iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
You can connect an AI tool to WordPress in one of two ways. For a WordPress.com site, or a self-hosted site connected through Jetpack, enable MCP in your WordPress.com account and give your MCP-compatible client the hosted endpoint https://public-api.wordpress.com/wpcom/v2/mcp/v1. The client opens a browser-based OAuth 2.1 authorization flow. For an independently self-hosted site, install the official WordPress MCP Adapter, expose the WordPress Abilities you trust, and configure an MCP client to use that server.
Start with read-only access. Write-capable tools can publish or edit content, change design and settings, install plugins, manage users, or alter site visibility. The right setup depends mainly on where WordPress is hosted, how much control you need, and whether you are extending WordPress with custom functionality.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
What does MCP add to a WordPress site?
The Model Context Protocol (MCP) is an open standard that lets an AI assistant discover tools exposed by another system and call those tools with structured requests. In a WordPress connection, the assistant can receive site context and, where you permit it, perform operations such as reading posts, checking settings, updating a page, or working with media.
MCP is not a replacement for WordPress authentication, roles, or editorial review. It is a connection layer. The WordPress.com service controls access through your account and tool-group settings, while a self-hosted adapter turns selected WordPress Abilities into MCP tools that your site controls.
#1 Best Overall
- Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
- Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
- Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
- Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
- 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.
Which WordPress MCP route should I use?
Choose the route that matches your hosting model before configuring a client. The WordPress.org service is a separate developer tool and is not a general-purpose connection to a normal WordPress site.
| Route | Best for | Setup | Main trade-off |
|---|---|---|---|
| WordPress.com MCP server | WordPress.com sites and Jetpack-connected self-hosted sites | Enable MCP, add the hosted endpoint, and authorize with OAuth 2.1 | Least infrastructure work; account and tool settings govern access |
| WordPress MCP Adapter | Independently self-hosted developers exposing custom Abilities | Install the adapter plugin, register or publicize Abilities, and configure an MCP client | More control and extensibility; you maintain hosting, permissions, and security |
| WordPress.org MCP server | Plugin authors working with the Plugin Directory | Run npx -y @wporg/mcp or use its documented remote server |
Supports plugin-development workflows rather than general site editing |
Use the hosted server when you want the shortest path
The hosted route works on every WordPress.com site, including free sites. A self-hosted site connected through Jetpack uses the same WordPress.com MCP server; there is no separate Jetpack MCP endpoint to configure. WordPress.com manages the service infrastructure and browser authorization.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Use the adapter when you need custom site functions
The official WordPress MCP Adapter is maintained by the WordPress AI Team. It bridges the WordPress Abilities API and MCP, so an agent can discover and invoke Abilities that your site or plugins register. This is the extensible option for a developer who needs a custom operation that is not in the hosted catalog.
How do I connect a WordPress.com or Jetpack site?
Prepare an MCP-compatible client, an account with access to the site, and a decision about whether the first connection should be read-only. Then complete these steps.
- Enable MCP in WordPress.com. Sign in to the WordPress.com account that manages the site and turn on MCP in the account’s MCP settings. If the site is self-hosted, confirm that it is connected through Jetpack before proceeding.
- Set the initial capability scope. Leave write access disabled for the first test. WordPress.com lets account owners choose read or write access and customize individual tool groups.
- Add the server endpoint to your client. Use https://public-api.wordpress.com/wpcom/v2/mcp/v1. The client must support MCP over HTTPS and the OAuth 2.1 authorization flow.
- Authorize in the browser. The client opens WordPress.com’s sign-in and consent screen. Approve only the site and tool groups required for the task, then return to the client when authorization completes.
- Run a read-only test. Ask the assistant to list the connected site or retrieve a known post. Check that the returned site, status, and content are the ones you intended to connect.
- Enable a narrowly defined write group, if necessary. Turn on only the tools needed for the current job, test on staging when possible, and review every proposed change before it is applied.
What happens during WordPress.com authorization?
WordPress.com documents OAuth 2.1 features including PKCE, dynamic client registration, token rotation, expiring access tokens, and no client secrets stored in the client. After the browser flow, the client uses the authorized bearer token when calling the MCP server. You do not paste a permanent WordPress password into the AI application.
How do I configure common clients?
The exact menu names change as clients update, but the endpoint and authorization model stay the same.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Rank #2
- 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
- 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
- Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
- 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
- What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.
- Claude Desktop: choose the WordPress.com connector from the connector directory, sign in when prompted, and select the site and permissions offered by WordPress.com.
- Claude Code: run
claude mcp add --transport http wpcom-mcp https://public-api.wordpress.com/wpcom/v2/mcp/v1, then run/mcpand complete the browser authorization. - Codex: run
codex mcp add wpcom-mcp --url https://public-api.wordpress.com/wpcom/v2/mcp/v1. The client can trigger OAuth automatically. - Cursor: install the WordPress.com plugin from the Cursor Marketplace and complete the sign-in flow it opens.
- Other MCP clients: add an HTTPS MCP server in the client’s MCP-server configuration, enter the WordPress.com endpoint exactly, and follow its OAuth authorization prompts.
What can the hosted WordPress.com tools do?
The available catalog spans content, site administration, design, and account operations. WordPress.com groups tools so you can grant a broad read or write scope and then refine it.
- Content Authoring
- Site Editing
- Site Editor Context
- Site
- Account
- User Management
- Plugin Management
- Other
Depending on the groups you enable, an agent can list sites, read or update settings, inspect activity, work with posts, pages, and media, manage themes and styles, use patterns, templates, navigation, widgets, and blocks, inspect domains, and perform selected user, plugin, and account-security functions. The catalog is not an unrestricted root shell: the account owner’s tool toggles and the site’s own WordPress permissions still determine what a call can do.
How should I grant write access?
Make the write permission temporary and task-specific. For example, enable content-writing tools to draft a page, but leave plugin management, user management, and site-setting tools off. Before allowing publication, require the agent to show the proposed title, body, status, and target site in its response. Revoke or reduce the scope after the task rather than leaving every group enabled indefinitely.
How do I connect an independently self-hosted site with the MCP Adapter?
The official adapter is intended for a self-hosted WordPress installation where you control plugins, PHP, and the server. It requires WordPress 6.9 or higher and PHP 7.4 or higher according to the Learn WordPress installation lesson.
- Verify the platform versions. Check the WordPress version in the dashboard and the PHP version in your hosting control panel or Site Health. Upgrade through your normal maintenance process if either is below the requirement.
- Download the adapter release. Obtain the
mcp-adapter.zippackage from the official WordPress MCP Adapter release page. Keep the ZIP intact for the dashboard upload. - Install the plugin. In WordPress, open Plugins → Add New Plugin, choose the upload option, select
mcp-adapter.zip, and confirm installation. - Activate it. Activate the adapter from the Plugins screen. Confirm that WordPress reports the plugin as active and that no PHP or dependency error appears.
- Register the Abilities you want to expose. Core WordPress and plugins can register Abilities through the Abilities API. Review each Ability’s inputs, outputs, side effects, and required WordPress capabilities before making it public.
- Publicize only approved Abilities. Abilities marked public are discoverable through the adapter’s default MCP server. Keep internal, destructive, or administrative functions private unless there is a documented reason to expose them.
- Configure your client. Use the HTTP or local connection approach described for your deployment and add the adapter’s MCP server to an MCP-compatible client such as Claude Desktop, Claude Code, Cursor, or VS Code.
- Test discovery without writes. Ask the client to list available tools or call a harmless read Ability. Confirm that the returned tools belong to the intended site and that authentication and capability checks are working.
What are WordPress Abilities?
An Ability is a registered WordPress operation with a defined name, input schema, output, and permission behavior. The adapter translates public Abilities into MCP tools. That design lets a custom plugin expose a narrowly scoped workflow—such as preparing structured content or querying a business record—without handing an agent unrestricted access to the whole installation.
How should a developer expose a custom Ability?
Define the smallest useful input and output, validate every input on the server, and enforce WordPress capabilities inside the Ability rather than relying on the AI client to behave. Avoid exposing an operation that combines unrelated actions, such as changing a user role and publishing content in one call. Log calls that create side effects and return clear errors when a request fails validation or authorization.
Rank #3
- Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
- Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
- Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
- Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
- What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.
Can an AI assistant edit or publish my WordPress site?
Yes, but only when the connected MCP server exposes write-capable tools and the authenticated account or site user is allowed to use them. The connection itself does not grant universal authority. On WordPress.com, the account owner chooses read or write access and tool groups; on a self-hosted adapter, the site owner controls which Abilities are public and how their permission checks work.
Editing is safer when you separate planning from execution. Ask the assistant to inspect the current content and produce a proposed change first. Then approve a specific write call, verify the target site and status, and inspect the resulting revision in WordPress. Publication, plugin installation, settings changes, visibility changes, and user management deserve a human checkpoint even when a routine content edit does not.
What is the WordPress.org MCP server for?
The WordPress.org MCP server is designed for plugin authors working with the Plugin Directory. With npx -y @wporg/mcp, an MCP-compatible development client can access plugin guidelines, readme validation, submission status, and submission workflows. The documented prerequisites include a WordPress.org account, an MCP-compatible client, and Node.js 18 or later.
It is not the way to connect an AI assistant to posts, pages, settings, or plugins on an ordinary WordPress site. Plugin submissions still go through the normal review process and must meet the published guidelines; the service assists a developer’s workflow rather than replacing review.
How do the hosted server and adapter differ in authentication and maintenance?
The hosted server gives you a managed endpoint and a browser-based OAuth 2.1 flow. The adapter puts the server inside your WordPress environment, so your team must decide how the client reaches it, how credentials are handled, and how updates are applied.
| Decision factor | WordPress.com MCP server | WordPress MCP Adapter |
|---|---|---|
| Hosting model | WordPress.com or Jetpack-connected self-hosted site | Independently self-hosted WordPress |
| Control surface | Managed catalog and account-level tool toggles | Public WordPress Abilities and custom servers |
| Authentication | Browser OAuth 2.1 with PKCE and rotating, expiring tokens | Credentials and transport managed by the site owner and client configuration |
| Capability scope | Configurable read, write, content, design, plugin, user, and account groups | Whatever registered Abilities and permission checks you expose |
| Maintenance | WordPress.com maintains the endpoint; you maintain account and site settings | You maintain WordPress, PHP, plugins, adapter updates, server exposure, and logs |
| Primary audience | Site owners, editors, and teams wanting a managed connection | Developers extending WordPress with custom functionality |
How do I secure an MCP connection to WordPress?
Treat an MCP connection like a new administrative integration, not like a harmless chat feature. Use this operating checklist before enabling writes.
Rank #4
- Dual Converters, Infinite Potential：Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
- Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
- Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
- Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
- Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft
- Identify whether the site is WordPress.com, Jetpack-connected self-hosted, or independently self-hosted.
- Use the hosted endpoint only with a client that supports MCP over HTTPS and OAuth 2.1.
- Begin with read-only access and enable a write group only for a defined task.
- On the adapter, review every Ability marked public and remove anything no longer needed.
- Connect only clients you trust. Keep WordPress, PHP, plugins, and the MCP component updated.
- Use staging to test publishing, design changes, plugin installation, settings changes, or visibility changes.
- Review activity and application logs after tool calls, especially calls that change content or configuration.
- When access is no longer needed, disconnect the client. For the hosted route, revoke it from Security → Connected applications in WordPress.com; also remove the server from the client’s configuration.
What should never be delegated without review?
Do not leave unrestricted plugin management, user management, or account-security tools enabled for a general-purpose assistant. A mistaken plugin change can affect every request, while a user or visibility change can expose private material. Keep those capabilities separate from routine drafting and reporting tasks.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What should I do when the connection fails?
The client cannot discover the server
Check that you entered the hosted endpoint exactly, including the /wpcom/v2/mcp/v1 path, and that the client supports MCP over HTTPS. For a self-hosted adapter, verify that the plugin is active, the server transport is reachable from the client, and any reverse proxy or firewall allows the required connection.
OAuth completes but no site appears
Sign in with the WordPress.com account that actually owns or manages the site. For a self-hosted site, confirm its Jetpack connection and check that MCP is enabled for that account. Disconnect the stale application entry and repeat authorization if the client cached an earlier account.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitchesThe assistant can read but cannot write
That usually means the account or tool group is read-only, the WordPress user lacks the required capability, or the adapter Ability’s permission callback rejected the request. Enable only the relevant write group, verify the target user’s role, and inspect the server or WordPress logs for the specific denial.
A custom adapter tool is missing
Confirm that the plugin registered the Ability successfully and marked it public. Check its name and schema, reload tool discovery in the client, and make sure the adapter and WordPress versions meet their requirements. An Ability can remain intentionally undiscoverable when it is not marked public.
A tool call changes the wrong site
Stop writes immediately, verify the connected account and site identifier in the client, and revoke the connection if necessary. Reconnect with a read-only scope and require the assistant to identify the site before approving another change.
Best Value
- 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
- Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
- Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
- HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
- What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
Which setup is the practical default?
For WordPress.com and Jetpack-connected sites, use the hosted endpoint and OAuth flow, begin read-only, and enable only the tool groups your task needs. For a separately hosted installation that needs custom operations, use the official MCP Adapter after meeting its WordPress and PHP requirements, then expose carefully permissioned Abilities. Use the WordPress.org server only for Plugin Directory development work.
Frequently Asked Questions
Does connecting MCP give an AI my WordPress administrator password?
The hosted WordPress.com route uses a browser-based OAuth 2.1 flow with PKCE, rotating tokens, and expiring access tokens; the client does not store a WordPress.com client secret. A self-hosted adapter uses whatever credential and transport design you configure, so its secrets must be protected like any other server integration.
Can I connect more than one AI client to the same WordPress site?
Yes, each client can be authorized as a separate connected application when it supports the server’s authentication flow. Give each client the smallest practical scope and remove individual connections rather than changing the site’s entire permission model.
Will MCP work with a WordPress site behind a firewall or private network?
The hosted route can reach a WordPress.com or Jetpack-connected site through its managed service. A self-hosted adapter must be reachable by the client through the transport you choose; a private network may require an approved internal route or a local client arrangement, and exposing the endpoint publicly without authentication is unsafe.
Can an MCP tool bypass WordPress user roles?
It should not. Hosted tools are constrained by the authorized account and WordPress permissions, while a well-designed custom Ability checks capabilities on the server. If an Ability performs an action without enforcing authorization, fix that implementation before making it public.
Free tools Windows power users keep installed
One-click scans. No signup required.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
