About this plugin
WSP MCP – AI Agents Connector turns your WordPress site into a Model Context Protocol (MCP) server. AI clients can read and edit posts, pages, categories, tags, media, comments, users, and (when installed) Yoast SEO meta and Elementor page content — all under granular, per-ability admin control. The plugin ships its own native MCP server . You do not need the WordPress MCP Adapter or any companion plugin: activate, copy your connection details from MCP > Connection , and connect. WooCommerce tools (products, orders, refunds, coupons, customers, reports) are available when WooCommerce is active, Advanced Custom Fields tools (field groups, fields, values, post types, taxonomies, options pages) when ACF is active, Ultimate Addons for Elementor (UAE) tools (widgets, templates, layout building, and settings) when UAE is active, and Gravity Forms tools (forms, entries, notifications, and confirmations) when Gravity Forms is active. Built and maintained by the WebSensePro team. For documentation, setup guides, and connection help, visit the plugin home at freewordpressmcp.com . Video tutorial Key features Built-in MCP server over a single REST endpoint (Streamable HTTP, JSON-RPC 2.0) — no external dependency. Per-ability on/off toggles in MCP > Settings ; write abilities are off by default. Two authentication methods: WordPress Application Passwords (HTTP Basic) or a plugin-generated API key ( Authorization: Bearer or X-WSP-MCP-API-Key ). Capability checks on every tool — an AI client can only do what its authenticated user can do. Full Audit Log in MCP > Audit Log : every tool call is recorded (tool name, time, user, IP, success/denied/error) in your own database — self-hosted, no external service, visible to administrators only. Optional Yoast SEO and Elementor tools, shown only when those plugins are active. Complete tools list Every tool is individually toggleable in MCP > Settings , and all write tools are off by default. Core WordPress Posts — read, create, update, delete Pages — read, create, update, delete Categories — list, create, update, delete Tags — list, create, update, delete Comments — read, approve, and delete Media — read the media library Users — read user data Site info — read general site details Plugins — list active plugins Search — search across site content Yoast SEO (requires Yoast SEO) Read SEO title, meta description, and focus keyphrase Update SEO title, meta description, and focus keyphrase Elementor (requires Elementor) Pages — list pages/posts built with Elementor Page structure — read the full element tree of a page Elements — get a single element’s settings, or find elements by widget type or content Templates — list saved templates from the library Editing — add widgets, add layout containers/sections, update element settings, and remove elements Code-bearing widget types (HTML, Shortcode, Code) are rejected and code-bearing settings (Custom CSS, Custom Attributes) are stripped; all text settings are sanitized with wp_kses_post() WooCommerce (requires WooCommerce — financial and PII tools require the manage_woocommerce capability) Products — list, get, create, update Product variations — create Orders — list, update status Refunds — process refunds Coupons — create, list Order notes — add order notes Customers — read customer data Sales report — read sales reporting Low-stock alerts — read low-stock products Reviews — moderate product reviews Advanced Custom Fields (requires ACF — structural changes require manage_options ; value tools enforce per-object capabilities) Field groups — list, get, create, update, delete, import Fields — list, get, create, update, delete, duplicate, sync Field values — get and set with dot-notation deep access, delete, get-all, bulk-update, and field object Custom post types — manage Taxonomies — manage Options pages — manage Gravity Forms (requires Gravity Forms — reads require gravityforms_edit_forms or gravityforms_view_entries ; writes require form/entry-specific Gravity Forms caps) Forms — list (ON by default), get (ON by default), create, update, delete, update form settings Entries — list, get, update (status, read/starred flags, field values), delete (trash or permanent) Notifications — get, create, update, delete Confirmations — get, create, update, delete All 18 tools are off by default (except list-forms and get-form); only registered when Gravity Forms is active Ultimate Addons for Elementor (requires UAE — structural and settings writes require edit_posts , publish_posts , or manage_options ) Widgets — list, check usage, activate, deactivate, bulk toggle Templates — list, get, create, duplicate, update, trash, restore Header/Footer/Blocks templates Layout building — add sections, add columns, move elements, build layouts from JSON Settings — get/update UAE settings, theme info, extensions, and design-system tokens All 45 tools are off by default; string inputs are sanitized with wp_kses_post() Links Plugin home & docs: freewordpressmcp.com Built by: WebSensePro