mcp-wordpress

docdyhr/mcp-wordpress

3.5

If you are the rightful owner of mcp-wordpress and would like to certify it and/or have it hosted online, please leave a comment on the right or send an email to henry@mcphub.com.

The MCP WordPress Server is a comprehensive Model Context Protocol server designed for efficient WordPress management through the WordPress REST API v2.

Tools
5
Resources
0
Prompts
0

๐Ÿš€ MCP WordPress Server

The Most Comprehensive WordPress MCP Server

Manage WordPress sites with natural language through AI tools like Claude Desktop

Quick Start โ€ข Why This MCP Server? Installation Options โ€ข Documentation โ€ข Examples

CI/CD Pipeline GitHub Stars NPM Version NPM Downloads NPM Total Downloads Docker Pulls Line Coverage Branch Coverage Function Coverage Test Results MCP Evaluation

TypeScript Security Tests Vulnerabilities Penetration Testing Docker License smithery badge

๐ŸŽฏ Why This MCP Server?

Transform WordPress management from complex admin panels to simple conversations:

โŒ Before: Login โ†’ Admin Panel โ†’ Navigate โ†’ Click โ†’ Fill Forms โ†’ Save
โœ… After:  "Create a new blog post about AI trends with SEO optimization"

Key Advantages:

  • ๐Ÿ† Most Complete: 59 tools vs 20-30 in alternatives
  • โšก Fastest Setup: 2-click Claude Desktop installation via DXT
  • ๐Ÿ”’ Production Ready: 404 tests (expanding), security audited, battle-tested
  • ๐ŸŽฏ TypeScript Native: 100% type safety, best-in-class developer experience
  • ๐ŸŒ Multi-Site: Manage unlimited WordPress sites from one place

๐Ÿš€ Quick Start

Get up and running in under 5 minutes:

Prerequisites

  • WordPress: Version 5.6+ with REST API enabled
  • Claude Desktop: Latest version installed
  • Application Password: Generated from WordPress admin panel

3-Step Setup

1๏ธโƒฃ Generate WordPress Application Password

WordPress Admin โ†’ Users โ†’ Profile โ†’ Application Passwords โ†’ Add New

2๏ธโƒฃ Install MCP Server (Choose One)

Option A: DXT Extension (Easiest)

# Download and install in Claude Desktop
curl -L https://github.com/docdyhr/mcp-wordpress/releases/latest/download/mcp-wordpress.dxt -o mcp-wordpress.dxt
# Then: Claude Desktop โ†’ Extensions โ†’ Install โ†’ Select DXT file

Option B: NPM Global Install

npm install -g mcp-wordpress

3๏ธโƒฃ Test Your Connection

In Claude: "Test my WordPress connection"
Response: "โœ… Authentication successful! Connected to: Your Site Name"

๐Ÿ“บ Watch 2-minute Setup Video | ๐Ÿ“–

โšก Installation Options

๐Ÿ† Recommended: Claude Desktop Extension (DXT)

Easiest installation - just 2 clicks!

  1. Download: mcp-wordpress.dxt (3.4MB)
  2. Install: Claude Desktop โ†’ Extensions โ†’ Install โ†’ Select DXT file
  3. Configure: Enter your WordPress site URL and credentials

โœ… Zero command line required
โœ… Automatic updates
โœ… Built-in security

๐Ÿš€ Alternative: NPX (Power Users)

# Run directly - always latest version
npx -y mcp-wordpress

# Interactive setup wizard
npm run setup

๐Ÿ“ฆ Secondary: Smithery Package Manager

# Install via Smithery (MCP package manager)
smithery install mcp-wordpress

# Configure and start
smithery configure mcp-wordpress

โœ… Package management
โœ… Version control
โœ… Easy updates

Installing via Smithery

To install mcp-wordpress for Claude Desktop automatically via Smithery:

npx -y @smithery/cli install @docdyhr/mcp-wordpress --client claude

๐Ÿ”ง Other Options

  • ๐Ÿ’ป - Local development
  • ๐Ÿณ - Production deployment
  • ๐Ÿ“ฆ - MCP package manager (detailed guide)
  • ๐Ÿ”ง - Custom builds

๐Ÿ“‹ Configuration Examples

Single Site Setup

Environment Variables (.env)

WORDPRESS_SITE_URL=https://myblog.com
WORDPRESS_USERNAME=admin
WORDPRESS_APP_PASSWORD=xxxx xxxx xxxx xxxx xxxx xxxx
WORDPRESS_AUTH_METHOD=app-password

Claude Desktop Config

{
  "mcpServers": {
    "mcp-wordpress": {
      "command": "npx",
      "args": ["-y", "mcp-wordpress"],
      "env": {
        "WORDPRESS_SITE_URL": "https://myblog.com",
        "WORDPRESS_USERNAME": "admin",
        "WORDPRESS_APP_PASSWORD": "xxxx xxxx xxxx xxxx xxxx xxxx"
      }
    }
  }
}

Multi-Site Agency Setup

Configuration File (mcp-wordpress.config.json)

{
  "sites": [
    {
      "id": "main-corporate",
      "name": "Corporate Website",
      "config": {
        "WORDPRESS_SITE_URL": "https://company.com",
        "WORDPRESS_USERNAME": "admin",
        "WORDPRESS_APP_PASSWORD": "xxxx xxxx xxxx xxxx xxxx xxxx",
        "WORDPRESS_AUTH_METHOD": "app-password"
      }
    },
    {
      "id": "client-restaurant",
      "name": "Restaurant Client",
      "config": {
        "WORDPRESS_SITE_URL": "https://bestrestaurant.com",
        "WORDPRESS_USERNAME": "editor",
        "WORDPRESS_APP_PASSWORD": "yyyy yyyy yyyy yyyy yyyy yyyy",
        "WORDPRESS_AUTH_METHOD": "app-password"
      }
    },
    {
      "id": "client-ecommerce",
      "name": "E-commerce Client",
      "config": {
        "WORDPRESS_SITE_URL": "https://onlinestore.com",
        "WORDPRESS_USERNAME": "shopmanager",
        "WORDPRESS_APP_PASSWORD": "zzzz zzzz zzzz zzzz zzzz zzzz",
        "WORDPRESS_AUTH_METHOD": "app-password"
      }
    }
  ]
}

Development Environment

Local WordPress with Docker

# docker-compose.yml
version: "3.8"
services:
  wordpress:
    image: wordpress:latest
    ports:
      - "8080:80"
    environment:
      WORDPRESS_DB_HOST: db
      WORDPRESS_DB_USER: wordpress
      WORDPRESS_DB_PASSWORD: wordpress
      WORDPRESS_DB_NAME: wordpress
    volumes:
      - wordpress_data:/var/www/html

  db:
    image: mysql:8.0
    environment:
      MYSQL_DATABASE: wordpress
      MYSQL_USER: wordpress
      MYSQL_PASSWORD: wordpress
      MYSQL_ROOT_PASSWORD: rootpassword
    volumes:
      - db_data:/var/lib/mysql

volumes:
  wordpress_data:
  db_data:

MCP WordPress Development Config

{
  "sites": [
    {
      "id": "local-dev",
      "name": "Local Development",
      "config": {
        "WORDPRESS_SITE_URL": "http://localhost:8080",
        "WORDPRESS_USERNAME": "admin",
        "WORDPRESS_APP_PASSWORD": "dev-password-here",
        "WORDPRESS_AUTH_METHOD": "app-password"
      }
    }
  ]
}

Production Deployment

Server Environment Variables

# /etc/environment or systemd service
WORDPRESS_SITE_URL=https://production-site.com
WORDPRESS_USERNAME=api-user
WORDPRESS_APP_PASSWORD=secure-production-password
WORDPRESS_AUTH_METHOD=app-password
NODE_ENV=production
CACHE_ENABLED=true
CACHE_TTL=3600
RATE_LIMIT_ENABLED=true
DEBUG=false

Docker Production Setup

# Dockerfile.production
FROM node:20-alpine
WORKDIR /app
COPY package*.json ./
RUN npm ci --only=production
COPY dist/ ./dist/
EXPOSE 3000
USER node
CMD ["node", "dist/index.js"]

JWT Authentication Setup

WordPress Plugin Configuration

// wp-config.php
define('JWT_AUTH_SECRET_KEY', 'your-secret-key-here');
define('JWT_AUTH_CORS_ENABLE', true);

MCP Configuration

{
  "sites": [
    {
      "id": "jwt-site",
      "name": "JWT Authentication Site",
      "config": {
        "WORDPRESS_SITE_URL": "https://site-with-jwt.com",
        "WORDPRESS_USERNAME": "api-user",
        "WORDPRESS_PASSWORD": "user-password",
        "WORDPRESS_AUTH_METHOD": "jwt"
      }
    }
  ]
}

๐ŸŒŸ What Makes This Special

๐Ÿ† Feature Comparison

FeatureThis ServerCompetition
Tools Available59 tools20-30 tools
Claude Desktop DXTโœ… 2-click installโŒ Manual setup
Multi-Site Supportโœ… Unlimited sitesโŒ Single site
TypeScriptโœ… 100% coverageโš ๏ธ Partial/None
Performance Monitoringโœ… Real-time analyticsโŒ Basic only
Test Coverageโœ… 404 tests (100% pass / 30% lines)โš ๏ธ Limited
Production Readyโœ… Security auditedโš ๏ธ Unknown

๐Ÿš€ Core Capabilities

WordPress Management
  • 59 WordPress Tools across 10 categories
  • Multi-Site Support - Manage unlimited WordPress installations
  • Flexible Authentication - App Passwords, JWT, Basic Auth, API Key
  • Real-Time Sync - Instant updates across all connected tools
Performance & Reliability
  • โšก Intelligent Caching - 50-70% performance improvement
  • ๐Ÿ“Š Real-Time Monitoring - Performance metrics and optimization insights
  • ๐Ÿ”’ Production Ready - Security-reviewed, growing coverage (30% lines) after expanding test suite
  • ๐Ÿ”„ Zero Downtime - Graceful error handling and automatic recovery
Developer Experience
  • 100% TypeScript - Complete type safety and IntelliSense
  • ๐Ÿณ Docker Support - Production-ready containerization
  • ๐Ÿ“š Auto-Generated Docs - API documentation with live examples
  • ๐Ÿ”ง Extensible - Custom tool development framework

๐ŸŒ Multi-Site Configuration

Perfect for agencies and developers managing multiple WordPress sites:

{
  "sites": [
    {
      "id": "main-site",
      "name": "Main WordPress Site",
      "config": {
        "WORDPRESS_SITE_URL": "https://site1.com",
        "WORDPRESS_USERNAME": "admin",
        "WORDPRESS_APP_PASSWORD": "xxxx xxxx xxxx xxxx xxxx xxxx"
      }
    },
    {
      "id": "client-blog",
      "name": "Client Blog",
      "config": {
        "WORDPRESS_SITE_URL": "https://client-blog.com",
        "WORDPRESS_USERNAME": "editor",
        "WORDPRESS_APP_PASSWORD": "yyyy yyyy yyyy yyyy yyyy yyyy"
      }
    }
  ]
}

Use with site parameter: wp_list_posts --site="main-site"

๐Ÿ“–

๐Ÿ” Authentication Setup

WordPress Application Passwords (Recommended)

  1. WordPress Admin โ†’ Users โ†’ Profile
  2. Scroll to Application Passwords
  3. Enter name: "MCP WordPress Server"
  4. Click Add New Application Password
  5. Copy the generated password

Alternative Methods

  • JWT Authentication - With JWT plugin
  • Basic Authentication - Username/password (dev only)
  • API Key Authentication - With API Key plugin

๐Ÿ“–

๐Ÿ“‹ Available Tools (59 Tools)

Content Management

  • ๐Ÿ“ Posts (6 tools) - Create, edit, delete, list posts and revisions
  • ๐Ÿ“„ Pages (6 tools) - Manage static pages and revisions
  • ๐Ÿ–ผ๏ธ Media (6 tools) - Upload, manage media library and files

User & Community

  • ๐Ÿ‘ฅ Users (6 tools) - User management and profiles
  • ๐Ÿ’ฌ Comments (7 tools) - Comment moderation and management
  • ๐Ÿท๏ธ Taxonomies (10 tools) - Categories and tags management

Site Management (Monitoring & Admin)

  • โš™๏ธ Site Settings (7 tools) - Site configuration and statistics
  • ๐Ÿ” Authentication (6 tools) - Auth testing and management
  • โšก Cache Management (4 tools) - Performance caching control
  • ๐Ÿ“Š Performance Monitoring (6 tools) - Real-time metrics and optimization

๐Ÿ“– |

๐Ÿค– Claude Desktop Integration

๐ŸŽฏ Real-World Use Cases

Content Creation & Management:

๐Ÿ’ฌ "Analyze my top 10 blog posts and create a new post about emerging trends"
๐Ÿ’ฌ "Upload these 5 images and create a photo gallery page with SEO optimization"
๐Ÿ’ฌ "Review all pending comments and approve the legitimate ones"

Site Management & Analytics:

๐Ÿ’ฌ "Check my WordPress site performance and provide optimization recommendations"
๐Ÿ’ฌ "Create a new user account for my freelance writer with editor permissions"
๐Ÿ’ฌ "Backup my site settings and show me cache performance statistics"

Bulk Operations:

๐Ÿ’ฌ "Update all posts from 2023 to include my new author bio"
๐Ÿ’ฌ "Find all images over 1MB and suggest compression strategies"
๐Ÿ’ฌ "List all users who haven't logged in for 6 months"

โš™๏ธ Configuration Methods

Option 1: DXT Extension (Recommended)

No configuration needed - built-in secure credential management!

Option 2: NPX in Claude Desktop
{
  "mcpServers": {
    "mcp-wordpress": {
      "command": "npx",
      "args": ["-y", "mcp-wordpress"],
      "env": {
        "WORDPRESS_SITE_URL": "https://your-site.com",
        "WORDPRESS_USERNAME": "your-username",
        "WORDPRESS_APP_PASSWORD": "your-app-password"
      }
    }
  }
}

๐Ÿ“–

๐Ÿ“š Examples

Basic Content Management

Create and Publish a Blog Post

You: "Create a new blog post titled 'AI Revolution in 2024' with content about recent AI breakthroughs"
Claude: "I'll create that blog post for you..."
Result: โœ… Post "AI Revolution in 2024" created successfully (ID: 123)

Media Management

You: "Upload the image at /path/to/image.jpg and set it as featured image for post 123"
Claude: "I'll upload that image and set it as the featured image..."
Result: โœ… Image uploaded (ID: 456) and set as featured image

Advanced Workflows

SEO-Optimized Content Creation

You: "Create an SEO-optimized blog post about 'WordPress Security Best Practices' with:
     - Focus keyword: 'WordPress security'
     - Meta description
     - Proper heading structure
     - At least 1500 words"

Claude: "I'll create a comprehensive SEO-optimized post on WordPress security..."

Bulk Operations

You: "Find all draft posts older than 30 days and provide a summary"
You: "Update all posts in category 'News' to include a disclaimer at the end"
You: "Delete all spam comments from the last week"

Site Management

Performance Monitoring

You: "Analyze my site's performance and suggest optimizations"
Claude: "Let me check your site's performance metrics...
         - Cache hit rate: 67%
         - Average response time: 245ms
         - Recommendations: Enable object caching, optimize images..."

User Management

You: "Create a new editor account for john@example.com with a secure password"
You: "List all users who haven't logged in for 90 days"
You: "Update Sarah's role from Author to Editor"

Multi-Site Management

Working with Multiple Sites

You: "List all posts from my client-blog site"
Claude: "I'll list the posts from the client-blog site..."

You: "Compare traffic between main-site and client-blog"
Claude: "Here's a comparison of both sites..."

๐ŸŽจ Real-World Workflows

Content Marketing Agency Workflow

Scenario: Managing 20+ client blogs with consistent SEO optimization

๐Ÿ’ฌ "Analyze the top 5 performing posts across all sites and create similar content for underperforming clients"
๐Ÿ’ฌ "Batch update all client sites with the new privacy policy footer"
๐Ÿ’ฌ "Generate a weekly performance report comparing all client sites"
๐Ÿ’ฌ "Create social media snippets from the latest blog posts on each site"

E-commerce Store Management

Scenario: Managing product launches and inventory updates

๐Ÿ’ฌ "Create a product launch post with gallery, specifications, and pricing for the new iPhone case"
๐Ÿ’ฌ "Update all 'out of stock' products with restock notifications"
๐Ÿ’ฌ "Generate product comparison pages for similar items"
๐Ÿ’ฌ "Create seasonal landing pages with current promotions"

News Website Operations

Scenario: Breaking news and content moderation

๐Ÿ’ฌ "Publish breaking news about the tech merger with social media integration"
๐Ÿ’ฌ "Moderate comments on controversial articles and flag inappropriate content"
๐Ÿ’ฌ "Create topic clusters around trending news stories"
๐Ÿ’ฌ "Schedule social media posts for peak engagement times"

Educational Institution Portal

Scenario: Course management and student communications

๐Ÿ’ฌ "Create course announcement pages with enrollment forms"
๐Ÿ’ฌ "Update faculty profiles with new publications and achievements"
๐Ÿ’ฌ "Generate student newsletter with upcoming events and deadlines"
๐Ÿ’ฌ "Moderate discussion forums and highlight valuable contributions"

Non-Profit Organization

Scenario: Fundraising campaigns and volunteer coordination

๐Ÿ’ฌ "Create donation campaign pages with progress tracking"
๐Ÿ’ฌ "Update volunteer opportunity listings with current needs"
๐Ÿ’ฌ "Generate impact reports showing donation effectiveness"
๐Ÿ’ฌ "Create event registration pages with automated confirmations"

๐Ÿš€ Advanced Automation Examples

Smart Content Workflows

Automated SEO Optimization

You: "Optimize all posts from the last month for better SEO performance"
Claude: "I'll analyze and optimize your recent posts...
- Analyzed 15 posts from the last 30 days
- Updated meta descriptions for 12 posts
- Added focus keywords to 8 posts
- Optimized heading structure in 10 posts
- Improved internal linking in 15 posts
- Average SEO score improved from 67% to 89%"

Content Gap Analysis

You: "Identify content gaps in our blog compared to competitor topics"
Claude: "After analyzing your content and common industry topics...
- Missing topics: 'AI in Healthcare', 'Remote Work Security', 'Green Technology'
- Underperforming categories: 'Tutorials' (only 3 posts vs 15+ needed)
- Recommended: 8 new posts to fill major gaps
- Priority topics based on search volume and competition"

Maintenance Automation

Site Health Monitoring

You: "Perform a comprehensive site health check and fix any issues"
Claude: "Running complete site diagnostics...
- โœ… SSL certificate valid (expires: March 15, 2025)
- โš ๏ธ 3 broken internal links found and flagged
- โœ… All images optimized (average load time: 1.2s)
- โš ๏ธ 2 plugins need updates
- โœ… Database optimized (reduced size by 15%)
- โœ… Cache performance: 78% hit rate"

User Management Automation

You: "Clean up user accounts and update permissions for the new team structure"
Claude: "Updating user management...
- Deactivated 5 inactive accounts (no login >6 months)
- Updated 12 user roles to match new org chart
- Created 3 new editor accounts for content team
- Set up role-based content access restrictions
- Configured automated welcome emails for new users"

Performance Optimization

Intelligent Cache Management

You: "Analyze site performance and implement optimal caching strategies"
Claude: "Implementing performance optimizations...
- Enabled object caching (40% speed improvement)
- Configured CDN for static assets
- Optimized database queries (reduced load time by 25%)
- Set up page caching with smart invalidation
- Compressed and optimized 47 images
- Site speed improved from 3.2s to 1.8s average load time"

๐ŸŽฏ Industry-Specific Solutions

Healthcare Practices

๐Ÿ’ฌ "Create HIPAA-compliant patient information pages with secure forms"
๐Ÿ’ฌ "Update doctor profiles with latest certifications and specializations"
๐Ÿ’ฌ "Generate appointment booking pages with calendar integration"
๐Ÿ’ฌ "Create health education content with medical disclaimers"

Legal Firms

๐Ÿ’ฌ "Create practice area pages with case study examples"
๐Ÿ’ฌ "Update attorney profiles with recent wins and bar admissions"
๐Ÿ’ฌ "Generate client intake forms with confidentiality notices"
๐Ÿ’ฌ "Create legal blog posts with proper citations and disclaimers"

Real Estate Agencies

๐Ÿ’ฌ "Create property listing pages with virtual tour embeds"
๐Ÿ’ฌ "Update agent profiles with recent sales and market statistics"
๐Ÿ’ฌ "Generate neighborhood guide pages with local amenities"
๐Ÿ’ฌ "Create mortgage calculator pages with current rates"

Restaurants & Food Service

๐Ÿ’ฌ "Create menu pages with dietary restriction filters"
๐Ÿ’ฌ "Update chef profiles with signature dishes and cooking philosophy"
๐Ÿ’ฌ "Generate event booking pages for private dining"
๐Ÿ’ฌ "Create food blog posts with recipe cards and nutritional information"

๐Ÿ“– |

๐Ÿ› ๏ธ Troubleshooting Guide

Quick Diagnostics

Connection Issues

# Test WordPress connection
npm run status

# Debug mode with detailed logs
DEBUG=true npm run dev

# Test specific site in multi-site setup
npm run status -- --site="your-site-id"

Authentication Problems

# Verify WordPress application password
curl -u username:app_password https://your-site.com/wp-json/wp/v2/users/me

# Test authentication with different methods
npm run test:auth

# Regenerate application password
npm run setup

Performance Issues

# Check cache performance
npm run test:cache

# Monitor real-time performance
npm run test:performance

# Clear all caches
rm -rf cache/ && npm run dev

Common Error Solutions

ErrorCauseSolution
401 UnauthorizedInvalid credentialsRegenerate application password
403 ForbiddenInsufficient permissionsCheck user role (Editor+ required)
404 Not FoundWrong site URLVerify WORDPRESS_SITE_URL
SSL Certificate ErrorHTTPS issuesAdd SSL exception or use HTTP
Connection TimeoutNetwork/firewallCheck WordPress REST API access
Tools not showing in ClaudeConfig file formatValidate JSON syntax
Plugin conflictsWordPress pluginsDisable conflicting plugins
Rate limitingToo many requestsImplement request throttling

WordPress-Specific Issues

REST API Not Available

# Test REST API directly
curl https://your-site.com/wp-json/wp/v2/

# Check if REST API is disabled
grep -r "rest_api" wp-config.php

# Verify permalink structure
wp-admin โ†’ Settings โ†’ Permalinks โ†’ Post name

Application Password Issues

1. WordPress Admin โ†’ Users โ†’ Profile
2. Scroll to "Application Passwords"
3. Ensure feature is enabled (WordPress 5.6+)
4. Generate new password if needed
5. Copy password exactly (includes spaces)

Multi-Site Configuration Problems

// Check mcp-wordpress.config.json format
{
  "sites": [
    {
      "id": "unique-site-id",
      "name": "Human Readable Name",
      "config": {
        "WORDPRESS_SITE_URL": "https://site.com",
        "WORDPRESS_USERNAME": "username",
        "WORDPRESS_APP_PASSWORD": "xxxx xxxx xxxx xxxx xxxx xxxx"
      }
    }
  ]
}

Environment-Specific Solutions

Claude Desktop Integration

// Verify claude_desktop_config.json format
{
  "mcpServers": {
    "mcp-wordpress": {
      "command": "npx",
      "args": ["-y", "mcp-wordpress"],
      "env": {
        "WORDPRESS_SITE_URL": "https://your-site.com",
        "WORDPRESS_USERNAME": "your-username",
        "WORDPRESS_APP_PASSWORD": "your-app-password"
      }
    }
  }
}

Docker Deployment Issues

# Check container logs
docker logs mcp-wordpress

# Verify environment variables
docker exec mcp-wordpress env | grep WORDPRESS

# Test network connectivity
docker exec mcp-wordpress curl https://your-site.com/wp-json/wp/v2/

NPX Runtime Problems

# Clear NPX cache
npx clear-npx-cache

# Use specific version
npx mcp-wordpress@latest

# Install globally instead
npm install -g mcp-wordpress

Getting Help

Self-Diagnostics

# Comprehensive health check
npm run health

# Security validation
npm run security:check

# Performance analysis
npm run test:performance

Debug Information Collection

# Generate debug report
DEBUG=true npm run status > debug-report.txt 2>&1

# Include system information
node --version >> debug-report.txt
npm --version >> debug-report.txt
os-info >> debug-report.txt

Community Support

๐Ÿงช Testing & Status

Current Test Status โœ…

  • Main Test Suite: 404/404 passed (100%)
  • Security Tests: 40/40 passed (100%)
  • Performance Tests: 8/8 passed (100%)
  • CI/CD Pipeline: Fully functional

Test Your Installation

# Check connection status
npm run status

# Run full test suite
npm test

# Quick validation
npm run test:fast

๐Ÿ”’ Security Status

Comprehensive Security Testing

Our security posture is continuously monitored through automated testing and vulnerability scanning:

Security AreaStatusTestsCoverage
XSS Protectionโœ… Secure6/6 passingScript injection, URL validation, HTML sanitization
SQL Injectionโœ… Secure3/3 passingQuery parameterization, input validation
Path Traversalโœ… Secure3/3 passingFile path validation, directory restrictions
Input Validationโœ… Secure9/9 passingLength limits, format validation, sanitization
Authenticationโœ… Secure7/7 passingBypass prevention, token validation
Rate Limitingโœ… Secure3/3 passingDoS protection, request throttling
Information Disclosureโœ… Secure2/2 passingError sanitization, sensitive data protection
Penetration Testingโœ… Secure12/12 passingComprehensive attack simulation

Security Features

  • ๐Ÿ›ก๏ธ Input Sanitization: All user inputs are validated and sanitized
  • ๐Ÿ” Authentication Security: Multi-method auth with bypass prevention
  • โšก Rate Limiting: Built-in protection against abuse and DoS attacks
  • ๐Ÿ” Vulnerability Scanning: Daily automated security scans
  • ๐Ÿ“Š Real-time Monitoring: Continuous security status updates
  • ๐Ÿšจ Automated Alerts: Immediate notification of security issues

Security Testing Commands

# Run comprehensive security tests
npm run test:security

# Run penetration testing suite
npm run test:security:validation

# Security vulnerability audit
npm audit

# Full security validation
npm run security:full

Security Compliance

  • OWASP Top 10: Complete protection against common vulnerabilities
  • CVE Monitoring: Automated scanning for known vulnerabilities
  • Security Headers: Proper HTTP security headers implementation
  • Data Protection: Sensitive credential redaction and secure storage
  • Access Control: Role-based permissions and authentication validation

๐Ÿ“– |

๐Ÿ› Troubleshooting

Common Issues

  1. "Cannot connect to WordPress"

    • Verify WORDPRESS_SITE_URL
    • Test REST API: curl https://your-site.com/wp-json/wp/v2/
  2. "Authentication failed"

    • Check username and application password
    • Ensure Application Passwords are enabled
    • Run npm run setup to reconfigure
  3. "Tools not appearing in Claude"

    • Restart Claude Desktop after configuration
    • Check Claude Desktop config file format

Get Help

# Debug mode
DEBUG=true npm run dev

# Connection test
npm run status

# Re-run setup wizard
npm run setup

๐Ÿ“š Documentation

Getting Started

  • Quick Start Guide - Get running in 5 minutes
  • - Detailed setup instructions
  • - All configuration options
  • - WordPress auth methods

User Guides

  • - Common tasks and workflows
  • - Complex automation
  • - Managing multiple sites
  • - Common issues and solutions

Integration Guides

  • - Complete Claude integration
  • - VS Code extension setup
  • - Cline AI assistant integration
  • - Build your own MCP client

Developer Documentation

  • - Complete tool documentation
  • - System design and decisions
  • - Development guidelines
  • - Extend functionality

Deployment & Operations

  • - Container deployment
  • - Fix publishing issues
  • - Production security
  • - Optimization guide
  • - Logging and metrics

๐Ÿ”ง Requirements

  • WordPress 5.0+ with REST API enabled
  • HTTPS recommended for production
  • User with appropriate permissions
  • Application Passwords enabled (WordPress 5.6+)

WordPress User Roles

RoleAccess
AdministratorFull access to all functions
EditorPosts, pages, comments, media
AuthorOwn posts and media
ContributorOwn posts (drafts only)
SubscriberRead only

๐Ÿ“ฆ Installation Options

NPM Package

# Global installation
npm install -g mcp-wordpress

# Direct usage (recommended)
npx -y mcp-wordpress

Docker Images

# Latest version
docker pull docdyhr/mcp-wordpress:latest

# Specific version
docker pull docdyhr/mcp-wordpress:1.3.1

Distribution Channels

๐Ÿš€ Next Steps

Ready to transform your WordPress management?

  1. ๐Ÿ† Download DXT Extension - Easiest setup (2 minutes)
  2. โšก - Power user setup (5 minutes)
  3. ๐Ÿ“š - See what's possible
  4. ๐Ÿ’ฌ Join Discussions - Get help and share ideas

๐Ÿ”— Similar Projects

Looking for alternatives or complementary tools? Check out these WordPress MCP implementations:


๐Ÿ™ Acknowledgments

Special thanks to Stephan Ferraro for the upstream project that inspired this implementation.


โญ Found this helpful? Give us a star on GitHub! โญ