Securely Connect your WordPress site to AI Agents using MCP

Overview

MCP Server for WordPress connects a WordPress site to AI Agents such as ChatGPT, Claude, and other MCP-compatible clients, so users can read information about their site and perform actions on it using natural language, for example, checking site and environment details, viewing their account, and creating or updating posts and much more.

The connector exposes whatever abilities the site registers through the Abilities API as tools that the AI Agent can call. Each ability is a discrete, permission-checked action defined on the site, so any ability available on the WordPress site can be executed through the connector, always within the limits of the signed-in user's permissions.

Download Plugin Pricing Plans Request a Demo

Prerequisites

Before connecting, you need:

• A self-hosted WordPress site running WordPress 6.9 or later. This is the version that introduced the WordPress Abilities API, which the connector relies on.
• The site must be publicly reachable over HTTPS, since the connection is made from the internet. Local or private URLs will not work.
• The free miniOrange Secure MCP Server plugin is installed and active on the site. It is available from the WordPress plugin directory.

Configuration Steps

Step 1: WordPress Side Setup

• In your WordPress admin dashboard, go to Plugins, then click on the Add Plugin button.
• Search for miniOrange Secure MCP Server, click Install Now, then Activate.

• After activating the Secure MCP Server plugin, open the plugin from the WordPress admin sidebar and click the Register your first agent button on the welcome screen to get started.

• Provide a desired Name to your Agent and click on Next.

• Set the access for abilities based on the user roles. For example, enable the Get Site Information ability for the Administrator role, then click Create & Continue.
• Click on the Create & Continue button.

• After configuring the role-based abilities, the agent is successfully created. Click Continue to proceed with connecting your AI client.

• To configure the connection with your AI clients, under Connect your AI client, click your required AI Client. A setup panel opens on the right with the connection details and the steps you’ll follow next. Copy these two details from the panel:
  • Connection URL
  • Your Site URL — your WordPress site address.

Note: For the ChatGPT Client, you'll find only Your Site URL i.e. your WordPress site address.

Step 2: AI Agent Side Setup

• ChatGPT
• Claude AI
• Any AI Agent

• In the previous step, after clicking the ChatGPT AI Client, a panel opens on the right.
• Click the MCP Server for WordPress link.

• You'll be redirected to ChatGPT >> Plugins >> MCP Server For WordPress. Click the Install Plugin button.

• Enter Your Site URL and click the Continue button. (Skip this step if you have followed Method B)

• Click the Allow Access button.

Once the connection is complete, you can start interacting with your WordPress site directly from ChatGPT.

• In Claude, go to Settings.

• Click the Connectors tab.
• At the top right corner, click Add, then select Add custom connector.

• Add the Connector Name and configure the connection using either of the following methods:
• Method A: Paste the Connection URL.
• Method B: Paste the MCP Endpoint URL.

• Click the Continue button.

• Click the Add button.

• Click the Connect button.

• Enter your WordPress site URL and click Continue.

• Once the connection is complete, you can start interacting with your WordPress site directly from Claude AI.

Any AI client that is compatible with MCP can connect to your WordPress site. The client must support OAuth 2.1 with PKCE and Dynamic Client Registration (RFC 7591). The server exposes an OAuth Authorization Server Metadata document at /.well-known/oauth-authorization-server for automatic discovery, so no configuration is required on the server.

• In the previous step, under Connect your AI client, click the Any other AI. A setup panel opens on the right with the connection details and the steps you will follow next.

• In your AI client, find the option to Add connector or Add MCP server. Most AI apps keep this under Settings >> Connectors, Integrations, or MCP. Look for custom connector or remote MCP server.
• Copy the Connection URL from the panel and paste it wherever your AI client asks for the connector or server URL.
• When your AI client asks which site to connect, paste Your Site URL, your WordPress site address, which is also available in the panel.
• Sign in with your WordPress account, review the abilities listed on the authorization screen, and click the Allow Access button.

Once the connection is complete, the abilities enabled for your agent under the AI Agents tab appear as tools in your AI client, always within the limits of the permissions of the user who signed in. You can now start interacting with your WordPress site directly from your AI client.

Note: If you cannot find Connectors or Add MCP server in your AI client, your AI plan may need that feature enabled first.

Method B: Direct Connection

• Expand Advanced — connect directly instead and copy the MCP Endpoint URL.
• Add a custom connector or remote MCP server in your AI client and paste the MCP Endpoint URL.
• Sign in to WordPress and click the Allow Access button on the authorization screen.

Note: With this method you are not asked which site to connect, because the endpoint already points to your site.

Note: Each user can connect and use their own AI client (such as ChatGPT, Claude, or Cursor) with their personal account to interact with the site through natural language.

Step 3: AI Agent Activity Logs

• Navigate to the Activity tab of the plugin to view ability executions across every agent.

• Click on an activity row to view the event information in detail.

Step 4: AI Agent Debug Log

• Navigate to the Debug Log tab of the plugin and click on the Start capture button to begin recording diagnostic events.

• Once capture is on, every prompt sent from your AI Agent is recorded from start to end, including authenticated MCP requests and tool calls.

• Click on a log record to view the event information in detail.

Note: Nothing is captured until you turn this on. Click on the Pause capture button once you are done, so it isn't writing to your database all the time.

What You Can Do Once Connected

Once connected, the AI Agent can read and manage your site through natural-language prompts, checking site and environment details, viewing your account, and creating or updating posts and pages. The exact set of actions depends on which abilities your site registers through the Abilities API. Because each ability is permission-checked, the AI Agent can only perform actions the signed-in user is allowed to perform.