WSP MCP

WSP MCP – AI Agents Connector turns your WordPress site into a Model Context Protocol (MCP) server. AI clients can read and edit posts, pages, categories, tags, media, comments, users, and (when installed) Yoast SEO meta and Elementor page content — all under granular, per-ability admin control.

The plugin ships its own native MCP server. You do not need the WordPress MCP Adapter or any companion plugin: activate, copy your connection details from MCP > Connection, and connect. WooCommerce tools (products, orders, refunds, coupons, customers, reports) are available when WooCommerce is active, Advanced Custom Fields tools (field groups, fields, values, post types, taxonomies, options pages) when ACF is active, Ultimate Addons for Elementor (UAE) tools (widgets, templates, layout building, and settings) when UAE is active, and Gravity Forms tools (forms, entries, notifications, and confirmations) when Gravity Forms is active.

Built and maintained by the WebSensePro team. For documentation, setup guides, and connection help, visit the plugin home at freewordpressmcp.com.

Video tutorial

Key features

• Built-in MCP server over a single REST endpoint (Streamable HTTP, JSON-RPC 2.0) — no external dependency.
• Per-ability on/off toggles in MCP > Settings; write abilities are off by default.
• Two authentication methods: WordPress Application Passwords (HTTP Basic) or a plugin-generated API key (Authorization: Bearer or X-WSP-MCP-API-Key).
• Capability checks on every tool — an AI client can only do what its authenticated user can do.
• Full Audit Log in MCP > Audit Log: every tool call is recorded (tool name, time, user, IP, success/denied/error) in your own database — self-hosted, no external service, visible to administrators only.
• Optional Yoast SEO and Elementor tools, shown only when those plugins are active.

Complete tools list

Every tool is individually toggleable in MCP > Settings, and all write tools are off by default.

Core WordPress

• Posts — read, create, update, delete
• Pages — read, create, update, delete
• Categories — list, create, update, delete
• Tags — list, create, update, delete
• Comments — read, approve, and delete
• Media — read the media library
• Users — read user data
• Site info — read general site details
• Plugins — list active plugins
• Search — search across site content

Yoast SEO (requires Yoast SEO)

• Read SEO title, meta description, and focus keyphrase
• Update SEO title, meta description, and focus keyphrase

Elementor (requires Elementor)

• Pages — list pages/posts built with Elementor
• Page structure — read the full element tree of a page
• Elements — get a single element’s settings, or find elements by widget type or content
• Templates — list saved templates from the library
• Editing — add widgets, add layout containers/sections, update element settings, and remove elements
• Code-bearing widget types (HTML, Shortcode, Code) are rejected and code-bearing settings (Custom CSS, Custom Attributes) are stripped; all text settings are sanitized with wp_kses_post()

WooCommerce (requires WooCommerce — financial and PII tools require the manage_woocommerce capability)

• Products — list, get, create, update
• Product variations — create
• Orders — list, update status
• Refunds — process refunds
• Coupons — create, list
• Order notes — add order notes
• Customers — read customer data
• Sales report — read sales reporting
• Low-stock alerts — read low-stock products
• Reviews — moderate product reviews

Read the full description on the official page →