Wordpress MCP

wordpress-mcp

Lightweight WordPress MCP server for site management. 335 tools with token-optimized responses - REST API responses automatically slimmed from kilobytes to essentials.

v3.5: fields_* (12 tools) for cvrt-fields 0.1.2+ - status, settings, field types, location values, schemas and CRUD + JSON sync for field groups, post types, taxonomies and options pages.

v3.4: cvrt-legal 0.9.0 - markup repair switches (repairs on legal_put_accessibility) and report (legal_get_accessibility_report / legal_reset_accessibility_report), document type barrierefreiheit.

v3.3: every cvrt-legal admin route is a tool - generator (legal_*_generator*, library import from a local file), Impressum facts, social-media section, settings, and the self-hosted accessibility tool (legal_get_accessibility / legal_put_accessibility, cvrt-legal 0.8.0+).

v3.2: legal_consent_log_get / legal_consent_log_stats / legal_consent_log_export for the cvrt-legal consent decision log (needs cvrt-legal 0.5.0+); legal_put_consent takes log_enabled.

v3.1: Tools for our own plugins - seo_* (31) for cvrt-seo-manager, legal_* (15) for cvrt-legal incl. legal_link_page (cvrt-legal 0.4.2+), and fulfillment_* (8) for cvrt-order-fulfillment.

v3.0 (BREAKING): Multi-site - one server instance manages any number of sites via a single WORDPRESS_SITES env var. Every tool now requires a site argument; use the new list_sites tool to discover configured ids. The old single-site env vars are removed. wp_activate_plugin / wp_deactivate_plugin / wp_delete_plugin now use cvrt-mcp-endpoints mcp/v1 routes and take the plugin file path (e.g. akismet/akismet.php) instead of a slug.

v2.1: Now includes Pro modules for ACF and WooCommerce via wp-pilot-pro.

v2.0: Extended tools for the cvrt-mcp-endpoints plugin - install plugins/themes from WordPress.org, database management, full widget/menu control, and more.

Why This Server?

WordPress REST API returns extremely verbose JSON (~5-10KB per post). This server strips it down:

Less tokens = faster responses, lower costs, more context for your AI.

Installation

npm install -g @cavort-it-systems/wordpress-mcp

Or run directly:

npx @cavort-it-systems/wordpress-mcp

Configuration

v3.0 is multi-site (BREAKING CHANGE). A single server instance now manages any number of WordPress sites, defined in one WORDPRESS_SITES env var as a JSON array of {id, url, username, password} objects. The old single-site env vars (WORDPRESS_SITE_URL, WORDPRESS_USERNAME, WORDPRESS_PASSWORD) are no longer read - set WORDPRESS_SITES instead.

Every tool (except list_sites) now requires a site argument naming the target site id. Call list_sites first to discover which ids are configured - it returns {id, url} for each site (passwords are never returned or logged).

Claude Desktop / Manual

Add to your MCP config (~/.claude.json or Claude Desktop settings):

{

"mcpServers": { "wordpress": { "command": "npx", "args": ["@cavort-it-systems/wordpress-mcp"], "env": { "WORDPRESS_SITES": "[{\"id\":\"boardcouture\",\"url\":\"https://boardcouture.shop\",\"username\":\"cavortkonzepte\",\"password\":\"xxxx xxxx xxxx\"}]" } } } }

Add more sites by appending objects to the WORDPRESS_SITES array - one server instance handles them all.

Claude Code CLI

claude mcp add wordpress \

-e WORDPRESS_SITES='[{"id":"boardcouture","url":"https://boardcouture.shop","username":"cavortkonzepte","password":"xxxx xxxx xxxx"}]' \ -- npx @cavort-it-systems/wordpress-mcp

From Source

git clone https://github.com/cvrt-jh/wordpress-mcp.git

cd wordpress-mcp npm install && npm run build

Authentication

Uses Application Passwords (WordPress 5.6+):

1. Go to Users → Profile in WordPress admin
2. Scroll to Application Passwords
3. Create new password for "Claude MCP"
4. Use the generated password (keep the spaces)

Response Slimming

All responses are automatically trimmed. Example:

`wp_get_post` - from ~5KB to ~200 bytes:

// Before (WordPress REST API raw)

{"id":123,"date":"2026-01-15T10:30:00","date_gmt":"2026-01-15T09:30:00", "guid":{"rendered":"https://example.com/?p=123"},"modified":"2026-01-20T14:00:00", "modified_gmt":"2026-01-20T13:00:00","slug":"my-post","status":"publish", "type":"post","link":"https://example.com/my-post/","title":{"rendered":"My Post"}, "content":{"rendered":" Full content... ","protected":false}, "excerpt":{"rendered":" Excerpt... ","protected":false}, "author":1,"featured_media":456,"comment_status":"open","ping_status":"open", "sticky":false,"template":"","format":"standard","meta":{"footnotes":""}, "categories":[1,5],"tags":[10,20],"class_list":["post-123","type-post",...], "_links":{"self":[...],"collection":[...],"about":[...],...}}

// After (slimmed) {"id":123,"title":"My Post","slug":"my-post","status":"publish", "date":"2026-01-15T10:30:00","modified":"2026-01-20T14:00:00", "link":"https://example.com/my-post/","excerpt":"Excerpt...", "author":1,"categories":[1,5],"tags":[10,20],"featured_media":456}

What gets stripped:

Tools (335)

Every tool below requires a site argument (the id from your WORDPRESS_SITES config), except list_sites itself.

Sites (1)

• list_sites - List configured site ids and URLs (no site argument; passwords never returned)

Standard WordPress REST API (42 tools)

These work with any WordPress site:

Site (4)

• wp_site_info - Get site name, description, URL
• wp_get_settings - Get site settings
• wp_update_settings - Update site settings
• wp_get_namespaces - List REST API namespaces

Posts (6)

• wp_list_posts - List posts with filters
• wp_get_post - Get single post
• wp_create_post - Create post
• wp_update_post - Update post
• wp_delete_post - Delete post
• wp_search_posts - Search posts

Pages (5)

• wp_list_pages - List pages
• wp_get_page - Get single page
• wp_create_page - Create page
• wp_update_page - Update page
• wp_delete_page - Delete page

Users (6)

• wp_list_users - List users
• wp_me - Get current user
• wp_get_user - Get user by ID
• wp_create_user - Create user
• wp_update_user - Update user
• wp_delete_user - Delete user

Plugins (5)

• wp_list_plugins - List plugins
• wp_get_plugin - Get plugin details
• wp_activate_plugin - Activate plugin (mcp/v1; plugin is the file path, e.g. akismet/akismet.php)
• wp_deactivate_plugin - Deactivate plugin (mcp/v1; plugin is the file path)
• wp_delete_plugin - Delete plugin (mcp/v1; plugin is the file path)

Themes (4)

• wp_list_themes - List themes
• wp_get_active_theme - Get active theme
• wp_get_theme - Get theme details
• wp_activate_theme - Switch themes

Media (4)

• wp_list_media - List media library
• wp_get_media - Get media item
• wp_update_media - Update media metadata
• wp_delete_media - Delete media

Categories & Tags (8)

• wp_list_categories - List categories
• wp_create_category - Create category
• wp_update_category - Update category
• wp_delete_category - Delete category
• wp_list_tags - List tags
• wp_create_tag - Create tag
• wp_update_tag - Update tag
• wp_delete_tag - Delete tag

Comments (6)

• wp_list_comments - List comments
• wp_get_comment - Get comment
• wp_create_comment - Create comment
• wp_update_comment - Update/moderate comment
• wp_delete_comment - Delete comment
• wp_moderate_comments - Batch moderate

---

Extended Tools (43 tools) - Requires cvrt-mcp-endpoints plugin

These require the cvrt-mcp-endpoints WordPress plugin to be installed and activated.

Plugin Management (4)

• mcp_search_plugins - Search WordPress.org plugins
• mcp_install_plugin - Install plugin from WordPress.org
• mcp_update_plugin - Update single plugin (refresh checks first, incl. GitHub/PUC plugins)
• mcp_check_plugin_updates - Run Plugin Update Checker and wp.org checks now, list updates
• mcp_update_all_plugins - Update all plugins

Theme Management (6)

• mcp_search_themes - Search WordPress.org themes
• mcp_install_theme - Install theme from WordPress.org
• mcp_install_theme_zip - Install a theme from a public ZIP url or upload a local file_path (.zip, max 64 MB; works for private or locally built themes, needs cvrt-mcp-endpoints 1.20.0+; replacing the active theme needs replace_active: true)
• mcp_update_theme - Update single theme
• mcp_update_all_themes - Update all themes
• mcp_delete_theme - Delete inactive theme

Core Management (6)

• mcp_get_version - Get WordPress version info
• mcp_get_system_info - Get comprehensive system info
• mcp_check_updates - Check for all updates
• mcp_update_core - Update WordPress core
• mcp_flush_rewrite - Flush rewrite rules
• mcp_flush_cache - Flush object cache and transients (not a page cache in front of WordPress)

Database Management (5)

• mcp_get_tables - List tables with sizes
• mcp_search_replace - Search/replace in database
• mcp_optimize_tables - Optimize all tables
• mcp_clean_revisions - Delete old revisions
• mcp_clean_comments - Delete spam/trash comments

Options Management (5)

• mcp_list_options - List options with prefix filter
• mcp_get_option - Get single option
• mcp_set_option - Create/update option
• mcp_delete_option - Delete option
• mcp_bulk_get_options - Get multiple options

Menu Management (8)

• mcp_list_menus - List navigation menus
• mcp_get_menu_locations - Get theme locations
• mcp_get_menu - Get menu with items
• mcp_create_menu - Create menu
• mcp_delete_menu - Delete menu
• mcp_add_menu_item - Add menu item
• mcp_delete_menu_item - Delete menu item
• mcp_assign_menu_location - Assign menu to location

Widget Management (8)

• mcp_list_sidebars - List all sidebars
• mcp_get_sidebar_widgets - Get sidebar widgets
• mcp_list_widget_types - List widget types
• mcp_get_widget - Get widget details
• mcp_add_widget - Add widget to sidebar
• mcp_update_widget - Update widget settings
• mcp_delete_widget - Remove widget
• mcp_move_widget - Move widget to sidebar

Health & Diagnostics (6)

• mcp_get_health - Site health score
• mcp_get_debug_info - Debug information
• mcp_get_php_info - PHP configuration
• mcp_get_plugins_health - Plugin health/updates
• mcp_get_cron_status - Cron jobs status
• mcp_run_cron - Run a cron event now (resched