Cascadia Web Services

MountDev AI MCP Connector is a WordPress MCP plugin that lets you connect ChatGPT, Claude, and other MCP-compatible AI clients directly to your WordPress site. Use it to give AI agents secure, controlled access to WordPress posts, pages, media, comments, users, and other site resources through the Model Context Protocol.
If you are searching for a way to connect ChatGPT to WordPress, connect Claude to WordPress, or run AI agents on WordPress with secure authentication and permission controls, this plugin provides a practical WordPress AI connector for content management, publishing workflows, media handling, and site updates.
Built for agencies, developers, publishers, and teams using AI to manage WordPress, MountDev AI MCP Connector supports OAuth 2.0 for ChatGPT, WordPress Application Passwords for Claude Desktop, Cursor, and Windsurf, and profile-based access controls to help keep WordPress automation secure.
WooCommerce Support: Manage your online store with 74 WooCommerce-specific tools for products, orders, coupons, shipping, tax rates, webhooks, payment gateways, and reports. Control inventory, process refunds, manage product variations, and automate store operations through AI agents.
<h4>Features</h4>
<ul>
<li>MCP Server Implementation – Full JSON-RPC 2.0 endpoint for MCP protocol</li>
<li>OAuth 2.0 Support – Native OAuth authentication for ChatGPT with secure credential generation</li>
<li>WordPress Application Passwords – Secure Basic Auth for Claude Desktop, Cursor, Windsurf</li>
<li>Profile-Based Access Control – Predefined profiles for flexible tool management</li>
<li>149 Essential Tools – 75 WordPress core + 74 WooCommerce tools</li>
<li>74 WooCommerce Tools – Products, orders, coupons, shipping, tax, and more (requires WooCommerce plugin)</li>
<li>Zero External Dependencies – Pure WordPress implementation</li>
<li>AES-256-CBC Encryption – Client secrets stored securely</li>
</ul>
<h4>Supported Clients</h4>
<ul>
<li>ChatGPT – OAuth 2.0 authentication with Client ID/Secret</li>
<li>Claude Desktop – Basic Auth with Application Passwords</li>
<li>Cursor – Basic Auth with Application Passwords</li>
<li>Windsurf – Basic Auth with Application Passwords</li>
<li>Any MCP-compatible client supporting OAuth 2.0 or Basic Auth</li>
</ul>
<h4>Supported Plugins</h4>
WordPress Core (75 tools) – Complete WordPress management including posts, pages, media, comments, users, taxonomies, site settings, menus, plugins, and themes.
WooCommerce (74 tools) – Full integration with WooCommerce for managing your online store: 
* Products & Inventory – Create, update, manage variations, stock levels, categories, tags, brands, and attributes 
* Orders & Fulfillment – Process orders, refunds, order notes, and customer management 
* Store Operations – Coupons, shipping zones, tax rates, payment gateways, webhooks, and sales reports
All tools respect WordPress user capabilities and permissions. Visit the plugin’s Profiles tab to see the complete tool list and create custom access profiles.
<h3>External Services</h3>
This plugin includes a Node.js bridge script that connects MCP clients (Claude Desktop, Cursor, Windsurf, etc.) to your WordPress site’s REST API endpoints. The bridge facilitates communication between the MCP client and your WordPress installation.
What the service is and what it is used for: 
The wordpress-mcp-bridge is a Node.js script that acts as a communication bridge between MCP-compatible AI clients and your WordPress site’s REST API. It translates MCP protocol requests into WordPress REST API calls and returns the responses to the AI client.
What data is sent and when: 
When you use an MCP client (like Claude Desktop) with this plugin, the bridge sends the following data to your WordPress site’s REST API endpoints: 
* Your WordPress username and Application Password (for authentication) 
* MCP protocol requests (tool calls, resource requests, prompts) 
* Content data when creating or updating WordPress posts, pages, media, etc. 
* This data is sent every time you interact with WordPress through the MCP client
Where the data is sent: 
All data is sent to YOUR OWN WordPress site’s REST API endpoints at: 
* <code>https://yoursite.com/wp-json/mountdev-ai-mcp-connector/v1/messages</code> (main MCP endpoint) 
* <code>https://yoursite.com/wp-json/mountdev-ai-mcp-connector/v1/oauth/*</code> (OAuth endpoints for ChatGPT)
Important notes: 
* No data is sent to any third-party external services 
* All communication is between the MCP client and your own WordPress installation 
* Your WordPress credentials and data remain on your own server 
* The plugin does not transmit any data to external services operated by the plugin author or any third parties
<h3>Security</h3>
<ul>
<li>OAuth 2.0 with PKCE – Enhanced authorization flow for ChatGPT</li>
<li>AES-256-CBC Encryption – Client secrets encrypted at rest</li>
<li>Token Expiration – Access tokens expire after 1 hour</li>
<li>Refresh Tokens – Valid for 30 days with automatic renewal</li>
<li>Authorization Codes – Expire after 10 minutes</li>
<li>WordPress Application Passwords – Secure Basic Auth for other clients</li>
<li>Admin-Only OAuth – Only administrators can authorize ChatGPT connections</li>
<li>Profile-Based Restrictions – Control which tools are available</li>
<li>Capability Checks – All operations respect WordPress user permissions</li>
<li>No Privilege Escalation – Users cannot perform actions beyond their role</li>
</ul>
<h3>License</h3>
This plugin is licensed under the GPL v3 or later.
See https://www.gnu.org/licenses/gpl-3.0.en.html for details.

MountDev AI MCP Connector

Transform your WordPress site into an AI-powered Model Context Protocol (MCP) server. Exposes WordPress functionality for AI agents.

fabiomontenegro1987

Enable Abilities for MCP gives you full control over which WordPress Abilities are available to AI assistants through the MCP (Model Context Protocol) Adapter.
WordPress 6.9 introduced the Abilities API, allowing external tools to discover and execute actions on your site. This plugin extends that functionality by registering a comprehensive set of content management abilities and providing a simple admin interface to toggle each one on or off.
<h4>Features</h4>
<ul>
<li>40 abilities organized in 8 categories: Core, Read, Write, SEO, Utility, Custom Post Types, WooCommerce, and The Events Calendar</li>
<li>WooCommerce integration — dedicated abilities to manage products, orders, and customers using the native WooCommerce API (HPOS-compatible, formally declared)</li>
<li>The Events Calendar integration — list, get, create, and update events with venue, organizer, and date filters</li>
<li>Admin dashboard with toggle switches for each ability</li>
<li>Per-ability control — expose only what you need</li>
<li>Secure by design — proper capability checks, input sanitization, and per-post permission validation</li>
<li>WPCS compliant — fully passes WordPress Coding Standards (phpcs)</li>
<li>MCP-ready — all abilities include <code>show_in_rest</code> and <code>mcp.public</code> metadata</li>
</ul>
<h4>Available Abilities</h4>
Read (safe, query-only):
<ul>
<li>Get posts with filters (status, category, tag, search)</li>
<li>Get single post details (content, SEO meta, featured image)</li>
<li>Get categories, tags, pages, comments, media, and users</li>
</ul>
Write (create & modify):
<ul>
<li>Create, update, and delete posts</li>
<li>Create categories and tags</li>
<li>Create pages</li>
<li>Moderate comments</li>
<li>Reply to comments as the authenticated user</li>
<li>Upload images from external URLs to the media library (with optional auto-assign as featured image)</li>
</ul>
SEO — Rank Math:
<ul>
<li>Get full Rank Math metadata for any post/page (title, description, keywords, robots, Open Graph, SEO score)</li>
<li>Update Rank Math metadata: SEO title, description, focus keyword, canonical URL, robots, Open Graph, primary category, pillar content</li>
</ul>
Custom Post Types:
<ul>
<li>List all registered custom post types with configuration and taxonomies</li>
<li>Get items from any CPT with filtering, search, and taxonomy queries</li>
<li>Get full details of a CPT item including all meta fields (WooCommerce, ACF, JetEngine, etc.)</li>
<li>Create, update, and delete CPT items with taxonomy and meta field support</li>
<li>Get CPT taxonomies with their terms</li>
<li>Assign taxonomy terms to CPT items</li>
</ul>
WooCommerce:
<ul>
<li>List products with price, SKU, stock status, categories, and type</li>
<li>Get full product detail including gallery, attributes, and variations</li>
<li>Update product price, sale price, stock quantity, and status</li>
<li>List orders with customer, total, status, and date (HPOS-compatible)</li>
<li>Get full order detail: line items, billing/shipping, totals, and notes</li>
<li>Update order status with optional note</li>
<li>List customers with email, name, total spent, and order count</li>
</ul>
The Events Calendar:
<ul>
<li>List events with start/end date, venue, organizer, and date range filter</li>
<li>Get full event detail with resolved venue address and organizer contact</li>
<li>Create new events with title, description, dates, venue, and organizer</li>
<li>Update existing events</li>
</ul>
Utility:
<ul>
<li>Search and replace text in post content</li>
<li>Site statistics overview (includes custom post type counts)</li>
</ul>
<h4>Requirements</h4>
<ul>
<li>WordPress 6.9 or later (Abilities API)</li>
<li>MCP Adapter plugin installed and configured</li>
<li>PHP 8.0 or later</li>
</ul>

Enable Abilities for MCP

Manage which WordPress Abilities are exposed to MCP servers. Supports WooCommerce, The Events Calendar, and any custom post type.

MountDev AI MCP Connector vs Enable Abilities for MCP