WordPress Ultimate MCP Server

WordPress content and site management through 58 specialized AI abilities.

Data last scanned today · Reviewed today

43★ 130PHPGPL-2.0

Overview

WP MCP Ultimate acts as a bridge between your WordPress environment and AI agents using the Model Context Protocol. By installing this plugin, you gain direct control over site operations, including posts, pages, media libraries, users, plugins, menus, and comments. It is designed to work as a self-contained server with no additional dependencies, requiring only a standard API key for secure communication. The server supports HTTP transport and provides a dedicated admin dashboard for generating credentials and exporting configuration snippets. With 58 distinct abilities, it offers comprehensive command over your site infrastructure, supported by built-in conflict detection for other legacy WordPress tools.

Our verdict

With a security score of 43/100, this server is classified as high-risk. The most critical concern is that every installation grants full write access to your WordPress environment without a read-only mode, meaning AI agents can modify core site files and database entries without restriction. Furthermore, it is a community-maintained project rather than an official vendor release and lacks OAuth support. Given these factors, this tool should only be utilized in development or staging environments where data loss or unauthorized site changes can be safely mitigated.

Supports 58 distinct WordPress site management operations
Zero direct software dependencies for a lean installation
Includes a native dashboard for API key management
Provides exportable configuration snippets for major AI clients

Grants full write access without read-only mode options
Maintained by individuals rather than the official WordPress vendor
Lacks OAuth support for granular access control

Setup

Claude Desktop

{
  "mcpServers": {
    "wp-mcp-ultimate": {
      "args": [
        "-y",
        "wp-mcp-ultimate"
      ],
      "command": "npx"
    }
  }
}

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.

No read-only mode — running this grants full read/write access.

Compatibility

Client	Local	Docker	Remote	Read-only
ChatGPT
Claude Desktop
Cursor
VS Code
Windsurf

Frequently asked questions

›What are the minimum server requirements for this plugin?

This server requires PHP version 8.0 or higher and WordPress version 6.7 or higher.

›How do I authenticate the MCP server with my AI client?

You must generate an Application Password via the Tools > MCP Ultimate menu in your WordPress dashboard, then use the provided config snippet to connect your AI client.

›Does this plugin conflict with other MCP-related plugins?

The server includes built-in conflict detection for legacy plugins such as MCP Adapter, MCP Expose Abilities, and Abilities API.

›Does the plugin require additional installations to function?

No, it is a self-contained plugin and does not require any other plugins to operate.

›Which MCP clients are supported?

The plugin provides pre-formatted configuration export snippets specifically for Claude Code, Claude Desktop, and Cursor.

Badge

Maintain this server? Add the live badge to your README.