About this plugin
Sigma MCP Connector implements the Model Context Protocol (MCP) on top of your WordPress site, so AI assistants can act on your content as a real, authenticated WordPress user — never anonymously, never with more access than that user already has. It exposes a JSON-RPC 2.0 MCP endpoint secured by a full OAuth 2.0 Authorization Code + PKCE flow. An administrator registers each AI client (Claude.ai, Codex, VS Code, Cursor AI, or any other MCP-aware tool) as an OAuth client; a WordPress user then explicitly signs in and approves a consent screen before that client can do anything. From then on, every tool call is checked against that specific user’s WordPress capabilities and written to a full audit log. Key Features OAuth 2.0 + PKCE — Authorization Code grant with mandatory PKCE, hashed client secrets, short-lived access tokens, and long-lived refresh tokens 27 Role-Aware MCP Tools — Read and write posts, pages, media, taxonomies, menus, ACF fields, post meta, and users, each gated by a specific WordPress capability Live Role Access Matrix — Generated at runtime from real WordPress role capabilities, shown identically on the Connections page, the Documentation page, and the OAuth consent screen, so it can never drift out of sync with what’s actually enforced Per-Role Rate Limiting — Configurable request ceilings so no single connection can overwhelm the site Full Activity Log — Filterable, paginated audit trail of every OAuth and tool-call event, with before/after snapshots on content-mutating calls and configurable retention Built-In Setup Documentation — Step-by-step configuration instructions for Claude.ai, Claude Desktop, Codex, VS Code (GitHub Copilot), and Cursor AI No External Dependencies — No bundled third-party service, no analytics, no phone-home; the plugin only responds to requests from clients you explicitly register and authorize Who Is This For? Site owners who want to let an AI assistant help manage content without handing out admin passwords or API keys with unlimited access Agencies and developers building AI-assisted editorial workflows on top of WordPress Teams who need an auditable, revocable, role-scoped way to connect AI tools to a WordPress site Additional Information System Requirements Minimum * WordPress 6.0 * PHP 8.0 * MySQL 5.7 or MariaDB 10.3 Recommended * HTTPS enabled * Pretty permalinks enabled Custom Database Tables {prefix}sigma_mcp_oauth_clients — Registered OAuth applications {prefix}sigma_mcp_oauth_codes — Short-lived, single-use authorization codes {prefix}sigma_mcp_oauth_tokens — Access and refresh tokens {prefix}sigma_mcp_log — Legacy per-call log {prefix}sigma_mcp_event_log — Full structured audit log Support Support Forum: https://wordpress.org/support/plugin/sigma-mcp-connector/ Email: [email protected]