WordPress MCP Server 🚀

Comprehensive WordPress and WooCommerce control via Model Context Protocol (MCP). Manage posts, pages, media, templates, and products through natural language with Claude Desktop.

✨ Features

• 📝 Complete WordPress Control - Posts, pages, media, users
• 🛒 WooCommerce Integration - Products, orders, customers
• 📄 Template Editing - Direct theme file editing with backups
• 🔒 Security First - Application passwords, rate limiting, input sanitization
• ⚡ Async Operations - Fast, non-blocking API calls
• 🔄 Bulk Operations - Update multiple items efficiently

🚀 Quick Start

Prerequisites

• WordPress 5.6+ with Application Passwords enabled
• Python 3.8+
• Claude Desktop

Installation

1. Clone the repository:

git clone https://github.com/Breuk-AI/wordpress-mcp.git
cd wordpress-mcp

2. Install the WordPress plugin:

   • Upload wp-mcp-plugin folder to /wp-content/plugins/
   • Activate "WordPress MCP Integration" in WordPress admin

3. Configure the MCP server:

   Use for easy 1-click installation and configuration

dxt install https://github.com/Breuk-AI/wordpress-mcp

  or

cd mcp-server
cp .env.example .env
# Edit .env with your WordPress credentials

4. Add to Claude Desktop config:

{
  "wordpress": {
    "command": "python",
    "args": ["E:\\path\\to\\wordpress-mcp\\mcp-server\\server.py"],
    "env": {
      "WP_SITE_URL": "https://your-site.com",
      "WP_USERNAME": "your-username",
      "WP_APP_PASSWORD": "xxxx xxxx xxxx xxxx xxxx xxxx"
    }
  }
}

🛠️ Available Tools

WordPress Tools (30+ operations)

• Posts - Create, read, update, delete, search posts
• Pages - Full page management
• Media - Upload and manage media library
• Templates - Edit theme files with automatic backups
• Users - User management and capabilities
• System - WordPress configuration and status

WooCommerce Tools

• Products - Complete product management
• Orders - Order processing and updates
• Customers - Customer data management
• Bulk Operations - Update prices, stock, etc.

🔒 Security Features

• ✅ Path Traversal Protection - Validated file access
• ✅ Authentication Security - Hashed password storage
• ✅ Rate Limiting - Prevents API abuse
• ✅ Input Sanitization - Protects against injection
• ✅ HTTPS Enforcement - Secure connections required
• ✅ File Extension Validation - Only .php files editable

🔐 Privacy Policy

WordPress MCP respects your privacy and data:

• Local Operation Only - All operations occur between Claude Desktop and your WordPress site
• No Data Collection - We do not collect, store, or transmit any user data or conversation data
• No Third-Party Services - No external services are used beyond your WordPress site
• Secure Credential Storage - Application passwords are stored securely in your OS keychain
• Your Data Stays Yours - All WordPress content remains on your server
• No Analytics or Tracking - Zero telemetry or usage tracking
• Open Source Transparency - All code is publicly auditable on GitHub

The only data accessed is:

• Your WordPress site content (posts, pages, products) - only when you request it
• WordPress configuration needed for operations
• Theme files when using template editing features

All data transmission uses secure HTTPS connections directly to your WordPress site.

📋 Requirements

WordPress

• WordPress 5.6 or higher
• PHP 7.4 or higher
• Application Passwords enabled
• SSL certificate (recommended)

Python Dependencies

pip install -r mcp-server/requirements.txt

🤝 Contributing

Contributions are welcome! Please read our Contributing Guide for details.

1. Fork the repository
2. Create your feature branch (git checkout -b feature/AmazingFeature)
3. Commit your changes (git commit -m 'Add some AmazingFeature')
4. Push to the branch (git push origin feature/AmazingFeature)
5. Open a Pull Request

📝 License

This project is licensed under the MIT License - see the LICENSE file for details.

🙏 Acknowledgments

• Built with Model Context Protocol
• Powered by WordPress REST API
• Created with Claude AI assistance

📞 Support

• Issues: GitHub Issues
• Discussions: GitHub Discussions
• Security: See SECURITY.md for reporting vulnerabilities

🚦 Status

• ✅ Production Ready (v1.1.1)
• ✅ Security Audited
• ✅ CI/CD Pipeline Active
• ✅ Documentation Complete

---

Made with ❤️ by Breuk & Claude