The free WordPress MCP plugin. A complete server, not a demo.

Choose your Free edition

Free tool counts and downloads on this website refer to GitHub Free. It includes developer code, filesystem and WP-CLI tools, signed upload and admin-access links, and the sandbox. WordPress.org Free omits those twelve tools and their sandbox. WordPress.org availability is pending directory approval.

Install one Free edition. Pro is a separate plugin requiring compatible Free and a valid Pro licence. Pro supplies any of those tools missing from Free, while existing Free tools stay registered once. Site permissions, safety profiles and confirmation still apply. Without Pro eligibility, Pro-owned tools are unavailable; tools supplied by GitHub Free remain available under site policy.

• Connection and discovery

  WordPress-native MCP endpoint, discover abilities, inspect ability information, execute a typed ability, agent context.

• Posts, pages and custom post types

  List and search content, read a single item, create content as a draft, update content, trash and restore, permanent delete with confirmation, public custom post types discovered automatically.

• Categories, tags and taxonomies

  Discover public taxonomies, list and search terms, read a term, create and update terms, delete a term with confirmation, assign and remove terms on content.

• Media library

  List and search media, read attachment details, import media from a URL, update title, caption, description and alt text, set and clear the featured image, attach and detach from content, delete with confirmation.

• Comments and moderation

  List and filter comments, read a comment, reply to a comment, edit a comment, approve, hold, spam and unspam, trash and restore, delete with confirmation.

• Navigation menus

  List menus and their items, create and rename a menu, add, update and remove items, reorder a whole menu, list the theme's navigation locations, assign a menu to a location.

• Revisions

  List revisions with autosaves distinguished, read a revision against the live post, restore a revision as an audited, reversible write.

• Users and site settings

  Privacy-minimized user reads, create and update users, gated by profile and confirmation, site information, an explicit settings allowlist, installed plugins and themes, install, activate, update and delete plugins and themes, and switch themes, gated by profile and confirmation.

• Authentication and clients

  OAuth 2.1 with PKCE, Application Password authentication, 27 current client configurations, native and proxied OAuth routes, a local stdio connection through WP-CLI, connection diagnostics.

• In-dashboard AI workspace

  WordPress admin chat, configured provider and model selection, chat sessions and message history, message attachments, tool discovery and tool calls, per-call approval choices, provider consent record.

• Gutenberg content workflow

  Read Gutenberg content, create pending batches, add pending changes, review pending batches, browser finalization, delete pending changes, write finalized content.

• Safety and control

  Read Only profile, Production Safe profile, Developer Full Access profile, per-ability enable or disable, WordPress capability checks, critical-action confirmation, preview a write before it happens, optional required preview, per-credential write rate limiting.

• Change visibility

  Field-by-field diff before a post, media, settings or delete write, an MCP Apps preview card with Apply, in hosts that render one, review and approve in wp-admin, drift detection on apply, redacted change list, email addresses masked, change detail, rollback for supported reversible actions, undo or redo a whole agent session, conflicts checked first, connection diagnostics, system status, performance audit, security audit.

• Plugin basics

  WooCommerce catalog, orders and customers read, one product's name, description, prices and stock edited with undo, one post's SEO title, description and robots in Yoast, Rank Math, AIOSEO, SEOPress, The SEO Framework, Slim SEO and SmartCrawl, WPForms, Contact Form 7, Gravity Forms and Forminator forms and entries read, contact details withheld, backup status from UpdraftPlus, Duplicator, BackWPup and All-in-One WP Migration, Wordfence and Solid Security status, findings and lockouts, scheduled audits emailed to administrators.

• Developer surfaces

  Read and list files, write and edit files, enable, disable, and delete supported files, upload links, WP-CLI jobs, PHP sandbox, temporary admin access link.

• Seeing the result

  A view link for the agent's own browser, a preview URL for a draft, flagged when the browser must be signed in, screenshots taken by a logged-in wp-admin tab, captures compared into a score and the regions that moved, captures attached to a change-ledger entry, Elementor atomic readiness audit across every document.

• Reusable context

  Guided skills, skill retrieval, site-wide instructions, client-aware connection guidance.

Every free module, counted from the ability reference

Destructive abilities always need an explicit confirmation, and Read Only hides every write. 25 modules, 232 abilities in total in GoBuildWP Free 1.18.6. The WooCommerce, SEO, form, backup and security abilities register only while their plugin is active, and the developer abilities only under Developer Full Access, so a fresh install on the default profile registers 167. With Pro active, Pro's fuller copies of the plugin basics answer instead.