
Research
TeamPCP Compromises Telnyx Python SDK to Deliver Credential-Stealing Malware
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.
A MCP server that provides 49+ tools for complete WordPress site management through AI.
This MCP server enables AI agents (Claude, LangGraph, etc.) to manage WordPress sites through natural language. It connects to WordPress via REST API and provides specialized tools for posts, pages, media, users, categories, comments, and site settings.
| Category | Count | Tools |
|---|---|---|
| Posts | 15 | create, update, delete, get, search, schedule, publish, duplicate, revisions, bulk operations |
| Pages | 4 | create, update, delete, get with hierarchy |
| Media | 5 | upload, get, update, delete, featured images |
| Users | 4 | create, get, update, delete |
| Categories | 4 | create, get, update, delete |
| Tags | 2 | create, get |
| Comments | 4 | create, get, update, delete |
| Settings | 4 | get site info, test connection, get/update settings |
| Plugins/Themes | 2 | get installed plugins and themes |
| SEO | 2 | set SEO meta (Yoast, Rank Math, AIOSEO), custom meta |
# Install globally
npm i -g wpmcp
# Or use with npx
npx wpmcp
# Clone repository
git clone https://github.com/RaheesAhmed/wordpress-mcp-server.git
cd wordpress-mcp-server
# Install dependencies
npm install
# Configure WordPress credentials
cp .env.example .env
# Edit .env with your WordPress URL, username, and password
# Build
npm run build
# Run
npm start
WORDPRESS_URL=https://yourblog.com
WORDPRESS_USERNAME=admin
WORDPRESS_PASSWORD=your-app-password
Self-Hosted WordPress:
WordPress.com:
Add to your MCP client configuration (e.g., Claude Desktop, Cline):
{
"mcpServers": {
"wordpress": {
"command": "npx",
"args": ["-y", "wpmcp"],
"env": {
"WORDPRESS_URL": "https://yourblog.com",
"WORDPRESS_USERNAME": "admin",
"WORDPRESS_PASSWORD": "your-password"
}
}
}
}
Once configured, ask your AI:
"Create a blog post about AI with 1000 words and publish it"
"Get all draft posts"
"Upload an image and set it as featured image for post 123"
"List all WordPress users"
"Get all installed plugins"
{
"title": "My Post Title",
"content": "<p>Post content</p>",
"status": "publish",
"categories": [1],
"tags": [2, 3]
}
{
"fileBase64": "base64-encoded-file-content",
"filename": "image.jpg",
"altText": "Image description"
}
{
"username": "johndoe",
"email": "john@example.com",
"password": "SecurePass123",
"roles": ["author"]
}
src/
├── index.ts # Server entry point
├── config/ # Configuration
├── types/ # TypeScript definitions
├── utils/ # API wrapper and helpers
└── tools/ # WordPress tool implementations
├── posts.ts # 15 post tools
├── pages.ts # 4 page tools
├── media.ts # 5 media tools
└── all-features.ts # Additional tools
# Run in development mode
npm run dev
git checkout -b feature/amazing)git commit -m 'Add feature')git push origin feature/amazing)MIT License - see LICENSE
Built for AI-powered WordPress automation
FAQs
MCP server for WordPress with 190+ tools - complete WordPress control including WooCommerce, Gutenberg, SEO, Security, Performance, Backup, and User Roles - 99% developer task coverage
The npm package wpmcp receives a total of 16 weekly downloads. As such, wpmcp popularity was classified as not popular.
We found that wpmcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.

Security News
/Research
Widespread GitHub phishing campaign uses fake Visual Studio Code security alerts in Discussions to trick developers into visiting malicious website.