WordPress MCP, explained
What the Model Context Protocol is, how WordPress supports it through the Abilities API and the official MCP Adapter, where WordPress.com fits in, and how to connect Claude, ChatGPT and other AI agents to your site.
WordPress MCP is how AI assistants work with a WordPress site. An MCP server lists the actions an AI is allowed to take on your site, like reading a post, updating a product or clearing a cache, and an AI client such as Claude or ChatGPT calls those actions for you. WordPress core now defines actions through the Abilities API, the official MCP Adapter turns them into MCP tools, and plugins like Royal MCP supply the tools, sign-in and safety controls that make it practical on real sites.
What is MCP?
The Model Context Protocol is an open standard for connecting AI assistants to the tools and data they need. Anthropic introduced it in November 2024, and it is now supported by Claude, ChatGPT, Gemini, Cursor, VS Code and many other AI clients.
Actions the AI can call
Each tool has a name, a description and a defined set of inputs, like “update post” with a post ID and new content.
Content to read
Material the AI can read for context before it acts, such as site settings or a page’s structure.
Ready-made tasks
Saved instructions for common jobs that the AI client can offer you as one-click starting points.
Local MCP servers talk to the AI app over stdio on your own computer. Remote servers, like a plugin on your website, use Streamable HTTP and sign you in with OAuth 2.1, so the AI app never sees your WordPress password. The protocol has had several revisions; Royal MCP supports 2024-11-05, 2025-06-18, 2025-11-25 and 2026-07-28 and agrees on one with each client automatically.
How one request travels
Ask “change the price of the blue hoodie to $40” and this is what happens in a second or two.
You ask
You type the request in Claude, ChatGPT or another AI client.
The AI picks a tool
It reads the server’s tool list and chooses the product-update tool.
The server checks
Sign-in, your WordPress role, read-only and drafts-only settings, rate limits.
WordPress acts
The price changes through WordPress and WooCommerce, the same way an admin edit would.
The AI reports back
The result returns to your chat, and the change can be undone.
WordPress’s MCP stack
The Abilities API (WordPress 6.9+)
WordPress 6.9 added the Abilities API to core. An ability is one action a plugin, theme or WordPress itself can perform, registered with a name, a description, a schema for its inputs and outputs, and a permission check. Abilities can be listed and run through the REST API at /wp-json/wp-abilities/v1/. WordPress 7.0 added abilities that run in the browser and a built-in AI Client; 7.1 added one public flag that controls whether an ability is exposed to REST and MCP.
The official MCP Adapter
The MCP Adapter is a plugin from the WordPress project, on WordPress.org since October 2026. It turns registered abilities into an MCP server: its default server shows the AI three general tools (list abilities, describe one, run one), connects over HTTP or WP-CLI, and signs in with Application Passwords. Automattic’s earlier wordpress-mcp plugin is archived in favor of it. WooCommerce and Elementor build their own MCP features on it.
The Abilities API defines what can be done. Something still has to present it to an AI client, sign the user in and keep calls safe. That’s the job of an MCP server plugin.
Where WordPress MCP runs
Every WordPress MCP setup falls into one of three shapes. The difference is where the server lives and where your content travels.
A plugin you install
The MCP server runs inside your WordPress site and the AI connects to it directly. Your content travels only between your site and your AI client.
- Works on any host
- You control access and safety settings
- Example: Royal MCP
A service that relays calls
The MCP server runs on the vendor’s infrastructure and passes calls to your site, or only works for sites on that platform.
- Nothing to install on some platforms
- Calls pass through the vendor
- Examples: WordPress.com MCP, relay services
A local tool
A server running on your own computer that reaches the site through WP-CLI or the REST API, usually for development and staging.
- Good for local and staging sites
- Needs a terminal setup
- Example: the MCP Adapter over WP-CLI
What about WordPress.com MCP?
WordPress.com runs its own hosted MCP server. It’s included with every paid WordPress.com plan, and self-hosted sites can use it through Jetpack AI or Jetpack Complete. You connect with OAuth, it’s listed in Claude’s connector directory, and every write waits for your confirmation.
Because it’s hosted, every call passes through Automattic’s servers, and it’s built around WordPress.com features. It has no WooCommerce or page-builder tools and works with WordPress.com’s built-in SEO settings rather than plugins like Yoast or Rank Math.
If your site lives on WordPress.com, it’s the natural choice. For self-hosted sites, especially stores and page-builder sites, a plugin like Royal MCP that runs on your own server covers more. Full comparison →
| WordPress.com MCP | Royal MCP | |
|---|---|---|
| Where it runs | Automattic’s servers | Your WordPress site |
| Sites | WordPress.com, or Jetpack-connected | Any self-hosted WordPress |
| Cost | Paid WordPress.com plan or Jetpack AI / Complete | Free plugin; Pro from $79/yr |
| WooCommerce | No dedicated tools | 29 free tools |
| Divi and Elementor | No | 23 free tools |
| Undo | Trash for posts, pages and comments | 72 hours for tracked changes |
Every tool, four ways in
Royal MCP doesn’t make you choose between its own server and the WordPress standards. Every one of its tools can be reached four ways, so it fits whatever your AI setup already uses.
1Native MCP endpoint
A full MCP server at /wp-json/royal-mcp/v1/mcp with OAuth 2.1 or an API key. Claude, ChatGPT and Cursor connect here.
2Abilities REST API
On WordPress 6.9+, every tool is also an ability at /wp-json/wp-abilities/v1/, so scripts and plugins can run it.
3Official MCP Adapter
With the MCP Adapter active, Royal MCP registers its own server with it, so adapter-based setups reach the same tools.
4WebMCP browser agents
Browser AI agents can use the tools with the visitor’s existing WordPress login. Off by default; one switch turns it on.
What the AI can do on your site
The free Royal MCP plugin ships 109 core WordPress tools and 150 integration tools that switch on automatically when the matching plugin is active.
Posts, pages, custom post types, blocks, media, menus, widgets, comments, users and settings.
Products, variations, attributes, orders, coupons, customers and store stats.
14 Elementor tools and 9 for Divi 4 and Divi 5: outlines, text and image swaps, cloning, templates.
Meta for Yoast SEO, Rank Math, AIOSEO and SEObolt, plus bulk SEO audits.
WPForms, Contact Form 7, Wordfence, Solid Security, UpdraftPlus, Duplicator and more.
W3 Total Cache, LiteSpeed Cache, Redirection, TablePress, Code Snippets, WPCode.
Keeping AI safe on a live site
Connecting AI to a live site is only as safe as the server in between. These are the controls to look for in any WordPress MCP server, and what Royal MCP does for each.
Every tool checks the connected user’s WordPress capabilities before it runs.
OAuth 2.1 with PKCE, so the AI app never sees a password. API keys for scripts.
One switch blocks every tool that changes the site, for every AI client at once.
Keeps AI changes as drafts until you publish them.
Tracked changes can be reversed for 72 hours. Pro covers every destructive Pro tool for up to 7 days.
60 requests a minute without sign-in and 300 with sign-in, per client IP.
Passwords, keys and similar fields are redacted from responses.
A hash-chained record of every write, plus per-connection tool profiles.
Connect your site to AI
Royal MCP works on WordPress 5.8 and later; the Abilities features need WordPress 6.9 or later.
Free from WordPress.org. Activate it like any plugin.
It’s on the Royal MCP settings page.
A custom connector in Claude, or an app in ChatGPT.
On your site. The AI gets a token, never your password.
“List my draft posts” is a good first test.
WordPress MCP questions
What is WordPress MCP?
WordPress MCP means connecting a WordPress site to AI assistants through the Model Context Protocol (MCP). An MCP server on or for your site lists actions the AI can take, such as reading posts or updating a product, and the AI client calls them with your permission.
Is there an official WordPress MCP server?
WordPress itself provides the building blocks: the Abilities API in WordPress core (6.9 and later) and the official MCP Adapter plugin from the WordPress project. The adapter turns registered abilities into MCP tools. Plugins such as Royal MCP add the actual tools, sign-in, and safety features.
Do I need the MCP Adapter to use Royal MCP?
No. Royal MCP has its own MCP endpoint and works on WordPress 5.8 and later. If the MCP Adapter is installed, Royal MCP also registers its own server with it, so your tools are reachable either way.
Which AI clients can connect to WordPress through MCP?
Any MCP client. Royal MCP is used with Claude (web, desktop and Claude Code), ChatGPT, Cursor, Windsurf, Gemini, Perplexity and other MCP-compatible agents.
Is it safe to connect AI to a live WordPress site?
It can be, if the MCP server checks permissions on every call and gives you controls. Royal MCP checks WordPress capabilities on every tool, rate-limits requests, redacts sensitive data, and offers a site-wide read-only mode, a drafts-only mode and undo for tracked changes.
Does Royal MCP work alongside WooCommerce’s or Elementor’s own MCP?
Yes. Royal MCP answers on its own endpoint, so it doesn’t replace or switch off the MCP abilities that WooCommerce or Elementor provide. When Elementor’s MCP is switched on, Royal MCP detects it and tells the AI that Elementor’s own build tools are also available.
What is WordPress.com MCP?
WordPress.com runs its own hosted MCP server for paid WordPress.com plans, and for self-hosted sites through Jetpack AI or Jetpack Complete. Calls pass through Automattic’s servers, and it has no WooCommerce or page-builder tools. For self-hosted WordPress, a plugin like Royal MCP runs on your own server instead.
Is Royal MCP free?
Yes. Royal MCP is free on WordPress.org with 250+ tools. Royal MCP Pro adds 100+ more tools, undo for up to 7 days, a hash-chained audit log and per-connection tool profiles, from $79 a year.
Connect your site to AI
Install Royal MCP free from WordPress.org, copy your MCP URL and add it as a connector in Claude or ChatGPT.