A snapshot before every write, one click to undo
WordPress MCP with undo
Let AI build your site: it can't wreck it.
WP MCP is an MCP server that runs inside WordPress, built on the official Abilities API. It gives agents like Claude and Cursor the keys to your site, pages, products, settings, while quietly snapshotting everything before each write. If an agent ever gets something wrong, one click puts your site back exactly as it was.
GPL-2.0 core · self-hosted · works with WordPress & WooCommerce
› Rewrite the homepage banner and add the Spring Tote Bag product
⛨ snapshot homepage saved · way back guaranteed
⚒ update-post banner rewritten
⛨ snapshot catalog saved
⚒ create-product "Spring Tote Bag" · $49.00
✓ Done. Every change now has a Restore button in wp-admin.
Works with any MCP-compatible client
The problem
AI is confident, not careful.
One speed, every change
An AI agent editing a live site does not pause before a risky change. It moves with the same confidence whether it is fixing a typo or wiping out your homepage.
Every other tool asks you to just trust it
Trust is not a safety net. AI is good, not perfect, and one bad change on a live site is a broken homepage, an angry client, and an afternoon you cannot get back.
Last night's backup will not save you
A nightly backup does not help when the AI broke something ninety seconds ago. You need protection at the moment of the change, not the moment of the night.
How it works
Nothing reaches your site without a snapshot saved first.
Every change the AI makes, a new page, an edited product, a settings update, follows the same four steps before it counts as done. You never have to trust that it went well. You can check, and undo it if it did not.
Save a snapshot
Before anything changes, WP MCP quietly saves exactly how that page, product, or setting looked, so there is always a way back.
Make the change
The AI does what you asked: update copy, add a product, adjust a setting. One clean change, nothing left half-done.
Check the result
Tools that verify their result read back what actually landed. When that check fails, the write rolls back automatically before a visitor ever sees it. Everything else is one click from undone.
Undo, any time
Restore one change, or roll back an entire AI session, from a single screen in your dashboard, or by asking the agent itself.
Under the hood
407 real abilities. Every write snapshot-wrapped.
WP MCP registers every tool as an ability through the official WordPress Abilities API and speaks the Model Context Protocol. The names below are the real tools the agent calls, not marketing labels:274 free, 133 Pro, every one documented in the reference.
01 / undo
Safety & history
Undo is the architecture. Every mutating tool routes through one snapshot-first engine; no write path can bypass it. Restore a single change or an entire agent session.
02 / safe change
Content & pages
Create, edit, organize, and delete posts and pages, snapshotted before every change and one click from undone.
03 / safe change
WooCommerce
Create products, update price and stock, change order status, add notes, and pull sales reports. Every store write as undoable as a page edit.
04 / safe change
Page builders
Deep Elementor editing from a curated 44-widget catalog, plus structural read and write for Bricks, Divi, WPBakery, Beaver Builder, Breakdance, Oxygen, Avada and Thrive Architect, all on Pro. The agent edits real builder structure, not screenshots.
05 / safe change
Media
Read and update image and file details, or pull an image from a URL or stock search straight into the library. Disk-level deletes are off by default.
06 / safe change
Menus & structure
Build menus, add and move items, and assign menus to theme locations, all reversible like everything else.
07 / safe change
Users & comments
List and update user profiles, approve and moderate comments. Passwords and admin accounts are never touched.
08 / guard-railed
Plugins, themes, DB & files
Install and update plugins and themes. Database and filesystem access is read-mostly; raw writes are off by default, admin-only, and honestly flagged when outside the undo guarantee.
09 / read
Scanners & SEO
Scored performance and security reports, plus SEO metadata editing through Yoast SEO, Rank Math, SEOPress, The SEO Framework, SureRank and Slim SEO (All in One SEO on Pro), with one-click session rollback.
Why WP MCP
Built for the moment the AI gets it wrong.
Nothing is ever truly gone
Every change the AI makes is snapshotted before it happens. Built into the core of how WP MCP works, not something you remember to turn on.
Works with your page builder
WP MCP saves your actual site data, so restoring a page works the same no matter which builder or theme created it.
Lives inside your WordPress
A single plugin on the official WordPress Abilities API. No separate service, no Node proxy, no third party holding a copy of your site.
Undo a whole afternoon
Roll back a single change, or unwind everything the AI did in a session, back to exactly how your site looked before it started.
Catches problems before visitors do
Tools that verify their result, such as the Elementor and block-tree edits, read back what actually landed. When that check fails, the write is rolled back automatically before it reaches a visitor.
Watches for trouble, not just mistakes
A built-in security scanner checks for malware, tampered core files, weak configuration, and outdated software.
Free vs Pro
The safety net is free. It is not the upsell.
Pro adds reach and convenience for busy sites and the agencies that run several of them. It does not gate the thing that keeps your site safe.
core / free
Fully functional. No trial, no time limit.
- The full save, change, check, and restore engine
- 274 abilities: content, media, menus, users, WooCommerce, SEO
- One-click restore from your dashboard or the AI
- Last 20 changes kept in history
- GPL-2.0, self-hosted, no forced tracking
pro / via freemius · from $26.99/yr
For busy sites and the agencies that run several.
- Unlimited snapshot history (free keeps the last 20)
- Elementor deep editing: 44-widget catalog, structural suite
- Forms adapter pack: Gravity Forms, WPForms, Formidable, Ninja Forms, Fluent Forms
- Guarded WP-CLI and PHP execution, off by default
- Priority support
Where it earns its keep
Live stores. Site-wide SEO runs.
MCP for WooCommerce →
Let AI run your live store, products, prices, orders, reports, with every write snapshotted first and a one-click undo.
MCP for SEO →
Bulk metadata edits across hundreds of posts through Yoast SEO, Rank Math, SEOPress and the other supported SEO plugins, with the whole session one click from undone.
In one paragraph
What is WordPress MCP?
WordPress MCP is a way to connect a WordPress site to AI agents through the Model Context Protocol (MCP), an open standard for giving AI tools access to other software. An MCP server on the site exposes tools, so an agent such as Claude can read and change posts, pages, products and settings directly.
WP MCP is that server as a WordPress plugin, with one addition: it saves a snapshot before every write, so each change can be undone. Read the longer explanation in What is an MCP server?and MCP vs API.
WordPress MCP, frequently asked
WordPress MCP: questions, answered.
What is WordPress MCP?
WordPress MCP means connecting a WordPress site to AI agents over the Model Context Protocol, the open standard that clients like Claude and Cursor use to call tools. With an MCP server on the site, an agent can read and change posts, pages, media, menus, products and settings directly instead of telling you what to click.
Is there any MCP for WordPress?
Yes. WordPress 6.9 added the Abilities API, the official foundation for MCP tools, and plugins build MCP servers on it. WP MCP is one of them: a free, GPL plugin that turns your own site into an MCP server with 407 abilities and saves a snapshot before every write, so any change can be undone.
How to add WordPress MCP?
Download the free WP MCP plugin zip from GitHub, upload it under Plugins, Add New and activate it. Open WP MCP, Connection in wp-admin, create an application password, and paste the generated config into Claude Code, Claude Desktop or Cursor. The MCP endpoint is /wp-json/mcp/wpmcp-server on your own site.
Does WordPress have MCP built in?
WordPress 6.9 and newer ship the Abilities API, the official foundation that MCP tools register on, but core does not ship a set of site-management tools or an undo. WP MCP is a plugin built on that API: it adds the MCP server, the tools, and a snapshot before every write.
How do I use WordPress MCP?
Install the free WP MCP plugin, create an application password on its Connection screen, and paste the generated config into your client. Then ask for a change in plain language. Each change appears in wp-admin with a Restore button next to it.
Is WP MCP the official WordPress MCP?
No. WP MCP is an independent, GPL plugin. It is built on the official WordPress Abilities API and adds its own tools and a snapshot and rollback engine around every write.
Which AI clients work with WordPress MCP?
Claude Code, Claude Desktop, Cursor and VS Code have ready-made config on the Connection screen, and any MCP client that connects over HTTP can use the same endpoint. Clients that sign in with OAuth need OAuth switched on first; it ships off.
Next: install the WordPress MCP plugin, see how the WordPress MCP server works, or connect Claude,Claude Code,Cursor orChatGPT. New to this? Read what a WordPress AI agent can safely do, or how the WordPress Abilities API fits in.
Learn
New to MCP on WordPress? Start here.
What is an MCP server? →
Hosts, clients, tools and transports in plain language, with a WordPress site as the worked example.
Build a WordPress site with Claude →
A followable walkthrough: connect Claude, build three pages with real prompts, undo what you do not like.
MCP security for WordPress →
The real risks of giving an agent write access, the control for each, and a ten-minute checklist.
Undo changes in WordPress →
Revisions, builder history, backups and per-change snapshots: what each one covers and how to restore.
MCP vs API →
What really differs, when a plain REST API is the better choice, and the same WordPress job done both ways.
WordPress application passwords →
Create, test and revoke one, and use it to connect an AI client to your site.