wp-advanced-mcp
by Akungapaul
Overview
Manages WordPress installations by providing an MCP interface for WP-CLI commands, database operations, and WordPress REST API interactions.
Installation
node server.jsEnvironment Variables
- WORDPRESS_URL
- WORDPRESS_USERNAME
- WORDPRESS_APP_PASSWORD
- ENABLE_WP_CLI
- WP_CLI_PATH
- WORDPRESS_PATH
- SSH_HOST
- SSH_PORT
- SSH_USER
- SSH_KEY_PATH
Security Notes
The server exposes highly privileged operations like `execute_wp_cli` and `database_query` which allow execution of arbitrary WP-CLI commands and SQL queries (including destructive ones if `read_only` is not strictly enforced). There is no explicit authentication or authorization layer visible in the provided code, meaning any party with access to this MCP server endpoint could potentially execute these commands. This poses critical risks including system compromise, data loss, privilege escalation, and command/SQL injection if input sanitization by the underlying clients is not robust enough for all possible inputs.
Similar Servers
mcp-local-wp
Provides AI assistants read-only (and optional write) access to a Local by Flywheel WordPress database for development and debugging, with automatic site detection.
mcp-for-woocommerce
Connects WordPress and WooCommerce to AI systems via Model Context Protocol, enabling AI agents to query and manage e-commerce data (products, orders, categories, shipping, payments, taxes) and content (posts, pages).
mcp-ai-wpoos
Provides a stable API and server framework for integrating AI models and tools into WordPress, enabling advanced AI assistant capabilities and workflow automation.
wp-mcp-server-demo
A WordPress plugin acting as a configuration layer to create a custom Model Context Protocol (MCP) server, exposing pre-defined abilities from the WP Abilities API Demo plugin for AI integration.