iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Use the WordPress REST API when a known application, service, script, or front end needs predictable JSON requests. Use WordPress MCP when an MCP-capable AI client must discover WordPress tools, read contextual resources, and perform permissioned actions from natural-language instructions. MCP is not a replacement for the REST API. A common production design keeps REST for deterministic application infrastructure and adds MCP as an agent-facing layer over a deliberately limited set of WordPress Abilities.
The right choice depends on who is calling WordPress, whether the operation contract must be explicit in code, and how much authority an AI client should receive. The sections below separate those decisions, explain authentication and transport, and show where a combined architecture is safer and more maintainable.
What is the practical difference between WordPress MCP and the REST API?
The REST API is WordPress’s general-purpose application interface. It exposes HTTP endpoints that send and receive JSON for posts, pages, taxonomies, users, metadata, and other data types. A developer chooses the endpoint, method, parameters, authentication method, and error handling in application code.
Recommended Free Tools
WordPress MCP is an agent integration layer. The official WordPress MCP Adapter maps capabilities registered through the WordPress Abilities API into Model Context Protocol primitives: tools that an AI client can invoke and resources that it can read. Instead of hard-coding every available operation into the client, an MCP-capable client can discover the capabilities that the server exposes and then request an action using the tool’s schema.
#1 Best Overall
- Powerful Turbo Fan:CAGIWIRU Electric Air Duster have reached speed up to 130000RPM,Can efficient remove dust and debris.With LED light and Three Adjustable Speed to meet with different cleaning tasks.
- With Attached USB C Fasting Charging cable.Charing 3 hours,Enjoy up to 240 minutes of use on the lowest setting, For third speed can use for 25mins.with four charging options to meet with your needs.
- Wide Application: attached 5 different nozzles,making it suitable for a variety of scenes, such as car,pet, pc, keyboards, and other electronic devices. It also serves for office and home clean duster.
- Handy Design & Portable:Cordless air duster electric nozzle is Light weight and small size, design and comfortable to hold and space saving, convenient to carry around. You can put it in your room or inside the car without taking up space.
- Economical &Reusable: Built durable materials with a long-lasting battery,our CAGIWIRU air duster it's a sustainable alternative to disposable air cans.
That difference changes the control model. With REST, the developer determines the operation before the request is sent. With MCP, the AI client can select among exposed tools, so the site owner must decide which capabilities are available, which account is used, and whether any write actions are allowed.
REST is an HTTP data API
The WordPress REST API is designed for software integrations: headless sites, mobile and desktop applications, synchronization jobs, plugins, themes, custom front ends, and command-line utilities. JSON is supported by practically every current programming language and HTTP library. Public content is generally available without authentication, while private content, users, password-protected content, custom post types, and metadata need authentication or explicit exposure.
MCP is a capability and context protocol
MCP provides a standard way for an AI client to discover tools, resources, and prompts. In WordPress, the adapter turns registered Abilities into those MCP primitives. The result is better suited to an agent that needs to inspect available actions, retrieve site context, and execute a typed capability as part of a conversation.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →The official adapter was described by WordPress Developer Blog author Jonathan Bossenger on February 4, 2026, as part of the AI Building Blocks for WordPress initiative. Its purpose is to adapt Abilities registered by the Abilities API so AI agents can discover and execute site functionality as MCP tools and read WordPress data as MCP resources.
Which interface fits your project?
| Decision axis | REST API | MCP |
|---|---|---|
| Primary caller | Web apps, mobile apps, services, scripts, custom front ends | MCP-enabled AI clients and agents |
| Interface style | Explicit versioned HTTP endpoints returning JSON | Discoverable tools, resources, and prompts exposed through MCP |
| Control model | Developer writes request logic and handles schemas | AI client discovers capabilities and invokes selected tools |
| Best fit | Stable application integration and data synchronization | Natural-language workflows, agent context, and tool execution |
| Authentication | WordPress authentication and capability rules | MCP authorization plus WordPress/account permissions |
| Transport | HTTP REST requests | HTTP or STDIO, depending on deployment |
| Main risk to review | Endpoint permissions, nonce/application-password/OAuth design, and data exposure | Over-broad tool access, trusted-client decisions, and write-capable agent actions |
If your requirements sit in the first column, start with REST. If an AI client is the primary operator and needs discoverable WordPress actions, evaluate MCP. If both kinds of callers exist, keep the interfaces separate and expose only the capabilities each caller needs.
When should developers choose the WordPress REST API?
Choose REST when a known program must make repeatable calls with deterministic behavior. The REST API is the better default for infrastructure because the application, not an AI model, decides exactly which endpoint to call and what data to send.
Headless WordPress front ends
A JavaScript, mobile, or desktop front end can request posts, pages, taxonomies, and custom data as JSON. The client can implement caching, pagination, retries, schema validation, and fallbacks without depending on an AI model’s interpretation of a task.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallRank #2
- Screen Cleaner is Your Screen’s New Bestfriend! - EVEO is proud to present a screen cleaner that’s perfectly suited for your TV. Meet your new screen cleaner, computer screen cleaner, laptop cleaner, iPad cleaner, Macbook,tv cleaner or any other electronic device. Our screen cleaner spray and wipe along with the included plush microfiber cloth, easily removes dust, fingerprints & other smudges on the screen’s surface. Clean effectively for a streak-free screen
- Gentle on your Screens - Our screen cleaner spray and wipes is compatible to be used even for the most sensitive LCD, LED, CRT, and OLED screens in proper use. Be at ease knowing that this product is compatible with all the major brands: LG, SONY, Samsung, Sharp, iPad, iPhone, Android screens, Kindle, PC monitors - we’ve got you covered! Can be used as LCD screen cleaner, tv cleaner, smart tv screen cleaner, and more
- Premium Super Soft Plush Microfiber Cloth - Included in this efficient screen cleaning kit. This screen cleaner spray and wipe has our signature plush microfiber cloth specially designed to comply with screens and monitors and leave them streak-free. Has been shown to effectively absorbs stubborn stains, zero streaks, and no fiber shedding. Always use this together with our screen cleaner for the best results
- Easy-to-Use Screen Cleaner Kit + microfiber cleaning cloth - The EVEO Screen Cleaning Kit will easily be your new favorite tool when it comes to taking care of the things you love most, quick and easy solution for a streak-free screen. Simply screw on the sprayer gun on the screen cleaner bottle. Spray the cleaning liquid onto the microfiber cloth, then wipe the screen until desired cleanliness & shine is achieved.
- Quality Screen Care Kit Worth Purchasing - Enjoy a convenient Screen Cleaner anytime, anywhere you need it. Your satisfaction is our top priority. We stand behind the quality of our products and that’s why, you shouldn’t be worrying at all. We manufacture the Best Screen Cleaner. and can be used for laptop cleaning kit, laptop screen cleaner, tv screen cleaner for smart tv. MacBook screen cleaner, monitor cleaner or screen cleaner spray for electronic devices with microfiber cleaning cloth
Mobile and desktop applications
Native applications typically know their screens and operations in advance. REST lets those applications call an explicit endpoint contract and handle authentication in the platform’s normal HTTP stack.
Synchronization and ETL jobs
Scheduled imports, exports, backups, and data pipelines benefit from predictable request and response formats. A worker can record the endpoint, query parameters, response status, and item identifiers for every run, which makes reconciliation and replay straightforward.
Plugin and theme integrations
If a plugin or theme needs a specific WordPress operation, an explicit REST route keeps the integration’s behavior visible in code. The developer can enforce validation, capability checks, rate limits, and a narrow response schema rather than exposing a broad collection of agent tools.
Systems where every operation must be predetermined
REST is preferable when compliance, testing, or business logic requires an allowlist of operations that cannot change based on a model’s interpretation. The calling service can reject unknown parameters and require human approval in its own workflow before a write request is sent.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Repair Windows errors before they cause bigger problems3Scan for outdated or missing drivers - takes under a minuteWhen should developers choose WordPress MCP?
Choose MCP when an AI client is the primary operator and needs to discover available WordPress functionality, retrieve context, or execute typed actions from natural-language instructions. MCP is useful when the set of capabilities is intentionally curated and the client understands MCP tools and resources.
AI-assisted content and site operations
An MCP client can inspect the tools made available by a WordPress installation, obtain relevant resources, and invoke an Ability without a developer building a separate custom command for every conversational task. This is useful for editorial assistants, support agents, and internal operations where the user describes the goal rather than an endpoint.
Local development with AI coding clients
The official adapter supports clients including Claude Desktop, Claude Code, Cursor, and VS Code. STDIO is intended for local development, where the client launches or communicates with a local server process. This avoids making a development site publicly reachable solely for experimentation.
Rank #3
- 【Large size】：Measuring 800 x 300 mm/ 31. 5×12 inches, which is wider and taller than others. Large mouse pad can perfectly fit your keyboard and mouse of any size, and there is also ample space for peripherals such as phones, tablets, etc.
- 【LED backlight mouse pad】：Blade Hawks RGB mouse pad provides 7 static modes and 7 dynamic modes will give you the options you are looking for. Power-off memory function remembers the last lighting mode you selected. The super glow fiber Chroma will give you a colorful gaming setup that you want.
- 【Anti-slip rubber base】：Made from Natural rubber, this gaming mousepad will firmly grip your desktop, allowing you to enjoy the ultimate precision in the games you are most passionate about. It also comes with a texture that enhances this ability even further.
- 【Smooth and waterproof surface】: Micro-textured cloth surface, for extremely precise mouse control and a smooth movement. When liquid splashes on the gaming mouse pad, it forms water droplets and slides down. Will not delay your work or gameplay.
- 【Plug and play】: This mouse and keyboard pad is powered by USB, plug and play, no driver required. One button control light modes. Press one time to change the lighting mode, press twice to change the brightness, press and hold about 3 seconds turn ON/OFF.
Remote installations and hosted access
HTTP is the transport for a publicly reachable MCP installation. WordPress.com provides a hosted MCP server for every WordPress.com site, including free sites, and for self-hosted sites connected through Jetpack. Its documented endpoint is https://public-api.wordpress.com/wpcom/v2/mcp/v1, and it uses OAuth 2.1.
Custom MCP clients
For a client that is not already supported, WordPress.com documents dynamic client registration, an authorization-code flow with PKCE, token exchange, and authenticated POST requests to the MCP endpoint. Those steps let the client obtain authorization without embedding a WordPress password in the application.
How do you connect an AI client to WordPress MCP?
The exact configuration depends on whether the server is local or remote and whether you are using a hosted service or the official adapter on your own installation. Treat the following as an implementation sequence rather than a single universal configuration file.
For local development with STDIO
- Install the official WordPress MCP Adapter and register the WordPress Abilities you intend to expose.
- Run the MCP server as a local process using the adapter’s documented STDIO configuration.
- In the MCP-capable client, add a server entry that launches that process and passes only the required environment variables or credentials.
- Open the client’s tool list and verify that only the expected Abilities appear.
- Test a read-only operation against staging content before enabling any write-capable Ability.
STDIO is a deployment choice, not a permission boundary. A local client can still have administrator-level WordPress authority if the account or process is configured that way, so the WordPress account and exposed tool set must remain limited.
For a hosted or remote HTTP server
- Register the MCP client according to the provider’s instructions, using dynamic client registration where required.
- Send the user through the OAuth 2.1 authorization flow and request only the account-level access needed by the workflow.
- Complete the authorization-code exchange with PKCE and store the resulting tokens in the client-side credential store recommended for your environment.
- Send authenticated POST requests to the MCP endpoint and handle tool responses, authorization failures, and expired tokens explicitly.
- Review the server’s available tools after authorization; do not assume that a successful login means every WordPress operation should be exposed to the agent.
For a conventional REST integration
- Identify the exact WordPress REST route and HTTP method for each operation.
- Decide whether the request is public or requires authentication. Private content, users, password-protected content, custom post types, and metadata may require authentication or explicit exposure.
- Choose the WordPress authentication mechanism appropriate to the deployment, such as a nonce for an in-site request, an application password, or OAuth supplied by an approved integration.
- Implement schema validation, capability checks, pagination, retries, and structured handling for non-2xx responses.
- Test the same authorization rules against staging content and verify that the response contains no fields the client does not need.
Is MCP safer than the REST API for write access?
No. MCP is not automatically safer; it introduces a different authorization path. REST requests are constrained by WordPress authentication and capability rules. MCP adds authorization for the MCP client and the set of tools it can discover, while the underlying WordPress account still determines what those tools can do.
Why MCP can increase the risk of unintended writes
An AI client can discover and invoke tools, so a broad tool catalogue gives the agent more possible actions than a narrowly coded REST client would have. Ambiguous instructions, an over-privileged account, or a trusted-client decision made without review can turn a read-oriented workflow into a write-capable one.
Why REST still needs careful permission design
A REST endpoint can expose sensitive data or permit changes if its authentication and capability checks are incorrect. Public content is generally accessible through the API, while private and administrative data require authentication or explicit permission. Nonces, application passwords, OAuth, endpoint permissions, and custom post type exposure must be designed together rather than treated as interchangeable switches.
Rank #4
- 【Softer and More Comfortable】Vaydeer wrist rest has unique diamond pattern, which is the combination of softness and aesthetics. The materials of wrist rest are improved into higher quality memory foam and covered with silky smooth lycra. The computer wrist rest makes you as comfortable and cushiony as like rest your wrists on clouds.
- 【Ergonomic Wrist Saver】The wrist rests for keyboard and mouse comes with a 17.32×3.15×0.83 inch keyboard wrist pad and a 5.94×3.15×0.83 inch mouse wrist support. Based on ergonomic design, the unique concave shape is the perfect fit for your wrist joints. The wrist rest pad fits most computer keyboards and laptops, improve hand and wrist posture, release your wrist and arm stress.
- 【Non-Slip Rubber Bottom】Featuring an anti-skid silicone base on the bottom, this wrist keyboard support stays firmly in place on your desk, preventing the padding from sliding around, ensuring stable and consistent wrist support during extended computer sessions.
- 【Better Experience & Pain Relief】Our keyboard arm rest is beneficial to alleviate the soreness caused by direct contact and friction between your arm and a hard desk surface, reducing the risk of wrist fatigue or carpal tunnel. The soft texture of memory foam can evenly distribute the pressure around your wrists and provide good support with just enough give.
- 【Helpful in Multiple Scenarios】Whether you're working, studying, writing, typing, gaming, this keyboard and mouse rest combo is an essential accessory to add comfort and support to your hands and wrists. It’s also a great gift for men, women, family, friend, coworker, gamer, teacher, etc.
Least-privilege controls for both interfaces
- Create separate read and write credentials where the workflow permits it.
- Expose only the MCP tools or REST routes the application actually needs.
- Use an account with the minimum WordPress capabilities required for the operation.
- Require human confirmation for high-impact writes such as publishing, deleting, changing users, or altering site settings.
- Log every write request with the caller, account, tool or endpoint, target object, result, and timestamp.
- Test authorization against staging content before connecting production credentials.
- Review trusted-client decisions whenever a new MCP client, plugin, or integration is added.
WordPress.com offers full, read-only, and customized account-level tool access for its hosted MCP service. The Automattic plugin documentation states that MCP operations require administrator privileges by default and advises connecting only trusted clients. Those defaults make an explicit permission review essential before enabling the adapter on a production site.
Can WordPress MCP and the REST API coexist?
Yes. Coexistence is often the most practical architecture. Keep REST as the application-facing contract for front ends, mobile clients, synchronization, and services, then expose a selected set of WordPress Abilities through MCP for AI workflows.
A sensible two-layer design
- Application layer: REST routes handle deterministic reads and writes from known software clients.
- Ability layer: WordPress Abilities define the operations that are safe and meaningful to expose.
- Agent layer: The MCP Adapter maps those selected Abilities to tools and resources for approved AI clients.
- Governance layer: Separate credentials, approvals, logging, and staging tests apply to each caller type.
This arrangement does not require removing existing REST integrations. The adapter is designed to map registered Abilities into MCP primitives, so MCP can be added as an agent-facing interface while established REST consumers continue using their existing endpoints.
What does the WordPress.org MCP server do?
The WordPress.org MCP server is aimed at plugin-directory workflows rather than general site administration. AI tools can use it to read plugin guidelines, validate readme files, check submission status, and submit plugins.
Submission automation does not eliminate WordPress’s normal review requirements. The WordPress.org guide explicitly describes the server as a tool to assist a workflow, not a replacement for the review process. Teams should therefore treat any submission result as a step in the process, not as approval or publication.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.How should a team decide between MCP, REST, or both?
Use the following decision sequence before choosing a protocol:
Free tools Windows power users keep installed
One-click scans. No signup required.
- Name the caller. If it is a fixed application, service, mobile client, or script, begin with REST. If it is an MCP-capable AI client acting on a user’s natural-language request, evaluate MCP.
- Classify the operation. Stable data retrieval and synchronization favor explicit REST endpoints. Discoverable context and typed agent actions favor MCP.
- Set the authority boundary. Decide whether the caller needs public reads, authenticated reads, narrowly scoped writes, or administrative operations. Do not grant broader access simply because the protocol supports it.
- Choose the transport. Use REST over HTTP for conventional integrations. Use MCP over STDIO for local development or HTTP for a reachable installation.
- Plan observability. Ensure that requests, tool calls, authorization failures, and writes can be traced to a user, client, and WordPress account.
- Prototype on staging. Validate schemas, capability checks, tool exposure, and failure handling before connecting production content.
- Adopt both when callers differ. Keep REST for infrastructure and add MCP only for the curated agent workflows that benefit from discovery.
What are the common failure modes?
The client cannot see any WordPress tools
Check that the MCP server is running, the client is using the correct transport, and the server has registered WordPress Abilities. For a remote service, verify that authorization completed and that the selected account-level access is not read-only when a particular tool requires more authority.
Best Value
- 【No Drill Mounted】Cable management tray can be assembled in as little as 3 minutes or less-simply. Side clips easily clampe the edge of desk, pass through the holes on the sides, and secure excess cables with baskets. Desk cable management supports inward or outward installation to meet your needs in different scenarios, and provides you with great convenience when collecting and organizing wires.
- 【Rubber Pad Protects Desk】Wire organizer under desk built-in soft rubber pads on the clamp protect your desk from scratches, so you will not damage your furniture or office.
- 【Sturdy and Beautiful】Cord management under desk is made of high-quality carbon steel and holds about 15 lbs. The wire basket has 2 holes on each side of the tray to enable your cables to pass freely. Cable baskets are suitable for desk thickness use from 0.4" to 2.4".
- 【Space Saving & Keep Organized】Desk cable management tray holds all your power cords, outlet strips, USB hubs and computer transformers hidden from your feet, and the data cables will not enter the vacuum cleaner to keep your desk clean and tidy. Desk wire organizer is also suitable for use in the kitchen and outdoors.
- 【Reduce Safety Risks】Cable tray under desk keeps all plugs away from your kids, no more worry about tripping. Using 2 holes wire tray saves extra space, helps you easily cabling and wire protection. The mesh design is not easy to accumulate dust, but avoids safety accidents caused by messy wires.
A tool appears but the operation is denied
Discovery does not guarantee permission. Confirm the WordPress account’s capabilities, the MCP authorization scope, and any tool-level restriction. On a self-hosted installation, check whether the adapter’s default administrator requirement is blocking the account.
A REST request returns public data but not private data
This is normally an authentication or exposure issue rather than an MCP problem. Confirm that the request carries the intended WordPress credentials, that the endpoint supports the content type, and that the user has the required capability. Private content, users, metadata, and custom post types may need explicit exposure.
A remote MCP client fails during login
For a custom client, verify dynamic registration, redirect handling, PKCE, token exchange, and the authenticated POST request to the documented endpoint. Expired or incorrectly stored tokens should produce a controlled reauthorization path rather than silently retrying with stronger credentials.
What should developers remember?
- REST is WordPress’s general-purpose JSON API for explicit application integrations.
- MCP is an AI-facing protocol for discoverable tools, resources, and prompts, with the official adapter translating WordPress Abilities into those primitives.
- WordPress.com supplies a hosted MCP endpoint with OAuth 2.1, including access for Jetpack-connected self-hosted sites.
- REST and MCP use different permission paths, and MCP can expose write actions to an AI client if the tool set and account are too broad.
- A combined design is usually practical: deterministic software clients stay on REST while approved agent workflows use MCP.
Frequently Asked Questions
Can the WordPress.org MCP server approve a plugin automatically?
No. It can help read the directory guidelines, validate a readme, check submission status, and submit a plugin, but the normal review requirements still apply. A successful tool call is assistance with the workflow, not a guarantee of approval or publication.
Do free WordPress.com sites receive access to the hosted MCP server?
Yes. The hosted server is available to every WordPress.com site, including free sites. A self-hosted site can use the same service when it is connected through Jetpack.
What does a custom MCP client need besides a token?
The documented flow includes dynamic client registration, an authorization-code exchange with PKCE, and authenticated POST requests to the MCP endpoint. The client must also understand MCP tool responses and handle token expiry or authorization failure.
Can an MCP connection be limited to reading?
Yes. WordPress.com provides account-level full, read-only, and customized tool access. Selecting read-only access is appropriate when an agent needs context but must not create, edit, publish, or delete WordPress content.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
