Royal MCP

Royal MCP

Run your WordPress site from Claude, ChatGPT or any AI app: write and edit content, manage your store, fix SEO and undo any change. Works alongside Elementor's and WooCommerce's own MCP tools. 100% self-hosted.

Download on WordPress.org · Documentation · Royal MCP Pro · Royal Plugins

---

Royal MCP is an open-source WordPress plugin that turns your site into a Model Context Protocol server. Connect it once, and your AI app can read and change your site the way you would from wp-admin: posts, pages, media, menus, your WooCommerce store, Elementor and Divi pages, SEO, backups and security. Every call runs as a WordPress user, is checked against that user's capabilities, and lands in an activity log, and every destructive change can be undone.

Nothing is relayed through a third-party service. Your API keys, sign-in tokens and logs stay in your own WordPress database.

What you can do with it

Ask in plain language. These all work on the free plugin:

Built to work alongside other MCP tools

Royal MCP is designed to run next to the MCP tools other plugins ship, so your AI can reach for the best tool for each part of a job.

• Elementor. When Elementor's own MCP is switched on, Royal MCP detects it and tells your AI that Elementor's builder is there for designing new layouts. Royal MCP's Elementor tools keep handling edits to the pages you already have: text and image swaps, widgets, cloning and templates.
• WooCommerce. WooCommerce's own MCP abilities keep working. Royal MCP adds the rest of the store: coupons, variations, attributes, customers and store stats.
• WordPress Abilities API. Royal MCP's tools also register as WordPress abilities. With the MCP Adapter installed they are served on Royal MCP's own adapter server, royal-mcp-server, with the same permission checks, switches and logging as the native endpoint. Clients there can sign in with a WordPress Application Password, and each one is listed on the Connected Clients screen.

Royal MCP answers on its own endpoint and never switches off another plugin's tools, so together they cover more of your site than any one of them alone.

Safety

• Your AI app asks first. Claude, ChatGPT and other clients ask you to approve each destructive tool call by default.
• Drafts first. New posts and pages start as drafts.
• Read-only and drafts-only modes. One switch refuses every tool that changes the site, or every tool that would publish.
• An access level per connection. Give each connected AI app Full, Read-only or Drafts-only access from the Connected Clients screen, and revoke any of them. Application Password sign-ins can be blocked, allowed again or deleted there too.
• Browser agents under your control. Any tool that changes the site can be switched off for browser-agent connections in Settings.
• Recent Changes with undo. Every destructive write stores a snapshot first. The Recent Changes screen shows the before, after and current values, and one mcp_undo_last_operation call reverses a change within 72 hours.
• Activity log. Every tool call is logged with the tool name, the user and AI client that made it, argument keys, IP and user agent. Argument values are never stored.
• Dry runs. High-impact writes such as site options and permalink structure can be previewed before they are applied.

Capabilities

305 tools: 118 core tools that are always available, plus 187 integration tools that load only when the matching plugin is active.

WordPress core (118 tools)

• Content - Posts, pages and custom post types (create, read, update, delete, clone as a draft, revisions, featured images); sort by publish or last-modified date and find posts edited since a given date
• Taxonomies - Categories, tags, custom taxonomies, read a single term, term meta, post-term linking
• Media - Browse; upload images, PDFs and other allowed files (by URL, base64 or a file handed over by ChatGPT); convert, resize and compress images on upload; find a file already in the library by address or content and reuse it instead of uploading a copy; update metadata; delete
• Blocks - Read a post's block tree; insert, replace, move or delete single blocks; replace text across blocks; read and edit synced patterns; read global styles and Site Editor templates
• Comments - Create and moderate (approve, spam, trash)
• Users - Display names, roles, registration dates and any capabilities granted beyond a user's roles. Emails and usernames are not exposed unless a site owner opts in with the royal_mcp_user_fields filter
• Menus - Read menus or a single menu item, create items, reorder, update
• Widgets - List widgets and sidebars, read a single widget, update content
• Theme - Custom CSS, theme mods (read one or all), active theme
• Site - Permalink structure, allowlisted options, site info
• Search - Search across content
• SEO - Meta read and write for Yoast, Rank Math, AIOSEO, SEOPress and SEObolt
• Safety - Read-only mode, drafts-only mode, per-connection access levels, Recent Changes and 72-hour undo
• Plugins and themes - Every installed plugin, including must-use plugins and drop-ins, with versions, active status and last-modified dates; installed themes
• Diagnostics - Site status (WordPress, PHP, MySQL, plugins, themes and cron in one call), PHP error-log tail, a record of PHP fatal errors kept by Royal MCP (credentials hidden), cron schedule, and royal_mcp_connection_health

Plugin integrations (187 tools)

Not seeing your plugin? The core tools still cover posts on any custom post type, any plugin's custom fields through post meta, and any plugin's comments. Request an integration on the WordPress.org support forum. If you build that plugin, you can add its tools to Royal MCP yourself or partner with us.

Connect

Install

1. Install from WordPress.org (recommended, updates through wp-admin) or upload the zip from the [lat