WordPress MCP features. Everything GoBuildWP can do, sorted by the job.

Read an Elementor page as its element tree, then add, move, duplicate or edit elements and page settings, and check whether the page is ready for v4 atomic elements.

18 abilities

• elementor-get-content
• elementor-edit-element
• elementor-add-element
• elementor-audit-atomic-readiness

Limit: Deleting an element or replacing the whole document needs confirmation.

Build whole pages from a structured spec, manage global classes, variables and v3 colours and fonts, apply dynamic tags and interactions, and edit Elementor Pro forms.

52 abilities

• elementor-build-from-spec
• elementor-create-global-class
• elementor-create-variable
• elementor-apply-dynamic-tag

Limit: Building over an existing page or applying a template needs confirmation.

A separate module for Bricks, Divi 5, Breakdance, Oxygen 6, Beaver Builder, WPBakery, Etch, Mosaic, Flatsome and Bricksforge, each written against that builder's element tree, classes and variables.

338 abilities across 10 modules

• bricks-patch-elements
• divi-edit-module
• breakdance-edit-element
• etch-edit-node

Limit: A module loads only while its builder is active. Removals and most whole-layout replacements need confirmation.

Read block content and stage native block changes in a batch that the block editor itself finalizes, so saved markup is what Gutenberg would write, and leave, reply to and resolve Block Notes for a person; Pro adds block schemas for Spectra, Kadence Blocks and GenerateBlocks, and inserts free Kadence Design Library sections with their uniqueIDs renamed.

43 abilities across 5 modules

• gutenberg-get-content
• gutenberg-create-pending-batch
• add-block-note
• kadenceblocks-get-block-schema

Limit: Static blocks are saved after a signed-in WordPress browser session finalizes the batch. Notes can be read from WordPress 6.9, but anchoring a new note to a block needs WordPress 7.1 and its required API.

On a block theme, Free edits templates, template parts, global styles, patterns and navigation menus the way the site editor does. Pro changes layouts, hooks, palettes and typography through each theme's own options in Astra, GeneratePress, Kadence, OceanWP, Avada and Spectra One, with a shared bridge for customizer settings elsewhere.

130 abilities across 8 modules

• update-template
• update-global-styles
• astra-set-header-layout
• theme-bridge-update-customizer-settings

Limit: Reverting a customised block template and site-wide Astra and GeneratePress changes need confirmation.

Derive a design from a brief or from the live site, keep it as the active design, check contrast and composition against it; Pro writes its palette and type into the builders' global colours and fonts.

26 abilities across 2 modules

• generate-design
• adopt-design-from-site
• check-contrast
• brand-kit-apply

Limit: Applying a brand kit writes to every chosen design system and needs confirmation.

Save and apply templates and set display conditions for headers, footers and archive templates in Elementor Pro, Divi, Bricks, Breakdance and Oxygen; create popups in Elementor Pro, Bricksforge and Spectra.

39 abilities across 7 modules

• elementor-set-template-conditions
• elementor-preview-template-conditions
• divi-create-theme-builder-template
• elementor-create-popup

Limit: Applying a template replaces the page's content and needs confirmation.

Generate Elementor v4 atomic widgets as a PHP mu-plugin, place header or body code with Elementor Pro Custom Code, and manage Code Snippets and Dynamic Shortcodes.

24 abilities across 3 modules

• elementor-create-atomic-widget
• elementor-save-custom-code
• code-snippets-validate-snippet
• code-snippets-create-snippet

Limit: Writes count as code execution: Developer Full Access only, with confirmation on every call.

Search Openverse for openly licensed images with no API key, each result carrying its licence and a ready attribution line for the caption; Pro places one straight onto an Elementor element.

3 abilities across 2 modules

• search-images
• import-media-url
• elementor-place-stock-image

Convert a page from one builder into a new draft in another, with a loss report that names anything dropped or reduced to raw markup.

4 abilities

• convert-preview
• convert-document
• get-conversion-report

Limit: The source page is never modified, and a lossy conversion refuses until the loss is accepted.

Open the built page in the agent's own browser, capture screenshots through a signed-in wp-admin tab, score what moved between two captures, and read back what a visitor is served.

8 abilities

• verify-rendered-page
• get-page-view-link
• capture-page
• compare-captures

Limit: Screenshots are taken only while someone keeps the Visual Runtime tab open in wp-admin.

Edit a draft copy of a live page with its builder data, preview it, then publish it back onto the original so the URL, ID, comments and SEO history stay put.

6 abilities

• working-copy-create
• working-copy-preview
• working-copy-publish

Limit: Publishing and discarding need confirmation. Supported publishes with retained before-images can be rolled back; an accepted irreversible publish cannot.

List, search, create and update posts, pages and public custom post types, with their terms, navigation menus and theme locations, comment moderation and revision restore.

34 abilities

• list-content
• update-post
• upsert-menu-item
• restore-revision

Limit: Deletes need confirmation.

Plan a site-wide replacement across post titles, content, excerpts and chosen meta keys, serialized values and builder JSON included, review every match with its before and after, then apply only the posts that have not changed since, with one undoable change per post.

4 abilities

• search-replace-preview
• search-replace-apply
• search-replace-status

Limit: Applying needs confirmation. Serialized objects, guids and options are never touched, and regular expressions are off unless asked for.

Import media from a URL, edit titles, captions and alt text, attach files to content, set or clear featured images, and resize, crop, rotate or flip an image as a new attachment or in place.

10 abilities

• import-media-url
• update-media
• set-featured-image
• edit-image

Limit: Deleting an attachment needs confirmation. Image edits can be undone, and the original file is never deleted.

Read users with personal fields kept to a minimum, change an allowlisted set of ordinary site settings, and create or update accounts where the profile allows it.

6 abilities

• list-users
• get-site-settings
• update-site-settings
• create-user

Limit: Creating or changing users is Developer Full Access only and needs confirmation. Secrets and authentication settings are never writable.

Search the WordPress.org directory, then install, activate, update, switch or remove plugins and themes.

12 abilities

• search-extensions
• install-plugin
• activate-plugin
• switch-theme

Limit: Installing and deleting are Developer Full Access only; activating, updating and switching need confirmation. Installs cannot be rolled back from the ledger.

Update one supported plugin or theme with a backup requirement by default, a retained file copy, and selected page, REST and admin-ajax checks. Failed checks trigger a file-recovery attempt. Retained copies support undo for up to 7 days, subject to recovery checks.

3 abilities

• updates-available
• safe-update
• safe-update-history

Limit: The backup requirement can be explicitly skipped. Recovery can fail and does not restore database migrations or external effects. WordPress core, GoBuildWP itself and single-file plugins are refused. No screenshots are taken; each update needs confirmation.

Read the last backup and whether it worked, what it held, its size and where it went, in UpdraftPlus, Duplicator, BackWPup and All-in-One WP Migration, in Free. Pro starts one with UpdraftPlus's or BackWPup's own scheduler or All-in-One WP Migration's own export steps, which Pro runs itself in short slices on WP-Cron and on each backup-status read, and its optional setting holds destructive calls until a fresh backup exists.

3 abilities

• backup-status
• backup-list
• backup-trigger

Limit: Nothing restores, downloads or deletes a backup. Duplicator is read, never started, and archive paths, links and credentials never leave the site.

Read Wordfence and Solid Security status, scan findings and lockouts in Free, with addresses shown only as networks. Pro applies a hardening plan a person confirmed, blocks or unblocks an IP, and starts the plugin's scan.

8 abilities

• security-plugin-status
• security-harden-plan
• security-apply-settings
• security-block-ip

Limit: Applying settings and blocking or unblocking an IP need confirmation and can be undone with rollback-change; starting a scan changes no setting and cannot be undone. Application Passwords are never switched off. Wordfence extended protection and Solid two-factor are only reported, and scans need a Wordfence key or a publicly reachable site for Solid.

Read and edit files, upload large archives through a one-time link, run WP-CLI in the foreground or as a background job, execute PHP, hand a browser agent a temporary admin sign-in, and explore options or run one read-only SELECT against the database.

13 abilities

• read-file
• run-wp-cli
• execute-php
• create-admin-access-link

Limit: Everything here runs only under Developer Full Access, file reads and directory listings included, since a file read can reach wp-config.php. Writes, WP-CLI, PHP and admin sign-in links also need confirmation on each call. File, options and database reads are recorded in the change log. Options and database read results are not stored there; database reads redact sensitive columns and refuse the users, options and key tables.

Report WordPress, PHP, database, cron and cache status, run bounded server-side performance checks and Site Health tests, list hardening gaps and outstanding updates, manage WP-Cron events and transients, and find what stops an MCP client connecting.

9 abilities

• system-status
• connection-doctor
• cron-list
• security-audit

Limit: The security audit checks configuration. It is not a malware scan. A deleted cron event can be put back at the same time and schedule.

Check a page as visitors receive it against WCAG 2.2, find images with missing or filename alt text and write real alt text from the image itself, and audit the site for broken internal links, orphan pages, thin content and missing descriptions.

6 abilities across 2 modules

• audit-accessibility
• audit-media-alt
• update-image-alt
• audit-content

Limit: The WCAG check reports what it could not test, such as contrast, focus, target size and script-rendered content. It is not a full accessibility audit.

Run the accessibility, content and alt-text audits daily or weekly on WP-Cron with no agent connected, keep each run's report with what is new, fixed or changed since the last one, and email a short summary to administrators chosen by user id.

5 abilities

• routines-save
• routines-report
• routines-run-now
• routines-list

Limit: Routines can run only those three read-only audits, so they never change the site. Their audit calls are not written to the change log; saving, deleting and running a routine are.

Turn a finished content audit into a plan of proposed link, redirect and metadata fixes with before/after evidence and confidence. Apply selected items and inspect each result. Recovery needs a supported writer and retained before-image; redirects and AIOSEO own-table writes have separate limits.

2 abilities

• content-fix-plan
• content-fix-apply

Limit: Structured-data findings are report-only, and page-builder layouts never get related links. More than 20 items in one call need confirmation.

List the sites on a network and run an ability on one of them through that site's own safety profile, confirmation and gates, with the change recorded in that site's own log.

2 abilities

• network-list-sites
• network-run-ability

Limit: Only on a multisite network.

Detect 26 cache and optimisation layers, inspect available settings, measure a page, change a supported key, and request supported purge or warm operations. An experiment can restore captured settings where its driver supports recovery.

16 abilities

• cache-measure-page
• cache-begin-experiment
• cache-apply-preset
• cache-purge

Limit: The aggressive preset and native setting changes need confirmation. Recovery excludes uncaptured settings and external effects; W3 Total Cache writes have no per-change undo. Verify settings and visitor output after recovery.

Read and set one post's SEO title, meta description and robots in Yoast SEO, Rank Math, AIOSEO, SEOPress, The SEO Framework, Slim SEO and SmartCrawl in Free, each undoable. Pro adds focus keywords, social fields, term SEO and schema, audits or updates meta on up to 100 posts per call across any of them, and reads Search Console and Analytics figures through Site Kit.

67 abilities across 9 modules

• seo-bulk-get-meta
• seo-bulk-update-meta
• rank-math-edit-post-seo
• site-kit-search-queries

Limit: Bulk writes need confirmation and support a dry run. Site Kit access is read-only. A field the active plugin does not store fails for that post instead of reporting success.

Manage redirects and 404 logs in Redirection and in the SEO plugins that store them, and add a 301 automatically when a permalink changes.

27 abilities across 6 modules

• redirection-create-redirect
• redirection-list-404s
• redirects-status
• redirects-set-auto

Limit: Automatic redirects go to the first available redirect store; with none installed, only WordPress's own old-slug fallback applies.

Free reads products, variations, categories, tags, store settings, orders and customers, and edits one product's name, description, prices and stock with undo. Pro manages variations, attributes, orders, customers, coupons, refunds and reviews, changes prices or stock on up to 100 items at once, reads shipping zones, tax rates and gateways, and reports sales and best sellers for calendar dates in the store's timezone.

65 abilities across 2 modules

• woocommerce-bulk-update-prices
• woocommerce-update-order-status
• woocommerce-sales-report
• woocommerce-create-refund

Limit: Refunds need confirmation and reach the payment gateway only when you opt in. Bulk changes support a dry run.

Read FunnelKit funnels with their steps in order, count optins, orders and revenue per step for a date range, and rename, re-slug, publish or draft a step without its URL moving unasked.

4 abilities

• funnelkit-list-funnels
• funnelkit-funnel-stats
• funnelkit-update-step

Limit: Funnel Builder lite records no page views, so there are no conversion rates. Only counts and sums are returned, never customer data.

List forms and read entries in Contact Form 7, WPForms, Gravity Forms and Forminator in Free, with contact details withheld. Pro builds and edits forms, fields and notifications in those and in Fluent Forms, Formidable and Ninja Forms, exports entries, edits Elementor Pro forms, and reads WS Form with small label and button edits.

181 abilities across 9 modules

• wpforms-create-form
• gravityforms-add-field
• fluentforms-export-submissions
• cf7-list-entries

Limit: Entry exports redact sensitive fields unless a person confirms otherwise; Forminator and WS Form entries always withhold emails, phones and IPs. Contact Form 7 entries need Flamingo, and WS Form edits cannot be undone from the log.

Create post types, taxonomies, field groups and options pages in ACF, Meta Box, Pods, JetEngine, ACPT and Admin Site Enhancements, read and write values, and update fields on up to 100 posts per call.

149 abilities across 7 modules

• acf-create-fieldgroup
• metabox-create-relationship
• jetengine-create-cct
• fields-bulk-update-values

Limit: Editing a field group's fields or writing complex values needs confirmation.

Link translations, set content language and translate strings in WPML and Polylang, and manage Weglot languages, excluded URLs and translated slugs.

41 abilities across 3 modules

• wpml-link-content-translations
• polylang-bulk-set-string-translations
• weglot-add-destination-language
• wpml-list-content

Limit: Re-linking translations and pushing Weglot settings to its cloud need confirmation.

Build Tutor LMS courses, lessons and quizzes and manage enrolments, run Paid Memberships Pro levels and discount codes, create The Events Calendar events, and manage BuddyPress groups.

52 abilities across 4 modules

• tutor-lms-create-course
• paid-memberships-pro-create-level
• events-calendar-create-event
• buddypress-create-group

Limit: Enrolments, membership changes and deletions need confirmation.

Generated configurations for 27 AI clients, signing in with OAuth 2.1 and PKCE (Client ID Metadata Documents, with dynamic registration as a fallback), an Application Password or an access token. A client on the machine that runs the site, such as Claude Code, Cursor or a CI job, can also connect over stdio through wp wppilot mcp serve, with no credential to create.

Limit: Clients that connect from their own servers, such as ChatGPT and Claude on the web, need the site on public HTTPS.

Discovery follows the negotiated protocol. Modern MCP connections list permitted abilities as individual tools with schemas; legacy adapter connections use discover-abilities, get-ability-info and execute-ability. The available list follows this site's plugins, permissions and safety profile.

1 ability

• agent-context

Read Only, Production Safe or Developer Full Access decides which abilities exist for a connection, alongside per-ability switches, WordPress capability checks, confirmation on destructive calls and a per-minute write budget per credential. Confirmation can be required from a person rather than the model, and access tokens can be scoped and capped below the site's profile.

Limit: Profiles are enforced by WordPress on every call path, not requested in a prompt.

Get a field-by-field diff and a wp-admin review link for a post, media, settings or delete write before it runs; applying refuses if the target changed in between.

2 abilities

• preview-ability
• apply-preview

Limit: Covers supported write projectors. Required preview is opt-in; Chat and unsupported operations are exempt. A preview is not a rendered-site test.

Supported writes are recorded with ability, actor and object, secrets and email addresses masked when a record is read, and reversible ones roll back with the result checked against the stored before-state. The Changes screen in wp-admin filters the record, undoes one change, one bulk batch or everything a filter shows, and downloads it as CSV or JSON. A whole agent session can be undone or redone, newest first, after a check that nothing else changed its targets since. Pro extends rollback to builder documents, WPForms, Contact Form 7 and Forminator forms, SEO fields beyond one post's title, description and robots, custom-field values, full product edits, FunnelKit steps, content fixes and safe plugin updates.

7 abilities

• list-changes
• rollback-change
• list-sessions
• undo-session

Limit: Not every write is reversible; an entry that cannot be undone says why. The record keeps 10,000 changes or 90 days, and changes older than 30 days lose their larger before-images. The screen undoes at most 200 at a time, and exports never include before-images.

Hold every write, only destructive and critical ones, or nothing by default, set a different mode per client or per ability, and email the site admin when a write is waiting. A held call can be listed, and approved or rejected from an MCP Apps card, when a person confirmed the decision.

4 abilities

• approval-get-policy
• approval-set-policy
• approval-list-requests
• approval-decide

Limit: A client cannot use the policy ability to release its own holds, and an agent's own confirm=true never approves a held call: the decision has to be confirmed by a person.

Skills are written procedures an agent can fetch and you can edit; Pro adds persistent memory for durable facts about the site and ongoing work, plus plugin-aware skill packs.

8 abilities across 2 modules

• skill-get
• skill-write
• memory-save
• memory-list

In a host that renders MCP Apps, Free shows a preview card with an Apply button beside a pending write. Pro adds four cards: a side-by-side or inline diff, a before and after screenshot slider, a filterable search-and-replace grid and an approval card for held calls.

Limit: Hosts without MCP Apps get the same results as plain text. The cards load nothing from the network except the slider's screenshots, from this site's uploads.

Work with the site from the WordPress dashboard through the provider and model configured in the WordPress AI Client, with attachments, saved sessions and an approval choice on each tool call. Calls go through the same safety profile, rate limit and Pro approval queue as an MCP client.

Limit: Prompts, attachments and tool results go to that configured provider.

PHP files an agent writes can only go into one sandbox directory, loaded as small plugins you can disable one by one; a fatal error puts the sandbox in safe mode until the file is fixed.

3 abilities

• write-file
• disable-file
• enable-file

Limit: Developer Full Access only. It handles loading and crash recovery; it is not a security boundary.

Industry briefs for landing pages, 10 in Free and 300 in Pro, each with a palette, a type pairing, required sections and a design signature so two businesses do not get the same page.

Explains why a Pro module is not answering: whether its plugin is active, whether its loader is eligible to run, and any recorded load failure.

1 ability

• integration-health