Rectus Content Access for MCP

Rectus Content Access for MCP lets authenticated MCP clients list, read, create, and update WordPress content and upload images.

For a Japanese overview and setup guide, visit the Rectus Content Access for MCP introduction page.

The plugin provides:

• Listing, creation, and updating of posts, pages, and selected custom post types.
• Reading of a single post’s stored title, content, excerpt, and assigned terms for editing workflows.
• Listing of enabled post types with labels, supported fields, and taxonomies.
• Listing of existing taxonomy terms so clients reuse the established vocabulary.
• Paginated content lists with status, search, taxonomy term, and ordering filters.
• Featured image assignment from uploaded media when creating or updating posts.
• Media library listing and confirmation-protected permanent attachment deletion.
• A settings screen where administrators choose which post types MCP clients may access.
• Support for standard content fields and taxonomies assigned to the selected post type.
• Direct multipart image uploads for Codex and Claude Code using short-lived, one-time tickets.
• Base64-encoded image uploads as a fallback for MCP clients that cannot perform direct uploads.
• Browser-based OAuth 2.1 authorization with PKCE and automatic token refresh.
• Copy-ready setup commands for Codex and Claude Code.
• Site-specific MCP server names derived from the WordPress domain and path to prevent client configuration collisions.
• Translation-ready administration, OAuth, MCP ability, and error strings.

Posts and pages are enabled by default. Custom post types must be enabled by an administrator before MCP clients can use them.

Rectus Content Access for MCP checks the authorized WordPress user’s native capabilities for every operation, including each post type’s create, edit, publish, and taxonomy permissions.

Saved content is filtered by the same capability WordPress itself uses, so an edit made through an MCP client is stored exactly as the block or classic editor would have stored it. Markup that the editors keep, such as JSON-LD structured data and schema.org microdata, survives the round trip instead of being silently rewritten.

OAuth access tokens, refresh tokens, authorization codes, and direct media upload tickets are stored only as SHA-256 hashes. Access tokens expire after one hour, refresh tokens are rotated automatically, and connections can be revoked from the settings screen. Uninstalling Rectus Content Access for MCP removes its settings and OAuth data.

The official WordPress MCP Adapter library is bundled with Rectus Content Access for MCP. A separate MCP Adapter plugin or Node.js process is not required on the WordPress server.

Third-Party Libraries

Rectus Content Access for MCP includes the following GPL-compatible Composer packages:

• WordPress MCP Adapter, copyright WordPress.org Contributors, GPL-2.0-or-later.
• WordPress PHP MCP Schema, copyright WordPress.org Contributors, GPL-2.0-or-later.
• Jetpack Autoloader, copyright Automattic, GPL-2.0-or-later.

License files are included with each package under the vendor directory.