jonathansblog

borncreative

Born Creative MCP Server transforms your WordPress site into a fully authenticated remote MCP (Model Context Protocol) endpoint. It allows AI assistants — such as Claude.ai — to securely connect to your site and create, update, schedule, and manage posts, pages, media, and taxonomy, all via a standards-compliant OAuth 2.1 and JSON-RPC 2.0 interface.
Unlike local stdio-based MCP servers, this plugin exposes a remote HTTP transport, meaning your AI tools can connect to your live WordPress site without needing direct server access.
How it works
The plugin registers a set of REST API endpoints that implement the MCP streamable HTTP transport. Clients authenticate using OAuth 2.1 with PKCE (Proof Key for Code Exchange), receive a bearer access token, and then use that token to call any of the 18 built-in MCP tools.
MCP Tools included
<ul>
<li>Posts — list, get, create, update, delete, search</li>
<li>Pages — list, get, create, update, delete</li>
<li>Media — list, get, upload from URL, upload base64-encoded, delete</li>
<li>Categories — list, create, update</li>
<li>Tags — list, create</li>
<li>Yoast SEO (optional) — get and update Yoast SEO metadata (requires Yoast SEO plugin)</li>
</ul>
OAuth 2.1 Authentication
<ul>
<li>Dynamic client registration (RFC 7591)</li>
<li>Authorization code flow with PKCE</li>
<li>Access token and refresh token lifecycle management</li>
<li>Token rotation and revocation</li>
<li>Tokens are SHA-256 hashed — plaintext tokens are never stored</li>
</ul>
Advanced content features
<ul>
<li>Schedule posts by setting a future publish date</li>
<li>Set featured images</li>
<li>Add custom post meta</li>
<li>Sideload media from external URLs</li>
<li>Full category and tag assignment</li>
</ul>
Yoast SEO integration
If the Yoast SEO plugin is active, two additional MCP tools are automatically registered: <code>yoast_get_seo</code> and <code>yoast_update_seo</code>, allowing AI assistants to read and write SEO titles, descriptions, and focus keywords.

Born Creative MCP Server

A remote MCP server over HTTP with OAuth 2.1, letting AI assistants like Claude securely create, update, and schedule WordPress content.

Mehul Gohil

Aculect AI Companion is a secure MCP connector for WordPress. It lets approved AI assistants such as ChatGPT, Claude, Codex, and OpenAI-compatible tools work with your WordPress content, media, comments, and site information through permission-aware workflows.
Instead of switching between WordPress admin screens, you can ask your AI assistant in plain English to draft a post, update a page, review comments, upload media, inspect safe site details, or prepare long-form content using WordPress blocks.
WordPress remains the source of truth. Aculect AI Companion checks the connected WordPress user’s permissions before every action, lets administrators choose which abilities are available, and keeps risky write actions behind configurable controls.
<h4>What is MCP for WordPress?</h4>
MCP stands for Model Context Protocol. In Aculect AI Companion, MCP gives supported AI assistants a structured, permission-controlled way to request WordPress actions. The assistant does not receive direct database access. It can only use the enabled tools exposed by WordPress and approved by an administrator.
<h4>Why use Aculect AI Companion?</h4>
<ul>
<li>Connect WordPress to ChatGPT, Claude, Codex, and OpenAI-compatible MCP clients</li>
<li>Create, update, and organize WordPress content through controlled AI workflows</li>
<li>Work with posts, pages, custom post types, categories, tags, comments, and media</li>
<li>Use block-aware content workflows instead of raw custom HTML</li>
<li>Review AI activity with sanitized audit logs</li>
<li>Control access globally, by connection, by role, and by WordPress user permissions</li>
<li>Use diagnostics to verify OAuth, MCP, endpoint, and environment readiness</li>
</ul>
Setup is designed to be simple:
<ol>
<li>Copy your connection URL from AI Companion > Connect.</li>
<li>Open your AI tool and add a new connector.</li>
<li>Paste the URL when prompted.</li>
<li>Approve the connection on the screen that appears.</li>
</ol>
After approval, Aculect AI Companion checks the connected WordPress user’s permissions before every action. You can also choose exactly what your AI assistant can do and disconnect assistants at any time.
<h4>Features</h4>
<ul>
<li>Create, edit, and publish posts, pages, and supported custom post types</li>
<li>Plan and draft long-form block content for WordPress</li>
<li>Manage categories, tags, custom taxonomies, and content groups</li>
<li>Moderate, reply to, and bulk-manage comments</li>
<li>Upload, list, update, attach, detach, and safely rename media</li>
<li>View safe site settings, active plugins, active themes, and diagnostics</li>
<li>Connect, pause, review, and disconnect AI assistants</li>
<li>Control which MCP abilities each assistant can use</li>
</ul>
<h4>Supported AI Tools</h4>
Aculect AI Companion includes setup guidance for popular AI assistants and MCP clients:
<ul>
<li>ChatGPT app with Developer Mode connectors</li>
<li>OpenAI API integrations that support remote connectors</li>
<li>Claude app, Claude Desktop, Claude Cowork, and Claude mobile</li>
<li>Claude Code</li>
<li>Claude API integrations that support remote connectors</li>
</ul>
Your AI tool must be able to reach your WordPress site over HTTPS to complete OAuth approval and send MCP requests.
<h4>Supported Abilities</h4>
Admins can enable or disable these abilities from AI Companion > Abilities after the first assistant connection is active.
Long-form content workflows:
<ul>
<li>Prepare a post outline, section plan, taxonomy recommendations, media recommendations, and SEO recommendations</li>
<li>Create a draft from validated serialized WordPress block content</li>
<li>Update an existing post with block-safe content workflows</li>
<li>Update Rank Math SEO title, description, and focus keywords when Rank Math is active</li>
</ul>
Content:
<ul>
<li>List readable content types, including custom post types</li>
<li>List posts, pages, and custom content items with pagination</li>
<li>Read one content item by ID</li>
<li>Create a post, page, or custom content item with optional featured image, author, and taxonomy assignments</li>
<li>Update title, content, excerpt, slug, status, featured image, author, or taxonomy assignments for an existing item</li>
<li>Update SEO title, SEO description, and focus keywords for supported SEO plugins</li>
</ul>
Content groups:
<ul>
<li>List available categories, tags, and custom content groups</li>
<li>List terms for a supported taxonomy with pagination</li>
<li>Create a category, tag, or custom content group</li>
<li>Update a category, tag, or custom content group</li>
<li>Assign or clear an image for supported taxonomy terms</li>
</ul>
Comments:
<ul>
<li>List comments for review with pagination</li>
<li>Read one comment by ID</li>
<li>Reply to a comment as the connected WordPress user</li>
<li>Moderate comment content or status</li>
<li>Bulk moderate multiple comments</li>
</ul>
Media:
<ul>
<li>List media library attachments with pagination</li>
<li>Read, update, trash, and safely rename media items</li>
<li>Upload media from a public URL with server-side request checks</li>
<li>Attach media to posts or detach media from posts</li>
</ul>
Site information:
<ul>
<li>View safe, non-secret site settings</li>
<li>View WordPress version, PHP version, active theme, and basic site metadata</li>
<li>List installed plugins and active state for users who can manage plugins</li>
<li>List installed themes and active state for users who can manage themes</li>
</ul>
WordPress abilities:
<ul>
<li>Discover supported public WordPress abilities registered by WordPress and plugins</li>
<li>Inspect one supported public WordPress ability</li>
<li>Run a supported public WordPress ability using the connected user’s permissions</li>
</ul>
<h3>Third Party Services</h3>
Aculect AI Companion does not send site data to an external service on activation, page load, cron, or without a site administrator connecting an AI assistant.
When a site administrator copies the connection URL into an external AI assistant and approves the connection screen in WordPress, that assistant can request the enabled abilities. Depending on the enabled abilities and the connected WordPress user’s permissions, requested data may include post titles, post content, excerpts, slugs, statuses, authors, dates, permalinks, category and tag names, media metadata, comments, and safe site settings such as site name, description, URLs, locale, timezone, date format, time format, permalink structure, and active theme name.
The external service that receives this data is the AI assistant selected and configured by the administrator. Aculect AI Companion’s built-in setup UI includes links for:
<ul>
<li>ChatGPT by OpenAI: https://chatgpt.com/, terms at https://openai.com/policies/terms-of-use/, and privacy policy at https://openai.com/policies/row-privacy-policy/</li>
<li>Claude by Anthropic: https://claude.ai/, terms at https://www.anthropic.com/legal/consumer-terms, and privacy policy at https://www.anthropic.com/legal/privacy</li>
</ul>
Administrators should review the terms and privacy policy for the AI assistant they connect. Aculect AI Companion controls the WordPress-side approval and permissions checks; it does not control how a connected external assistant processes data after the administrator authorizes access.
<h3>Development</h3>
The production package ships built assets and Composer dependencies. Development manifests such as <code>composer.json</code>, <code>composer.lock</code>, and <code>package.json</code> are intentionally excluded from release ZIP files. Generated files under <code>build/</code> are not committed to the source repository; release automation generates them before packaging.
For source code, build tooling, and exact dependency manifests, use the public GitHub repository:
https://github.com/mehul0810/aculect-ai-companion
Contributing guidelines:
https://github.com/mehul0810/aculect-ai-companion/blob/main/CONTRIBUTING.md
Security policy:
https://github.com/mehul0810/aculect-ai-companion/security/policy
From the repository checkout, use the Node.js version in <code>.nvmrc</code> and rebuild assets with:
<pre><code>npm ci
npm run build
</code></pre>
Composer dependencies for production releases are installed with:
<pre><code>composer install --no-dev --prefer-dist --optimize-autoloader
</code></pre>

Aculect AI Companion

Use ChatGPT, Claude, Codex, and other MCP AI assistants to manage WordPress content, media, comments, and site workflows.

Born Creative MCP Server vs Aculect AI Companion