Skip to content

docdyhr/mcp-wordpress

Folders and files

NameName
Last commit message
Last commit date

Latest commit

Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 

Repository files navigation

πŸš€ MCP WordPress Server

WordPress MCP Logo

The Most Comprehensive WordPress MCP Server

Manage WordPress sites with natural language through AI tools like Claude Desktop

Quick Start β€’ Why This MCP Server? Installation Options β€’ Documentation β€’ Examples

CI/CD Pipeline GitHub Stars NPM Version NPM Downloads NPM Total Downloads Docker Pulls Line Coverage Branch Coverage Function Coverage Test Results MCP Evaluation

TypeScript Security Tests Vulnerabilities Penetration Testing Docker License smithery badge

πŸŽ‰ NEW: v2.7.0 - Composition Architecture & Complete SEO Toolkit!

🎯 Why This MCP Server?

Transform WordPress management from complex admin panels to simple conversations:

❌ Before: Login β†’ Admin Panel β†’ Navigate β†’ Click β†’ Fill Forms β†’ Save
βœ… After:  "Create a new blog post about AI trends with SEO optimization"

Key Advantages:

  • πŸ† Most Complete: 59 tools vs 20-30 in alternatives
  • ⚑ Fastest Setup: 2-click Claude Desktop installation via DXT
  • πŸ”’ Production Ready: 512 tests (100% pass rate), security audited, battle-tested
  • 🎯 TypeScript Native: 100% type safety, best-in-class developer experience
  • 🌐 Multi-Site: Manage unlimited WordPress sites from one place

πŸš€ Quick Start

Get up and running in under 5 minutes:

Prerequisites

  • WordPress: Version 5.6+ with REST API enabled
  • Claude Desktop: Latest version installed
  • Application Password: Generated from WordPress admin panel

3-Step Setup

1️⃣ Generate WordPress Application Password

WordPress Admin β†’ Users β†’ Profile β†’ Application Passwords β†’ Add New

2️⃣ Install MCP Server (Choose One)

Option A: DXT Extension (Easiest)

# Download and install in Claude Desktop
curl -L https://github.com/docdyhr/mcp-wordpress/releases/latest/download/mcp-wordpress.dxt -o mcp-wordpress.dxt
# Then: Claude Desktop β†’ Extensions β†’ Install β†’ Select DXT file

Option B: NPM Global Install

npm install -g mcp-wordpress

3️⃣ Test Your Connection

In Claude: "Test my WordPress connection"
Response: "βœ… Authentication successful! Connected to: Your Site Name"

πŸ“Ί Watch 2-minute Setup Video | πŸ“– Detailed Setup Guide

⚑ Installation Options

πŸ† Recommended: Claude Desktop Extension (DXT)

Easiest installation - just 2 clicks!

  1. Download: mcp-wordpress.dxt (3.4MB)
  2. Install: Claude Desktop β†’ Extensions β†’ Install β†’ Select DXT file
  3. Configure: Enter your WordPress site URL and credentials

βœ… Zero command line required βœ… Automatic updates βœ… Built-in security

πŸ“– Complete DXT Setup Guide β†’

πŸš€ Alternative: NPX (Power Users)

# Run directly - always latest version
npx -y mcp-wordpress

# Interactive setup wizard
npm run setup

πŸ“¦ Secondary: Smithery Package Manager

# Install via Smithery (MCP package manager)
smithery install mcp-wordpress

# Configure and start
smithery configure mcp-wordpress

βœ… Package management βœ… Version control βœ… Easy updates

Installing via Smithery

To install mcp-wordpress for Claude Desktop automatically via Smithery:

npx -y @smithery/cli install @docdyhr/mcp-wordpress --client claude

πŸ”§ Other Options

πŸ“‹ Configuration Examples

Single Site Setup

Environment Variables (.env)

WORDPRESS_SITE_URL=https://myblog.com
WORDPRESS_USERNAME=admin
WORDPRESS_APP_PASSWORD=xxxx xxxx xxxx xxxx xxxx xxxx
WORDPRESS_AUTH_METHOD=app-password

Claude Desktop Config

{
  "mcpServers": {
    "mcp-wordpress": {
      "command": "npx",
      "args": ["-y", "mcp-wordpress"],
      "env": {
        "WORDPRESS_SITE_URL": "https://myblog.com",
        "WORDPRESS_USERNAME": "admin",
        "WORDPRESS_APP_PASSWORD": "xxxx xxxx xxxx xxxx xxxx xxxx"
      }
    }
  }
}

Multi-Site Agency Setup

Configuration File (mcp-wordpress.config.json)

{
  "sites": [
    {
      "id": "main-corporate",
      "name": "Corporate Website",
      "config": {
        "WORDPRESS_SITE_URL": "https://company.com",
        "WORDPRESS_USERNAME": "admin",
        "WORDPRESS_APP_PASSWORD": "xxxx xxxx xxxx xxxx xxxx xxxx",
        "WORDPRESS_AUTH_METHOD": "app-password"
      }
    },
    {
      "id": "client-restaurant",
      "name": "Restaurant Client",
      "config": {
        "WORDPRESS_SITE_URL": "https://bestrestaurant.com",
        "WORDPRESS_USERNAME": "editor",
        "WORDPRESS_APP_PASSWORD": "yyyy yyyy yyyy yyyy yyyy yyyy",
        "WORDPRESS_AUTH_METHOD": "app-password"
      }
    },
    {
      "id": "client-ecommerce",
      "name": "E-commerce Client",
      "config": {
        "WORDPRESS_SITE_URL": "https://onlinestore.com",
        "WORDPRESS_USERNAME": "shopmanager",
        "WORDPRESS_APP_PASSWORD": "zzzz zzzz zzzz zzzz zzzz zzzz",
        "WORDPRESS_AUTH_METHOD": "app-password"
      }
    }
  ]
}

Development Environment

Local WordPress with Docker

# docker-compose.yml
version: "3.8"
services:
  wordpress:
    image: wordpress:latest
    ports:
      - "8080:80"
    environment:
      WORDPRESS_DB_HOST: db
      WORDPRESS_DB_USER: wordpress
      WORDPRESS_DB_PASSWORD: wordpress
      WORDPRESS_DB_NAME: wordpress
    volumes:
      - wordpress_data:/var/www/html

  db:
    image: mysql:8.0
    environment:
      MYSQL_DATABASE: wordpress
      MYSQL_USER: wordpress
      MYSQL_PASSWORD: wordpress
      MYSQL_ROOT_PASSWORD: rootpassword
    volumes:
      - db_data:/var/lib/mysql

volumes:
  wordpress_data:
  db_data:

MCP WordPress Development Config

{
  "sites": [
    {
      "id": "local-dev",
      "name": "Local Development",
      "config": {
        "WORDPRESS_SITE_URL": "http://localhost:8080",
        "WORDPRESS_USERNAME": "admin",
        "WORDPRESS_APP_PASSWORD": "dev-password-here",
        "WORDPRESS_AUTH_METHOD": "app-password"
      }
    }
  ]
}

Production Deployment

Server Environment Variables

# /etc/environment or systemd service
WORDPRESS_SITE_URL=https://production-site.com
WORDPRESS_USERNAME=api-user
WORDPRESS_APP_PASSWORD=secure-production-password
WORDPRESS_AUTH_METHOD=app-password
NODE_ENV=production
CACHE_ENABLED=true
CACHE_TTL=3600
RATE_LIMIT_ENABLED=true
DEBUG=false

Docker Production Setup

# Dockerfile.production
FROM node:20-alpine
WORKDIR /app
COPY package*.json ./
RUN npm ci --only=production
COPY dist/ ./dist/
EXPOSE 3000
USER node
CMD ["node", "dist/index.js"]

JWT Authentication Setup

WordPress Plugin Configuration

// wp-config.php
define('JWT_AUTH_SECRET_KEY', 'your-secret-key-here');
define('JWT_AUTH_CORS_ENABLE', true);

MCP Configuration

{
  "sites": [
    {
      "id": "jwt-site",
      "name": "JWT Authentication Site",
      "config": {
        "WORDPRESS_SITE_URL": "https://site-with-jwt.com",
        "WORDPRESS_USERNAME": "api-user",
        "WORDPRESS_PASSWORD": "user-password",
        "WORDPRESS_AUTH_METHOD": "jwt"
      }
    }
  ]
}

🌟 What Makes This Special

πŸ† Feature Comparison

Feature This Server Competition
Tools Available 59 tools 20-30 tools
Claude Desktop DXT βœ… 2-click install ❌ Manual setup
Multi-Site Support βœ… Unlimited sites ❌ Single site
TypeScript βœ… 100% coverage ⚠️ Partial/None
Performance Monitoring βœ… Real-time analytics ❌ Basic only
Test Coverage βœ… 404 tests (100% pass / 30% lines) ⚠️ Limited
Production Ready βœ… Security audited ⚠️ Unknown

πŸš€ Core Capabilities

WordPress Management

  • 59 WordPress Tools across 10 categories
  • Multi-Site Support - Manage unlimited WordPress installations
  • Flexible Authentication - App Passwords, JWT, Basic Auth, API Key
  • Real-Time Sync - Instant updates across all connected tools

Performance & Reliability

  • ⚑ Intelligent Caching - 50-70% performance improvement
  • πŸ“Š Real-Time Monitoring - Performance metrics and optimization insights
  • πŸ”’ Production Ready - Security-reviewed, 96.17% line coverage with Vitest testing framework
  • πŸ”„ Zero Downtime - Graceful error handling and automatic recovery

Developer Experience

  • 100% TypeScript - Complete type safety and IntelliSense
  • 🐳 Docker Support - Production-ready containerization
  • πŸ“š Auto-Generated Docs - API documentation with live examples
  • πŸ”§ Extensible - Custom tool development framework

🌐 Multi-Site Configuration

Perfect for agencies and developers managing multiple WordPress sites:

{
  "sites": [
    {
      "id": "main-site",
      "name": "Main WordPress Site",
      "config": {
        "WORDPRESS_SITE_URL": "https://site1.com",
        "WORDPRESS_USERNAME": "admin",
        "WORDPRESS_APP_PASSWORD": "xxxx xxxx xxxx xxxx xxxx xxxx"
      }
    },
    {
      "id": "client-blog",
      "name": "Client Blog",
      "config": {
        "WORDPRESS_SITE_URL": "https://client-blog.com",
        "WORDPRESS_USERNAME": "editor",
        "WORDPRESS_APP_PASSWORD": "yyyy yyyy yyyy yyyy yyyy yyyy"
      }
    }
  ]
}

Use with site parameter: wp_list_posts --site="main-site"

πŸ“– Complete Multi-Site Setup Guide

πŸ” Authentication Setup

WordPress Application Passwords (Recommended)

  1. WordPress Admin β†’ Users β†’ Profile
  2. Scroll to Application Passwords
  3. Enter name: "MCP WordPress Server"
  4. Click Add New Application Password
  5. Copy the generated password

Alternative Methods

  • JWT Authentication - With JWT plugin
  • Basic Authentication - Username/password (dev only)
  • API Key Authentication - With API Key plugin

πŸ“– Complete Authentication Guide

πŸ“‹ Available Tools (59 Tools)

Content Management

  • πŸ“ Posts (6 tools) - Create, edit, delete, list posts and revisions
  • πŸ“„ Pages (6 tools) - Manage static pages and revisions
  • πŸ–ΌοΈ Media (6 tools) - Upload, manage media library and files

User & Community

  • πŸ‘₯ Users (6 tools) - User management and profiles
  • πŸ’¬ Comments (7 tools) - Comment moderation and management
  • 🏷️ Taxonomies (10 tools) - Categories and tags management

Site Management (Monitoring & Admin)

  • βš™οΈ Site Settings (7 tools) - Site configuration and statistics
  • πŸ” Authentication (6 tools) - Auth testing and management
  • ⚑ Cache Management (4 tools) - Performance caching control
  • πŸ“Š Performance Monitoring (6 tools) - Real-time metrics and optimization

πŸ“– Complete Tool Documentation | Live API Reference

πŸ€– Claude Desktop Integration

🎯 Real-World Use Cases

Content Creation & Management:

πŸ’¬ "Analyze my top 10 blog posts and create a new post about emerging trends"
πŸ’¬ "Upload these 5 images and create a photo gallery page with SEO optimization"
πŸ’¬ "Review all pending comments and approve the legitimate ones"

Site Management & Analytics:

πŸ’¬ "Check my WordPress site performance and provide optimization recommendations"
πŸ’¬ "Create a new user account for my freelance writer with editor permissions"
πŸ’¬ "Backup my site settings and show me cache performance statistics"

Bulk Operations:

πŸ’¬ "Update all posts from 2023 to include my new author bio"
πŸ’¬ "Find all images over 1MB and suggest compression strategies"
πŸ’¬ "List all users who haven't logged in for 6 months"

βš™οΈ Configuration Methods

Option 1: DXT Extension (Recommended)

No configuration needed - built-in secure credential management!

Option 2: NPX in Claude Desktop

{
  "mcpServers": {
    "mcp-wordpress": {
      "command": "npx",
      "args": ["-y", "mcp-wordpress"],
      "env": {
        "WORDPRESS_SITE_URL": "https://your-site.com",
        "WORDPRESS_USERNAME": "your-username",
        "WORDPRESS_APP_PASSWORD": "your-app-password"
      }
    }
  }
}

πŸ“– Complete Integration Guide

πŸ“š Examples

Basic Content Management

Create and Publish a Blog Post

You: "Create a new blog post titled 'AI Revolution in 2024' with content about recent AI breakthroughs"
Claude: "I'll create that blog post for you..."
Result: βœ… Post "AI Revolution in 2024" created successfully (ID: 123)

Media Management

You: "Upload the image at /path/to/image.jpg and set it as featured image for post 123"
Claude: "I'll upload that image and set it as the featured image..."
Result: βœ… Image uploaded (ID: 456) and set as featured image

Advanced Workflows

SEO-Optimized Content Creation

You: "Create an SEO-optimized blog post about 'WordPress Security Best Practices' with:
     - Focus keyword: 'WordPress security'
     - Meta description
     - Proper heading structure
     - At least 1500 words"

Claude: "I'll create a comprehensive SEO-optimized post on WordPress security..."

Bulk Operations

You: "Find all draft posts older than 30 days and provide a summary"
You: "Update all posts in category 'News' to include a disclaimer at the end"
You: "Delete all spam comments from the last week"

Site Management

Performance Monitoring

You: "Analyze my site's performance and suggest optimizations"
Claude: "Let me check your site's performance metrics...
         - Cache hit rate: 67%
         - Average response time: 245ms
         - Recommendations: Enable object caching, optimize images..."

User Management

You: "Create a new editor account for [email protected] with a secure password"
You: "List all users who haven't logged in for 90 days"
You: "Update Sarah's role from Author to Editor"

Multi-Site Management

Working with Multiple Sites

You: "List all posts from my client-blog site"
Claude: "I'll list the posts from the client-blog site..."

You: "Compare traffic between main-site and client-blog"
Claude: "Here's a comparison of both sites..."

🎨 Real-World Workflows

Content Marketing Agency Workflow

Scenario: Managing 20+ client blogs with consistent SEO optimization

πŸ’¬ "Analyze the top 5 performing posts across all sites and create similar content for underperforming clients"
πŸ’¬ "Batch update all client sites with the new privacy policy footer"
πŸ’¬ "Generate a weekly performance report comparing all client sites"
πŸ’¬ "Create social media snippets from the latest blog posts on each site"

E-commerce Store Management

Scenario: Managing product launches and inventory updates

πŸ’¬ "Create a product launch post with gallery, specifications, and pricing for the new iPhone case"
πŸ’¬ "Update all 'out of stock' products with restock notifications"
πŸ’¬ "Generate product comparison pages for similar items"
πŸ’¬ "Create seasonal landing pages with current promotions"

News Website Operations

Scenario: Breaking news and content moderation

πŸ’¬ "Publish breaking news about the tech merger with social media integration"
πŸ’¬ "Moderate comments on controversial articles and flag inappropriate content"
πŸ’¬ "Create topic clusters around trending news stories"
πŸ’¬ "Schedule social media posts for peak engagement times"

Educational Institution Portal

Scenario: Course management and student communications

πŸ’¬ "Create course announcement pages with enrollment forms"
πŸ’¬ "Update faculty profiles with new publications and achievements"
πŸ’¬ "Generate student newsletter with upcoming events and deadlines"
πŸ’¬ "Moderate discussion forums and highlight valuable contributions"

Non-Profit Organization

Scenario: Fundraising campaigns and volunteer coordination

πŸ’¬ "Create donation campaign pages with progress tracking"
πŸ’¬ "Update volunteer opportunity listings with current needs"
πŸ’¬ "Generate impact reports showing donation effectiveness"
πŸ’¬ "Create event registration pages with automated confirmations"

πŸš€ Advanced Automation Examples

Smart Content Workflows

Automated SEO Optimization

You: "Optimize all posts from the last month for better SEO performance"
Claude: "I'll analyze and optimize your recent posts...
- Analyzed 15 posts from the last 30 days
- Updated meta descriptions for 12 posts
- Added focus keywords to 8 posts
- Optimized heading structure in 10 posts
- Improved internal linking in 15 posts
- Average SEO score improved from 67% to 89%"

Content Gap Analysis

You: "Identify content gaps in our blog compared to competitor topics"
Claude: "After analyzing your content and common industry topics...
- Missing topics: 'AI in Healthcare', 'Remote Work Security', 'Green Technology'
- Underperforming categories: 'Tutorials' (only 3 posts vs 15+ needed)
- Recommended: 8 new posts to fill major gaps
- Priority topics based on search volume and competition"

Maintenance Automation

Site Health Monitoring

You: "Perform a comprehensive site health check and fix any issues"
Claude: "Running complete site diagnostics...
- βœ… SSL certificate valid (expires: March 15, 2025)
- ⚠️ 3 broken internal links found and flagged
- βœ… All images optimized (average load time: 1.2s)
- ⚠️ 2 plugins need updates
- βœ… Database optimized (reduced size by 15%)
- βœ… Cache performance: 78% hit rate"

User Management Automation

You: "Clean up user accounts and update permissions for the new team structure"
Claude: "Updating user management...
- Deactivated 5 inactive accounts (no login >6 months)
- Updated 12 user roles to match new org chart
- Created 3 new editor accounts for content team
- Set up role-based content access restrictions
- Configured automated welcome emails for new users"

Performance Optimization

Intelligent Cache Management

You: "Analyze site performance and implement optimal caching strategies"
Claude: "Implementing performance optimizations...
- Enabled object caching (40% speed improvement)
- Configured CDN for static assets
- Optimized database queries (reduced load time by 25%)
- Set up page caching with smart invalidation
- Compressed and optimized 47 images
- Site speed improved from 3.2s to 1.8s average load time"

🎯 Industry-Specific Solutions

Healthcare Practices

πŸ’¬ "Create HIPAA-compliant patient information pages with secure forms"
πŸ’¬ "Update doctor profiles with latest certifications and specializations"
πŸ’¬ "Generate appointment booking pages with calendar integration"
πŸ’¬ "Create health education content with medical disclaimers"

Legal Firms

πŸ’¬ "Create practice area pages with case study examples"
πŸ’¬ "Update attorney profiles with recent wins and bar admissions"
πŸ’¬ "Generate client intake forms with confidentiality notices"
πŸ’¬ "Create legal blog posts with proper citations and disclaimers"

Real Estate Agencies

πŸ’¬ "Create property listing pages with virtual tour embeds"
πŸ’¬ "Update agent profiles with recent sales and market statistics"
πŸ’¬ "Generate neighborhood guide pages with local amenities"
πŸ’¬ "Create mortgage calculator pages with current rates"

Restaurants & Food Service

πŸ’¬ "Create menu pages with dietary restriction filters"
πŸ’¬ "Update chef profiles with signature dishes and cooking philosophy"
πŸ’¬ "Generate event booking pages for private dining"
πŸ’¬ "Create food blog posts with recipe cards and nutritional information"

πŸ“– More Examples | Use Case Library

πŸ› οΈ Troubleshooting Guide

Quick Diagnostics

Connection Issues

# Test WordPress connection
npm run status

# Debug mode with detailed logs
DEBUG=true npm run dev

# Test specific site in multi-site setup
npm run status -- --site="your-site-id"

Authentication Problems

# Verify WordPress application password
curl -u username:app_password https://your-site.com/wp-json/wp/v2/users/me

# Test authentication with different methods
npm run test:auth

# Regenerate application password
npm run setup

Performance Issues

# Check cache performance
npm run test:cache

# Monitor real-time performance
npm run test:performance

# Clear all caches
rm -rf cache/ && npm run dev

Common Error Solutions

Error Cause Solution
401 Unauthorized Invalid credentials Regenerate application password
403 Forbidden Insufficient permissions Check user role (Editor+ required)
404 Not Found Wrong site URL Verify WORDPRESS_SITE_URL
SSL Certificate Error HTTPS issues Add SSL exception or use HTTP
Connection Timeout Network/firewall Check WordPress REST API access
Tools not showing in Claude Config file format Validate JSON syntax
Plugin conflicts WordPress plugins Disable conflicting plugins
Rate limiting Too many requests Implement request throttling

WordPress-Specific Issues

REST API Not Available

# Test REST API directly
curl https://your-site.com/wp-json/wp/v2/

# Check if REST API is disabled
grep -r "rest_api" wp-config.php

# Verify permalink structure
wp-admin β†’ Settings β†’ Permalinks β†’ Post name

Application Password Issues

1. WordPress Admin β†’ Users β†’ Profile
2. Scroll to "Application Passwords"
3. Ensure feature is enabled (WordPress 5.6+)
4. Generate new password if needed
5. Copy password exactly (includes spaces)

Multi-Site Configuration Problems

// Check mcp-wordpress.config.json format
{
  "sites": [
    {
      "id": "unique-site-id",
      "name": "Human Readable Name",
      "config": {
        "WORDPRESS_SITE_URL": "https://site.com",
        "WORDPRESS_USERNAME": "username",
        "WORDPRESS_APP_PASSWORD": "xxxx xxxx xxxx xxxx xxxx xxxx"
      }
    }
  ]
}

Environment-Specific Solutions

Claude Desktop Integration

// Verify claude_desktop_config.json format
{
  "mcpServers": {
    "mcp-wordpress": {
      "command": "npx",
      "args": ["-y", "mcp-wordpress"],
      "env": {
        "WORDPRESS_SITE_URL": "https://your-site.com",
        "WORDPRESS_USERNAME": "your-username",
        "WORDPRESS_APP_PASSWORD": "your-app-password"
      }
    }
  }
}

Docker Deployment Issues

# Check container logs
docker logs mcp-wordpress

# Verify environment variables
docker exec mcp-wordpress env | grep WORDPRESS

# Test network connectivity
docker exec mcp-wordpress curl https://your-site.com/wp-json/wp/v2/

NPX Runtime Problems

# Clear NPX cache
npx clear-npx-cache

# Use specific version
npx mcp-wordpress@latest

# Install globally instead
npm install -g mcp-wordpress

Getting Help

Self-Diagnostics

# Comprehensive health check
npm run health

# Security validation
npm run security:check

# Performance analysis
npm run test:performance

Debug Information Collection

# Generate debug report
DEBUG=true npm run status > debug-report.txt 2>&1

# Include system information
node --version >> debug-report.txt
npm --version >> debug-report.txt
os-info >> debug-report.txt

Community Support

πŸ§ͺ Testing & Status

Current Test Status βœ…

  • Main Test Suite: 512/512 passed (100%) with Vitest
  • Security Tests: 40/40 passed (100%)
  • Performance Tests: 8/8 passed (100%)
  • CI/CD Pipeline: Fully functional with Vitest integration

Test Your Installation

# Check connection status
npm run status

# Run full test suite (Vitest)
npm test

# Run tests with coverage
npm run test:coverage

# Quick validation
npm run test:fast

πŸ”’ Security Status

Comprehensive Security Testing

Our security posture is continuously monitored through automated testing and vulnerability scanning:

Security Area Status Tests Coverage
XSS Protection βœ… Secure 6/6 passing Script injection, URL validation, HTML sanitization
SQL Injection βœ… Secure 3/3 passing Query parameterization, input validation
Path Traversal βœ… Secure 3/3 passing File path validation, directory restrictions
Input Validation βœ… Secure 9/9 passing Length limits, format validation, sanitization
Authentication βœ… Secure 7/7 passing Bypass prevention, token validation
Rate Limiting βœ… Secure 3/3 passing DoS protection, request throttling
Information Disclosure βœ… Secure 2/2 passing Error sanitization, sensitive data protection
Penetration Testing βœ… Secure 12/12 passing Comprehensive attack simulation

Security Features

  • πŸ›‘οΈ Input Sanitization: All user inputs are validated and sanitized
  • πŸ” Authentication Security: Multi-method auth with bypass prevention
  • ⚑ Rate Limiting: Built-in protection against abuse and DoS attacks
  • πŸ” Vulnerability Scanning: Daily automated security scans
  • πŸ“Š Real-time Monitoring: Continuous security status updates
  • 🚨 Automated Alerts: Immediate notification of security issues

Security Testing Commands

# Run comprehensive security tests
npm run test:security

# Run penetration testing suite
npm run test:security:validation

# Security vulnerability audit
npm audit

# Full security validation
npm run security:full

Security Compliance

  • OWASP Top 10: Complete protection against common vulnerabilities
  • CVE Monitoring: Automated scanning for known vulnerabilities
  • Security Headers: Proper HTTP security headers implementation
  • Data Protection: Sensitive credential redaction and secure storage
  • Access Control: Role-based permissions and authentication validation

πŸ“– Complete Security Documentation | Security Test Results

πŸ› Troubleshooting

Common Issues

  1. "Cannot connect to WordPress"

    • Verify WORDPRESS_SITE_URL
    • Test REST API: curl https://your-site.com/wp-json/wp/v2/
  2. "Authentication failed"

    • Check username and application password
    • Ensure Application Passwords are enabled
    • Run npm run setup to reconfigure
  3. "Tools not appearing in Claude"

    • Restart Claude Desktop after configuration
    • Check Claude Desktop config file format

Get Help

# Debug mode
DEBUG=true npm run dev

# Connection test
npm run status

# Re-run setup wizard
npm run setup

πŸ“š Documentation

Getting Started

User Guides

Integration Guides

Developer Documentation

Deployment & Operations

πŸ”§ Requirements

  • WordPress 5.0+ with REST API enabled
  • HTTPS recommended for production
  • User with appropriate permissions
  • Application Passwords enabled (WordPress 5.6+)

WordPress User Roles

Role Access
Administrator Full access to all functions
Editor Posts, pages, comments, media
Author Own posts and media
Contributor Own posts (drafts only)
Subscriber Read only

πŸ“¦ Installation Options

NPM Package

# Global installation
npm install -g mcp-wordpress

# Direct usage (recommended)
npx -y mcp-wordpress

Docker Images

# Latest version
docker pull docdyhr/mcp-wordpress:latest

# Specific version
docker pull docdyhr/mcp-wordpress:1.3.1

Distribution Channels

πŸš€ Next Steps

Ready to transform your WordPress management?

  1. πŸ† Download DXT Extension - Easiest setup (2 minutes)
  2. ⚑ Try NPX Method - Power user setup (5 minutes)
  3. πŸ“š Explore All Tools - See what's possible
  4. πŸ’¬ Join Discussions - Get help and share ideas

πŸ”— Similar Projects

Looking for alternatives or complementary tools? Check out these WordPress MCP implementations:


πŸ“‹ Changelog

v2.5.4+ (August 2024) πŸŽ‰

  • πŸ†• Multi-Site DXT Extension - New UI toggle for managing multiple WordPress sites in Claude Desktop
  • πŸ”§ Enhanced Configuration - Auto-detection of multi-site configuration files
  • ⚑ Performance Improvements - Optimized caching and request handling
  • πŸ›‘οΈ Security Updates - Enhanced input validation and dependency updates
  • πŸ› Bug Fixes - Resolved hook path issues and improved error handling
  • πŸ“š Documentation - Updated setup guides and troubleshooting information

v2.5.0 (July 2024)

  • πŸš€ Production Ready - Comprehensive testing suite with 96%+ coverage
  • πŸ”’ Security Framework - Full security validation and penetration testing
  • πŸ“Š Performance Analytics - Real-time monitoring and optimization tools
  • 🎯 Tool Enhancements - 59 WordPress management tools across 10 categories

v2.0.0 (June 2024)

  • πŸ—οΈ Architecture Overhaul - Migrated to modern TypeScript architecture
  • 🌐 Multi-Site Support - Complete multi-site WordPress management
  • πŸ’Ύ Intelligent Caching - 50-70% performance improvement
  • πŸ” Authentication Methods - Support for 4 authentication types

πŸ™ Acknowledgments

Special thanks to Stephan Ferraro for the upstream project that inspired this implementation.


⭐ Found this helpful? Give us a star on GitHub! ⭐

About

MCP Server to manage a Wordpress CMS system.

Topics

Resources

License

Contributing

Security policy

Stars

Watchers

Forks

Sponsor this project

 

Packages

No packages published