About this plugin
MCP for WordPress by Kites.Dev turns your WordPress website into a fully compatible Model Context Protocol (MCP) server. Built by Kites.Dev , this plugin allows you to seamlessly connect your WordPress site directly to your favorite AI assistants and environments—including Claude Desktop , Cursor IDE , Windsurf , ChatGPT / Custom GPTs , LangChain , AutoGen , and custom Python scripts. What You Can Do With This Plugin ✍️ Draft, Edit & Publish Content Directly : Ask your AI agent to draft new blog posts, rewrite existing articles, create pages, assign categories and tags, and publish or save as draft directly from your AI chat window. 🖼️ Manage Media Assets : Upload images and featured graphics directly to your WordPress Media Library via your AI assistant. 🔍 Query & Update WordPress Data : Search posts, pages, custom post types, and retrieve published content contextually for AI-assisted writing or research. 🛠️ Inspect Site Diagnostics & Schema : Let your AI agent inspect active themes, plugin configurations, database table structures, and site health parameters for fast site troubleshooting. 🛡️ Stay Safe with Read-Only Mode & Scope Guardrails : Toggle global Read-Only mode or assign read-only scope to specific API keys to prevent AI models from executing destructive write operations. 📊 Real-Time Audit Logging : Monitor every single incoming AI request, tool invocation payload, response code, client IP address, and execution duration from your WordPress dashboard. Supported AI Tools & Clients Claude Desktop : Native JSON-RPC 2.0 and Server-Sent Events (SSE) support via claude_desktop_config.json . Cursor & Windsurf IDEs : Interact with your live site while building themes or plugins. OpenAI & Custom GPTs : Connect custom actions via standard HTTP POST endpoints. LangChain & AutoGen Frameworks : Automate content pipelines and scheduled publishing programmatically. Key Features Full MCP Specification Support : Support for JSON-RPC 2.0 transport over HTTP POST and SSE (Server-Sent Events). Robust Security : Hashed API keys (SHA-256), IP Whitelisting, and rate limiting per key/IP. Granular Capability Enforcement : All MCP tool executions validate native WordPress user capabilities ( edit_posts , publish_posts , manage_options ). Read-Only Mode Option : Enforce read-only access globally to prevent AI agents from making destructive modifications. Detailed Audit Logging : Inspect every AI tool invocation, payload, response code, IP address, and execution duration. Modern WP Admin Interface : Built-in key generator and live log viewer.