Install
$ agentstack add mcp-docdyhr-mcp-wordpress ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ● Network access Used
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ● Environment & secrets Used
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
🚀 MCP WordPress Server
The Most Comprehensive WordPress MCP Server
Manage WordPress sites with natural language through AI tools like Claude Desktop
[Quick Start](#-quick-start) • [Why This MCP Server?](#-why-this-mcp-server) [Installation Options](#-installation-options) • [Documentation](#-documentation) • [Examples](#-examples)
[](https://github.com/docdyhr/mcp-wordpress/actions/workflows/main-ci.yml) [](https://github.com/docdyhr/mcp-wordpress/stargazers) [](https://www.npmjs.com/package/mcp-wordpress) [](https://www.npmjs.com/package/mcp-wordpress) [](https://www.npmjs.com/package/mcp-wordpress) [](https://hub.docker.com/r/docdyhr/mcp-wordpress) [](https://codecov.io/gh/docdyhr/mcp-wordpress) [](https://github.com/docdyhr/mcp-wordpress/actions/workflows/mcp-evaluations.yml)
[](https://github.com/docdyhr/mcp-wordpress) [](https://github.com/docdyhr/mcp-wordpress/actions/workflows/codeql-analysis.yml) [](https://hub.docker.com/r/docdyhr/mcp-wordpress) [](https://github.com/docdyhr/mcp-wordpress/blob/main/LICENSE)
🎉 v3.3.14 - Production Ready!
🎯 Why This MCP Server?
Transform WordPress management from complex admin panels to simple conversations:
❌ Before: Login → Admin Panel → Navigate → Click → Fill Forms → Save
✅ After: "Create a new blog post about AI trends with SEO optimization"
Key Advantages:
- 🏆 Most Complete: 59 tools vs 20-30 in alternatives
- ⚡ Fastest Setup: 2-click Claude Desktop installation via DXT
- 🔒 Production Ready: 2200+ tests, security audited, battle-tested
- 🎯 TypeScript Native: 100% type safety, best-in-class developer experience
- 🌐 Multi-Site: Manage unlimited WordPress sites from one place
🚀 Quick Start
Get up and running in under 5 minutes:
Prerequisites
- WordPress: Version 5.6+ with REST API enabled
- Claude Desktop: Latest version installed
- Application Password: Generated from WordPress admin panel
3-Step Setup
1️⃣ Generate WordPress Application Password
WordPress Admin → Users → Profile → Application Passwords → Add New
2️⃣ Install MCP Server (Choose One)
Option A: DXT Extension (Easiest)
# Download and install in Claude Desktop
curl -L https://github.com/docdyhr/mcp-wordpress/releases/latest/download/mcp-wordpress.dxt -o mcp-wordpress.dxt
# Then: Claude Desktop → Extensions → Install → Select DXT file
Option B: NPM Global Install
npm install -g mcp-wordpress
3️⃣ Test Your Connection
In Claude: "Test my WordPress connection"
Response: "✅ Authentication successful! Connected to: Your Site Name"
📺 Watch 2-minute Setup Video | 📖 [Detailed Setup Guide](docs/INSTALLATION.md)
⚡ Installation Options
🏆 Recommended: Claude Desktop Extension (DXT)
Easiest installation - just 2 clicks!
- Download:
mcp-wordpress.dxt (3.4MB)
- Install: Claude Desktop → Extensions → Install → Select DXT file
- Configure: Enter your WordPress site URL and credentials
✅ Zero command line required ✅ Easy updates ✅ Built-in security
[📖 Complete DXT Setup Guide →](docs/integrations/claude-desktop.md)
🚀 Alternative: NPX (Power Users)
# Run directly - always latest version
npx -y mcp-wordpress
# Interactive setup wizard
npm run setup
🔧 Other Options
- 💻 [NPM Setup](docs/user-guides/NPM_SETUP.md) - Local development
- 🐳 [Docker Setup](docs/user-guides/DOCKER_SETUP.md) - Production deployment
- 🔧 [Manual Build](docs/developer/BUILD_SYSTEM.md) - Custom builds
📋 Configuration
Single Site (.env)
WORDPRESS_SITE_URL=https://myblog.com
WORDPRESS_USERNAME=admin
WORDPRESS_APP_PASSWORD=xxxx xxxx xxxx xxxx xxxx xxxx
Claude Desktop Config
{
"mcpServers": {
"mcp-wordpress": {
"command": "npx",
"args": ["-y", "mcp-wordpress"],
"env": {
"WORDPRESS_SITE_URL": "https://myblog.com",
"WORDPRESS_USERNAME": "admin",
"WORDPRESS_APP_PASSWORD": "xxxx xxxx xxxx xxxx xxxx xxxx"
}
}
}
}
📖 [Complete Configuration Guide](docs/CONFIGURATION.md) — multi-site, JWT, Docker, production environments
🔐 Authentication
WordPress Application Passwords are recommended:
- WordPress Admin → Users → Profile → Application Passwords → Add New
- Copy the generated password into your config
Alternative methods: JWT, Basic Auth, API Key — see [Authentication Configuration](docs/CONFIGURATION.md#authentication-configuration)
🌟 What Makes This Special
| Feature | This Server | Competition | | -------------------------- | -------------------------------------- | --------------- | | Tools Available | 59 tools | 20-30 tools | | Claude Desktop DXT | ✅ 2-click install | ❌ Manual setup | | Multi-Site Support | ✅ Unlimited sites | ❌ Single site | | TypeScript | ✅ 100% coverage | ⚠️ Partial/None | | Performance Monitoring | ✅ Real-time analytics | ❌ Basic only | | Test Coverage | ✅ 2200+ tests, comprehensive coverage | ⚠️ Limited | | Production Ready | ✅ Security audited | ⚠️ Unknown |
📋 Available Tools (59 Tools)
Content Management
- 📝 Posts (6 tools) - Create, edit, delete, list posts and revisions
- 📄 Pages (6 tools) - Manage static pages and revisions
- 🖼️ Media (6 tools) - Upload, manage media library and files
User & Community
- 👥 Users (6 tools) - User management and profiles
- 💬 Comments (7 tools) - Comment moderation and management
- 🏷️ Taxonomies (10 tools) - Categories and tags management
Site Management
- ⚙️ Site Settings (7 tools) - Site configuration and statistics
- 🔐 Authentication (6 tools) - Auth testing and management
- ⚡ Cache Management (4 tools) - Performance caching control
- 📊 Performance Monitoring (6 tools) - Real-time metrics and optimization
📖 [Complete Tool Documentation](docs/api/README.md) | [Live API Reference](docs/developer/API_REFERENCE.md)
🤖 Examples
💬 "Create a new blog post about AI trends with SEO optimization"
💬 "Check my WordPress site performance and provide optimization recommendations"
💬 "Find all draft posts older than 30 days and provide a summary"
💬 "Batch update all client sites with the new privacy policy footer"
💬 "List all posts from my client-blog site"
📖 [More Examples](docs/examples/) | [Real-World Workflows](docs/examples/use-case-workflows.md)
🧪 Testing & Security
npm test # Full test suite (512/512 passing)
npm run test:security # Security tests (40/40 passing)
npm run health # System health check
📖 [Security Documentation](docs/SECURITY.md) — OWASP coverage, penetration testing, compliance
🛠️ Troubleshooting
npm run health # System check
DEBUG=true npm run dev # Debug logging
npm run fix:rest-auth # Fix WordPress 401 errors
| Error | Solution | |-------|----------| | 401 Unauthorized | Regenerate application password | | 403 Forbidden | Check user role (Editor+ required) | | 404 Not Found | Verify WORDPRESS_SITE_URL | | Connection Timeout | Check WordPress REST API access |
📖 [Full Troubleshooting Guide](docs/TROUBLESHOOTING.md)
📚 Documentation
Getting Started
- [Quick Start Guide](#-quick-start) - Get running in 5 minutes
- [Installation Guide](docs/INSTALLATION.md) - Detailed setup instructions
- [Configuration Guide](docs/CONFIGURATION.md) - All configuration options
- [Authentication Setup](docs/SECURITY.md#authentication) - WordPress auth methods
User Guides
- [Basic Usage](docs/examples/single-site-setup.md) - Common tasks and workflows
- [Advanced Workflows](docs/examples/use-case-workflows.md) - Complex automation
- [Multi-Site Management](docs/examples/multi-site-setup.md) - Managing multiple sites
- [Troubleshooting](docs/TROUBLESHOOTING.md) - Common issues and solutions
Integration Guides
- [Claude Desktop](docs/integrations/claude-desktop.md) - Complete Claude integration
- [VS Code](docs/integrations/vs-code.md) - VS Code extension setup
- [Cline](docs/integrations/cline.md) - Cline AI assistant integration
- [Developer Guide](docs/developer/README.md) - Build your own MCP client
Developer Documentation
- [API Reference](docs/developer/API_REFERENCE.md) - Complete tool documentation
- [Architecture](docs/ARCHITECTURE.md) - System design and decisions
- [Contributing](CONTRIBUTING.md) - Development guidelines
- [Build System](docs/developer/BUILD_SYSTEM.md) - Build and release
Deployment & Operations
- [Docker Deployment](docs/DOCKER.md) - Container deployment
- [Publishing Troubleshooting](docs/PUBLISHING-TROUBLESHOOTING.md) - Fix publishing issues
- [Security Best Practices](docs/SECURITY.md) - Production security
- [Caching](docs/CACHING.md) - Performance and caching guide
🔧 Requirements
- WordPress 5.0+ with REST API enabled
- HTTPS recommended for production
- Application Passwords enabled (WordPress 5.6+)
| Role | Access | | ----------------- | ----------------------------- | | Administrator | Full access to all functions | | Editor | Posts, pages, comments, media | | Author | Own posts and media | | Contributor | Own posts (drafts only) | | Subscriber | Read only |
🚀 Next Steps
Ready to transform your WordPress management?
- 🏆 Download DXT Extension - Easiest setup (2 minutes)
- ⚡ [Try NPX Method](docs/user-guides/NPX_SETUP.md) - Power user setup (5 minutes)
- 📚 [Explore All Tools](docs/api/README.md) - See what's possible
- 💬 Join Discussions - Get help and share ideas
🔗 Similar Projects
- Automattic WordPress MCP - Official WordPress MCP server by Automattic
📋 Changelog
v3.3.14 (June 2026)
- 🔒 Security Updates - Patch moderate Hono vulnerabilities, update allowlisted npm-bundled advisories
- 🧪 CI - Smoke-test improvements and Node 24 validation
v3.x Series (2025–2026)
- 🏗️ Modular Architecture - Domain-specific operation modules and composition pattern
- 🔄 Fault Tolerance - Circuit breaker pattern with automatic recovery
- 📊 2200+ Tests - Comprehensive test suite across security, cache, server, client, config, utils, tools, and performance
- ⚡ Caching Layer -
CachedWordPressClientwith configurable TTL; 50–70% faster repeat requests - 🌐 Multi-Site - Unlimited WordPress sites from one configuration file
- 🔐 4 Auth Methods - App Passwords (recommended), JWT, Basic, API Key
- 🐳 Docker & DXT - One-click Claude Desktop extension and Docker Hub image
For the full history see [CHANGELOG.md](CHANGELOG.md).
🙏 Acknowledgments
Special thanks to Stephan Ferraro for the upstream project that inspired this implementation.
⭐ Found this helpful? Give us a star on GitHub! ⭐
Source & license
This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: docdyhr
- Source: docdyhr/mcp-wordpress
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.