WSP MCP – WordPress MCP – Connect Claude, codex, antigravity or any other AI Agent

Description

WSP MCP – AI Agents Connector is a free WordPress plugin that turns your WordPress site into a Model Context Protocol (MCP) server. AI clients can read and edit posts, pages, categories, tags, media, comments, users, and (when installed) Yoast SEO meta and Elementor page content — all under granular, per-ability admin control.

The plugin ships its own native MCP server. You do not need the WordPress MCP Adapter or any companion plugin: activate, copy your connection details from MCP > Connection, and connect. WooCommerce tools (products, orders, refunds, coupons, customers, reports) are available when WooCommerce is active, Advanced Custom Fields tools (field groups, fields, values, post types, taxonomies, options pages) when ACF is active, Ultimate Addons for Elementor (UAE) tools (widgets, templates, layout building, and settings) when UAE is active, and Gravity Forms tools (forms, entries, notifications, and confirmations) when Gravity Forms is active.

Built and maintained by the WebSensePro team. For documentation, setup guides, and connection help, visit the plugin home at wspmcp.com.

Video tutorial

Key features

• Built-in MCP server over a single REST endpoint (Streamable HTTP, JSON-RPC 2.0) — no external dependency.
• Per-ability on/off toggles in MCP > Settings; write abilities are off by default.
• Two authentication methods: WordPress Application Passwords (HTTP Basic) or a plugin-generated API key (Authorization: Bearer or X-WSP-MCP-API-Key).
• Live Configuration Generator on MCP > Connection: choose your AI tool and authentication method and get a ready-to-paste, correctly-formatted config snippet with a one-click copy button — nothing you type is sent to the server.
• One-click automated connector on MCP > Connection: a Download button next to every snippet saves the exact config file with no copy-paste needed, and Cursor users get a Connect Cursor Automatically button that opens Cursor directly and adds the server for them — no config file to touch at all.
• Capability checks on every tool — an AI client can only do what its authenticated user can do.
• Full Audit Log in MCP > Audit Log: every tool call is recorded (tool name, time, user, IP, success/denied/error) in your own database — self-hosted, no external service, visible to administrators only.
• Analytics & Performance Dashboard in MCP > Analytics: total requests, most-used tool, average response time, and error rate at a glance, plus a per-category usage breakdown and a recent-requests performance log — all computed from your own database.
• Optional Yoast SEO and Elementor tools, shown only when those plugins are active.

Complete tools list

Every tool is individually toggleable in MCP > Settings, and all write tools are off by default.

Core WordPress

• Posts — read, create, update, delete
• Pages — read, create, update, delete
• Categories — list, create, update, delete
• Tags — list, create, update, delete
• Comments — read, approve, and delete
• Media — read the media library
• Users — read, create, and update users
• Site info — read general site details; update title, tagline, admin email, and permalink structure
• Plugins — list active plugins; activate and deactivate plugins
• Themes — list installed themes and switch the active theme
• Search — search across site content

Yoast SEO (requires Yoast SEO)

• Read SEO title, meta description, and focus keyphrase
• Update SEO title, meta description, and focus keyphrase

Elementor (requires Elementor)

• Pages — list pages/posts built with Elementor
• Page structure — read the full element tree of a page
• Elements — get a single element’s settings, or find elements by widget type or content
• Templates — list saved templates from the library
• Editing — add widgets, add layout containers/sections, update element settings, and remove elements
• Code-bearing widget types (HTML, Shortcode, Code) are rejected and code-bearing settings (Custom CSS, Custom Attributes) are stripped; all text settings are sanitized with wp_kses_post()

WooCommerce (requires WooCommerce — financial and PII tools require the manage_woocommerce capability)

• Products — list, get, create, update
• Product variations — create
• Orders — list, update status
• Refunds — process refunds
• Coupons — create, list
• Order notes — add order notes
• Customers — read customer data
• Sales report — read sales reporting
• Low-stock alerts — read low-stock products
• Reviews — moderate product reviews

Advanced Custom Fields (requires ACF — structural changes require manage_options; value tools enforce per-object capabilities)

• Field groups — list, get, create, update, delete, import
• Fields — list, get, create, update, delete, duplicate, sync
• Field values — get and set with dot-notation deep access, delete, get-all, bulk-update, and field object
• Custom post types — manage
• Taxonomies — manage
• Options pages — manage

Gravity Forms (requires Gravity Forms — reads require gravityforms_edit_forms or gravityforms_view_entries; writes require form/entry-specific Gravity Forms caps)

• Forms — list (ON by default), get (ON by default), create, update, delete, update form settings
• Entries — list, get, update (status, read/starred flags, field values), delete (trash or permanent)
• Notifications — get, create, update, delete
• Confirmations — get, create, update, delete
• All 18 tools are off by default (except list-forms and get-form); only registered when Gravity Forms is active

Ultimate Addons for Elementor (requires UAE — structural and settings writes require edit_posts, publish_posts, or manage_options)

• Widgets — list, check usage, activate, deactivate, bulk toggle
• Templates — list, get, create, duplicate, update, trash, restore Header/Footer/Blocks templates
• Layout building — add sections, add columns, move elements, build layouts from JSON
• Settings — get/update UAE settings, theme info, extensions, and design-system tokens
• All 45 tools are off by default; string inputs are sanitized with wp_kses_post()

Links

• Plugin home & docs: wspmcp.com
• Built by: WebSensePro

Technical details