Description
Secure WordPress MCP server for Claude, ChatGPT and AI agents. Easy MCP AI is a free plugin that turns your own site into a Model Context Protocol (MCP) server. Connect Claude to WordPress, connect ChatGPT to WordPress, or give Cursor, OpenAI Codex, GitHub Copilot and other AI agents access limited to the tools and permissions you choose.
Your WordPress AI assistant can write and publish posts, update WooCommerce products, and edit Yoast or Rank Math SEO fields. It answers questions with data from Google Analytics, Search Console and Semrush. Every tool call runs under WordPress permissions, and, when logging is on, the Audit Log records each one.
Why Easy MCP AI
- Secure by design: OAuth 2.1, WordPress capability checks, per-token permissions, rate limits, an Audit Log and Change History
- 243 MCP tools: 96 for core WordPress, 93 for plugin integrations (WooCommerce, ACF, The Events Calendar, BuddyPress and the supported SEO plugins) and 54 for SEO and analytics
- One AI connector: works with Claude, ChatGPT, Cursor, OpenAI Codex, GitHub Copilot, Google Antigravity, Manus, n8n and more
- SEO data in chat: tools for Google Analytics, Search Console, Semrush, SE Ranking, DataForSEO and Ahrefs
- No relay, no vendor account: the MCP server is PHP on your own site, AI clients connect to your site directly, with no hosted relay, account or usage fee
- WordPress MCP adapter for the Abilities API: turn abilities from other plugins into MCP tools without writing code
Connect Claude to WordPress
Easy MCP AI connects Claude to WordPress from the Claude web app, desktop app, Cowork and Claude Code.
- In WordPress, open Easy MCP AI Dashboard and click Connect to Claude, or copy your MCP server URL and follow the steps below.
- In Claude, open Settings Connectors, add a connector, paste your MCP server URL, then click Connect.
- Sign in to WordPress, choose what the AI may read or change, and click Approve.
For Claude Code, run the command shown on the dashboard, then use /mcp in Claude Code to sign in. See the Claude integration guides.
Connect ChatGPT to WordPress
- On the dashboard, click Connect to ChatGPT. The button opens the Connectors screen in ChatGPT Developer Mode.
- Enter a name such as “WordPress”, paste your MCP server URL and leave Authentication set to OAuth.
- Confirm any warning ChatGPT shows for custom MCP servers, click Create, then approve access on your WordPress site.
See the ChatGPT guide.
Connect Cursor, Codex, GitHub Copilot & Other AI Agents
Every client below uses the same MCP server URL from your dashboard.
- Cursor: use the one-click Add to Cursor button, or paste a config into
mcp.json - GitHub Copilot in VS Code: install with the one-click Install in VS Code button
- OpenAI Codex CLI: copy the prepared
codex mcp addcommand, which includes your API token and connects through the mcp-remote bridge - Google Antigravity (Gemini): add the server to the MCP config, then authorize with OAuth
- Windsurf, Cline, Roo Code, Zed, OpenCode, LibreChat, Manus and Pydantic AI: copy-paste configs on the dashboard
- n8n: follow the n8n guide
- Any other MCP client that supports the Streamable HTTP transport. Clients that support only stdio connect through the mcp-remote bridge, which runs on your own computer, not on a hosted server.
Browse all integration guides.
What Your WordPress AI Agent Can Do
Content management: draft, rewrite, schedule and publish posts and pages. These tools also work in any custom post type, run find-and-replace inside content and restore revisions.
Gutenberg and site editing: create and edit Gutenberg blocks, reusable blocks, block templates and global styles.
Media: upload media from a file or a URL. For URL uploads the plugin downloads the file, and your AI agent can set alt text and captions.
Site admin: manage users, roles and user meta. Moderate comments and update site settings. Handle menus, categories, tags and custom taxonomies, and list plugins and themes.
Try prompts like:
- “Write a 500-word post about healthy eating and save it as a draft.”
- “Show today’s WooCommerce orders and total revenue.”
- “What keywords does my homepage rank for, and how many clicks do they get?”
WooCommerce MCP: Run Your Store with an AI Agent
47 WooCommerce tools give your WooCommerce AI agent control of products, variations, attributes, orders, customers, coupons and webhooks. Your AI agent can also read refunds, shipping zones and methods, tax rates and payment gateways, pull sales and top-seller reports, and bulk-update products, variations and orders.
SEO MCP for Yoast, Rank Math, AIOSEO, SEOPress, Slim SEO & The SEO Framework
Easy MCP AI works as a Yoast MCP or Rank Math MCP connector. It exposes your Yoast SEO or Rank Math fields as MCP tools. Your AI agent reads and updates SEO titles and meta descriptions. Where the SEO plugin supports them, it also edits canonical URLs, robots meta tags, Open Graph data, focus keywords and schema settings. Supported fields depend on the SEO plugin and on the version you run.
Google Analytics MCP, Search Console MCP & Semrush MCP
Pull data from Google Analytics, Search Console, Semrush, SE Ranking, DataForSEO and Ahrefs into chat. The 54 tools below use your own provider accounts and API keys.
- Google Analytics 4 (11 tools): traffic, top pages, conversions, custom dimensions and realtime users
- Google Search Console (6 tools): search queries, clicks, impressions, CTR, position, sitemaps and URL indexing
- Semrush (13 tools): domain overview, organic keywords, competitors, keyword difficulty and backlinks
- SE Ranking (15 tools): keyword and backlink research, competitors, top pages and AI-search visibility
- DataForSEO (8 tools): live search results pages, search volume, ranked keywords, backlinks and on-page SEO audits
- Ahrefs (1 tool): Domain Rating for any domain with a free Ahrefs APIv3 key. Show the credit “Domain Rating by Ahrefs” wherever you display the rating.
Setup: open Easy MCP AI External Data. Upload a Google service-account key file (a JSON file), then set your default GA4 property and Search Console site. Add Semrush, SE Ranking, DataForSEO or Ahrefs credentials, click Test, and enable the tools you want.
Easy MCP AI calls a provider in three cases: when you save or test the credentials, when the External Data screen loads account details, and when an AI client runs one of that provider’s tools.
ACF, The Events Calendar & BuddyPress
- Advanced Custom Fields (ACF): 6 tools to read and update ACF fields on posts, users and terms, and list field groups
- The Events Calendar: 10 tools for events, venues and organizers
- BuddyPress: 10 tools for members, groups, activity and private message threads
WordPress Abilities API & MCP Adapter
WordPress 6.9+ lets plugins register Abilities. Easy MCP AI acts as a WordPress MCP adapter for them. Under Easy MCP AI Abilities, select the abilities you want and save. The ones you select become MCP tools, and the adapter exposes nothing else. No adapter code is required. Find compatible plugins in the Abilities directory.
Change History & Audit Log
- Audit Log: when logging is on, the Audit Log records tool calls, including refused ones, with the token, tool, arguments, result, client IP and time. Entries are kept for 30 days by default.
- Change History: keeps before/after snapshots of what your AI client changes. It is enabled by default on new installs, and you can compare any recorded change in the admin. You can ask “what did the AI change on this post last week?” through the
wp_history_list,wp_history_getandwp_history_difftools.
Secure MCP Server for WordPress
Giving an AI client access to your site is a serious step. This MCP server runs inside WordPress, with no hosted relay in between. Tool results return to the authenticated client that requested them. Your content and credentials stay between your AI client and your own site, and the plugin sends nothing to its makers. The controls below cover sign-in, permissions, storage and logging.
- OAuth 2.1 with PKCE, Dynamic Client Registration, refresh-token rotation with reuse detection, audience binding and revocation
- WordPress permissions: every tool call runs as the WordPress user bound to the token or OAuth grant, with that user’s capability checks
- Least privilege: choose which tools each API token or OAuth grant can use, including read-only access
- Hashed tokens, encrypted credentials: token records are SHA-256 hashes, and external data credentials use AES-256-GCM encryption
- Rate limits and IP allowlist: 60 requests per minute per token by default, plus an optional IP allowlist for API tokens
- Force Draft on Create (off by default): any content your AI client creates is saved as a draft
- HTTPS: OAuth requires HTTPS on live sites (local loopback addresses are exempt), and API tokens should use HTTPS too
Screenshots
Installation
- In Plugins Add New Plugin, search for “Easy MCP AI”, click Install Now, then Activate. For manual installs, upload the ZIP under Plugins Add New Plugin Upload Plugin.
- Open Easy MCP AI Dashboard. Copy the MCP server URL, or use a one-click connect button.
- OAuth (Claude, Claude Desktop, ChatGPT, Cursor, VS Code, Antigravity): add the URL to your AI client. Then sign in to WordPress as the user you want that client to act on behalf of. Choose permissions and click Approve.
- API token (Codex CLI, Windsurf, Zed, LibreChat and other config-file clients): under Easy MCP AI API Token & OAuth, create a token, choose the user and tools, then paste the URL and token into your client. Copy the token before you leave the screen. It is shown only once.
Revoke any OAuth client or token at any time under Easy MCP AI API Token & OAuth.
FAQ
-
Is Easy MCP AI secure?
-
Yes, within the limits you set. Connections use OAuth 2.1 or hashed API tokens, and every tool call runs with the permissions of a real WordPress user. You can also limit each connection to specific tools. Rate limits cap how often an API token can be used, and an optional IP allowlist caps where it can be used from. The Audit Log and Change History let you review what each AI assistant does.
The server runs inside WordPress, with no hosted relay in between. Token records are SHA-256 hashes, and external credentials are encrypted with AES-256-GCM. The plugin itself does not call any AI provider. Abilities you enable from other plugins follow those plugins’ own behavior. Report vulnerabilities through the Patchstack Vulnerability Disclosure Program.
-
Can you connect Claude to WordPress with Easy MCP AI?
-
Yes. Easy MCP AI is the MCP server that Claude connects to. Install Easy MCP AI and copy your MCP server URL from Easy MCP AI Dashboard. Add it under Settings Connectors in Claude Desktop or the web app, sign in to WordPress and approve access. The integration guides show each step.
-
How do I use Claude Code with WordPress?
-
Run the command shown on the dashboard, then run the
/mcpcommand in Claude Code to sign in. Claude Code uses the same MCP server URL and the same approval screen as the Claude apps, so that screen is where you choose what Claude Code may read or change. You do not need any other MCP plugin for this. -
How do I connect ChatGPT to WordPress?
-
Click Connect to ChatGPT on the dashboard, name the connector and paste your MCP server URL. Keep OAuth selected, click Create and approve access on your site. ChatGPT may show a warning for custom MCP servers. This is normal.
-
Which AI assistants and AI agents work with Easy MCP AI?
-
All of the following connect through MCP: Claude (web, desktop, Cowork and Claude Code), ChatGPT, Cursor, GitHub Copilot in VS Code, OpenAI Codex CLI, Google Antigravity, Windsurf, Cline, Roo Code, Zed, OpenCode, LibreChat, Manus, Pydantic AI and n8n. Other MCP clients that support the Streamable HTTP transport work as well. Easy MCP AI lets you connect several AI assistants at once, each with its own token or OAuth grant, permissions and audit trail.
-
Is this a WordPress MCP server, an MCP plugin for WordPress or an MCP adapter for the Abilities API?
-
All three. Easy MCP AI is a WordPress MCP plugin that works with Claude and other MCP clients. It runs a complete MCP server inside WordPress at
/wp-json/easy-mcp-ai/v1/mcp. Once you approve access, Claude can use that endpoint as your WordPress MCP server. It supports MCP 2026-07-28 and stays compatible with 2025-11-25, 2025-06-18 and 2025-03-26 clients. It also works as an MCP adapter for the WordPress Abilities API, and adds 243 ready-made tools, OAuth and permission controls. -
What is the Model Context Protocol (MCP)?
-
MCP is an open standard, created by Anthropic, that lets AI assistants and AI agents connect to external data and services. OpenAI, Google and many other platforms support it.
-
How is it different from other WordPress AI plugins?
-
Most WordPress AI plugins embed one AI provider inside wp-admin and bill you for usage. Easy MCP AI is an AI connector that works the other way round. Your site becomes an MCP server, and you drive it from the AI client you already use. Use Claude or ChatGPT as an AI writing assistant, a WooCommerce AI agent or an SEO analyst, with your own model and plan. Some MCP plugins route every request through the maker’s cloud service, so the connection depends on that service and its plan limits. Easy MCP AI has no relay, and your AI client connects to your site directly.
-
Are my AI requests private, and do they pass through your servers?
-
No. Requests and tool results travel between your AI client and your own site, with no hosted relay or third-party server. The connection depends only on your site and your AI client, so it keeps working even if our service is down. The plugin is free, all 243 tools are included, and there is no vendor quota, only rate limits you set yourself, 60 requests per minute per token by default. The plugin sends nothing to us. The optional outside reachability check is a link that opens easymcpai.com in your browser, and it uses only your site address.
-
Is Easy MCP AI free?
-
Yes. Easy MCP AI is a free WordPress MCP server plugin and includes all 243 tools. Semrush, SE Ranking, DataForSEO, Ahrefs and Google APIs use your own accounts, so any API charges come from those providers. A provider such as Semrush, SE Ranking, DataForSEO, Ahrefs or Google is contacted only in three cases: when you save or test its credentials, when the External Data screen loads account details, or when an AI client runs one of its tools.
-
Does it send my content to OpenAI, Anthropic or Google?
-
No, not to AI providers. The plugin never calls OpenAI, Anthropic or Google’s AI models. Your AI client calls your site, and tool results return to the authenticated client that requested them. The plugin does send your API credentials and per-call parameters to whichever analytics or SEO providers you have connected. These parameters include keywords, URLs and date ranges, and providers include Google Analytics, Search Console, Semrush, SE Ranking, DataForSEO and Ahrefs. Abilities you enable from other plugins follow those plugins’ own behavior.
-
Does it work with WooCommerce, Yoast, Rank Math, ACF and The Events Calendar?
-
Yes. Built-in tool sets cover WooCommerce, Advanced Custom Fields (ACF), The Events Calendar, BuddyPress, Yoast SEO, Rank Math, AIOSEO, SEOPress, Slim SEO and The SEO Framework. Each integration needs the matching plugin active. Turn each integration on under Easy MCP AI Plugins.
-
Does it work with custom post types, ACF fields and Gutenberg blocks?
-
Yes. Post tools accept any registered custom post type. ACF tools read and write field values on posts, users and terms. Dedicated tools edit Gutenberg blocks, block templates and global styles.
-
Can I control what the AI is allowed to do?
-
Yes. Choose the tools for each token or OAuth grant. Bind each token or grant to a WordPress user whose capabilities fit the job, since permissions follow those capabilities. Note that you cannot restrict access to individual posts. For review before publishing, give the AI read-only or draft-only tools. Turn on Force Draft on Create, which is off by default.
-
Where can I see what the AI did?
-
When logging is on, the Audit Log records each AI assistant’s tool calls with the token, tool, arguments, result, client IP and time. Change History stores before/after snapshots of AI edits. You can compare before/after versions in the admin, or ask about them from chat.
-
Does it work on multisite, localhost or staging?
-
Yes. On multisite, each subsite has its own endpoint, tokens and logs. Network-level options need network capabilities. For local development, OAuth accepts plain HTTP on direct loopback requests (127.0.0.1 or ::1). Behind a local HTTPS proxy used for development, add
define('EASY_MCP_AI_OAUTH_ALLOW_HTTP', true);towp-config.php. Never set that flag on a live site. -
Why does the endpoint return 404 or 401?
-
- 404: use the exact MCP server URL from the dashboard. If the route is still missing, re-save Settings Permalinks to flush rewrite rules.
- 401: check that your client sends
Authorization: Bearer <token>and that the token still exists. For OAuth, disconnect and re-approve the connector. Some hosts strip the Authorization header. The diagnostics on Easy MCP AI Dashboard identify the likely cause and suggest a fix.
-
My site uses Cloudflare Flexible SSL. Why can’t AI assistants connect?
-
Flexible SSL sends requests to your server over plain HTTP, so the OAuth sign-in refuses to issue tokens. Existing API tokens keep working. The best fix is switching Cloudflare SSL/TLS to Full (Strict). Use the next step only when a trusted proxy sets the
X-Forwarded-Protoheader. In that case, add this above/* That's all, stop editing */inwp-config.php:if ( isset( $_SERVER['HTTP_X_FORWARDED_PROTO'] ) && 'https' === $_SERVER['HTTP_X_FORWARDED_PROTO'] ) { $_SERVER['HTTPS'] = 'on'; }
Reviews
Contributors & Developers
“Easy MCP AI – Connect Claude to WordPress: MCP Server for ChatGPT & AI Agents” is open source software. The following people have contributed to this plugin.
Contributors
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
1.7.17
- Easy MCP AI is now part of Themeisle. Your setup keeps working as before, with no action needed.
1.7.16
- New: Four new diagnostics find connection problems that sit outside WordPress, on your host, CDN or another plugin.
- New: Diagnostics warn when a saved copy of your sign-in details no longer matches this site.
- New: Calls refused before they run are now recorded in the Audit Log.
- Fixed: Refused and failed sign-in rows in the Audit Log no longer show a green OK.
- Fixed: Several diagnostics now name the actual cause instead of a generic one.
1.7.15
- New: The Ahrefs Domain Rating tool now takes a free Ahrefs APIv3 key, which Ahrefs began requiring.
- New: Diagnostics now name any ability you switched on that WordPress did not register.
- Fixed: Diagnostics no longer warns about caching, firewalls or change-tracking when nothing is actually wrong.
- Fixed: Media and post counts are returned as numbers instead of text.