GoBuildWP MCP
A WordPress plugin that turns a site into an MCP server so an agent edits Elementor pages, menus, SEO and reads the shop.
- 65 ★ on the repository
- Last commit
- GPL-2.0
Broad access
Why this level
- The agent changes content, menus, SEO and settings of a live site, and the developer profile opens privileged operations.
- Access tokens and application passwords grant entry to the site's MCP endpoint as that user.
Install
- Works in
In your terminal, with SkillFoxx CLI
npx skillfoxx add mcp/gobuildwpDetects the agents on your machine, shows the access level and pins the version.
Other ways to install
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- The agent changes content, menus, SEO and settings of a live site, and the developer profile opens privileged operations.
- Access tokens and application passwords grant entry to the site's MCP endpoint as that user.
This is third-party code. Review the repository files before installing.
What it does
GoBuildWP installs on a WordPress site as a plugin and exposes the MCP endpoint `/wp-json/mcp/wppilot`. Claude, ChatGPT, Claude Code, Codex, Cursor and other clients connect to it. The agent creates and edits pages, Elementor layouts, Gutenberg blocks, menus, media and SEO metadata, checks speed and security, and reads WooCommerce data. Every call runs as a WordPress user and passes through that user's capabilities. Safety profiles sit on top: Read Only, Production Safe by default and Developer Full Access for test sites. Dangerous calls need confirmation, and every change lands in a ledger with undo. The free plugin is self-sufficient. Pro adds WooCommerce writes, other page builders, SEO plugins and safe updates.
Who it is for. WordPress site owners and developers who hand an agent page layout, SEO edits and checks without giving it full access to the admin panel.
Good fit when
- An Elementor page must be built or reworked from a description without opening the editor.
- Meta descriptions and titles of a dozen posts need adjusting in one pass.
- Before a release you must check page speed and site security.
- Every agent edit must stay in a ledger with an undo button.
- Several sites must be run through one link, which GoBuildWP Cloud supports.
Not a fit when
- The site is not on WordPress: the plugin works only inside it.
- The site is not reachable over HTTPS from the internet and the client is hosted: ChatGPT and web Claude cannot reach `localhost`.
- Nobody is available to confirm edits on a live site and Production Safe mode feels too tight.
Example request
Build an About page in Elementor from this description and add it to the main menu.MCP
- Transport
- http, stdio
- Authentication
- OAuth
Limitations
WordPress 6.9 or newer and PHP 8.0 or newer are required. Hosted clients need public HTTPS. Upload the ready `gobuildwp.zip` archive from releases: sources from the "Source code" button do not install. Elementor needs 3.6 or newer, WooCommerce version 9.0. Some features are paid: Pro, Cloud and WooCommerce writes. Undo does not cover every operation: plugin installs and updates and permanently deleted comments are irreversible. The PageSpeed check sends the page address to GoBuildWP Cloud or Google.
How to disable. Deactivate and delete the plugin under Plugins in WordPress. Revoke client connections on the Connected Apps screen and remove client MCP entries with `claude mcp remove`.
FAQ
How do I connect Claude Code to a WordPress site?
Install the plugin, then run `claude mcp add gobuildwp-example --transport http https://example.com/wp-json/mcp/wppilot-oauth` with your own address. Inside Claude Code run `/mcp` and complete the browser sign-in.
Which sign-in methods are supported?
OAuth 2.1 with PKCE is recommended: tokens last an hour and connections are revoked in the Connected Apps list. Clients without a browser use application passwords and access tokens tied to the capabilities of the user who created them.
What does the Production Safe profile do?
It allows ordinary work on content, design, SEO and the shop, and blocks plugin and theme installation and deletion and direct access to files and the database. A Developer Full Access profile exists for test sites.
Can I undo the agent's edits?
Yes, the change ledger undoes one change, a batch or a whole agent session. Undo verifies the earlier state and refuses if someone else changed the target after the agent.
What is free and what is paid?
The free plugin includes the MCP server and Elementor editing. Pro adds WooCommerce writes, other page builders, SEO suites, safe updates and backups. Cloud gives one link for many sites.
Discussion
No questions or reviews yet.
Related
MCP serversA WordPress plugin with an MCP server: the agent runs PHP and WP-CLI on your site, edits files and uses Gutenberg over OAuth or an app password
55 skills for Claude Code, Codex and Cursor covering WordPress audits, edits, migrations and page builds through Respira MCP.
The CLI gives agents WordPress maintenance commands for plugins, configuration, content and site data through the terminal.
Official WordPress skill set for AI assistants: blocks, themes, plugins, REST API, WP-CLI and performance
A plugin with skills for building TypeScript MCP servers and MCP apps: the agent scaffolds, edits, debugs and verifies them
An MCP server on your machine that lets ChatGPT and Claude edit code, run tests and check Git in a local repository
Comparison with similar tools
Cards that share the main search query, and how they differ.
| Tool | Official | Authentication | Repository stars | Main difference |
|---|---|---|---|---|
| GoBuildWP (this card) | yes | OAuth | 65 | |
| MCP WordPress Server | no | API key | 114 | connects to a site from outside over the REST API; GoBuildWP works as a plugin inside WordPress with safety profiles and an undo ledger |
| Agent Skills for WordPress | no | 2,358 | gives an agent WordPress knowledge as skills; GoBuildWP opens a working MCP server on the site itself |
README in short
The plugin was previously called WPPilot and kept its identifier, so installed copies update in place. The server speaks two MCP protocol revisions, the earlier one and the newer sessionless one, and clients need not reconnect.