
Company News
AWS Security Hub Adds Socket for Supply Chain Security
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.
@mcpwp.net/mcpwp
Advanced tools
MCPWP proxy for WordPress - dynamic MCP tools for posts, pages, Elementor, WooCommerce, LearnPress, SEO, forms & more. Works with Claude Desktop, Cursor, Windsurf and any MCP client.
MCP Server for WordPress — dynamic tools for posts, pages, Elementor, WooCommerce, LearnPress, SEO, forms & more. Works with Claude Desktop, Cursor, Windsurf and any MCP client.
A thin stdio-to-HTTP proxy that forwards all MCP requests to your WordPress site's built-in MCP endpoint. Tools are always in sync with the plugin — zero local definitions, zero maintenance.
MCP Client (stdio) → mcpwp (proxy) → WordPress Plugin (JSON-RPC over HTTP)
The WordPress plugin exposes a complete MCP endpoint at /wp-json/site-pilot-ai/v1/mcp. This npm package connects to it and proxies tools/list, tools/call, resources/list, and resources/read — so every tool the plugin provides is automatically available to your AI client.
Install MCPWP on your WordPress site:
npx -y @mcpwp.net/mcpwp --setup
This will:
~/.mumega-mcp/config.jsonClaude Desktop — add to claude_desktop_config.json:
{
"mcpServers": {
"mcpwp-mysite": {
"command": "npx",
"args": ["-y", "mcpwp"],
"env": {
"WP_URL": "https://your-site.com",
"WP_API_KEY": "spai_your_key"
}
}
}
}
Claude Code — add to .mcp.json in your project:
{
"mcpServers": {
"wordpress": {
"command": "npx",
"args": ["-y", "mcpwp"],
"env": {
"WP_URL": "https://your-site.com",
"WP_API_KEY": "spai_your_key"
}
}
}
}
Streamable HTTP — connect directly without the npm proxy:
{
"mcpServers": {
"wordpress": {
"url": "https://your-site.com/wp-json/site-pilot-ai/v1/mcp",
"headers": {
"X-API-Key": "spai_your_key"
}
}
}
}
For multiple sites, add separate entries with unique names:
{
"mcpServers": {
"mcpwp-production": {
"command": "npx",
"args": ["-y", "mcpwp"],
"env": { "WP_URL": "https://example.com", "WP_API_KEY": "spai_..." }
},
"mcpwp-staging": {
"command": "npx",
"args": ["-y", "mcpwp"],
"env": { "WP_URL": "https://staging.example.com", "WP_API_KEY": "spai_..." }
}
}
}
Cursor / Windsurf — same format in their MCP settings.
Tools appear automatically. Try: "Show me my site info" or "Onboard me to this site"
All tools come from the WordPress plugin. Update the plugin to get new tools — no npm update needed.
Content — wp_list_posts, wp_create_post, wp_update_post, wp_delete_post, wp_list_pages, wp_create_page, wp_update_page, wp_delete_page, wp_search, wp_list_drafts, wp_delete_all_drafts
Media — wp_upload_media, wp_upload_media_from_url, wp_upload_media_b64, wp_list_media, wp_delete_media
Elementor — wp_get_elementor, wp_set_elementor, wp_preview_elementor, wp_elementor_widget_help, wp_regenerate_elementor_css
Site & Settings — wp_site_info, wp_onboard, wp_introspect, wp_analytics, wp_detect_plugins, wp_get_options, wp_update_options
AI Education — wp_onboard (full site overview), wp_get_guide (9 topics), wp_get_workflow (7 templates), wp_elementor_widget_help (44 widgets)
Taxonomies — wp_list_categories, wp_list_tags, wp_create_term, wp_update_term, wp_delete_term
Menus — wp_list_menus, wp_list_menu_items, wp_add_menu_item, wp_update_menu_item, wp_delete_menu_item
SEO (Yoast / RankMath / AIOSEO / SEOPress) — wp_get_seo, wp_set_seo, wp_analyze_seo, wp_bulk_seo, wp_seo_status
Forms (CF7 / WPForms / Gravity Forms) — wp_list_forms, wp_get_form, wp_get_form_entries, wp_forms_status
WooCommerce — wc_status, wc_list_products, wc_create_product, wc_update_product, wc_delete_product, wc_list_orders, wc_get_order, wc_update_order, wc_list_customers, wc_analytics, wc_list_product_categories, wc_create_product_category
LearnPress LMS — wp_list_courses, wp_create_course, wp_update_course, wp_get_curriculum, wp_set_curriculum, wp_list_lessons, wp_create_lesson, wp_list_quizzes, wp_create_quiz, wp_list_course_categories, wp_lms_stats
Elementor Pro — wp_list_elementor_templates, wp_create_elementor_template, wp_apply_elementor_template, wp_create_landing_page, wp_clone_elementor_page, wp_get_elementor_globals, wp_set_elementor_globals, wp_build_page
Theme Builder — wp_theme_builder_status, wp_list_theme_templates, wp_create_theme_template, wp_set_template_conditions, wp_assign_template
Events (ThimPress) — wp_list_events, wp_create_event, wp_update_event
AI Tools — wp_search_stock_photos, wp_download_stock_photo, wp_generate_image, wp_generate_featured_image, wp_generate_alt_text, wp_describe_image, wp_generate_excerpt, wp_text_to_speech
...and more. Run npx @mcpwp.net/mcpwp --test to see the full count for your site.
WP_URL=https://your-site.com # WordPress site URL
WP_API_KEY=spai_... # MCPWP API key
WP_SITE_NAME=default # Optional, for multi-site configs
WP_CONFIG_PATH=~/custom/config.json # Optional, custom config path
Location: ~/.mumega-mcp/config.json
{
"sites": {
"default": {
"url": "https://your-site.com",
"apiKey": "spai_...",
"name": "My Site"
}
},
"defaultSite": "default"
}
Environment variables take priority over the config file.
npx @mcpwp.net/mcpwp # Start MCP server (stdio transport)
npx @mcpwp.net/mcpwp --setup # Interactive setup wizard
npx @mcpwp.net/mcpwp --test # Test WordPress connection
npx @mcpwp.net/mcpwp --version # Show version
npx @mcpwp.net/mcpwp --help # Show help
npx @mcpwp.net/mcpwp --test
Verify:
cat ~/.mumega-mcp/config.jsonWP_URL=... WP_API_KEY=... npx @mcpwp.net/mcpwp --testRequired:
Optional (enables more tools):
git clone https://github.com/Mumega-com/mcp-for-wp.git
cd mcp-for-wp/mcp-server
bun install
bun run build # Single-file bundle to dist/index.js
node dist/index.js --test
MIT © Mumega
Documentation: https://mcpwp.net Issues: https://github.com/Mumega-com/mcp-for-wp/issues WordPress Plugin: https://github.com/Mumega-com/mcp-for-wp/releases
FAQs
MCPWP proxy for WordPress - dynamic MCP tools for posts, pages, Elementor, WooCommerce, LearnPress, SEO, forms & more. Works with Claude Desktop, Cursor, Windsurf and any MCP client.
We found that @mcpwp.net/mcpwp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.