Verified

WordPress MCP Server (Claudeus)

WordPress sites management via 145 tools covering posts, FSE, and WooCommerce.

Data last scanned yesterday · Reviewed 2 months ago

1217 dangerous tools126 tools156TypeScriptNOASSERTION

Overview

Claudeus provides a comprehensive suite of 145 tools designed to interface directly with WordPress installations. It handles broad administrative categories including content CRUD operations, user management, site diagnostics, and Full Site Editing (FSE) configurations. It also includes specific modules for WooCommerce and Astra Pro integration, enabling automated maintenance and content workflows through the MCP protocol.

Our verdict

This server carries a high-risk rating with a security score of 22/100. The primary concern is the lack of any authentication method, meaning anyone with access to the server configuration can execute commands against the connected WordPress site. Additionally, every installation defaults to full write access without a restricted read-only mode, and the repository is community-maintained rather than official. It should be avoided for use on critical production environments unless strict network-level isolation is applied.

  • Supports 145 diverse WordPress management tools
  • Includes specialized modules for WooCommerce and Astra Pro
  • Small footprint with only eight direct dependencies
  • Lacks any built-in authentication mechanism
  • Provides full write access to WordPress by default
  • Community-maintained project with NOASSERTION license

Setup

Claude Desktop
{
  "mcpServers": {
    "claudeus-wp-mcp": {
      "args": [
        "-y",
        "claudeus-wp-mcp"
      ],
      "command": "npx"
    }
  }
}

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.

  • No read-only mode — running this grants full read/write access.
  • No built-in authentication — anyone with access to this config can invoke every tool it exposes.

Tools

ToolDescriptionRisk
get_postsRetrieve list of postslow
get_postRetrieve a specific postlow
get_pagesRetrieve list of pageslow
get_pageRetrieve a specific pagelow
get_blocksRetrieve list of blockslow
get_blockRetrieve a specific blocklow
create_postCreate a postmedium
create_pageCreate a pagemedium
create_blockCreate a blockmedium
update_postUpdate a postmedium

Compatibility

ClientLocalDockerRemoteRead-only
ChatGPT
Claude Desktop
Cursor
VS Code
Windsurf

Frequently asked questions

What are the system requirements for running the Claudeus WordPress MCP server?

The server requires Node.js version 22.0.0 or higher.

Does this MCP server support WooCommerce management?

Yes, the server includes dedicated tools for managing WooCommerce products, orders, and sales.

Can I manage Astra Pro settings through this server?

Yes, it includes 11 tools specifically for Astra Pro, covering mega menus, custom layouts, and theme settings.

How are WordPress user accounts handled?

The server provides comprehensive user management tools and includes support for creating and revoking application passwords.

Does the server support Full Site Editing (FSE)?

Yes, it provides 27 tools for managing FSE, including templates, template parts, global styles, and block patterns.

Alternatives

Badge

WordPress MCP Server (Claudeus) security score, rated on RepoAI

Maintain this server? Add the live badge to your README.