WP MCP turns a WordPress site into an MCP server, built on the official WordPress Abilities API, so Claude, Cursor, or any other MCP client can build pages, edit content, and configure the site. Every write is snapshot-backed, so the agent physically cannot make an unrecoverable change.
- Snapshot before every write. Mutating tools go through one safety layer that captures the affected data first, then mutates. There is no bypass path.
- One-click rollback. Restore any snapshot from the History screen, or roll back everything an agent did in a whole session.
- Governance that can only narrow. Six permission layers, each of which can restrict but never widen what an agent is allowed to do.
- Audit log. Every tool call and every governance decision is recorded.
- Scoped identities. Give each agent exactly the capabilities it needs, nothing more.
- Auth. OAuth 2.1 with PKCE, or WordPress application passwords.
- Escape hatches stay shut. Guarded WP-CLI and guarded PHP execution ship disabled by default and run in development environments only.
Snapshots are fine-grained, per-operation undo. They are not a replacement for a full-site backup plugin.
Released 2026-11-01. Release notes, all releases, changelog.
- 0.8.180. Free installs see a dismissible WP MCP Pro notice on the Dashboard, the Plugins screen and WP MCP's own screens, with a launch coupon and a link to the pricing page. Dismissing hides it for 30 days; the third dismissal hides it for good. It never appears while a Pro licence is active. The
wpmcp_pro_banner_offerandwpmcp_pro_banner_screensfilters change the coupon, the discount, the link and the screens. - 0.8.179. Pro snapshot history is unlimited while a Pro licence is active. If a licence ends, the history is held at its current depth, so a lapse never deletes undo points. The free default stays at 20 snapshots. Pro is now sold as annual or lifetime plans, see pricing.
407 abilities as of 0.8.180 (274 free, 133 Pro), grouped by what they touch:
| Area | Coverage |
|---|---|
| Content | Posts, pages, custom post types, taxonomies, menus, users, options, media library, stock image imports |
| Gutenberg | Surgical block edits, full page composition, data-driven custom block building |
| Elementor | Widgets, containers, templates, theme builder, popups, dynamic tags, global styles, atomic v4 elements, custom widget building |
| Other builders | Bricks and Divi structural editing |
| WooCommerce | Products, orders, and store settings |
| SEO | Yoast, Rank Math, SEOPress, The SEO Framework, SureRank |
| Forms and data | Gravity Forms, WPForms, Contact Form 7, Formidable, Ninja Forms, Fluent Forms (read) |
| Custom fields | ACF and Meta Box, read and write |
| Events, donations, memberships | Modern Events Calendar, The Events Calendar, Give, Paid Memberships Pro (read) |
| Everything else | REST passthrough, still snapshotted |
Integration pages state plainly what each one does not cover. Read-only integrations are read-only because form and table entries are not snapshottable yet, not because the work was skipped.
| Repo | What it is |
|---|---|
| wpmcp | The plugin. GPL-2.0-or-later, WordPress 6.9+, PHP 8.1+. This is where issues and pull requests go. |
| wpmcp-marketing | Source for wpmcp-pro.com: the marketing site, integration pages, and guides. |
| .github | This repo. Org profile and the org-wide issue, pull request, contributing, and security templates. |
- Site and docs: wpmcp-pro.com and the docs
- Guides and integrations: guides, integrations
- Install the free build: wpmcp.zip from the latest release, then follow the connection wizard in the WP MCP admin menu
- Report a bug or request a feature: wpmcp/wpmcp issues
- Changelog: wpmcp-pro.com/changelog.html and GitHub releases
- Paid tier: pricing, annual from $26.99/yr or lifetime, 14-day money-back. Pro adds unlimited snapshot history, deep Elementor editing, the widget and block builders, and cloud sync. It does not add safety. The safety core is free.
Built on the WordPress Abilities API and the Model Context Protocol.