Getting WordPress to Talk to AI: A Guide to WordPress MCP

Leave a Comment / Uncategorized / By

If you’ve been following the AI space lately, you’ve probably heard about Model Context Protocol (MCP) – a way for AI assistants to connect directly to your applications and data. Well, now there’s a WordPress plugin that lets Claude (and other AI assistants) manage your WordPress site directly. No more copying and pasting content back and forth!

I’ve been testing the WordPress MCP plugin on this site, and it’s genuinely useful. Claude can now create posts, manage users, upload media, and even dig into site settings – all through a proper API connection. Here’s how to set it up and what you can do with it.

What is WordPress MCP?

The WordPress MCP plugin, developed by Automattic AI, creates a bridge between your WordPress site and AI assistants that support the Model Context Protocol. Instead of the AI guessing what your site looks like or asking you to copy-paste content, it can directly read and write to your WordPress database through the REST API.

Think of it as giving your AI assistant admin access to your WordPress site, but in a controlled, secure way.

Installation

Getting the plugin installed is straightforward, though it’s not in the WordPress repository yet. You’ll need to install it manually or use Git:

  1. Download the plugin from the GitHub repository
  2. Upload it to your /wp-content/plugins/ directory
  3. Activate it in your WordPress admin
  4. Alternatively, if you’re using Git Updater (which I recommend), you can install it directly from GitHub

The plugin requires PHP 8.0+ and WordPress 6.4+, so make sure your hosting meets those requirements.

Authentication: Two Ways to Connect

Once installed, you need to set up authentication so the AI can securely access your site. There are two approaches, each with their own benefits:

Option 1: Application Passwords (Simpler)

Application passwords are the easier route if you just want to get up and running quickly:

  1. Go to your WordPress admin → Users → Your Profile
  2. Scroll down to “Application Passwords”
  3. Enter a name like “WordPress MCP” and click “Add New Application Password”
  4. Copy the generated password (it’ll look something like GNXf xdbK sJDk HyBe yHX5 DIBv)
  5. Use your regular WordPress username and this application password in your MCP configuration

This method is perfect for personal sites or testing. The application password gives full access to your user account’s capabilities, so if you’re an admin, the AI gets admin access too.

Option 2: JWT Authentication (More Flexible)

For more control over what the AI can access, JWT (JSON Web Tokens) is the way to go. You’ll need the JWT Authentication plugin first:

  1. Install the “JWT Authentication for WP-API” plugin
  2. Add this to your wp-config.php:
    define('JWT_AUTH_SECRET_KEY', 'your-secret-key-here');
  3. Add these lines to your .htaccess file:
    RewriteEngine On
    RewriteCond %{HTTP:Authorization} ^(.*)
    RewriteRule .* - [e=HTTP_AUTHORIZATION:%1]
  4. Generate a JWT token through the REST API or using a custom plugin

JWT tokens can be scoped to specific capabilities and have expiration dates, making them more secure for production environments. However, they’re also more complex to set up and manage.

Configuring Your AI Assistant

Once your WordPress site is ready, you need to configure your AI assistant to connect to it. For Claude Desktop, you’ll add an MCP server configuration to your config file:

{
  "mcpServers": {
    "wordpress-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@automattic/mcp-wordpress-remote@latest"
      ],
      "env": {
        "WP_API_URL": "https://yoursite.com/",
        "WP_API_USERNAME": "your-username",
        "WP_API_PASSWORD": "your-application-password"
      }
    }
  }
}

Replace the URL and credentials with your own details. The config file location depends on your operating system:

  • macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
  • Windows: %APPDATA%\Claude\claude_desktop_config.json

After updating the config, restart Claude Desktop and the connection should be active.

What Can You Actually Do?

The functionality available through WordPress MCP is surprisingly comprehensive. Here’s what the AI can help you with:

Content Management

  • Posts and Pages: Create, read, update, and search through all your content
  • Categories and Tags: Organize content with proper taxonomy management
  • Media Library: Upload images, search existing media, and manage file metadata
  • Custom Post Types: Work with any custom post types you’ve defined

User Management

  • Create and manage user accounts
  • Update user profiles and roles
  • Search through existing users

Site Administration

  • View comprehensive site information including active plugins and themes
  • Access and modify general site settings
  • Get detailed breakdowns of your WordPress installation

The AI understands WordPress conventions too. It can create properly formatted Gutenberg blocks, handle featured images, set post statuses, and even work with complex metadata. No more fighting with HTML formatting or wondering if your content will display correctly.

Real-World Use Cases

So what’s this actually useful for? Here are some scenarios where I’ve found WordPress MCP genuinely helpful:

  • Content Creation: “Write a blog post about X topic and publish it with appropriate categories and tags”
  • Site Audits: “Check all my posts from last month and identify any with missing featured images”
  • Bulk Operations: “Update all posts in the ‘outdated’ category to draft status”
  • Content Analysis: “Analyze my most popular posts and suggest similar topics to write about”
  • User Management: “Create accounts for these new team members with editor permissions”

It’s particularly powerful when combined with other data sources. The AI can pull information from multiple places and create comprehensive, well-formatted WordPress content without you having to wrangle APIs or export/import cycles.

Security Considerations

Giving an AI direct access to your WordPress site obviously raises some security questions. Here are the key things to consider:

  • Use application passwords: These can be revoked instantly if needed
  • Create a dedicated user: Consider making a specific “AI Assistant” user with only the permissions you need
  • Monitor activity: WordPress logs API activity, so you can see what the AI is doing
  • Regular backups: As with any admin access, make sure your site is backed up
  • Test environment: Try it on a staging site first to understand the capabilities

The WordPress MCP plugin uses the standard WordPress REST API, so it’s subject to the same security measures as any other API access to your site.

What’s Next?

WordPress MCP is still relatively new, but it’s already showing a lot of promise. The integration feels natural and the AI understands WordPress concepts well enough to be genuinely useful rather than just a novelty.

As more AI assistants support MCP and the WordPress plugin evolves, I expect we’ll see even more sophisticated integrations. Imagine AI assistants that can help with theme customization, plugin configuration, or even basic site maintenance tasks.

For now though, if you’re managing WordPress sites and working with AI tools regularly, this plugin is definitely worth exploring. It’s one of those tools that feels like magic when it works – and happily, it actually does work.

Have you tried WordPress MCP yet? I’d be curious to hear what use cases you’ve found for it.

Leave a Comment

Your email address will not be published. Required fields are marked *