Skip to content

WordPress MCP v1.0.0

Choose a tag to compare

View all tags
@konkomaji konkomaji released this 26 Jun 07:30
· 5 commits to main since this release
v1.0.0
164b561

Universal Model Context Protocol (MCP) server for WordPress. Connect any client site to Claude (chat & Claude Code) for hands-on SEO / AEO / GEO work.

Highlights

  • JSON-RPC 2.0 MCP endpoint, single Bearer key (constant-time auth)
  • ~46 tools across 7 capability groups; dangerous groups OFF by default
  • Engine-agnostic SEO (Yoast / Rank Math), WooCommerce product SEO
  • Read-only Google Site Kit bridge (Search Console / GA4 / PageSpeed)
  • Per-post JSON-LD schema + site-wide llms.txt for AEO/GEO
  • Material 3 admin UI

Security hardening

  • Media-upload RCE blocked (mime allowlist + byte verify)
  • JSON-LD stored-XSS neutralised (hex-escaped output)
  • Path-traversal containment fix (sibling-dir escape)
  • "Read-only" SQL blocks INTO OUTFILE / DUMPFILE / LOAD_FILE
  • User-meta access gated behind Site Management capability

Install

Download wordpress-mcp.zip, upload via Plugins > Add New > Upload, activate, then open the WordPress MCP screen for the endpoint, key, and connect command.

Requires WordPress 5.6+ and PHP 7.4+. GPL-2.0-or-later.

Assets 3
Loading