MCP Expose Abilities
Let AI assistants edit your WordPress site. 138 abilities across core + 9 add-on plugins. 🤖
Uses Abilities API + MCP Adapter from WordPress core team
The Problem 😤
AI can write your content. It can suggest changes. But then you still have to:
❌ Copy-paste
From chat window to WordPress editor. Over and over.
❌ Navigate menus
Find the right admin page. Click through settings.
❌ Format manually
Add the blocks, style them, hope nothing breaks.
It is like having a smart assistant who can only communicate through sticky notes.
The Solution ✅
Give your AI assistant actual access to WordPress.
It talks to your site directly. Changes happen instantly.
Modular Architecture
Install only what you need. The core plugin handles WordPress-native features.
Add-on plugins extend to Elementor, GeneratePress, Google Workspace, and more.
| Plugin | Abilities | Description |
|---|---|---|
| MCP Expose Abilities (core) | 51 | Content, menus, users, media, widgets, plugins, options, system |
| MCP Abilities – Filesystem | 10 | File operations with security hardening |
| MCP Abilities – Elementor | 19 | Full Elementor template management |
| MCP Abilities – Google Workspace | 8 | Google Workspace Gmail API (service account) |
| MCP Abilities – GeneratePress | 17 | Theme settings and GenerateBlocks |
| MCP Abilities – Cloudflare | 1 | Cache management |
| MCP Abilities – Rank Math | 3 | SEO meta descriptions, titles, focus keywords |
| MCP Abilities – Wordfence | 8 | Security status, IP blocking, scan issues, lockouts |
| MCP Abilities – Brevo | 12 | Contacts, lists, transactional email via Brevo API |
| MCP Abilities – Advanced Ads | 9 | Ad management, placements, groups, diagnostics |
Total: 138 abilities
Core Plugin Abilities (51)
📝 Content (21)
- Posts: list, get, create, update, delete, patch
- Pages: list, get, create, update, delete, patch
- Categories, tags, media, users, search, revisions, revisions
📂 Menus (7)
- List menus and locations
- Create, update, delete items
- Assign to theme locations
👥 Users (5)
- List, get, create, update, delete
- Manage roles
- Reassign content on delete
🖼️ Media (4)
- Upload from URL
- Get, update, delete
- Manage alt text, captions
🧱 Widgets (3)
- List sidebars
- Get sidebar widgets
- List available widget types
🔌 Plugins (6)
- Upload from URL
- Upload from local file
- List installed plugins
- Activate plugins
- Deactivate plugins
- Delete inactive plugins
⚙️ Options (3)
- Get, update, list options
- Protected options blocked
🛠️ System (3)
- Get transient, debug log
- Toggle WP_DEBUG modes
Add-on Plugins 🧩
Install only the add-ons you need. Each is a separate plugin.
📁 Filesystem (10 abilities)
- Read, write, append, delete files
- Copy, move, list directories
- PHP injection detection
- Automatic backups on delete
🎨 Elementor (19 abilities)
- Get, update, patch page data
- Full template CRUD + export/import
- Global widgets, kit settings
- Cache management
📧 Google Workspace (8 abilities)
- Google Workspace Google Workspace Gmail API integration (Workspace-only)
- Send, reply, modify labels
- List and read inbox
- Service account + domain-wide delegation
⚡ GeneratePress (17 abilities)
- Theme settings (colors, typography)
- GenerateBlocks global styles
- Clear CSS cache
☁️ Cloudflare (1 ability)
- Clear entire cache
- Clear specific URLs
- Requires Cloudflare plugin
📊 Rank Math (3 abilities)
- Get SEO meta for any post/page
- Update titles, descriptions, keywords
- Bulk audit SEO metadata
🛡️ Wordfence (8 abilities)
- Security status and scan issues
- Block/unblock IP addresses
- Manage lockouts and allowlist
📨 Brevo (12 abilities)
- Manage contacts and lists
- Send transactional emails
- List and send campaigns
📰 Advanced Ads (9 abilities)
- List and manage ads
- Placements and groups
- Settings and diagnostics
Multi-Site Management
Managing multiple WordPress sites? The WordPress MCP Proxy connects all your sites through a single MCP endpoint.
One Connection
Add one MCP server to your AI tool. Access all your WordPress sites.
Session Management
Handles authentication and reconnection automatically.
Simple Config
Add sites to a JSON file. Done.
Real Example: 25 Articles Fixed in 30 Seconds ⚡
We had 25 articles where phone numbers were not clickable. Annoying on mobile.
❌ The Old Way
Open each article. Find the number. Add link. Save. Repeat 24 more times. Lose will to live around article 12.
✅ The New Way
Tell Claude: “Fix the phone numbers to be clickable tel: links.” Done in 30 seconds. All 25 articles.
Is It Safe? 🔐
🔑 Authentication Required
Uses WordPress application passwords. No password = no access.
✅ Permission Checks
Every ability verifies permissions. Protected options blocked. Core files protected.
🏠 Your Server
PHP injection detection, encoding bypass protection, 50+ attack vectors tested.
How to Set Up
1. Install the plugin stack:
- Abilities API – WordPress core team’s ability framework
- MCP Adapter – WordPress core team’s MCP layer
- MCP Expose Abilities – core abilities (51)
- (Optional) Add-on plugins for Elementor, GeneratePress, etc.
2. Create an application password:
WordPress Admin → Users → Your Profile → Application Passwords
3. Connect your AI tool:
Your MCP endpoint is: https://yoursite.com/wp-json/mcp/mcp-adapter-default-server
Full instructions in the GitHub README.
100% Free. Open Source. 🎁
✅ No premium version
This is the whole plugin. Nothing locked.
✅ No tracking
We do not collect data. Your site, your business.
✅ GPL v2 licensed
Read it, modify it, share it. PRs welcome.
Requires WordPress 6.9+ and PHP 8.0+
Frequently Asked Questions
What AI tools does this work with?
Any AI assistant that supports the Model Context Protocol (MCP), including Claude Desktop, Claude Code, Cursor, Windsurf, and others. If your AI tool can connect to MCP servers, it can use these abilities.
Is it safe to give AI access to my WordPress site?
Yes, with proper precautions. The plugin uses WordPress application passwords for authentication, enforces permission checks on every ability, blocks protected options, and includes PHP injection detection. Your AI can only do what a logged-in admin could do manually.
Is MCP Expose Abilities free?
Yes, 100% free and open source under GPL v2. There is no premium version, no locked features, and no tracking. The core plugin and all add-ons are available on GitHub.
What WordPress version do I need?
WordPress 6.9 or higher is required, along with PHP 8.0+. The plugin depends on the Abilities API and MCP Adapter plugins from the WordPress core team.
Can I use this with Elementor or other page builders?
Yes. The core plugin handles standard WordPress content. For Elementor, install the MCP Abilities – Elementor add-on which provides 19 abilities for editing Elementor page data directly.
What can the AI actually do with these abilities?
Create, edit, and delete posts and pages. Manage menus, users, media, widgets, and plugins. Update site options. With add-ons: edit files, manage Elementor pages, handle Google Workspace Gmail, configure GeneratePress themes, and clear Cloudflare cache.
More Free Plugins
🔄 Devenia Replace Media
Replace images without breaking links.
🖼️ Clickable Featured Image
Lightbox on posts, links on archives.
📣 LinkedIn Autoposter
Auto-share posts to LinkedIn.