MCP Adapter for WordPress

MCP Adapter

Official WordPress package that turns Abilities API abilities into MCP tools, resources and prompts

MCP serverEditors’ pickHigh risk

wordpress/mcp-adapter

Install

wp mcp-adapter serve --user=admin

Runs the stdio server via WP-CLI once the plugin is installed and active.

This is third-party code. Review the repository files before installing.

What it does

The adapter bridges the WordPress Abilities API with MCP: core, plugin and theme abilities become agent tools. The server is reachable over HTTP at /wp-json/mcp/mcp-adapter-default-server or over stdio through the WP-CLI command wp mcp-adapter serve. Abilities are private by default and exposed with meta.public; the default server offers three meta-tools to discover, describe and execute abilities. Several servers with their own transports and permission checks can run side by side.

Who it is for. For WordPress developers who want to give an agent controlled access to a site or their plugin.

Good fit when

  • You want an agent to work with a WordPress site's content and settings
  • You build a plugin and want to expose its features to agents via MCP
  • You need local access to a development site through WP-CLI

Not a fit when

  • The site does not run WordPress
  • Your WordPress version lacks the Abilities API

Example request

Show which site abilities are available over MCP and create a draft post

Limitations

Works only inside WordPress with the Abilities API. Abilities must be registered and made public, otherwise the agent cannot see them. HTTP access from stdio-only clients needs the separate @automattic/mcp-wordpress-remote proxy and an application password.

How to disable. Deactivate the MCP Adapter plugin in WordPress and remove the wordpress server from your MCP client config.

MCP

Transport
stdio, http
Authentication
API key
Environment variables
Environment variables
WP_API_URL
Site MCP endpoint URL when using the proxy
WP_API_USERNAME
WordPress username for the proxy
WP_API_PASSWORD
secret
WordPress application password for the proxy

Security check

  • Performs site actions with the chosen user's rights, up to administrator
  • Exposes an HTTP endpoint on the site

README in short

The README presents the adapter as part of the AI Building Blocks for WordPress initiative and lists its features: ability-to-MCP conversion, multiple servers, HTTP and stdio transports, pluggable error handling and permission checks. Details live in the docs: quick start, examples, a CLI guide and migration notes. A WordPress Playground demo is available. Licensed GPL-2.0-or-later.

FAQ

Why can't the agent see my abilities?

Abilities are private by default. Set meta.public or meta.mcp.public to true when registering.

Which user does the stdio server run as?

The one given in --user. Without it the server runs unauthenticated with limited capabilities.

Editors’ pick

The official FastAPI skill, bundled with the package, teaching agents to write code for the installed version

SkillLow risk102.3K
Editors’ pick

Official skills and agents from the .NET team: performance, MSBuild, NuGet, upgrades, testing, ASP.NET Core, Blazor and MAUI

PluginMedium risk5.4K

Firebase MCP Server

Firebase CLI and MCP Server

Editors’ pick

Official Firebase MCP server from the Firebase CLI: projects, Firestore, Auth, Crashlytics, Remote Config and function logs

MCP serverHigh risk4.5K
Editors’ pick

Laravel's official MCP server, guidelines and skills: the agent sees the DB schema, logs and package versions and searches ecosystem docs

MCP serverMedium risk3.6K