wordpress-mcplisted

Use when the user wants to manage WordPress sites via MCP (Model Context Protocol). Covers three paths — (A) the official WordPress/mcp-adapter plugin (Abilities API, 3 meta-tools, HTTP+STDIO transport, v0.6.1+ no composer needed), (B) the AI Engine plugin (43-109+ admin tools: posts, users, media, plugins, options, SEO, social, AI image gen, Gutenberg blocks), and (C) wp-mcp-ultimate (community, 58 abilities, OAuth 2.1, self-contained, WP 6.7+). Includes plugin install via WP-CLI, Application Password / Bearer Token / OAuth setup, STDIO + HTTP transport, per-platform MCP config (Claude Code, Devin, OpenCode, Gemini, Codex, AGY, OpenClaw), endpoint verification, and troubleshooting. Trigger when the user says "WordPress MCP", "mcp-adapter", "AI Engine MCP", "wp-mcp-ultimate", "configure WordPress for agents", or wants to expose WordPress to AI agents over MCP. Do NOT use for building a new MCP server (use building-mcp-servers). Part of the afonsoft/skills collection.
afonsoft/skills · ★ 2 · AI & Automation · score 81

Install: claude install-skill afonsoft/skills

> **v1.2.1 changelog:** Hardened install script guidance and called out high-trust risks for Path C (`wp-mcp-ultimate`) and the `@automattic/mcp-wordpress-remote` npm proxy. > > **v1.2.0 changelog:** Added Path C (wp-mcp-ultimate, 58 abilities, OAuth 2.1). Updated Path A: mcp-adapter v0.6.1+ ships pre-built ZIP (no composer needed), STDIO transport via `wp mcp-adapter serve`, HTTP proxy via `@automattic/mcp-wordpress-remote`, Abilities API guide, migration from deprecated Automattic/wordpress-mcp. Added `references/mcp-adapter-guide.md` and `references/wp-mcp-ultimate.md`. > > **v1.1.0 changelog:** Added complete AI Engine tool reference (109+ tools), `wp_write_blocks` block schema, real-world workflows (theme switch, media upload with permission fix, menu creation, Gutenberg rewrite), Cloudflare cache-busting, SVG-to-PNG conversion, WP-CLI menu command corrections. # WordPress MCP — three paths (mcp-adapter + AI Engine + wp-mcp-ultimate) > **Security notice**: This skill configures high-trust WordPress admin integrations. Application Passwords, Bearer Tokens, and OAuth credentials are secrets. Never commit them, print them in logs, or paste them into untrusted clients. Always install plugins from official pinned releases (GitHub releases or wordpress.org) and verify the site is one the user controls before enabling MCP. > > **Additional risks:** > - **Path C (`wp-mcp-ultimate`)** is a community plugin from a personal GitHub repository. Audit the source and prefer Path A or