Cascadia Web Services

MountDev AI MCP Connector is a WordPress MCP plugin that lets you connect ChatGPT, Claude, and other MCP-compatible AI clients directly to your WordPress site. Use it to give AI agents secure, controlled access to WordPress posts, pages, media, comments, users, and other site resources through the Model Context Protocol.
If you are searching for a way to connect ChatGPT to WordPress, connect Claude to WordPress, or run AI agents on WordPress with secure authentication and permission controls, this plugin provides a practical WordPress AI connector for content management, publishing workflows, media handling, and site updates.
Built for agencies, developers, publishers, and teams using AI to manage WordPress, MountDev AI MCP Connector supports OAuth 2.0 for ChatGPT, WordPress Application Passwords for Claude Desktop, Cursor, and Windsurf, and profile-based access controls to help keep WordPress automation secure.
WooCommerce Support: Manage your online store with 74 WooCommerce-specific tools for products, orders, coupons, shipping, tax rates, webhooks, payment gateways, and reports. Control inventory, process refunds, manage product variations, and automate store operations through AI agents.
Yoast SEO Support: Optimize your content with 29 Yoast SEO tools for meta data management, content analysis, readability scoring, keyword optimization, schema markup, sitemap status, and robot directives. Premium features include redirect management and multiple keyword analysis.
Rank Math SEO Support: Manage search engine optimization with 78 Rank Math SEO tools for post meta, schema markup, redirects, 404 monitoring, analytics, and Search Console data. Pro features include Schema Templates, Keyword Tracking, Link Genius, and News/Video Sitemaps.
Contact Form 7 Support: Manage your contact forms with 20 Contact Form 7 tools for creating, editing, and duplicating forms, updating mail templates and response messages, configuring additional settings, and managing global plugin options and integrations.
Elementor Support: Build and manage pages with 36 Elementor FREE tools covering page and document management, full elements-tree read and write, global colors and typography, site settings, local template library, plugin configuration, feature experiments, and CSS cache management. Elementor Pro extends this with 35 additional tools for form submissions, theme builder templates, popups, global widgets, dynamic tags, loop templates, notes, custom fonts and icons, WooCommerce settings, element permissions, and role manager.
<h4>Features</h4>
<ul>
<li>MCP Server Implementation – Full JSON-RPC 2.0 endpoint for MCP protocol</li>
<li>OAuth 2.0 Support – Native OAuth authentication for ChatGPT with secure credential generation</li>
<li>WordPress Application Passwords – Secure Basic Auth for Claude Desktop, Cursor, Windsurf</li>
<li>Profile-Based Access Control – Predefined profiles for flexible tool management</li>
<li>347 Tools Across 6 Plugins – 75 WordPress core + 74 WooCommerce + 29 Yoast SEO + 78 Rank Math SEO + 20 Contact Form 7 + 71 Elementor (36 FREE + 35 Pro)</li>
<li>74 WooCommerce Tools – Products, orders, coupons, shipping, tax, and more (requires WooCommerce plugin)</li>
<li>29 Yoast SEO Tools – Meta data, analysis, schema, redirects, and more (requires Yoast SEO plugin)</li>
<li>78 Rank Math SEO Tools – Post SEO, schema, redirects, analytics, and more (requires Rank Math SEO plugin)</li>
<li>20 Contact Form 7 Tools – Form management, mail templates, messages, and more (requires Contact Form 7 plugin)</li>
<li>71 Elementor Tools – 36 FREE tools for page editing, elements tree, global design system, template library, and maintenance; 35 additional Pro tools for form submissions, theme builder, popups, global widgets, dynamic tags, loop templates, notes, custom fonts/icons, WooCommerce settings, element permissions, and role manager (36 require Elementor; all 71 require Elementor + Elementor Pro)</li>
<li>Zero External Dependencies – Pure WordPress implementation</li>
<li>AES-256-CBC Encryption – Client secrets stored securely</li>
</ul>
<h4>Supported Clients</h4>
<ul>
<li>ChatGPT – OAuth 2.0 authentication with Client ID/Secret</li>
<li>Claude Desktop – Basic Auth with Application Passwords</li>
<li>Cursor – Basic Auth with Application Passwords</li>
<li>Windsurf – Basic Auth with Application Passwords</li>
<li>Any MCP-compatible client supporting OAuth 2.0 or Basic Auth</li>
</ul>
<h4>Supported Plugins</h4>
WordPress Core (75 tools) – Complete WordPress management including posts, pages, media, comments, users, taxonomies, site settings, menus, plugins, and themes.
Yoast SEO (29 tools) – Full integration with Yoast SEO for search engine optimization: 
* SEO Meta Data – Get and update SEO titles, meta descriptions, focus keywords, and canonical URLs 
* Content Analysis – Readability scores, keyword density, internal linking suggestions 
* Social Meta – Open Graph and Twitter Card management 
* Schema Markup – View and update schema.org page and article types 
* Sitemap Status – Check XML sitemap configuration and URLs 
* Premium Features – Redirect management and multiple keyword analysis (requires Yoast SEO Premium)
WooCommerce (74 tools) – Full integration with WooCommerce for managing your online store: 
* Products & Inventory – Create, update, manage variations, stock levels, categories, tags, brands, and attributes 
* Orders & Fulfillment – Process orders, refunds, order notes, and customer management 
* Store Operations – Coupons, shipping zones, tax rates, payment gateways, webhooks, and sales reports
Rank Math SEO (78 tools) – Full integration with Rank Math SEO for search engine optimization: 
* Post SEO Meta – Get and update SEO titles, descriptions, focus keywords, canonical URLs, and robots directives 
* Schema Markup – View and manage structured data including FAQ, HowTo, and article schemas 
* Redirects & 404s – Create and manage redirects, monitor and clear 404 error logs 
* Analytics – Site analytics, Search Console data, winning/losing posts, and Content AI scores 
* Pro Features – Schema Templates, Keyword Tracking, Link Genius, News/Video Sitemaps, and Image SEO (requires Rank Math Pro)
Contact Form 7 (20 tools) – Full integration with Contact Form 7 for form management: 
* Form Management – List, create, update, duplicate, and delete contact forms 
* Mail Templates – Get and update primary and auto-responder email templates 
* Response Messages – Get and update form submission response message strings 
* Advanced Config – Additional settings, mail tag discovery, SWV validation schema, and config validation 
* Plugin Settings – Global CF7 options and integration service status (Akismet, reCAPTCHA, Turnstile, etc.)
Elementor FREE (36 tools) – Full integration with Elementor FREE for page builder management: 
* Pages & Documents – List, get, create, and delete Elementor pages; check document types and build status 
* Page Editor – Read and write the full elements tree; add, update, duplicate, move, and remove elements 
* Global Design System – Read and write global colors and typography; update FREE site settings 
* Template Library – List, get, create, delete, and export local templates 
* Backend Settings & Maintenance – Read/write plugin settings, manage feature experiments, regenerate CSS, clear cache
Elementor Pro (35 tools) – Extended integration with Elementor Pro features (requires Elementor + Elementor Pro): 
* Form Submissions – List forms, list/get/update/delete form submissions 
* Theme Builder – List and create theme templates; get and save display conditions 
* Popups – List, get, create, and delete popup templates 
* Custom Code – List, get, create, update, and delete custom code snippets 
* Global Widgets – List, get, and create global widgets 
* Dynamic Tags – List available dynamic tag categories and tags 
* Loop Templates – List and create loop item templates 
* Notes – List, create, and delete page/element notes 
* Custom Fonts & Icons – List custom font families and custom icon sets 
* WooCommerce Settings – Get and update Elementor Pro WooCommerce integration settings 
* Element Permissions – Get and update per-role element display permissions 
* Role Manager – Get and update Elementor Pro role manager capabilities
All tools respect WordPress user capabilities and permissions. Visit the plugin’s Profiles tab to see the complete tool list and create custom access profiles.
<h3>External Services</h3>
This plugin includes a Node.js bridge script that connects MCP clients (Claude Desktop, Cursor, Windsurf, etc.) to your WordPress site’s REST API endpoints. The bridge facilitates communication between the MCP client and your WordPress installation.
What the service is and what it is used for: 
The wordpress-mcp-bridge is a Node.js script that acts as a communication bridge between MCP-compatible AI clients and your WordPress site’s REST API. It translates MCP protocol requests into WordPress REST API calls and returns the responses to the AI client.
What data is sent and when: 
When you use an MCP client (like Claude Desktop) with this plugin, the bridge sends the following data to your WordPress site’s REST API endpoints: 
* Your WordPress username and Application Password (for authentication) 
* MCP protocol requests (tool calls, resource requests, prompts) 
* Content data when creating or updating WordPress posts, pages, media, etc. 
* This data is sent every time you interact with WordPress through the MCP client
Where the data is sent: 
All data is sent to YOUR OWN WordPress site’s REST API endpoints at: 
* <code>https://yoursite.com/wp-json/mountdev-ai-mcp-connector/v1/messages</code> (main MCP endpoint) 
* <code>https://yoursite.com/wp-json/mountdev-ai-mcp-connector/v1/oauth/*</code> (OAuth endpoints for ChatGPT)
Important notes: 
* No data is sent to any third-party external services 
* All communication is between the MCP client and your own WordPress installation 
* Your WordPress credentials and data remain on your own server 
* The plugin does not transmit any data to external services operated by the plugin author or any third parties
<h3>Security</h3>
<ul>
<li>OAuth 2.0 with PKCE – Enhanced authorization flow for ChatGPT</li>
<li>AES-256-CBC Encryption – Client secrets encrypted at rest</li>
<li>Token Expiration – Access tokens expire after 1 hour</li>
<li>Refresh Tokens – Valid for 30 days with automatic renewal</li>
<li>Authorization Codes – Expire after 10 minutes</li>
<li>WordPress Application Passwords – Secure Basic Auth for other clients</li>
<li>Admin-Only OAuth – Only administrators can authorize ChatGPT connections</li>
<li>Profile-Based Restrictions – Control which tools are available</li>
<li>Capability Checks – All operations respect WordPress user permissions</li>
<li>No Privilege Escalation – Users cannot perform actions beyond their role</li>
</ul>
<h3>Tested With</h3>
The following plugin versions were active during testing of the current release (1.5.0):
<ul>
<li>WordPress 7.0</li>
<li>WooCommerce 10.7.0</li>
<li>Yoast SEO 27.6</li>
<li>Rank Math SEO 1.0.270</li>
<li>Rank Math Pro 3.0.111</li>
<li>Contact Form 7 6.1.6</li>
<li>Elementor 4.0.9</li>
<li>Elementor Pro 4.0.4</li>
</ul>
<h3>License</h3>
This plugin is licensed under the GPL v3 or later.
See https://www.gnu.org/licenses/gpl-3.0.en.html for details.

MountDev AI MCP Connector

Transform your WordPress site into an AI-powered Model Context Protocol (MCP) server. Exposes WordPress functionality for AI agents.

Deepak Gupta

MCP Manager uses the standard <code>@automattic/mcp-wordpress-remote@latest</code> package with WordPress Application Passwords for the default remote flow. It also includes an optional experimental direct Claude Connectors mode backed by a WordPress-hosted OAuth approval flow.
MCP Manager is a WordPress plugin that enables seamless integration with Model Context Protocol (MCP) servers, allowing AI assistants and code editors to safely access your WordPress instance through secure application passwords.
<h4>Key Features</h4>
<ul>
<li>
Multi-Client Support: Configure MCP for:
<ul>
<li>VS Code with Copilot</li>
<li>Claude Desktop App</li>
<li>GitHub Copilot & Codex</li>
<li>OpenAI ChatGPT Codex</li>
<li>Custom MCP Clients</li>
</ul>
</li>
<li>
Secure Authentication: Uses WordPress native Application Passwords system
<ul>
<li>One-click password generation</li>
<li>Secure credential management</li>
<li>Password revocation support</li>
<li>Per-server Access Control still enforced after authentication</li>
</ul>
</li>
<li>
Easy Configuration:
<ul>
<li>Copy-paste ready JSON configurations</li>
<li>Per-provider configuration file paths</li>
<li>Automatic top-level key detection</li>
</ul>
</li>
<li>
Format #1 Standard: Uses the Automattic-recommended MCP configuration format
<ul>
<li>npx command execution</li>
<li>@automattic/mcp-wordpress-remote@latest package</li>
<li>Full environment variable support</li>
</ul>
</li>
</ul>
<h4>How It Works</h4>
<ol>
<li>Navigate to Settings → MCP Manager</li>
<li>Select your MCP client (VS Code, Claude, GitHub Copilot, ChatGPT, or Custom)</li>
<li>Click “Generate New Application Password”</li>
<li>Copy the ready-to-use JSON configuration</li>
<li>Paste into your client’s configuration file</li>
<li>Restart your MCP client</li>
</ol>
All application passwords are managed through WordPress’s native Application Passwords system and appear in your profile under Account Management.
<h4>CLI Connection and Authorization Flow</h4>
MCP Manager also supports a browser-assisted CLI connection flow for local MCP clients.
Typical command:
<pre><code>npx -y @acrossai/mcp-manager --siteurl=https://example.com --server=default-mcp-server
</code></pre>
Flow summary:
<ol>
<li>The CLI checks <code>/wp-json/acrossai-mcp-manager/v1/health</code></li>
<li>The CLI starts auth with <code>/wp-json/acrossai-mcp-manager/v1/auth/start</code></li>
<li>WordPress returns an <code>auth_code</code> and frontend <code>auth_url</code></li>
<li>The CLI opens the frontend approval page at <code>/acrossai-mcp-manager/</code></li>
<li>If needed, the user signs in through normal WordPress login</li>
<li>The signed-in user approves access in the browser</li>
<li>The CLI polls <code>/auth/status</code> until the request is approved</li>
<li>The CLI fetches the approved user’s accessible servers from <code>/servers</code></li>
<li>The CLI exchanges the approved code at <code>/auth/exchange</code></li>
<li>WordPress creates a one-time Application Password and the CLI writes the MCP client config</li>
</ol>
Terminology:
<ul>
<li>Sign in / Log in = WordPress account authentication</li>
<li>Connect = starting the CLI-to-site linking flow</li>
<li>Authorize / Approve access = granting the CLI permission in the browser</li>
</ul>
Important notes:
<ul>
<li>The frontend authorization page must never be cached</li>
<li>Auth codes are single-use</li>
<li><code>/servers</code> and <code>/auth/exchange</code> respect per-server access control</li>
<li>User-facing copy should say CLI Connections rather than npm Login</li>
<li>Generated remote MCP configs use Application Passwords and explicitly disable OAuth discovery in <code>@automattic/mcp-wordpress-remote</code></li>
</ul>
<h4>Experimental Direct Claude Connectors</h4>
An optional Claude Connectors Screen (Experimental) setting can enable a direct OAuth flow for Claude’s hosted connectors.
When the global feature toggle is enabled and a specific server is configured in its Claude Connector tab, the plugin exposes:
<ul>
<li><code>/.well-known/oauth-authorization-server</code></li>
<li><code>/.well-known/oauth-protected-resource?resource=<mcp-url></code></li>
<li><code>/acrossai-mcp-connectors/oauth/authorize/</code></li>
<li><code>/wp-json/acrossai-mcp-manager/v1/connector/oauth/token</code></li>
</ul>
Important notes:
<ul>
<li>Disabled by default</li>
<li>The Application Password flow remains available and supported</li>
<li>The master experimental toggle is global, but OAuth client settings are stored per server</li>
<li>Direct connector approval signs Claude in as a WordPress user</li>
<li>Per-server Access Control still applies to every MCP request after OAuth</li>
<li>Public HTTPS is recommended for hosted connector usage</li>
</ul>
<h4>Provider Configuration Paths</h4>
<ul>
<li>VS Code: ~/.config/Code/User/globalStorage/Copilot.copilot-chat/mcp.json (top-level key: “servers”)</li>
<li>Claude: ~/Library/Application Support/Claude/claude_desktop_config.json (top-level key: “mcpServers”)</li>
<li>GitHub Copilot: ~/.gh-copilot/config.json (top-level key: “servers”)</li>
<li>OpenAI ChatGPT: ~/.config/chatgpt/config.json (top-level key: “servers”)</li>
<li>Custom: ./your-project/.mcp/config.json (top-level key: configurable)</li>
</ul>
<h4>Requirements</h4>
<ul>
<li>WordPress 5.9 or higher</li>
<li>PHP 7.4 or higher</li>
<li>WordPress Application Passwords support (built-in since WP 5.6)</li>
</ul>
<h3>Support & Contribution</h3>
For issues, feature requests, or contributions, visit the plugin repository.
Questions? Check the FAQ section or look for documentation in the plugin settings page.
<h3>Development</h3>
This plugin follows WordPress coding standards and best practices: 
– PHP 7.4+ compatible 
– Full object-oriented architecture 
– Secure nonce verification 
– Proper capability checks 
– Sanitized input validation 
– Escaped output
<h3>License</h3>
This plugin is licensed under the GPL-2.0-or-later license. See LICENSE file for details.
<h3>Credits</h3>
MCP Manager is built with: 
– WordPress native APIs 
– Automattic’s MCP WordPress Remote package 
– WordPress Application Passwords system
Developed with ❤️ for the WordPress community.

AcrossAI MCP Manager

Connect WordPress to MCP clients like VS Code, Claude, and Copilot using secure application passwords.

MountDev AI MCP Connector vs AcrossAI MCP Manager