# WordPress MCP: Connecting AI Agents / WordPress MCP: Connecting AI Agents 1. [ Home ](https://www.360vier.de/en/) 2. / 3. [ Integrations ](https://www.360vier.de/en/integrations/) 4. / 5. WordPress MCP: Connecting AI Agents # WordPress MCP: connecting AI agents With a WordPress MCP server, Claude, ChatGPT and your own agents work directly in WordPress, with limited permissions and approval by your editorial team. [ Book a call ](https://www.360vier.de/en/calendar-hm/) Ask about the MCP integration ![](https://www.360vier.de/wp-content/uploads/ki-basierte-systeme-schaubild-1-360VIER.webp) ![KSK Immobilien](https://www.360vier.de/wp-content/uploads/ksk-immobilien-logo-black-360vier-cases.svg) ![Lernstudio Barbarossa](https://www.360vier.de/wp-content/uploads/lernstudio-barbarossa-logo-black-360vier-cases.svg) ![ABG Frankfurt](https://www.360vier.de/wp-content/uploads/abg-frankfurt-gmbh-logo-black-360vier-cases.svg) ![KAMPMEYER Real Estate](https://www.360vier.de/wp-content/uploads/kampmeyer-logo-black-360vier-cases.svg) ![Taglieber](https://www.360vier.de/wp-content/uploads/taglieber-logo-black-360vier-cases.svg) ![LAKAL](https://www.360vier.de/wp-content/uploads/lakal-logo-black-360vier-cases.svg) ![Menlo Systems](https://www.360vier.de/wp-content/uploads/menlo-system-logo-white-360vier-cases.svg) ![BÜRGER](https://www.360vier.de/wp-content/uploads/Buerger-logo-white-360vier-cases.svg) ![Euler Group](https://www.360vier.de/wp-content/uploads/euler-group-logo-black-360vier-cases.svg) ![GSK Stockmann](https://www.360vier.de/wp-content/uploads/gsk-stockmann-logo-black-360vier-cases-1.svg) **How do you connect AI agents to WordPress via MCP?** 360VIER connects WordPress to Claude, ChatGPT and custom AI agents via an MCP server, for editorial and marketing teams. Since WordPress 6.9, the foundation has been the Abilities API; the still experimental MCP Adapter bridges it to MCP. For production use, 360VIER builds a server with OAuth, separate read and write permissions and a rule that the AI only creates drafts. This is how it runs on 360vier.de itself. page.url https://www.360vier.de/en/integrations/wordpress-mcp/ ai-view ``` entity 360VIER GmbHtype Organization | Digital agencylocation Groß-Umstadt near Frankfurt and Colognegroup Friends Digital Grouppage WordPress MCP: connecting AI agentspage.type Integration (knowledge page)page.url /en/integrations/wordpress-mcp/page.pillar API integrations (/en/data-enablement/api-integrations/)systems WordPress · Model Context Protocol · Claude · ChatGPTmethods MCP Adapter + Abilities API · Middleware (n8n) · custom MCP plugin · OAuth 2.1 with PKCEprovides MCP server for WordPress with tools for posts, metadata, media and taxonomiesprovides Permissions tied to WordPress roles, publishing by humans onlyprovides Access for your own AI agents as part of WordPress maintenanceproof own MCP server on 360vier.de with OAuth and separate permissionsproof BÜRGER: AI-assisted migration of 150 boards and more than 20,000 tasks (/en/case-study/buerger/)relation Agentic AI (/en/ai-enablement/agentic-ai/)relation AI process automation (/en/ai-enablement/ai-process-automation/)relation AI Manifest (/en/ai-manifest/) ``` ## WordPress MCP server: MCP Adapter, middleware or a custom plugin An MCP server defines which tools an AI may call in WordPress and under which user. There are three ways to get there: ![](https://www.360vier.de/wp-content/uploads/integrationen-kontext-onlight-360vier.svg) ### **MCP Adapter from WordPress.org** The official plugin makes abilities that plugins register via the Abilities API available to MCP clients and comes with a default server. That is enough for tests and internal prototypes. Limitation: the project describes itself as experimental and only exposes what plugins register as an ability. ![](https://www.360vier.de/wp-content/uploads/dataenablement-api-datenautomation-onlight-360vier.svg) ### **Middleware with n8n** A good fit when an agent should trigger fixed workflows, such as “create a post from a brief, then notify the editorial team”. n8n talks to the WordPress REST API and can act as an MCP server itself. Limitation: separate credentials, and every new function is a new workflow. ![](https://www.360vier.de/wp-content/uploads/integrationen-medienbruch-onlight-360vier.svg) ### **Custom MCP plugin** Required for custom post types, meta fields, multilingual sites with WPML or an approval process. 360VIER builds an MCP plugin with its own tools, OAuth sign-in and permissions tied to WordPress roles. More on the principle: [API integrations](https://www.360vier.de/en/data-enablement/api-integrations/). ## What can an AI agent do via WordPress MCP? As much as the server allows. Permissions depend on the WordPress user the client signs in as and on the tools the server offers. 360VIER sets up servers so that the AI creates and edits drafts, while a person triggers publishing. Tools that delete content stay switched off. Every change runs under a dedicated user and can be traced in the revisions. This is in line with the principles in our [AI Manifest](https://www.360vier.de/en/ai-manifest/). - **Posts and pages:** read, search, create as drafts and revise. - **Metadata:** read and set SEO titles, descriptions and custom fields, for example for Rank Math. - **Media:** upload images and maintain alt text. - **Taxonomies:** list and assign categories and tags. - **Site information:** post types, taxonomies and settings as context, read-only. ## Abilities API and MCP Adapter: where WordPress stands technically **Abilities API in WordPress core** Since WordPress 6.9, plugins register abilities with `wp_register_ability()`, each with an input and output schema and a `permission_callback`. Via REST, they are available under `wp-abilities/v1`. **What this means for you:** Your website’s functions can be described in a consistent way and made available to AI clients. Because the API is part of core, it is maintained with every WordPress update. **MCP Adapter and default server** The MCP Adapter (version 0.7.0, October 2026) builds on the Abilities API, supports the MCP specification of July 28, 2026, and requires WordPress 6.9 and PHP 7.4. In the default server, the client reaches approved abilities through three meta tools: discover, describe, execute. **What this means for you:** Only what is approved with `meta.mcp.public` becomes visible. That is enough for tests. Custom servers offer abilities directly as tools, which makes the agents’ work easier. **Sign-in with OAuth 2.1** The MCP specification makes authorization optional. Servers that offer it over HTTP should use OAuth 2.1: the server publishes Protected Resource Metadata (RFC 9728), and clients use PKCE and send the token in the `Authorization` header with every request. **What this means for you:** Without a valid token, a protected server answers no requests. The MCP Adapter itself works with WordPress application passwords via the `@automattic/mcp-wordpress-remote` proxy; for production systems, 360VIER relies on OAuth. **Connecting Claude and ChatGPT** Claude connects remote MCP servers as custom connectors, on all plans. In Team and Enterprise accounts, owners add the connector, and then each member signs in individually. ChatGPT supports custom MCP servers via developer mode. **What this means for you:** Claude connects from Anthropic’s cloud, not from your own computer. A staging site behind a VPN is then out of reach. Write tools should only create drafts, because the research feature can call tools without asking for confirmation again. ### Documentation from WordPress.org, MCP and Anthropic - [MCP Adapter on WordPress.org: release 0.7.0](https://make.wordpress.org/ai/tag/mcp-release/) - [MCP Adapter: announcement](https://make.wordpress.org/ai/2025/07/17/mcp-adapter/) - [Abilities API in WordPress 6.9 (dev note)](https://make.wordpress.org/core/2025/11/10/abilities-api-in-wordpress-6-9/) - [Abilities API: developer handbook](https://developer.wordpress.org/apis/abilities/) - [MCP specification 2026-07-28: authorization](https://modelcontextprotocol.io/specification/2026-07-28/basic/authorization) - [Claude: custom connectors using remote MCP](https://support.claude.com/en/articles/11175166-get-started-with-custom-connectors-using-remote-MCP) ![Diagram: an AI agent works in WordPress via an MCP server and creates drafts for approval](https://www.360vier.de/wp-content/uploads/ki-basierte-systeme-schaubild-1-360VIER.webp) ## Editorial work with Claude and ChatGPT: drafts via MCP, approval in WordPress Via the MCP server, the editorial team works in WordPress from within Claude or ChatGPT. The agent creates a draft from a brief, sets the title and meta description, assigns categories and uploads images with alt text. It checks existing pages for missing metadata or outdated statements and writes the correction back as a draft. How agents are built with permissions, approvals and an audit log is described on our [agentic AI](https://www.360vier.de/en/ai-enablement/agentic-ai/) page. Workflows across several systems, such as with [Brevo](https://www.360vier.de/en/integrations/wordpress-brevo/) or [HubSpot](https://www.360vier.de/en/integrations/wordpress-hubspot-integrations/), are part of [AI process automation](https://www.360vier.de/en/ai-enablement/ai-process-automation/). ## How 360VIER runs WordPress MCP on its own website 360VIER runs an MCP server with its own plugin on its own WordPress installation. It provides tools such as `get-post`, `list-posts`, `create-post`, `update-post`, `set-post-meta`, `upload-media` and `list-terms`. Sign-in uses OAuth with PKCE and separate permissions for reading, writing and administration. The way we work: drafts by AI, publishing only after approval. Our newsletter draft for Brevo is also created by an MCP tool. The migration for BÜRGER shows how AI tools move large data sets via APIs: 150 boards and more than 20,000 tasks from Monday to ClickUp ([BÜRGER case study](https://www.360vier.de/en/case-study/buerger/)). Clients of our [WordPress maintenance](https://www.360vier.de/en/digital-platforms/wordpress-agency/wordpress-maintenance/) get access for their own AI agents via MCP. We build custom applications with AI as part of [AI software development](https://www.360vier.de/en/ai-enablement/ai-software-development/), and websites as a [WordPress agency](https://www.360vier.de/en/digital-platforms/wordpress-agency/). All systems: [Integrations](https://www.360vier.de/en/integrations/). ## Frequently asked questions about WordPress MCP What is a WordPress MCP server? An MCP server is an interface based on the Model Context Protocol through which AI applications call a website’s tools. In WordPress, these are things like “read post”, “create draft” or “upload image”. The server defines which tools exist and which user, with which permissions, is behind them. Is there an official MCP server for WordPress? Yes. The MCP Adapter is an official plugin from WordPress.org and builds on the Abilities API, which has been part of core since version 6.9. As of October 2026, it is at version 0.7.0 and is still considered experimental. For production systems, you should review permissions, sign-in and logging yourself. How do I connect Claude to WordPress? Via a custom connector in Claude that points to your MCP server’s address. Claude signs in via OAuth, and then the approved tools are available in the chat. The server must be reachable from the internet, because Claude connects from Anthropic’s cloud. Does WordPress MCP also work with ChatGPT? Yes. ChatGPT supports custom MCP servers via developer mode. The server stays the same as for Claude, and permissions and tools apply to both clients. Before using it, check OpenAI’s help pages for which plans and write actions ChatGPT currently allows. What happens with a WordPress update? The Abilities API is updated along with core. The MCP Adapter and the MCP specification are still changing; version 0.7.0 continues to serve older clients via the November 2025 schema. A custom MCP plugin therefore belongs in regular maintenance, with the tools tested after every update. Does this open my website to every AI service? No. Without a valid token, a protected MCP server answers no requests. Under the specification, every request must carry a token that the server issued for itself. In addition, tools can be switched off individually and access can be restricted to specific users and roles. Can an AI agent also edit WooCommerce or custom post types? Yes, if the server offers tools for it. The adapter’s default server only covers custom post types, meta fields or WPML language versions to the extent that plugins register them as abilities. A custom MCP plugin describes them specifically and ties the permissions to the appropriate WordPress role. ![Hans Mengler](https://www.360vier.de/wp-content/uploads/hans-mengler-team-360vier.webp)## Talk to us about your project Hans Mengler Managing Director [ Email Hans ](mailto:beratung@360vier.de) [ Get in touch ](https://www.360vier.de/en/inquiry/)