Cowboy MCP

Cowboy MCP turns your site into a full-featured Model Context Protocol server. AI coding agents like Claude Code, Codex, and Opencode can connect over HTTP and manage posts, pages, plugins, themes, users, media, WooCommerce stores, and much more — all through a single authenticated endpoint.

Key features:

• Single REST endpoint — JSON-RPC 2.0 over Streamable HTTP at /wp-json/cowboy-mcp/v1/endpoint
• 124 tools — Full CRUD for posts, taxonomies, options, users, comments, media, database diagnostics, WP-CLI, and more
• Plugin integrations — Conditional tools for WooCommerce, ACF, Yoast/Rank Math, Elementor, Wordfence, WPForms/Gravity Forms/CF7, and cache plugins (WP Rocket, LiteSpeed, W3TC)
• 16 read-only resources — Site info, recent posts, plugin/theme lists, WooCommerce summaries, and more
• 8 workflow prompts — Site audit, content migration, SEO optimization, security hardening, and more
• Secure by default — API key authentication (bcrypt-hashed, shown once), per-key rate limiting, safe mode for destructive operations, comprehensive audit logging
• Zero external dependencies — No Composer, no npm, no CDN. Fully self-contained.

How it works:

1. Activate the plugin and generate an API key from Settings > Cowboy MCP.
2. Connect your AI agent using the provided setup command.
3. The agent can now read, create, update, and delete content on your site through the MCP protocol.

Safe mode (enabled by default) requires explicit confirmation for destructive operations like deleting posts, dropping database tables, or running write-mode WP-CLI commands. Every tool call is logged in the built-in audit log with automatic 30-day pruning.