Index live · v1.3.0 · JUN 8 2026

WordPress

Official

The official WordPress MCP Adapter (under the WordPress GitHub org) is a PHP library and plugin from the 'AI Building Blocks for WordPress' initiative. It bridges WordPress's Abilities API (introduced in WordPress 6.9) to MCP, automatically converting every registered ability into MCP tools, resources, and prompts so AI clients can discover and invoke core, plugin, and theme functionality. Auth is WordPress login or Application Passwords for HTTP; transports include HTTP, STDIO, and custom. It supersedes the now-archived Automattic/wordpress-mcp plugin.

Streamable HTTPstdioPHPAPI Key Required
1.2Kstars
Official, 1.2K stars

Configuration

{
  "mcpServers": {
    "wordpress": {
      "command": "npx",
      "args": [
        "-y",
        "@modelcontextprotocol/server-wordpress"
      ],
      "env": {
        "WORDPRESS_API_KEY": "your-api-key-here"
      }
    }
  }
}

Add this to your claude_desktop_config.json file.

Quick Stats

Trust LevelOfficial
Stars1,184
TransportStreamable HTTP, stdio
API KeyRequired
LanguagePHP
CategoryContent & CMS
View on GitHub

Tags

wordpresscmsblogcontentabilities-api

AgenticSkills Audit

Automated framework checks. Deep code review tracked separately. Read the methodology →

6/7
6 of 7 automated checks passed
Audited May 30, 2026
SECURITY.md published
Mitigates: Coordinated disclosure path
Evidence
Commit in last 90 days
Mitigates: Maintainer abandonmentLast push 2 day(s) ago
≥2 active contributors
Mitigates: Bus-factor of one10 contributors with ≥2 commits
Evidence
CI pipeline configured
Mitigates: Code health regression
Evidence
Dependency lockfile committed
Mitigates: Dependency confusionpackage-lock.json
Evidence
Software Bill of Materials (SBOM)
Mitigates: Audit trailNo SBOM file present
License declared
Mitigates: Legal ambiguityGPL-2.0

Deep framework checks (OAuth 2.1 / PKCE implementation, input validation, sandboxing) require human source review and are tracked separately. This scorecard covers programmatically verifiable signals only.