MCP for WordPress by Kites.Dev

MCP for WordPress by Kites.Dev turns your WordPress website into a fully compatible Model Context Protocol (MCP) server. Built by Kites.Dev, this plugin allows you to seamlessly connect your WordPress site directly to your favorite AI assistants and environments—including Claude Desktop, Cursor IDE, Windsurf, ChatGPT / Custom GPTs, LangChain, AutoGen, and custom Python scripts.

What You Can Do With This Plugin

• ✍️ Draft, Edit & Publish Content Directly: Ask your AI agent to draft new blog posts, rewrite existing articles, create pages, assign categories and tags, and publish or save as draft directly from your AI chat window.
• 🖼️ Manage Media Assets: Upload images and featured graphics directly to your WordPress Media Library via your AI assistant.
• 🔍 Query & Update WordPress Data: Search posts, pages, custom post types, and retrieve published content contextually for AI-assisted writing or research.
• 🛠️ Inspect Site Diagnostics & Schema: Let your AI agent inspect active themes, plugin configurations, database table structures, and site health parameters for fast site troubleshooting.
• 🛡️ Stay Safe with Read-Only Mode & Scope Guardrails: Toggle global Read-Only mode or assign read-only scope to specific API keys to prevent AI models from executing destructive write operations.
• 📊 Real-Time Audit Logging: Monitor every single incoming AI request, tool invocation payload, response code, client IP address, and execution duration from your WordPress dashboard.

Supported AI Tools & Clients

• Claude Desktop: Native JSON-RPC 2.0 and Server-Sent Events (SSE) support via claude_desktop_config.json.
• Cursor & Windsurf IDEs: Interact with your live site while building themes or plugins.
• OpenAI & Custom GPTs: Connect custom actions via standard HTTP POST endpoints.
• LangChain & AutoGen Frameworks: Automate content pipelines and scheduled publishing programmatically.

Key Features

• Full MCP Specification Support: Support for JSON-RPC 2.0 transport over HTTP POST and SSE (Server-Sent Events).
• Robust Security: Hashed API keys (SHA-256), IP Whitelisting, and rate limiting per key/IP.
• Granular Capability Enforcement: All MCP tool executions validate native WordPress user capabilities (edit_posts, publish_posts, manage_options).
• Read-Only Mode Option: Enforce read-only access globally to prevent AI agents from making destructive modifications.
• Detailed Audit Logging: Inspect every AI tool invocation, payload, response code, IP address, and execution duration.
• Modern WP Admin Interface: Built-in key generator and live log viewer.