Live 178 Actions

WordPress MCP Server
for AI Agents

Q: What AI frameworks and AI clients does the StackOne WordPress MCP server support?

The StackOne WordPress MCP server supports both. MCP clients (paste-and-go apps): Claude Desktop, Claude Code, Cursor, VS Code, Goose. Agent frameworks (code SDKs you build with): OpenAI Agents SDK, Anthropic, Vercel AI, Google ADK, CrewAI, Pydantic AI, LangChain, LangGraph, Azure AI Foundry.

Connect your AI agent to StackOne's WordPress MCP server and give it 178 MCP tools out of the box. Auth, tool execution, and security all managed.

Start Free Book Demo Read Docs →

WordPress MCP Server

Built by

StackOne

Coverage

178 Agent Actions

Agents can read, write, delete and run operations in WordPress. Extend your agent's capabilities with custom actions.

MCP Actions → Build Actions →

Authentication

Agent Tool Authentication

Per-user OAuth in one call. Your WordPress MCP server gets session-scoped tokens with zero credentials stored on your infra.

Agent Auth →

Security

Agent Protection

Every WordPress tool response scanned for prompt injection in milliseconds, with 88.7% accuracy, all running on CPU.

Prompt Injection Defense →

Performance

Max Agent Context. Min Cost.

Free up to 96% of your agent's context window to enhance reasoning and reduce cost, on every WordPress call.

Tools Discovery →

What is the WordPress MCP Server?

A WordPress MCP server lets AI agents read and write WordPress data through the Model Context Protocol, Anthropic's open standard for connecting LLMs to external tools. StackOne's WordPress MCP server ships with 178 pre-built actions, fully extensible via the Connector Builder, plus managed authentication, prompt injection defense, observability, and agent execution runtime. Connect it from MCP clients like Claude Desktop, Claude Code, Cursor, Goose, and VS Code, or from agent frameworks like OpenAI Agents SDK, LangChain, and Vercel AI SDK.

All WordPress MCP Tools

Every StackOne action for WordPress, ready for your agent. Read, write, delete and run operations, scoped to exactly what you need.

User Application Passwords

Create User Application Password
Create an WordPress user Application Password.
List User Application Passwords
List the Application Passwords of one WordPress user.
Get User Application Password
Get one WordPress user Application Password.
Update User Application Password
Update one WordPress user Application Password.
Delete User Application Password
Delete one WordPress user Application Password.

Block Types

List Block Types
List the block types of a WordPress site.
Get Block Type
Get one WordPress block type.

Comments

Create Comment
Create a WordPress comment.
List Comments
List the comments of a WordPress site.
Get Comment
Get one WordPress comment.
Update Comment
Update one WordPress comment.
Delete Comment
Delete one WordPress comment.

Font Familys

Create Font Family
Create a WordPress font family.
Get Font Family
Get one WordPress font family.
Update Font Family
Update one WordPress font family.
Delete Font Family
Delete one WordPress font family.

Font Faces

Create Font Face
Create a WordPress font face.
List Font Faces
List the font faces of a WordPress site.
Get Font Face
Get one WordPress font face.
Delete Font Face
Delete one WordPress font face.

Font Collections

List Font Collections
List the font collections of a WordPress site.
Get Font Collection
Get one WordPress font collection.

Unified Roles

List Unified Roles
List the default roles of a WordPress site.
Get Unified Role
Get a documented WordPress role by slug.

Unified Users

List Unified Users
List unified users on a WordPress site.
Get Unified User
Get a unified WordPress user by id.

Icons

List Icons
List the icons of a WordPress site.
Get Icon
Get one WordPress icon.

Icon Collections

List Icon Collections
List the icon collections of a WordPress site.
Get Icon Collection
Get one WordPress icon collection.

Media Items

Create Media Item
Create a WordPress media item.
Upload Media Item
Upload a file to the WordPress media library.
List Media Items
List the media items of a WordPress site.
Get Media Item
Get one WordPress media item.
Update Media Item
Update one WordPress media item.
Delete Media Item
Delete one WordPress media item.

Menu Items

Create Menu Item
Create a WordPress menu item.
List Menu Items
List the menu items of a WordPress site.
Get Menu Item
Get one WordPress menu item.
Update Menu Item
Update one WordPress menu item.
Delete Menu Item
Delete one WordPress menu item.

Navigation Menus

Create Navigation Menu
Create a WordPress navigation menu.
List Navigation Menus
List the navigation menus of a WordPress site.
Get Navigation Menu
Get one WordPress navigation menu.
Update Navigation Menu
Update one WordPress navigation menu.
Delete Navigation Menu
Delete one WordPress navigation menu.

Navigation Menu Revisions

List Navigation Menu Revisions
List the navigation menu revisions of a WordPress site.
Get Navigation Menu Revision
Get one WordPress navigation menu revision.
Delete Navigation Menu Revision
Delete one WordPress navigation menu revision.

Menus

Create Menu
Create a WordPress menu.
List Menus
List the menus of a WordPress site.
Get Menu
Get one WordPress menu.
Update Menu
Update one WordPress menu.
Delete Menu
Delete one WordPress menu.

Menu Locations

List Menu Locations
List the menu locations of a WordPress site.
Get Menu Location
Get one WordPress menu location.

Page Revisions

List Page Revisions
List the page revisions of a WordPress site.
Get Page Revision
Get one WordPress page revision.
Delete Page Revision
Delete one WordPress page revision.

Synced Patterns

Create Synced Pattern
Create a WordPress synced pattern.
List Synced Patterns
List the synced patterns of a WordPress site.
Get Synced Pattern
Get one WordPress synced pattern.
Update Synced Pattern
Update one WordPress synced pattern.
Delete Synced Pattern
Delete one WordPress synced pattern.

Synced Pattern Revisions

List Synced Pattern Revisions
List the synced pattern revisions of a WordPress site.
Get Synced Pattern Revision
Get one WordPress synced pattern revision.
Delete Synced Pattern Revision
Delete one WordPress synced pattern revision.

Pattern Categorys

Create Pattern Category
Create a WordPress pattern category.
Get Pattern Category
Get one WordPress pattern category.
Update Pattern Category
Update one WordPress pattern category.
Delete Pattern Category
Delete one WordPress pattern category.

Plugins

Create Plugin
Create a WordPress plugin.
List Plugins
List the plugins of a WordPress site.
Get Plugin
Get one WordPress plugin.
Update Plugin
Update one WordPress plugin.
Delete Plugin
Delete one WordPress plugin.

Posts

Create Post
Create a WordPress post.
List Posts
List the posts of a WordPress site.
Get Post
Get one WordPress post.
Update Post
Update one WordPress post.
Delete Post
Delete one WordPress post.

Post Revisions

List Post Revisions
List the post revisions of a WordPress site.
Get Post Revision
Get one WordPress post revision.
Delete Post Revision
Delete one WordPress post revision.

Post Types

List Post Types
List the post types of a WordPress site.
Get Post Type
Get one WordPress post type.

Site Settings

Get Site Settings
Get the site settings exposed to the REST API, such as title, timezone and reading options.
Update Site Settings
Update one or more site settings, such as title, timezone and reading options.

Categorys

Create Category
Create a WordPress category.
Get Category
Get one WordPress category.
Update Category
Update one WordPress category.
Delete Category
Delete one WordPress category.

Template Revisions

List Template Revisions
List the template revisions of a WordPress site.
Get Template Revision
Get one WordPress template revision.
Delete Template Revision
Delete one WordPress template revision.

Templates

Create Template
Create a WordPress template.
List Templates
List the templates of a WordPress site.
Get Template
Get one WordPress template.
Update Template
Update one WordPress template.
Delete Template
Delete one WordPress template.

Template Part Revisions

List Template Part Revisions
List the template part revisions of a WordPress site.
Get Template Part Revision
Get one WordPress template part revision.
Delete Template Part Revision
Delete one WordPress template part revision.

Template Parts

Create Template Part
Create a WordPress template part.
List Template Parts
List the template parts of a WordPress site.
Get Template Part
Get one WordPress template part.
Update Template Part
Update one WordPress template part.
Delete Template Part
Delete one WordPress template part.

Global Styles Revisions

List Global Styles Revisions
List the global styles revisions of a WordPress site.
Get Global Styles Revision
Get one WordPress global styles revision.

Global Styles

Get Global Styles
Get the user global styles record of the active block theme.
Update Global Styles
Update the user global styles record of the active block theme.

Themes

List Themes
List the themes of a WordPress site.
Get Theme
Get one WordPress theme.

Users

Create User
Create an WordPress user.
List Users
List the users of a WordPress site with their roles.
Get User
Get one WordPress user by id.
Update User
Update one WordPress user.
Delete User
Delete one WordPress user.

Current Users

Get Current User
Get the WordPress user this connection signs in as.
Update Current User
Update the profile of the WordPress user whose credentials the connection uses.

Sidebars

List Sidebars
List the sidebars of a WordPress site.
Get Sidebar
Get one WordPress sidebar.
Update Sidebar
Update one WordPress sidebar.

Widget Types

List Widget Types
List the widget types of a WordPress site.
Get Widget Type
Get one WordPress widget type.

Widgets

Create Widget
Create a WordPress widget.
List Widgets
List the widgets of a WordPress site.
Get Widget
Get one WordPress widget.
Update Widget
Update one WordPress widget.
Delete Widget
Delete one WordPress widget.

Other (37)

List Ability Categories
List the ability categories registered on the site.
Get Ability Category
Get one registered ability category.
List Abilities
List the abilities registered on the site through the Abilities API.
Get Ability
Get one registered ability with its input and output schema.
Get Current Application Password
Get the Application Password this WordPress connection signs in with.
List Namespace Block Types
List the block types registered under one block namespace.
Search Block Directory
Search the WordPress.org Block Directory for installable blocks.
Get URL Details
Fetch the title, description and icon of a web page, as the editor does for link previews.
List Font Families
List the font families of a WordPress site.
Get Unified Credentials
Get the identity of the current WordPress connection.
List Collection Icons
List the icons in one icon collection.
List Pattern Categories
List the pattern categories of a WordPress site.
List Pattern Directory Patterns
List block patterns from the WordPress.org Pattern Directory.
List Block Patterns
List the block patterns registered on the site.
List Block Pattern Categories
List the block pattern categories registered on the site.
List Post Statuses
List the post statuses of a WordPress site.
Get Post Status
Get one WordPress post status.
Search Content
Search posts, pages, terms and post formats across the site.
Get Site Info
Get the name, description, URLs and REST namespaces of the WordPress site.
Get Site Health Directory Sizes
Get the disk size of the WordPress, themes, plugins, uploads and database directories.
List Taxonomies
List the taxonomies of a WordPress site.
Get Taxonomy
Get one WordPress taxonomy.
List Categories
List the categories of a WordPress site.
Get Template Fallback
Find the template WordPress would fall back to for a template slug.
Get Template Part Fallback
Find the template part WordPress would fall back to for a slug.
List Theme Style Variations
List the style variations a block theme ships.
Get Theme Global Styles
Get the base global styles a block theme defines in theme.json.
Delete All User Application Passwords
Revoke every Application Password of one WordPress user.
Run Read-Only Ability
Run one registered ability annotated read-only, which WordPress only accepts over GET.
Run Ability
Run one registered ability that changes data and is not annotated read-only or destructive and idempotent.
Run Destructive Ability
Run one registered ability annotated destructive and idempotent, which WordPress only accepts over DELETE.
Run Site Health Background Updates Test
Run the Site Health background updates test and return its result.
Run Site Health Loopback Requests Test
Run the Site Health loopback requests test and return its result.
Run Site Health Https Status Test
Run the Site Health HTTPS status test and return its result.
Run Site Health Wordpress.Org Communication Test
Run the Site Health WordPress.org communication test and return its result.
Run Site Health Authorization Header Test
Run the Site Health Authorization header test and return its result.
Run Site Health Page Cache Test
Run the Site Health page cache test and return its result.

Set Up Your WordPress MCP Server in Minutes

One endpoint. Any framework. Your agent is talking to WordPress in under 10 lines of code.

MCP Clients

Agent Frameworks

Claude Desktop-

JSON

Claude Desktop Docs

{
  "mcpServers": {
    "stackone": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote@latest",
        "https://api.stackone.com/mcp?x-account-id=<account_id>",
        "--header",
        "Authorization: Basic <YOUR_BASE64_TOKEN>"
      ]
    }
  }
}

Check More Documents & Knowledge MCP Servers

431+ actions

266+ actions

145+ actions

111+ actions

105+ actions

Envi

104+ actions

Liferay

104+ actions

All Documents & Knowledge MCP Servers →

Platform Resources

Comparing BM25, TF-IDF, and Hybrid Search for MCP Tool Discovery

Benchmarking BM25, TF-IDF, and hybrid search for MCP tool discovery across 916 tools. The 80/20 TF-IDF/BM25 hybrid hits 21% Top-1 accuracy in under 1ms.

10 min

Indirect Prompt Injection Defense for MCP Tools: A Technical Guide

MCP tools that read emails, CRM records, and tickets are indirect prompt injection vectors. Here's how we built a two-tier defense that scans tool results in ~11ms.

12 min

MCP vs A2A: Architecture, Security, and When to Use Each

MCP vs A2A: what each protocol standardizes, how they differ, their shared security risks including indirect prompt injection, and when to use one, both, or a hybrid architecture.

12 min

MCP vs API: What Hundreds of Connector Builds Taught Us

MCP wraps APIs, it doesn't replace them. After building hundreds of connectors that serve both, here's when each approach wins.

14 min read

WordPress MCP Server FAQ

Does StackOne have a WordPress MCP server?

Yes. StackOne offers a hosted WordPress MCP server with 178 pre-built actions, and every action is tested and QA'd by StackOne. Connect it to Claude, Cursor, and any other MCP client, or to any agent framework through the AI Action SDK. It ships with managed agent authentication, prompt injection defense, and tool discovery with server-side execution that preserve your agent's context window and keep reasoning performance.

WordPress MCP server vs direct API integration: what's the difference?

A WordPress MCP server and direct API integration serve different use cases. Direct API integration is for software-to-software work, where backend code calls WordPress. A WordPress MCP server is for AI agents that discover and call WordPress at runtime, such as MCP clients like Claude and Cursor, plus framework agents built with OpenAI, LangChain, or Vercel AI. StackOne provides both.

How does WordPress authentication work for AI agents?

WordPress authentication for AI agents works through a StackOne Connect Session. Create one via the dashboard or the SDK to get an auth link and ready-to-paste config for Claude Desktop, Cursor, and other MCP clients. Your user authenticates their own WordPress account; StackOne handles token exchange, storage, and refresh. Credentials never reach the LLM, and each user is isolated via origin_owner_id.

Are WordPress MCP tools vulnerable to prompt injection?

Yes. WordPress MCP tools can be vulnerable to indirect prompt injection. Any tool that reads user-written content, such as documents, messages, tickets, records, or free-text fields, is a potential vector. StackOne Defender scans every tool response before it enters the agent's context. It runs regex patterns in ~1ms, then a MiniLM classifier in ~4ms. Accuracy is 88.7%, and it runs entirely on CPU.

What is the context bloat of a WordPress agent and how do I avoid it?

Context bloat happens when WordPress tool schemas and API responses eat your WordPress agent's memory, preventing it from reasoning effectively. A single WordPress query can return a massive JSON response, and connecting multiple tools compounds the problem. Tools Discovery reduces it by loading only the tools relevant to each query.

Can I limit which actions my WordPress agent can access?

Yes. You can limit which actions your WordPress agent can access directly from the StackOne dashboard. Toggle actions on or off, or restrict them to specific accounts, with no code changes to your agent. Session tokens can be scoped to exact actions so if one leaks, exposure stays contained.

Can I create custom agent actions for my WordPress MCP server?

Yes. You can create custom agent actions for your WordPress MCP server using Connector Builder. It's an integration agent your coding assistant (Claude Code, Cursor, or Copilot) can invoke to research WordPress's API, generate production-ready connector YAML, test against the live API, and validate before you ship.

When should I NOT use a WordPress MCP server?

Skip a WordPress MCP server if your integration is purely software-to-software, because direct WordPress API integration is simpler when no AI agent is involved. For deterministic, compliance-critical operations (financial transactions, regulatory reporting), direct API gives you predictable behavior without agent-driven decision-making. MCP shines when AI agents need to dynamically discover and call WordPress actions at runtime.

What AI frameworks and AI clients does the StackOne WordPress MCP server support?

The StackOne WordPress MCP server supports both. MCP clients (paste-and-go apps): Claude Desktop, Claude Code, Cursor, VS Code, Goose. Agent frameworks (code SDKs you build with): OpenAI Agents SDK, Anthropic, Vercel AI, Google ADK, CrewAI, Pydantic AI, LangChain, LangGraph, Azure AI Foundry.

Put your AI agents to work

All the tools you need to build and scale AI agent integrations, with best-in-class connectivity, execution, and security.

Start Free Book Demo

WordPress MCP Serverfor AI Agents