How to Securely Connect Your WordPress Site to Windsurf (Devin) Using MCP

Overview

Windsurf is an agentic IDE where Cascade plans and carries out multi-step coding tasks. With the miniOrange Secure MCP Connector, you can securely connect Windsurf to your WordPress site in just a few steps.

Once connected, you can use natural-language prompts in Cascade to interact with your website and perform approved WordPress actions. Your existing WordPress access controls determine what Cascade can view and do.

Prerequisites

Before you begin, make sure you have the following in place:

• A self-hosted WordPress site running WordPress 6.9 or above, as the WordPress Abilities API required for this integration is available from WordPress 6.9 onward.
• A publicly accessible HTTPS URL for your WordPress site. AI clients connect to your site over the internet, so localhost or private network URLs are not supported.
• The miniOrange Secure MCP Connector plugin installed and activated on your WordPress site.
• Windsurf installed and signed in to your account.

Configuration Steps

Step 2: Add the MCP Server in Windsurf

• In the previous step, after clicking on Any Other AI, a panel opens on the right.
• Copy the Connection URL shown in the panel.

• Open Windsurf and bring up the Cascade panel.
• Click the Actions icon in the top right of the Cascade panel, then click the Open Customizations option.

• Click the Installed tab and then click the Add custom MCP.

• The mcp_config.json file opens in the editor.
• Add the following, replacing the serverURL with the Connection URL you copied from the plugin:

{
  "mcpServers": {
    "wp-mcp-server": {
      "serverUrl": "https://gateway.miniorange.ai/v2/mcp"
    }
  }
}

• Save the file, return to the Installed tab. The wp-mcp-server appears in the installed list with a Not connected status. This is expected, as the server has not been authenticated yet.
• Click on wp-mcp-server to open its details.

• Click the Connect button.

• Your browser opens the sign-in gateway. Enter Your Site URL and click the Continue button.

• Click Allow Access to approve the connection.

• Return to Windsurf. The status changes to Connected and the available tools are listed.

Once the connection is complete, you can start interacting with your WordPress site directly from Cascade in Windsurf.

Step 3: AI Agent Activity Logs (Optional)

• Navigate to the Activity tab of the plugin to view ability executions across every agent.

• Click on an activity row to view the event information in detail.

Step 4: AI Agent Debug Log (Optional)

• Navigate to the Debug Log tab of the plugin and click on the Start capture button to begin recording diagnostic events.

• Once capture is on, every prompt sent from your AI Agent is recorded from start to end, including authenticated MCP requests and tool calls.

• Click on a log record to view the event information in detail.

What You Can Do Once Connected

After connecting your WordPress site, you can use natural-language prompts to complete everyday WordPress tasks without switching between different dashboard pages. The available actions depend on the abilities registered through the WordPress Abilities API.

You can:

• View WordPress site and environment information.
• Check your account details.
• Create new posts and pages.
• Update existing posts and pages.
• Use other abilities exposed through the WordPress Abilities API.

Every request passes through the Secure MCP Connector, which validates the request before allowing the action to run on your WordPress site.

Related Articles

• MCP Server Plugin for WordPress
• Documentation for MCP Server Plugin for WordPress
• Setup Guide to Connect WordPress Site with ChatGPT
• Setup Guide to Connect WordPress Site with Claude AI
• Setup Guide to Connect WordPress Site with Cursor
• Create Pages with AI Using MCP Server and Page Builders
• Secure WooCommerce AI Agents with Role-Based Access Control