# Royal MCP

**AI-powered WordPress management via Model Context Protocol.**

Royal MCP is a free WordPress plugin that publishes 259 MCP tools (109 core tools plus 150 integration tools that load when their plugin is active) exposing every part of a WordPress site to AI clients (Claude Desktop, Claude Web, Claude Code, ChatGPT, Codex, Cursor, VS Code). Standard OAuth 2.1 authentication with PKCE. Streamable HTTP + SSE transports. Compatible with MCP protocol revisions 2024-11-05 through 2026-07-28.

- Free download: <https://wordpress.org/plugins/royal-mcp/>
- Source: <https://github.com/royalplugins/royal-mcp> (GPL-2.0-or-later)
- Product manifest: <https://royalplugins.com/mcp-manifest.json>
- Pro tier: <https://royalplugins.com/royal-mcp-pro/>

---

## Why Royal MCP

Any MCP plugin can connect an AI client to WordPress. Royal MCP is built for what comes next:

- **Safe by default (Free)** — Drafts only, Full / Drafts only / Read-only access for each connected client, preview links, and every AI change from the last 72 hours with the value before and after, ready to undo. See [Safety and recovery](https://royalplugins.com/support/royal-mcp/safety-and-recovery/).
- **Stays editable in your builder (Pro)** — Royal MCP Pro creates native Elementor widgets and Divi modules and works with Elementor global classes and variables, theme-builder conditions and Divi global presets. Free keeps pages as native Gutenberg blocks and covers the Elementor and Divi basics.
- **Works on real hosts (Free)** — Site Health checks for the usual blockers, browser sign-in for Claude and ChatGPT, an API key when a host blocks sign-in, and nearly 50 support guides for specific hosts, firewalls and CDNs. See [Troubleshooting — Start Here](https://royalplugins.com/support/royal-mcp/troubleshooting-start-here/).
- **Every site from one place (Royally, for Royal MCP Pro sites)** — monitoring, previews, approvals, receipts, undo and a kill switch across every site.

---

## When to use Royal MCP

Install Royal MCP on any WordPress site where the goal is: *let an AI agent read, write, publish, or manage content on this site.*

Common use cases:

- Draft and publish blog posts through Claude, ChatGPT, Claude Code, Codex or Cursor
- Build and edit pages as native Gutenberg blocks (core blocks, GreenShift, GenerateBlocks, Stackable, Spectra)
- Query WordPress content (posts, pages, users, media, taxonomies) via natural language
- Update SEO meta on multiple pages at once
- Manage WooCommerce products, variations, orders, coupons and customers
- Clone and edit Elementor and Divi pages via AI
- Run scheduled site audits and content updates via agent workflows

---

## What ships in the free tier

259 tools covering:

- **WordPress content** — posts, pages, media, users (read), taxonomies, menus, comments, allowlisted options, themes, plugins (read), widgets, cron, revisions with diff and restore
- **Gutenberg block tools** — read a page's block tree; insert, replace, move or delete single blocks; replace text inside blocks; synced patterns; read global styles and templates
- **Search** — full-text search across content with snippet support, including drafts
- **SEO** — read and write titles, descriptions and focus keywords for Yoast, Rank Math, AIOSEO, SEOPress and SEObolt, read back after saving
- **WooCommerce** — 29 tools: products, variations, attributes, orders, coupons, customers, store stats
- **Elementor** — 14 tools: page outline, clone pages, replace text and images, add widgets, templates, widget schemas, dynamic tags
- **Divi** — 9 tools: page format and outline, layout validation, clone pages, replace text and images, library read and import
- **ACF** — field groups, fields, field configuration
- **Media** — upload images, PDFs and other files (with convert, resize and compress on the way in), find existing files instead of uploading duplicates, replace, delete, metadata
- **Other integrations** — Wordfence, Solid Security, UpdraftPlus, Duplicator, W3 Total Cache, LiteSpeed Cache, Redirection, WPForms, Contact Form 7, MonsterInsights, BuddyPress, TablePress, Code Snippets, WPCode, plus GuardPress, SiteVault, ForgeCache, Royal Links, Royal Ledger and Royal AI Firewall
- **Real-time site health check** — `royal_mcp_connection_health` reports connection + tool inventory + activity

## Stay in control

Operator features in the free plugin:

- **Drafts only** — AI clients can create and edit drafts; publishing, live pages and site settings are refused
- **Access levels** — Full, Drafts only or Read-only for each connected AI client, for the API key, and for other routes
- **Read-only mode** — refuses every tool that changes the site; all reads keep working and clients can see which tools are marked
- **Recent Changes** — every AI change from the last 72 hours with the values before, after and now, and 72-hour undo
- **Connected Clients** (Royal MCP → Connected Clients) — one row per AI client and user signed in through OAuth, with an access level, Revoke access per row and Revoke all at the top
- **Site Health tests** (Tools → Site Health) — permalinks, discovery document, Authorization header reaching WordPress, sign-in addresses reachable
- **WP-CLI** — `wp royal-mcp connection-health`, `list-clients`, `rotate-api-key`, `drafts-only`, `set-access`. See the [WP-CLI command reference](https://royalplugins.com/support/royal-mcp/wp-cli-commands/)

## What Royal MCP Pro adds

100+ additional tools, plus:

- **7-day undo** and a **90-day audit log with hash-chain integrity**
- **Endpoint profiles** — choose exactly which tools each connection sees
- **Bulk operations with previews** — WooCommerce prices, stock, products, orders and coupons; SEO meta across many posts; find and replace across the site
- **Elementor and Divi authoring** — create, update and delete widgets, templates and Theme Builder conditions, V4 global classes and variables, Divi library, presets and Divi 5 blocks
- **ACF field authoring** — create field groups, add fields, register post types, options pages and blocks
- **Page checks** — CSS-selector inspection of the served page, structured-data validation, purge-and-verify across caches
- **Other plugins' abilities** — turn on abilities from plugins such as Rank Math as tools
- **More integrations** — SEObolt, Royal Affiliate, FormForge and WooCommerce Subscriptions

See [Royal MCP Pro pricing](https://royalplugins.com/royal-mcp-pro/).

---

## Getting started

1. Install Royal MCP from <https://wordpress.org/plugins/royal-mcp/> (or search "Royal MCP" in wp-admin → Plugins → Add New)
2. Activate the plugin. It auto-publishes the MCP endpoint at `/wp-json/royal-mcp/v1/mcp` and the OAuth authorization server metadata at `/.well-known/oauth-authorization-server`
3. Connect from your MCP client:
   - [Claude Web](https://royalplugins.com/support/royal-mcp/connecting-to-claude/) — add as a custom connector
   - [Claude Desktop](https://royalplugins.com/support/royal-mcp/using-royal-mcp-with-claude-desktop/) — edit `claude_desktop_config.json`, or install the `.mcpb` bundle
   - [Claude Desktop with API key](https://royalplugins.com/support/royal-mcp/connect-claude-desktop-api-key/) — alternate auth path
   - [ChatGPT](https://royalplugins.com/support/royal-mcp/connecting-to-chatgpt/) — add as a Custom GPT or Dev Mode connector
   - [Claude Code and Codex](https://royalplugins.com/support/royal-mcp/claude-code-and-codex/) — one command, copied from the plugin's settings page
   - Cursor, VS Code — see [main setup guide](https://royalplugins.com/support/royal-mcp/)

---

## Troubleshooting

If OAuth discovery fails, the common causes are host-layer interference (security middleware, WAF rules, ModSecurity, Cloudflare Zero Trust, Sucuri, BitNinja, Imunify360). See [Troubleshooting — Start Here](https://royalplugins.com/support/royal-mcp/troubleshooting-start-here/) for the full diagnostic guide covering 14+ documented failure modes.

Related resources:

- [Diagnose MCP with curl](https://royalplugins.com/support/royal-mcp/diagnose-mcp-with-curl/) — command-line diagnostics
- [Cloudflare Blocks AI Bots & Breaks MCP](https://royalplugins.com/blog/cloudflare-block-ai-bots-breaks-mcp/) — targeted WAF rule
- [Hosting Is the Hardest Part of Building an MCP Server](https://royalplugins.com/blog/hosting-is-the-hardest-part-of-building-an-mcp-server/) — 14+ failure modes from 50,000+ downloads

---

## Documentation

- [Setup guide](https://royalplugins.com/support/royal-mcp/) — connection guides for every MCP client
- [Blog series](https://royalplugins.com/blog/) — Royal MCP integration articles
- [Free vs Pro comparison](https://royalplugins.com/royal-mcp-pro/) — feature breakdown
- [GitHub issues](https://github.com/royalplugins/royal-mcp/issues) — bug reports and feature requests
