Smart MCP

Smart MCP turns your WordPress site into an AI workspace. It gives you a native AI chat right inside wp-admin, and it turns your site into a Model Context Protocol (MCP) server so external AI clients can work with your content and media, and read information about your plugins and themes.

The AI works through a permission-based tool registry. Every action it can take requires the appropriate WordPress capability, and actions that require approval pause until you approve them.

What you can do

• Chat with your site — a chat workspace in wp-admin with streaming responses, markdown rendering and conversation history. Ask the AI to write a post, update a page, moderate a comment or pull up site info.
• Connect Claude, ChatGPT and more — your site becomes an MCP server. Claude Desktop, Claude Code, Cursor and other MCP clients connect with a single API key, no extra configuration.
• Manage content and media — posts, pages, comments, media, menus and taxonomies, all callable by the AI through one registry.
• Block editor and Site Editor: read and edit the blocks of any post or page, use block patterns, and update block theme templates and template parts. Every change keeps a revision.
• Revisions and custom fields: list, compare and restore revisions, read and update public custom fields of posts and terms, and find and replace text inside a post.
• Comments: read, write, reply and moderate comments in bulk.
• Elementor pages — build pages with native Elementor widgets, and set the page template from chat.
• Inspect plugins and themes — search installed and WordPress.org plugins and themes, and read details, compatibility and abandoned-plugin info from chat.
• Telegram bot — chat with your site from Telegram through a bot.
• Multiple AI providers — OpenAI, Anthropic (Claude), Google Gemini, OpenRouter and any OpenAI-compatible endpoint. API keys are encrypted at rest with sodium and never shown again.

How approvals work

When the AI wants to run a medium or high-risk tool, such as creating a post, moderating a comment or uploading media, the action pauses and appears as an approval request in the chat. Approve it in one click and the AI continues. You stay in control of everything the AI does.

Security first

Every available tool requires the appropriate WordPress capability, and actions that require approval must be explicitly approved before they run.

Smart MCP Pro

The free plugin is complete on its own. Smart MCP Pro is an optional add-on, sold separately on wpsmarto.com, for people who want the AI to help run and maintain the whole site. It adds 56 tools under the same permission and approval rules:

• Install, update, roll back and remove plugins and themes, and run core updates
• Malware scan and quarantine, plugin vulnerability checks and database backups
• Users and roles, site settings, theme editing and maintenance mode
• File manager, PHP and WP-CLI tools for developers
• A Skills library and built-in skills for 20+ popular plugins and themes
• Administrator access for external MCP clients through an application password

Compare Free and Pro

Source

All JavaScript and CSS in this plugin is shipped as readable, un-minified source code. The chat workspace is implemented in assets/admin/chat.js and assets/admin/chat.css, and the admin pages use the readable files under assets/admin/. There are no compiled or minified assets in the plugin.

External services

Smart MCP connects to third-party services only when you configure them and only for the features you enable. Your API keys are stored encrypted and are sent only to the service you chose.

AI providers

The AI chat sends your messages, tool definitions and tool results to the AI provider you select on the AI Providers page. This is required for the chat to work. Supported providers and their privacy policies:

• OpenAI — Privacy policy, Terms of use
• Anthropic (Claude) — Privacy policy, Terms of service
• Google Gemini — Privacy policy, Terms of service
• OpenRouter — Privacy policy, Terms of service

What is sent: your chat messages, the tool definitions available to the model, and the results of tool calls. This happens each time you send a message in the chat. No data is sent to an AI provider unless you have configured and selected that provider.

Telegram

If you enable the Telegram bot, the plugin sends and receives messages through the Telegram Bot API at api.telegram.org. This is required for the Telegram channel to work. It sends your bot token, chat ID and message content. See the Telegram privacy policy and Terms of service.

WordPress.org plugin and theme directory

When you search for or read details about plugins and themes from chat, the plugin queries the public WordPress.org API at api.wordpress.org for metadata such as name, version, ratings and compatibility. It sends only the plugin or theme slug. It does not download or install anything. See the WordPress.org privacy policy and Terms of service.

MCP clients

When you connect an external MCP client (Claude Desktop, Claude Code, Cursor, etc.), the client connects directly to your site’s MCP endpoint. The plugin does not relay your data through any third-party server. The connection uses the credentials you generate in the plugin.