Search Results :

×

How to Connect Claude to WordPress Using miniOrange Secure MCP Server

The miniOrange Secure MCP Server plugin connects Claude to your WordPress site. You choose which abilities (tasks Claude can perform on your site) to enable, so you control what Claude can do.

To set up the connection, install and activate the plugin, register an AI agent, and select its abilities. Then connect your site to Claude and approve access.

Before you begin, make sure you have the following in place:

  • A self-hosted WordPress site running WordPress 6.9 or above, as the WordPress Abilities API required for this integration is available from WordPress 6.9 onward.
  • A publicly accessible HTTPS URL for your WordPress site. AI clients connect to your site over the internet, so localhost or private network URLs are not supported.
  • The miniOrange Secure MCP Connector plugin installed and activated on your WordPress site.
  • In your WordPress admin dashboard, go to Plugins, then click on the Add Plugin button.
  • Search for miniOrange Secure MCP Server, click Install Now, then Activate.
Connect WordPress to AI Agents using MCP | Install miniOrange Secure MCP Server

  • After activating the Secure MCP Server plugin, open the plugin from the WordPress admin sidebar and click the Register your first agent button on the welcome screen to get started.
Connect WordPress to AI Agents using MCP | Secure MCP Server menu

  • Provide a desired Name to your Agent and click on Next.
Connect WordPress to AI Agents using MCP | Provide Agent Name

  • Set the access for abilities based on the user roles. For example, enable the Get Site Information ability for the Administrator role, then click Create & Continue.
  • Click on the Create & Continue button.
Connect WordPress to AI Agents using MCP | Create Agent and set role abilities

  • After configuring the role-based abilities, the agent is successfully created. Click Continue to proceed with connecting your AI client.
Connect WordPress to AI Agents using MCP | Connect your AI client

  • To configure the connection with your AI clients, under Connect your AI client, click your required AI Client. A setup panel opens on the right with the connection details and the steps you’ll follow next. Copy these two details from the panel:
    • Connection URL
    • Your Site URL — your WordPress site address.
Connect WordPress to AI Agents using MCP | Connection methods for AI clients Gateway Method

Connect WordPress to AI Agents using MCP | Note

Note: For the ChatGPT and Claude Client, you'll find only Your Site URL i.e. your WordPress site address.

  • In the previous step, after clicking the Claude AI Client, a panel opens on the right.
  • Click the miniOrange MCP for WordPress link.
Connect Claude to WordPress | Open miniOrange MCP for WordPress

  • You'll be redirected to the miniOrange MCP for WordPress connector page in Claude. Click the Connect to Claude button.
Connect Claude to WordPress | Connect to Claude

  • Enter Your Site URL and click the Continue button.
Connect Claude to WordPress | Enter Site URL

  • Click the Allow Access button.
Connect Claude to WordPress | Allow Access

Once the connection is complete, you can start interacting with your WordPress site directly from Claude AI.

Connect Claude to WordPress | Note

Note: Each user can connect their own Claude AI, ChatGPT, or Cursor account to the same WordPress site using their personal account.

  • Navigate to the Activity tab of the plugin to view ability executions across every agent.
Connect Claude to WordPress | Activity Log

  • Click on an activity row to view the event information in detail.
Connect Claude to WordPress | Activity event details

  • Navigate to the Debug Log tab of the plugin and click on the Start capture button to begin recording diagnostic events.
Connect Claude to WordPress | Debug Log Start capture

  • Once capture is on, every prompt sent from your AI Agent is recorded from start to end, including authenticated MCP requests and tool calls.
Connect Claude to WordPress | Debug Log entries

  • Click on a log record to view the event information in detail.
Connect Claude to WordPress | Debug Log event details

Connect Claude to WordPress | Note

Note: Nothing is captured until you turn this on. Click on the Pause capture button once you are done, so it isn't writing to your database all the time.


After connecting your WordPress site, you can use natural-language prompts to complete everyday WordPress tasks without switching between different dashboard pages. The available actions depend on the abilities registered through the WordPress Abilities API.

You can:

  • View WordPress site and environment information.
  • Check your account details.
  • Create new posts and pages.
  • Update existing posts and pages.
  • Use other abilities exposed through the WordPress Abilities API.

Every request passes through the Secure MCP Connector, which validates the request before allowing the action to run on your WordPress site.

If Claude cannot connect to your WordPress site through the miniOrange Secure MCP Server, a firewall, authentication error, outdated cache, or agent permissions may be causing the problem. Here are some common issues and how to fix them.

What you may notice: Claude cannot access your website, registration fails, or you receive a 403 or 429 error even though your site opens normally in a browser.

Why it happens: Your hosting provider's firewall or a security service such as Cloudflare or ModSecurity may block requests from Claude.

How to fix it: Check your firewall settings for rules that block MCP requests. If you use Cloudflare, configure a Web Application Firewall (WAF) rule to skip the relevant security checks for these paths.

  • /wp-json/mosmcp/*
  • /index.php?rest_route=/mosmcp/*
  • /.well-known/oauth-*

If your hosting provider manages the firewall, ask its support team to allow POST requests to the required endpoints. Some hosts also restrict access from overseas, so check whether this setting affects your connection.

What you may notice: The miniOrange plugin's debug log displays the error missing_token.

Why it happens: Your web server may remove the Authorization header before WordPress receives it. This can prevent the plugin from receiving the authentication token it needs.

How to fix it: Contact your hosting provider and ask them to preserve the Authorization header for requests to WordPress REST API endpoints under /wp-json/. Once they make the change, try connecting Claude again.

What you may notice: Your agent appears active in WordPress, but the plugin reports No agent registered or Failed to create agent.

Why it happens: Your website, caching plugin, or hosting server may serve outdated agent registration information.

How to fix it: Clear your website, plugin, and hosting caches. Then, exclude /wp-json/mosmcp/ from caching rules. If you use LiteSpeed Cache, add this path under Do Not Cache URIs.

Tip: Try connecting Claude again after clearing the cache.

What you may notice: Claude connects to your site, but some tools are missing or the available tool list appears incomplete.

Why it happens: Your agent's assigned role may not have permission to use all the WordPress abilities you need.

How to fix it: Open the miniOrange Secure MCP Server plugin in your WordPress dashboard and select Agents. Edit your agent, review its assigned role, and enable the abilities Claude needs. Save your changes and test the connection again.

Tip: If some tools still do not appear, check whether the plugin exposes those abilities and reconnect Claude to refresh the available tools.

If you still have trouble connecting Claude to WordPress, email aisupport@xecurify.com. Our support team will help you troubleshoot the issue.


Install and activate the miniOrange Secure MCP Server plugin in WordPress, register an AI agent, and configure its permissions. Then, add your MCP server in Claude Desktop's connector settings and authorize access.

Yes, Claude can create or edit WordPress posts and pages if the MCP server provides the required abilities and your agent has permission to use them.

No, Claude does not automatically need administrator access. You can assign an appropriate user role and enable only the WordPress abilities required for your tasks.

Yes, the miniOrange Secure MCP Server can expose supported WordPress abilities through MCP, allowing Claude to use those abilities to perform permitted tasks on your website.

Ask Claude to list the available WordPress tools or retrieve a specific piece of website content. If Claude returns the expected results, the connection works.

Multisite support depends on the plugin's compatibility and configuration. Check the miniOrange Secure MCP Server documentation or contact the support team to confirm whether your setup supports WordPress Multisite.

Check your agent's assigned role and enabled abilities in the miniOrange Secure MCP Server plugin. Save any changes, reconnect Claude, and check the plugin's debug logs if the tools remain unavailable.

Yes, you can configure separate MCP connections for multiple WordPress sites if each site supports the required setup. Authorize each connection separately and select the appropriate site when working with Claude.

Yes, Claude can help improve SEO content, edit posts, and update pages when the MCP server provides the required abilities and your agent has permission to use them.



 Thank you for your response. We will get back to you soon.

Something went wrong. Please submit your query again


ADFS_sso ×
Hello there!

Need Help? We are right here!

support