Spec Driven Development
by formulahendry
MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.
Runs on your computer★ 440MITUpdated 14 months ago
Install
Cowboy MCP
Overview
Description from the maker (original English)
Self-hosted WordPress MCP server with 203 tools and per-change undo. OAuth sign-in or API key. Free.
PopNx MCP’s three pillars
These three are never merged into one score: opinions, measurements and popularity are different things.
- User voiceiNo reviews yetReviews open together with accounts in a later step
- Our basic checksi1 of 1 passedChecked from public information; code not scanned yet
- UsageiNot measured yet★ –
What you can do with it
We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.
- Connection: Runs in the cloud
- Transport: Streamable HTTP
- Category: Other
- You need to fill in: Authorization
Install
Pick the AI app you use, then copy the settings.
Before you install
- Basic checks: 1 of 1 passed
- Runs on the maker’s server: what you ask it goes through their server.
- You fill in yourself:
Authorization
Values marked secret are keys to your account. Never share them or paste them into a chat.
You need
- Runs in the cloudNothing to install; it connects over the internet
Which app do you use?
Pick your app above. We remember it, so next time the button says “Install in …”.
This address needs a key in a request header, which the add-connector menu cannot set. Use Claude Code, Cursor or VS Code instead.
Run this in your terminal
claude mcp add --transport http cowboy 'https://{site_host}/wp-json/cowboy-mcp/v1/endpoint' --header 'Authorization: your-value'Fill in the empty values before running it.
The address contains {…} parts that only you know (such as your account), so copy it and fill them in.
Or copy the settings yourself
Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json
{
"mcpServers": {
"cowboy": {
"url": "https://{site_host}/wp-json/cowboy-mcp/v1/endpoint",
"headers": {
"Authorization": "your-value"
}
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
The address contains {…} parts that only you know (such as your account), so copy it and fill them in.
Or copy the settings yourself
Paste into .vscode/mcp.json in your project
{
"servers": {
"cowboy": {
"type": "http",
"url": "https://{site_host}/wp-json/cowboy-mcp/v1/endpoint",
"headers": {
"Authorization": "your-value"
}
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
This address needs a key in a request header, which the add-connector menu cannot set. Use Claude Code, Cursor or VS Code instead.
Your choice stays on this device in a cookie; no account needed.
Values you fill in
Authorizationsecret HTTP headerOptional: Bearer API key generated in Settings → Cowboy MCP in your WordPress admin. Leave unset to sign in with OAuth in your browser instead.
These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.
What it can do
The address needs your own values, so we cannot read the tool list for you.
Basic checksi
We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 7, 2026
- ✓ Pass
Maker matches the repo
The registry name was verified with the GitHub account februality, which owns the repo
- … Not checked yet
Still maintained
We have not read this repo from GitHub yet
- … Not checked yet
Has a licence
We have not read this repo from GitHub yet
- – Not applicable
Endpoint responds
The address needs your own account values, so we cannot check it for you
- – Not applicable
Sign-in with OAuth
The address needs your own account values, so we cannot check it for you
- … Not checked yet
No hidden instructions in tool descriptions
Not checked yet; we read the tool list when we check the endpoint
Compared with others in Otheri
- More stars than 0% of the other 32706 servers in this category
- Published to the registry more recently than 89% of the other 32706 servers in this category
- Basic checks equal to or better than 100% of the other 32706 servers in this category
Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.
Common questions
Is Cowboy MCP safe?
It passed 1 of 1 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.
What keys or codes does it need?
You need to fill in: Authorization
Does it run on my computer or in the cloud?
It runs in the maker’s cloud. Connect over the internet with nothing to install, but what you send passes through the maker’s servers.
Is it still maintained?
The GitHub repo last changed –, and the latest version (1.7.6) reached the registry 4 days ago.
Which apps can use it?
Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. It connects by URL, so apps that accept remote MCP servers work too, such as ChatGPT in developer mode.
What can I use instead?
In the same category: Spec Driven Development, Remote Desktop Commander, Kanal Varna — drains, leaks & plumbing (Varna, BG)
Alternatives
Servers in the same category from other makers, sorted by stars.
Reading a card:★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi
Remote Desktop Commander
by desktop-commander
Remote Desktop Commander: use files, terminal and processes on your own computers from any AI app.
Runs in the cloud★ 211Updated 2 days ago
Install
Kanal Varna — drains, leaks & plumbing (Varna, BG)
by kanalvarna.com
Drain unblocking, leak detection & plumbing in Varna, Bulgaria: services, prices, areas, contact
Runs in the cloudUpdated today
Install
README from the maker
Open the README
Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.
Cowboy MCP 🤠 — Free WordPress MCP Server with Undo
Cowboy MCP is a free, open-source WordPress plugin that turns any WordPress site into a Model Context Protocol (MCP) server over Streamable HTTP, so Claude, ChatGPT, Gemini, Grok, Perplexity, Muse, Cursor, VS Code, Claude Code, Codex, n8n, OpenClaw, Hermes Agent and any other MCP client can manage the site in plain English through 203 tools — with per-change undo, database checkpoints and an audit log, so it can be trusted on a live site.
Install: WordPress.org plugin directory\ Website & guides: cowboymcp.com
▶ [Watch the 90-second demo](https://www.youtube.com/watch?v=poFkhBgzq-s)
Why Cowboy MCP?
- Every tool is free. Up to 203 built-in tools plus every ability your plugins register through the WordPress Abilities API — content, Gutenberg/Site Editor, WooCommerce, users, media, menus, plugins, themes, files, database, WP-CLI, diagnostics, revisions, SEO (Yoast, Rank Math, AIOSEO, SEOPress), The Events Calendar, ACF, Elementor, Beaver Builder, SiteOrigin, Wordfence, caching, forms — GPL-licensed, no Pro tier, no credits, no usage meter.
- Every change is undoable. A per-change undo journal (before-state snapshots, conflict detection, batch undo) plus one-click database checkpoints, with an always-on audit log. Plugin and theme updates take a file backup and a checkpoint first and auto-restore if the post-update health check fails.
- Nothing in the middle. The MCP endpoint runs inside your WordPress install. No hosted relay, no account, no telemetry — your AI client connects straight to your site.
- Safe by default. Safe mode (confirmation for destructive tools), dry run on every write tool, per-credential read-only/custom scoping, hashed keys shown once, per-key rate limits, denylists for sensitive options / dangerous SQL / WP-CLI commands, SSRF protection, path confinement to
wp-content, and a Power mode only a human can enable in wp-admin. - One-click sign-in for every app. Every app sends you to a sign-in page on your own site: Claude, ChatGPT, Gemini, Grok, Perplexity, Cursor and VS Code with one button or a pasted link, Claude Code, Codex, Gemini CLI and Muse Code with one command, Muse, OpenClaw and Hermes Agent from one pasted message, n8n through OAuth2. The consent screen names the app and lets you grant full access, read-only or a hand-picked list of tools; nothing is granted until you click Approve. API keys remain for scripts, CI and editors without browser sign-in (Windsurf, Cline, Zed).
- Works locally too. Local, Studio, MAMP, DevKinsta, wp-env: terminal tools connect with a key as on a live site; Claude Desktop connects through an
mcp-remotebridge the Connections tab generates for you. - Context-efficient.
tools/listreturns two gateway tools (cowboy_discover,cowboy_run); the agent discovers and runs the other tools on demand instead of loading 203 schemas into its context. On WordPress 6.9+ every tool is also acowboy-mcp/*ability for WP-CLI, REST and the official MCP Adapter — with undo. - Zero dependencies. Native WordPress APIs only — no Composer, no npm, no build step, no
wp-admin/includesat request time. Works on hosts without WP-CLI orshell_exec().
"More access than any other MCP offers, easy to use, LOVE the change journal and the checkpoints — safe if you break something." — WordPress.org review
Tool coverage
| Area | Tools | What the agent can do |
|---|---|---|
| Content | 5 posts/pages/CPTs · 4 taxonomies · 4 comments · 4 media · 6 menus · 1 options | draft, edit, schedule, publish; upload media, fix alt text; build nav menus |
| Gutenberg & Site Editor | 15 (8 on classic themes) | read a page as a block tree and edit it by path; block types, patterns, FSE templates/parts, global styles, navigations |
| Site administration | 5 users · 6 plugins · 5 themes · 4 files · 5 database · 3 WP-CLI/system · 1 site health | install/update/delete plugins & themes safely, manage roles, edit files in wp-content, repair tables, run WP-CLI |
| Diagnostics | 10 | error log, HTTP & email tests, hooks, transients, REST routes, thumbnails, rewrite rules, snapshot, Connection Doctor |
| Safety | 6 rollback · 2 batch/audit | list & undo changes, create/list/restore/delete checkpoints, batch execution, audit-log retrieval |
| WooCommerce | 40 | products & variations, orders & refunds, customers, coupons, tax/shipping/payment settings, reports |
| Wordfence | 17 | scans, blocks, firewall, live traffic, activity, settings |
| ACF / Elementor | 9 / 7 | field groups, fields, repeaters / templates, page content, global styles, widgets |
| Beaver Builder / SiteOrigin | 7 / 12 | builder pages, layouts with dry-run diff, modules, global settings / layouts and row/widget edits, prebuilt layouts, widgets, settings, Widgets Bundle activation |
| Revisions / Events | 3 / 13 | list, diff & restore post revisions / The Events Calendar events, venues, organizers + Events Calendar Pro recurrence |
| SEO / Cache / Forms | 4 / 4 / 1 | Yoast, Rank Math, All in One SEO & SEOPress meta read/write/audit / WP Rocket, LiteSpeed, W3TC / WPForms, Gravity Forms, CF7 |
Most other page builders are supported too: a builder that keeps its layout in post content or post meta is edited through the standard post tools, with the same dry run and per-change undo.
Plus 17 read-only resources (incl. wordpress://tools/catalog), 4 resource templates (wordpress://posts/{id}, wordpress://options/{name}, wordpress://plugins/{slug}, wordpress://users/{id}) and 8 workflow prompts with argument auto-completion. Integrations register only when their plugin is active.
Requirements
- WordPress 6.2+ (tested up to 7.1)
- PHP 8.0+
- HTTPS for the OAuth connector and for cloud clients (claude.ai, ChatGPT); plain HTTP is fine for terminal tools on a local site
Installation
- Plugins → Add New, search for Cowboy MCP, install and activate — or download from WordPress.org.
- Settings → Cowboy MCP → Generate API Key. Copy it — it is shown once and stored hashed.
- Connect your client (below). The Connection tab shows every snippet pre-filled with your site's endpoint.
Updates arrive through the normal WordPress updates screen.
Connect your app
Every app signs in through a consent screen on your own site; no API key to paste. The full matrix — plan gates, whether a local site works, and the date each row was last verified end to end — is at cowboymcp.com/connect.
| App | Plan needed | Button or command | Guide |
|---|---|---|---|
| Claude (claude.ai) | Any Claude plan; Free allows one custom connector. Team and Enterprise: an owner adds it first | Connections tab → Add to Claude | connect-wordpress-to-claude |
| Claude Desktop | Same as claude.ai | Connections tab → Add to Claude, or Customize → Connectors → Add custom connector | connect-wordpress-to-claude-desktop |
| Claude Code | A Claude plan that includes Claude Code (Pro or Max), or API billing | Connections tab → Claude Code panel → run two lines (claude mcp add, claude mcp login) | connect-wordpress-to-claude-code |
| ChatGPT | Business, Enterprise or Edu workspace, on the web; Pro connects one server read-only. No Developer mode | Connections tab → Open ChatGPT, then Plugins → Add → Add custom MCP server → Create as a plugin | connect-wordpress-to-chatgpt |
| Codex CLI and app | A ChatGPT plan that includes Codex (Plus, Pro, Business, Enterprise or Edu), or an API key | Connections tab → Codex panel → one codex mcp add command | connect-wordpress-to-codex |
| Perplexity | Pro, Max or Enterprise. Free has no custom connectors | Connections tab → Open Perplexity, then Plugins (or Customize → Connectors) → Add custom → Add MCP connector | connect-wordpress-to-perplexity |
| Grok | Any, including the free plan | Connections tab → Open Grok, then grok.com/connectors → New Connector → Custom | connect-wordpress-to-grok |
| Gemini app | A personal Google account in the US, 18+, Gemini in English; no paid plan listed | Connections tab → Open Gemini, then Customize → Connectors → + Custom | connect-wordpress-to-gemini |
| Gemini CLI | A Google account; the free tier works | Connections tab → Gemini CLI panel → one gemini mcp add command, then /mcp auth | connect-wordpress-to-gemini |
| Muse (Meta) | Free; Meta offers Muse in the United States and Canada | Connections tab → Muse panel → Copy message, paste it into a new Muse chat | connect-wordpress-to-muse |
| Muse Code | Same Muse account | Connections tab → Muse Code panel → Copy message, paste into muse, then one muse mcp login command | connect-wordpress-to-muse#muse-code |
| Cursor | Any Cursor plan | Connections tab → Add to Cursor | connect-wordpress-to-cursor |
| VS Code (GitHub Copilot) | Any Copilot plan, including Free | Connections tab → Install in VS Code | connect-wordpress-to-vs-code |
| n8n | Any n8n Cloud plan, or self-hosted n8n (Community Edition included) | Connections tab → n8n panel; add an MCP Client Tool node with an MCP OAuth2 credential | connect-wordpress-to-n8n |
| OpenClaw | A running OpenClaw gateway | Connections tab → OpenClaw panel → Copy message, paste into your OpenClaw chat; or openclaw mcp add + openclaw mcp login | connect-wordpress-to-openclaw |
| Hermes Agent | Hermes Agent by Nous Research; the chat path needs its connection tool, the terminal command works on every install | Connections tab → Hermes Agent panel → Copy message, paste into your Hermes chat; or one hermes mcp add … --auth oauth | connect-wordpress-to-hermes-agent |
Windsurf, Cline, Zed, LibreChat and any other Streamable HTTP client connect with a scoped API key (config blocks below); Opencode signs in with the same browser flow.
Connecting an agent
The endpoint is https://yoursite.com/wp-json/cowboy-mcp/v1/endpoint (JSON-RPC 2.0 over Streamable HTTP, MCP 2025-06-18).
Claude Code
claude mcp add --transport http your-site https://yoursite.com/wp-json/cowboy-mcp/v1/endpoint \--header "Authorization: Bearer YOUR_API_KEY"
**Claude desktop & w
Only the beginning is shown; read the rest in the repo