WPPilot — WordPress MCP Server

Connect Claude, Codex, Cursor, VS Code and Antigravity to WordPress over the Model Context Protocol — with permissions, confirmations and change evidence that stay on your site.

WPPilot turns your WordPress site into an MCP server, built on the WordPress Abilities API and the official WordPress MCP Adapter. AI clients discover, inspect and execute typed WordPress abilities through a compact three-tool interface instead of loading hundreds of one-off endpoints into context.

It is a control layer, not an AI wrapper. No AI model is bundled — external MCP clients bring their own model access, and policy is enforced server-side on your install.

• 🌐 Website: https://wppilot.co
• 📚 Documentation: https://wppilot.co/docs
• 🔌 Client setup guides: https://wppilot.co/wordpress-mcp

---

Quick start

1. Download the latest wppilot.zip from Releases and install it as wp-content/plugins/wppilot. A GitHub “Source code (zip)” download is not installable — it lacks vendor/ and uses the wrong folder name.
2. Activate WPPilot.
3. Open WPPilot → Configuration and leave Production Safe selected.
4. Open WPPilot → Connect, choose your AI client, and follow the OAuth or Application Password route.

Canonical MCP endpoint:

https://example.com/wp-json/mcp/wppilot

OAuth-authenticated clients use /wp-json/mcp/wppilot-oauth. The older /wp-json/mcp/mcp-adapter-default-server route still resolves as a legacy alias, but new configurations should use the canonical path above.

Supported AI clients

Claude Code · Claude Desktop · Claude on the web · Codex · Cursor · VS Code · GitHub Copilot · Antigravity CLI · Antigravity IDE · Windsurf · Zed · Cline · Roo Code · Kilo Code · Amazon Q · OpenCode

Per-client setup guides: https://wppilot.co/wordpress-mcp

Authentication

• OAuth 2.1 with PKCE and dynamic client registration. Access tokens last 1 hour, refresh tokens 14 days, and every authorization is listed under Connected Apps in WordPress so it can be revoked individually.
• Application Passwords as a fallback for clients that cannot run a browser flow.

Neither is a product licence. WPPilot needs no activation key, entitlement check or subscription service to run.

Safety model

Profile	What it allows
Read Only	Discovery and inspection. Every state-changing ability is blocked.
Production Safe	Normal content, design, SEO, forms and commerce work. Blocks raw PHP, WP-CLI, filesystem, database, plugin/theme installation and temporary admin access.
Developer Full Access	Every enabled ability, including privileged surfaces. Critical calls still require explicit confirmation.

On top of the profile: WordPress user capabilities still apply, individual abilities can be switched off, destructive operations require an explicit confirmation flag, writes are rate-limited per credential, and supported changes are recorded in a redacted change ledger with rollback.

WPPilot Pro — 991 plugin-aware abilities

The free plugin in this repository is the complete MCP foundation: connection, authentication, safety profiles, Gutenberg workflows, diagnostics, change evidence and 42 core abilities.

WPPilot Pro adds 991 further abilities across 51 integrations — typed operations that understand each plugin's own data model rather than writing generic content. Modules load only when their plugin is detected, and each loads in isolation, so a missing or broken plugin cannot stop the rest of the registry from registering.

Category	Integrations · ability count
Page builders	Elementor 33 · Bricks 49 · Breakdance 33 · Divi 47 · Oxygen 37 · Beaver Builder 21 · WPBakery 18 · Etch 60 · Mosaic 36
Blocks and site design	GenerateBlocks 3 · Kadence Blocks 3 · Spectra 20 · Spectra One 22
Themes	Astra 34 · Avada 16 · GeneratePress 23 · Kadence 5 · OceanWP 15 · WordPress Block Themes 4 · Blocksy 4 · Neve 4 · WoodMart 4
Commerce	WooCommerce 35
Forms	WPForms 28 · Gravity Forms 28 · Fluent Forms 37 · Formidable Forms 39 · Contact Form 7 9 · Ninja Forms 21
SEO suites	AIOSEO 12 · Rank Math 8 · SEOPress 16 · Yoast SEO 10
Custom data	Advanced Custom Fields 23 · ACPT 24 · Admin and Site Enhancements 18 · JetEngine 26 · Meta Box 32 · Pods 25 · Dynamic Shortcodes 9
Localization	Weglot 19 · Polylang 6
Site operations	The Events Calendar 7 · Paid Memberships Pro 5 · Tutor LMS 7 · BuddyPress 8
Developer tools	Code Snippets 11 · Bricksforge 21
WordPress platform	WordPress Core 23 · Agent Memory 4 · WPPilot Skills 1

Why plugin-aware matters

A page builder does not store a page as HTML. It stores an element tree, references to shared classes and design tokens, template rules and dynamic bindings. Writing generated markup into that store is how a layout stops opening in its own editor.

Pro gives the agent that builder's own vocabulary — bricks-patch-elements, elementor-create-atomic-widget, divi-apply-global-preset, etch-get-query-preview — so it can read a schema before it proposes a change.

Page-builder guides

Builder	Abilities	Guide
Etch	60	MCP for Etch
Bricks	49	MCP for Bricks
Divi	47	MCP for Divi
Oxygen	37	MCP for Oxygen
Mosaic	36	MCP for Mosaic
Elementor	33	MCP for Elementor
Breakdance	33	MCP for Breakdance
Beaver Builder	21	MCP for Beaver Builder
WPBakery	18	MCP for WPBakery

Beyond integrations

• Persistent agent memory — approved context that carries between sessions, so an agent does not relearn your stack every conversation.
• Human approval queue — holds an agent write until a person approves it, with email notification. The agent receives a structured “pending” response, not a false success.
• Integration health reporting — see which modules loaded, which were skipped, and why.
• Plugin-aware skill packs — guided sequences that encode the read-before-write workflow for the plugins you run.

Compare Free vs Pro · Pricing · All integrations

WPPilot Pro is a commercial plugin and is not distributed from this repository.

Requirements

• WordPress 6.9 or newer
• PHP 8.0 or newer
• HTTPS for any remotely reachable connection
• WPPilot Chat additionally requires WordPress 7.0 and an AI provider configured through the WordPress AI Client

Privacy

The MCP endpoint is self-hosted; there is no WPPilot relay. When WPPilot Chat is used, WordPress sends conversation history, selected attachments, site instructions, tool definitions and relevant tool results to the AI provider you configured. Suggested policy text is available in Settings → Privacy → Policy Guide.

Documentation

Guide
Getting started	https://wppilot.co/docs/getting-started
Connect an AI client	https://wppilot.co/docs/connect-ai-client
OAuth 2.1 setup	https://wppilot.co/docs/oauth-setup
Application Passwords	https://wppilot.co/docs/application-passwords
Safety profiles	https://wppilot.co/docs/safety-profiles
Page builder workflows	https://wppilot.co/docs/page-builder-workflows
Change ledger and rollback	https://wppilot.co/docs/change-ledger-and-rollback
Troubleshooting	https://wppilot.co/docs/troubleshooting

In-repo: docs/ARCHITECTURE.md · docs/SAFETY.md · SECURITY.md

Security

Report suspected vulnerabilities privately — see SECURITY.md. Do not open a public issue for a vulnerability, and never include production credentials or customer data.

Licence

GPL-2.0-or-later. See LICENSE and LICENSES/ for the full SPDX texts.