For WooCommerce MCP Server
WooCommerce store catalog and WordPress content access for AI assistants.
Data last scanned today · Reviewed today
Overview
This WordPress plugin functions as a Model Context Protocol server, allowing AI clients to query store products, variations, categories, tags, and reviews. It effectively transforms your WooCommerce site into a searchable data source by providing read-only access to key store metrics and site content. The server supports two transport modes: STDIO for WordPress-style local connections and Streamable HTTP for JSON-RPC 2.0 communication. It includes an administrative interface that allows users to toggle specific tools and manage authentication, ensuring the integration fits into existing site management workflows.
Our verdict
With a security score of 42/100, this server is currently classified as high risk. Because it is community-maintained and not an official Automattic release, users should be cautious regarding long-term support and potential vulnerabilities. While it implements a read-only architecture that helps isolate data exposure, the absence of an editorial review process means it is best suited for development environments or self-hosted sites where you can monitor the codebase directly.
- Supports a read-only configuration for safer data exposure
- Provides six direct dependencies reducing supply-chain complexity
- Licensed under GPL-2.0 for open-source transparency
- High risk score due to community-only maintenance
- No official affiliation with WooCommerce or Automattic
- Last commit was 100 days ago
Setup
{
"mcpServers": {
"mcp-for-woocommerce": {
"args": [
"-y",
"mcp-for-woocommerce"
],
"command": "npx"
}
}
}Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.
Tools
| Tool | Description | Risk |
|---|---|---|
| wc_products_search | primary universal search (includes permalink) | low |
| wc_get_product | product by ID (includes permalink) | low |
| wc_get_product_variations | all variations for a variable product (each includes permalink) | low |
| wc_get_product_variation | specific variation by ID (includes permalink) | low |
| wc_intelligent_search | intelligent fallback multi-stage search | low |
| wc_analyze_search_intent | analyze user query and suggest parameters | low |
| wc_analyze_search_intent_helper | helper for categories/tags mapping | low |
| wc_get_products_by_brand | products by brand (attribute/category/custom taxonomy) | low |
| wc_get_products_by_category | products by category | low |
| wc_get_products_by_attributes | products filtered by attributes | low |
Compatibility
| Client | Local | Docker | Remote | Read-only |
|---|---|---|---|---|
| Claude Desktop | ||||
| Cursor | ||||
| VS Code | ||||
| Windsurf | ||||
| ChatGPT |
Frequently asked questions
›What are the server requirements for running this plugin?
The server requires WordPress 6.4 or higher, PHP 8.0 or higher, and the WooCommerce plugin must be activated.
›Can this server perform write operations on my store?
No, the server provides read-only access to store information and content; all tools are strictly configured for read operations.
›How can I secure the MCP endpoint?
You can enforce security by enabling JWT authentication in the plugin settings and generating tokens through the WordPress Admin interface.
›What should I do if I want to use the server locally without JWT?
When JWT authentication is disabled in the settings, the plugin can function as a local Claude Desktop connector and will automatically generate a proxy script file.
›Which transport method is recommended for modern MCP clients?
The Streamable HTTP transport (JSON-RPC 2.0) is recommended for modern clients to achieve lower latency and eliminate the need for a proxy.
›Can I selectively disable specific tools?
Yes, individual tools can be enabled or disabled directly within the plugin's admin settings page.
Badge
Maintain this server? Add the live badge to your README.