First public release of WPPilot — a WordPress MCP server that connects AI clients to WordPress with policy, confirmation and change evidence enforced on your own site.
Install
Download wppilot-1.0.0.zip below and install it as wp-content/plugins/wppilot.
Do not use the auto-generated "Source code (zip)". It omits
vendor/and unpacks to the wrong folder name, so the plugin will not activate.
What's in it
- MCP server built on the WordPress Abilities API and the official MCP Adapter, exposing 42 typed abilities through a compact discover / inspect / execute interface.
- OAuth 2.1 with PKCE and dynamic client registration, or WordPress Application Passwords.
- Generated connection configuration for 16 AI clients, including Claude Code, Claude Desktop, Codex, Cursor, VS Code, GitHub Copilot and Antigravity.
- Read Only, Production Safe and Developer Full Access safety profiles, enforced server-side on every call.
- Explicit confirmation for destructive and critical operations, a redacted change ledger, and rollback for supported reversible changes.
- Per-credential write rate limiting.
- Skills, site-wide instructions, and a guarded sandbox for agent-authored PHP.
Requirements
- WordPress 6.9 or newer
- PHP 8.0 or newer
- HTTPS for any remotely reachable connection
- WPPilot Chat additionally requires WordPress 7.0 and an AI provider configured through the WordPress AI Client
Links
- Documentation — https://wppilot.co/docs
- Client setup guides — https://wppilot.co/wordpress-mcp
- WPPilot Pro (991 plugin-aware abilities across 51 integrations) — https://wppilot.co/pro