Index live · v1.7.0 · OCT 6 2026

WordPress

Official

The official WordPress MCP Adapter (under the WordPress GitHub org) is a PHP library and plugin from the 'AI Building Blocks for WordPress' initiative. It bridges WordPress's Abilities API (introduced in WordPress 6.9) to MCP, automatically converting every registered ability into MCP tools, resources, and prompts so AI clients can discover and invoke core, plugin, and theme functionality. Auth is WordPress login or Application Passwords for HTTP; transports include HTTP, STDIO, and custom. It supersedes the now-archived Automattic/wordpress-mcp plugin.

Streamable HTTPstdioPHP
1.2Kstars

Configuration

{
  "mcpServers": {
    "wordpress": {
      "command": "wp",
      "args": [
        "--path=/path/to/your/wordpress/site",
        "mcp-adapter",
        "serve",
        // Change the server ID and user as needed
        "--server=mcp-adapter-default-server",
        "--user=admin"
      ]
    },
  }
}

Run in a terminal. Copied verbatim from the upstream README.

AgenticSkills Audit

Automated framework checks. Deep code review tracked separately. Read the methodology →

6/7
6 of 7 automated checks passed
Audited Aug 7, 2026
SECURITY.md published
Mitigates: Coordinated disclosure path
Evidence
Commit in last 90 days
Mitigates: Maintainer abandonmentLast push 0 day(s) ago
≥2 active contributors
Mitigates: Bus-factor of one10 contributors with ≥2 commits
Evidence
CI pipeline configured
Mitigates: Code health regression
Evidence
Dependency lockfile committed
Mitigates: Dependency confusionpackage-lock.json
Evidence
Software Bill of Materials (SBOM)
Mitigates: Audit trailNo SBOM file present
License declared
Mitigates: Legal ambiguityGPL-2.0

Deep framework checks (OAuth 2.1 / PKCE implementation, input validation, sandboxing) require human source review and are tracked separately. This scorecard covers programmatically verifiable signals only.

Quick Stats

Trust LevelOfficial
Stars1,184
TransportStreamable HTTP, stdio
API KeyNot required
LanguagePHP
CategoryContent & CMS

Tags

wordpresscmsblogcontentabilities-api

Get new MCP servers in your inbox. What we added, what failed the security audit, and why. See a past issue.