Stefano Lissa

<p>The MCP Servers plugin enables WordPress to expose “abilities” – standardized functions that AI agents (such as Claude, Mistral, or ChatGPT) can invoke.</p>
<p>These abilities allow plugins and themes to describe their functionalities and required parameters in a structured way, facilitating seamless interaction with AI agents via the MCP (Model Context Protocol).</p>
<h4>Use Cases</h4>
<ul>
<li>A newsletter plugin can expose abilities to manage subscribers or newsletters.</li>
<li>A form manager can provide abilities to handle forms or process submissions.</li>
<li>No limits: Any functionality can be exposed and utilized by AI agents.</li>
</ul>
<h4>Creating a server</h4>
<p>Go to the “Servers” page and add a server. By default, a new MCP server does not expose any abilities. You can:</p>
<ul>
<li>Select one or more ability categories.</li>
<li>Choose individual abilities to expose.</li>
</ul>
<h4>Best Practices</h4>
<ul>
<li>Avoid exposing all abilities: This can overwhelm AI agents and lead to overlapping functionalities.</li>
<li>Limit abilities to those necessary for your current workflow.</li>
<li>Create multiple MCP servers to enable only the tools required for specific tasks on the agent side.</li>
</ul>
<h4>Connecting to a server</h4>
<p>AI agents can connect to your MCP server(s) in several ways. The simplest method is:</p>
<ul>
<li>Create an administrator user named “mcp”.</li>
<li>Generate an application password for this user in the WordPress dashboard.</li>
<li>Use Basic Authentication with the mcp username and the application password to set up the connection from the AI agent.</li>
</ul>
<h4>Note on Authentication</h4>
<p>Not all AI agents support Basic Authentication. For example, Claude requires OAuth2.</p>
<p>To enable OAuth2, install a compatible plugin (e.g., WP OAuth Server).</p>
<h4>References</h4>
<ul>
<li>The <a href="https://www.satollo.net/plugins/mcpservers" rel="nofollow ugc">MCP Servers official page</a></li>
<li>The <a href="https://github.com/wordpress/mcp-adapter" rel="nofollow ugc">MCP Adapater library/plugin</a></li>
<li>Introduction to the <a href="https://make.wordpress.org/ai/2025/07/17/ai-building-blocks/" rel="nofollow ugc">WP AI building blocks</a></li>
<li>The <a href="https://make.wordpress.org/ai/2025/07/17/ai-experiments-plugin/" rel="nofollow ugc">AI Experiments plugin</a></li>
<li>The <a href="https://www.satollo.net/plugins/monitor" rel="nofollow ugc">Monitor plugin</a></li>
</ul>
<p>The AI Experiments plugin contains the “Ability explorer” a very useful tool.</p>
<h4>Tech details</h4>
<p>The plugin uses the WP MCP Adapter library or the MCP Adapter plugin (if installed), with priority given to the latter.</p>
<p>Once the Adapter plugin is officially available, it will be added as a dependency, and the PHP library will be removed.</p>
<h4>Warning</h4>
<p>Abilities are registered an implemented by plugins and themes: check carefully what they do before exposing!</p>
<p>And be aware that permission checks are up to the single ability.</p>


Satollo MCP Servers

Configure and publish MCP servers to expose abiltities to AI agents

dudaster

<p><strong>AICOM – AI Commander</strong> connects your WordPress site to any AI agent via MCP (Model Context Protocol) or OpenAPI. Use your existing AI subscription — Claude Code, OpenAI Codex, ChatGPT Custom GPTs, Copilot Studio, Dify, n8n, OpenClaw, Celine, Goose, or any MCP-compatible client — to manage content, build pages, run audits, and automate repetitive tasks, all without leaving your AI interface.</p>
<p>No more copy-pasting between your AI assistant and the WordPress dashboard. Describe what you want, and your agent does it — safely, with a full record of every action.</p>
<h4>Content Management</h4>
<p>Create, update, and publish posts, pages, and custom post types directly from your AI agent. Build and duplicate Elementor pages, manage menus, upload media, update taxonomies, and handle bulk SEO fields including <strong>Yoast SEO meta, titles, and social previews</strong> — all in a single conversation. What used to take hours of dashboard work can be delegated to your AI in minutes.</p>
<h4>Safety You Control</h4>
<p>AICOM puts you in charge at every level:</p>
<ul>
<li><strong>Scope-based API keys</strong> — each key grants access only to the operations you explicitly allow. One key for read-only content review, another for full publishing access.</li>
<li><strong>Soft Lock / Hard Lock</strong> — freeze all write operations (Soft) or block everything except public tools (Hard) with one click from the admin bar or Safety page.</li>
<li><strong>Working Hours Schedule</strong> — automatically apply Soft or Hard Lock outside your configured working hours and days. Agents can’t make changes at night or on weekends unless you explicitly override it.</li>
<li><strong>Dry-run mode</strong> — test any operation before it runs. See exactly what would change without touching live data.</li>
<li><strong>Confirm flag</strong> — destructive operations require an explicit <code>"confirm": true</code> parameter. Accidental deletions are prevented by design.</li>
</ul>
<h4>Backup & Restore</h4>
<p>Before every significant change, your agent can snapshot the current state of a post or term. If something goes wrong, restore the exact previous version in one call. Backups are stored in the database, organised by session, and can be cleaned up automatically based on age or total size.</p>
<h4>Full Audit Trail</h4>
<p>Every request is logged: timestamp, remote IP, API key label, tool used, parameters, result, and response time. Logs are grouped into <strong>named sessions</strong> — when an agent opens a session, all its actions are recorded together so you can review, replay, or undo an entire workflow at once. The Audit Logs page includes a session activity chart and a direct Restore button for each session.</p>
<h4>Accessibility Audits — New in v3.2.0</h4>
<p>AICOM now includes a dedicated <strong>Accessibility module</strong> so your AI agent can audit and fix WCAG issues across your entire site — no external tools or services required:</p>
<ul>
<li><strong>Site report</strong> — instantly see how many images are missing alt text across your entire media library, with a ranked preview of the top offenders and a percentage score.</li>
<li><strong>Post audit</strong> — scan any post or page for heading hierarchy errors (missing H1, skipped heading levels), images without alt text, and links with non-descriptive anchor text (“click here”, “read more”). Each issue is rated by severity and the post receives an overall accessibility score from 0 to 100.</li>
<li><strong>Fix in place</strong> — set alt text on any media library image in one call. Pass an empty string to correctly mark it as decorative (<code>aria-hidden</code>). Full dry-run support so you can preview changes before saving.</li>
<li><strong>Screenshot before & after</strong> — combine AICOM’s audit tools with your AI agent’s browser capabilities to capture a visual record of the page before and after remediation.</li>
</ul>
<p>A typical AI-driven accessibility workflow: run the site report, get the list of problem images, let the agent analyse each image visually and write descriptive alt text, apply the fixes — then run the audit again to confirm the score improved. All in one session, with a full audit trail.</p>
<h4>Supported Modules</h4>
<ul>
<li><strong>WordPress Core</strong> — posts, pages, custom post types, terms, meta, options, menus, plugins</li>
<li><strong>Media</strong> — upload, update, delete media; direct file system access</li>
<li><strong>Users & Roles</strong> — create, update, manage users and role assignments</li>
<li><strong>Backup</strong> — per-post and per-term snapshots, session-based restore</li>
<li><strong>Sessions</strong> — named audit sessions with grouped action history</li>
<li><strong>Accessibility</strong> — site-wide alt text audit, post-level WCAG check, alt text fixes</li>
<li><strong>WooCommerce</strong> <em>(optional)</em> — products, categories, settings</li>
<li><strong>Elementor</strong> <em>(optional)</em> — page creation from template, widget inspection, theme builder conditions</li>
<li><strong>Polylang</strong> <em>(optional)</em> — translations, language assignment, string management</li>
<li><strong>Yoast SEO</strong> <em>(optional)</em> — read and write SEO titles, meta descriptions, Open Graph and Twitter card fields; bulk audit across all posts in one session</li>
<li><strong>Clautron</strong> <em>(optional)</em> — blueprint management, capability catalog, event analytics</li>
<li><strong>ECS</strong> <em>(optional)</em> — Ele Custom Skin color schemes, font schemes, custom looks</li>
</ul>
<h4>Who is this for?</h4>
<ul>
<li><strong>Content teams</strong> using Claude, ChatGPT, or any AI assistant who want it to publish and update WordPress content directly</li>
<li><strong>Agencies</strong> managing multiple client sites and wanting AI-assisted workflows with a full paper trail</li>
<li><strong>Developers</strong> building AI-powered WordPress tools or automation pipelines</li>
<li><strong>Accessibility specialists</strong> who want to audit and remediate WCAG issues at scale with AI assistance</li>
<li><strong>Claude Code users</strong> — point AICOM as an MCP server from your terminal and control WordPress alongside your code</li>
<li><strong>OpenAI Codex users</strong> — connect Codex to your site via AICOM’s MCP endpoint and let it manage content as part of your dev workflow</li>
<li><strong>ChatGPT, Copilot Studio, Dify, n8n users</strong> — import the OpenAPI schema URL into any OpenAPI-compatible client; all tools are discovered automatically with Bearer auth</li>
<li><strong>OpenClaw / Celine / Goose users</strong> — native MCP connector, works out of the box</li>
</ul>
<h4>How it works</h4>
<p>AICOM exposes a secure HTTP endpoint on your WordPress site. Your AI agent sends structured MCP requests, AICOM authenticates the request, checks scopes and lock state, executes the operation, logs it, and returns a structured response.</p>
<pre><code>AI Agent <span aria-hidden="true" class="wp-exclude-emoji">→</span> AICOM Endpoint <span aria-hidden="true" class="wp-exclude-emoji">→</span> WordPress
</code></pre>
<h4>API Key Scopes</h4>
<p>Each API key is granted specific scopes — you control exactly what each AI agent can and cannot do:</p>
<pre><code>read.wp, `write.wp.posts`, `manage.taxonomies`, `manage.meta`, `manage.wordpress.settings`, `manage.media`, `manage.files`, `manage.users`, `manage.plugins`, `manage.backups`, `manage.a11y`, `manage.woocommerce.products`, `manage.woocommerce.settings`, `manage.elementor`, `manage.polylang`, `manage.yoast`, `manage.clautron`
</code></pre>
<h4>Endpoint</h4>
<p><strong>REST API:</strong><br />
    POST /wp-json/aicom/v1/mcp</p>
<p><strong>Fallback</strong> (no mod_rewrite required):<br />
    POST /?aicom=1</p>
<p><strong>Health check:</strong><br />
    GET /?aicom=1</p>
<h4>Authentication</h4>
<pre><code>Authorization: Bearer aicom_XXXXXXXX_<secret>
</code></pre>
<p>or:</p>
<pre><code>X-API-Key: aicom_XXXXXXXX_<secret>
</code></pre>
<h4>MCP Request Example</h4>
<pre><code>{"jsonrpc":"2.0","method":"tools/call","params":{"name":"wp.posts.list","arguments":{"post_type":"post","posts_per_page":10}},"id":1}
</code></pre>


AICOM – AI Commander

Use your AI subscription to manage WordPress: create Elementor pages, update content, automate tasks, and stay fully in control.

Satollo MCP Servers vs AICOM – AI Commander