (6 tools) - User management and profiles
  • 💬 Comments (7 tools) - Comment moderation and management
  • 🏷️ Taxonomies (10 tools) - Categories and tags management

Site Management

  • ⚙️ Site Settings (6 tools) - Site configuration and statistics
  • 🔐 Authentication (3 tools) - Auth testing and management
  • ⚡ Cache Management (4 tools) - Performance caching control
  • 📊 Performance Monitoring (6 tools) - Real-time metrics and optimization
  • 🛠️ System (1 tool) - Version checking

📖 Complete Tool Documentation | Live API Reference

🤖 Examples

💬 "Create a new blog post about AI trends with SEO optimization"
💬 "Check my WordPress site performance and provide optimization recommendations"
💬 "Find all draft posts older than 30 days and provide a summary"
💬 "Batch update all client sites with the new privacy policy footer"
💬 "List all posts from my client-blog site"

📖 More Examples | Real-World Workflows

🧪 Testing & Security

npm test              # Full test suite (2750/2750 passing, 94 files)
npm run test:security # Security tests (371/371 passing)
npm run health        # System health check

📖 Security Documentation — OWASP coverage, penetration testing, compliance

🛠️ Troubleshooting

npm run health         # System check
DEBUG=true npm run dev # Debug logging
npm run fix:rest-auth  # Fix WordPress 401 errors
Error Solution
401 Unauthorized Regenerate application password
403 Forbidden Check user role (Editor+ required)
404 Not Found Verify WORDPRESS_SITE_URL
Connection Timeout Check WordPress REST API access

📖 Full Troubleshooting Guide

📚 Documentation

Getting Started

User Guides

Integration Guides

Developer Documentation

Deployment & Operations

🔧 Requirements

  • WordPress 5.0+ with REST API enabled
  • HTTPS recommended for production
  • Application Passwords enabled (WordPress 5.6+)
Role Access
Administrator Full access to all functions
Editor Posts, pages, comments, media
Author Own posts and media
Contributor Own posts (drafts only)
Subscriber Read only

🚀 Next Steps

Ready to transform your WordPress management?

  1. 🏆 Download DXT Extension - Easiest setup (2 minutes)
  2. ⚡ Try NPX Method - Power user setup (5 minutes)
  3. 📚 Explore All Tools - See what's possible
  4. 💬 Join Discussions - Get help and share ideas

🔗 Similar Projects


📋 Changelog

v3.3.21 (July 2026)

  • 🔒 Security Hardening - SSRF denylist, HTTPS enforcement, logger redaction, dependency floor updates
  • 🐳 Docker Release Reliability - Bounded publish-job timeouts and corrected retry-on-hang logic
  • 📚 DOX Documentation - Hierarchical AGENTS.md contract tree for per-directory work guidance

See CHANGELOG.md for the complete, release-by-release history.

v3.3.14 (June 2026)

  • 🔒 Security Updates - Patch moderate Hono vulnerabilities, update allowlisted npm-bundled advisories
  • 🧪 CI - Smoke-test improvements and Node 24 validation

v3.x Series (2025–2026)

  • 🏗️ Modular Architecture - Domain-specific operation modules and composition pattern
  • 🔄 Fault Tolerance - Circuit breaker pattern with automatic recovery
  • 📊 2200+ Tests - Comprehensive test suite across security, cache, server, client, config, utils, tools, and performance
  • ⚡ Caching Layer - CachedWordPressClient with configurable TTL; 50–70% faster repeat requests
  • 🌐 Multi-Site - Up to 50 WordPress sites from one configuration file
  • 🔐 4 Auth Methods - App Passwords (recommended), JWT, Basic, API Key
  • 🐳 Docker & DXT - One-click Claude Desktop extension and Docker Hub image

For the full history see CHANGELOG.md.


🙏 Acknowledgments

Special thanks to Stephan Ferraro for the upstream project that inspired this implementation.


⭐ Found this helpful? Give us a star on GitHub! ⭐

README fetched from the repository 2 hours ago. The original is authoritative.

Questions

About Wordpress

How do I install Wordpress?

Run claude mcp add wordpress-08fc -- npx -y mcp-wordpress, then add the server to your MCP client's configuration.

Is Wordpress safe to use with an AI agent?

Its trust score is 55 out of 100 (fair). It passes 4 of the 5 static security checks run so far; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Wordpress still maintained?

Yes — the latest release is v4.1.6 (12 Oct 2026), and the last commit was 10 hours ago. The repository has 111 stars and 5 open issues.