About this plugin
Sigma MCP Connector implements the Model Context Protocol (MCP) on top of your WordPress site, so AI assistants can act on your content as a real, authenticated WordPress user — never anonymously, never with more access than that user already has.
0 Authorization Code + PKCE flow. ai, Codex, VS Code, Cursor AI, or any other MCP-aware tool) as an OAuth client; a WordPress user then explicitly signs in and approves a consent screen before that client can do anything. From then on, every tool call is checked against that specific user’s WordPress capabilities and written to a full audit log.
Key Features
- OAuth 2.0 + PKCE — Authorization Code grant with mandatory PKCE, hashed client secrets, short-lived access tokens, and long-lived refresh tokens
- 27 Role-Aware MCP Tools — Read and write posts, pages, media, taxonomies, menus, ACF fields, post meta, and users, each gated by a specific WordPress capability
- Live Role Access Matrix — Generated at runtime from real WordPress role capabilities, shown identically on the Connections page, the Documentation page, and the OAuth consent screen, so it can never drift out of sync with what’s actually enforced
- Per-Role Rate Limiting — Configurable request ceilings so no single connection can overwhelm the site
- Full Activity Log — Filterable, paginated audit trail of every OAuth and tool-call event, with before/after snapshots on content-mutating calls and configurable retention
- Built-In Setup Documentation — Step-by-step configuration instructions for Claude.ai, Claude Desktop, Codex, VS Code (GitHub Copilot), and Cursor AI
- No External Dependencies — No bundled third-party service, no analytics, no phone-home; the plugin only responds to requests from clients you explicitly register and authorize
Who Is This For?
- Site owners who want to let an AI assistant help manage content without handing out admin passwords or API keys with unlimited access
- Agencies and developers building AI-assisted editorial workflows on top of WordPress
- Teams who need an auditable, revocable, role-scoped way to connect AI tools to a WordPress site
Additional Information
System Requirements
Minimum
0
0
3
Recommended
* HTTPS enabled
* Pretty permalinks enabled
Custom Database Tables
- {prefix}sigma_mcp_oauth_clients — Registered OAuth applications
- {prefix}sigma_mcp_oauth_codes — Short-lived, single-use authorization codes
- {prefix}sigma_mcp_oauth_tokens — Access and refresh tokens
- {prefix}sigma_mcp_log — Legacy per-call log
- {prefix}sigma_mcp_event_log — Full structured audit log
Support
- Support Forum: https://wordpress.org/support/plugin/sigma-mcp-connector/
- Email: [email protected]