mcp-wp-abilities
Verified Safeby aplaceforallmystuff
Overview
Exposes WordPress 6.9+ Abilities API as AI-accessible tools for dynamic interaction with a WordPress site.
Installation
npx -y mcp-wp-abilitiesEnvironment Variables
- WORDPRESS_URL
- WORDPRESS_USERNAME
- WORDPRESS_APP_PASSWORD
Security Notes
The server relies on WordPress Application Passwords for authentication, which grants full API access for the associated user. The README correctly advises using a dedicated user with minimal required capabilities and storing credentials securely via environment variables. No 'eval' or obvious code injection vulnerabilities were found. Input validation is delegated to the WordPress Abilities API itself, which is a standard practice.
Similar Servers
mcp-server
This plugin implements a Model Context Protocol (MCP) server for WordPress, exposing WordPress's data and functionality through its REST API to AI clients.
mcp-for-woocommerce
Connects WordPress and WooCommerce to AI systems via Model Context Protocol, enabling AI agents to query and manage e-commerce data (products, orders, categories, shipping, payments, taxes) and content (posts, pages).
mcp-ai-wpoos
Provides a stable API and server framework for integrating AI models and tools into WordPress, enabling advanced AI assistant capabilities and workflow automation.
wp-mcp-server-demo
A WordPress plugin acting as a configuration layer to create a custom Model Context Protocol (MCP) server, exposing pre-defined abilities from the WP Abilities API Demo plugin for AI integration.