Scoped, per-agent application passwords for AI agents, MCP clients, and automation tools.

George Stephanis

Brandon Kraft

Kaspars

Arslan Kalwar

Derek Herman

Application Passwords

Creates unique passwords for applications to authenticate users without revealing their main passwords.

Application Passwords Manager

This plugin will disable/enable WordPress 5.6 Application Passwords.

Paul

Mandate App Security

WordPress Application Passwords carry the full access of their user. Mandate App Security adds per-credential policies to limit what each one may do.

Joe Boydston

Droyal

BotCreds Agent Access gives your AI agent, MCP client, or automation tool a secure, scoped credential to interact with your site — no code required.
Whether you’re connecting Claude, ChatGPT, a custom MCP server, or an OpenClaw agent, BotCreds gives you a one-click setup wizard that generates a properly scoped WordPress Application Password and logs every action the agent takes.
Why BotCreds?
Most AI agent setups require digging into wp-config, creating users manually, or sharing admin credentials. BotCreds removes all of that. Install, click, copy, paste — your agent is connected in under a minute.
Features:
<ul>
<li>One-click connection setup under Settings → BotCreds</li>
<li>Generates a secure, scoped Application Password for your AI agent or MCP client</li>
<li>Works with any agent that supports the WordPress REST API: Claude, ChatGPT, OpenClaw, n8n, Zapier, custom MCP servers, and more</li>
<li>User-level and site-level logging of agent actions — see exactly what your agent did and when</li>
<li>Displays credentials in ready-to-paste format (table and JSON)</li>
<li>Shows connection status, creation date, and last used date</li>
<li>One-click revoke with confirmation</li>
<li>Clean, modern admin UI using native WordPress styles</li>
<li>Proper security: nonces, capability checks, password shown only once</li>
</ul>
Compatibility:
<ul>
<li>Works with the Model Context Protocol (MCP)</li>
<li>Compatible with all major AI agent frameworks</li>
<li>No third-party services or accounts required — everything stays on your site</li>
</ul>

Alternatives to BotCreds Agent Access

Top alternatives