MCP Protocol for WordPress · Free Plugin

Control your WordPress
with AI — naturally.

Connect Claude Desktop, Cursor, Kiro, and any MCP client to your WordPress site. Write posts, manage users, install plugins, build pages — all through natural conversation. No coding. No API complexity. Zero monthly fees.

🔌 Get Plugin Free 📖 Quick Setup Guide
Free WordPress Plugin
60+ Built-in Tools
OAuth 2.0 + Token Auth
Connected to WordPress
claude_desktop_config.json
{
  "mcpServers": {
    "wordpress": {
      "url": "https://yoursite.com/
       wp-json/sekhlo-mcp/v1/sse",
      "headers": {
        "Authorization":
        "Bearer YOUR_TOKEN"
      }
    }
  }
}
⚡ 3 tools called in 1.2s
60+
WordPress Tools
5+
MCP Clients Supported
0ms
External Data Sent
$0
Monthly Cost
Works with all major MCP clients
Claude Desktop
Cursor IDE
Kiro Dev
Continue.dev
Any MCP Client
✨ Core Features

Everything your AI needs
to manage WordPress.

One plugin. Full WordPress control. Talk to your site like a team member — through any MCP-compatible AI client.

🤖
Natural Language WordPress Control

Just type what you want — "Create a blog post about X", "Show me all draft posts", "Install the SEO plugin". Your AI client handles everything through 60+ purpose-built WordPress tools with no extra scripting needed.

Posts & Pages Users Media Plugins Themes WooCommerce Elementor
⚡
Full MCP Protocol

JSON-RPC 2.0 compliant. Protocol version 2025-03-26. Dual transport: SSE for real-time streaming + HTTP/RPC for direct calls.

SSE Transport HTTP/RPC JSON-RPC 2.0
🔐
OAuth 2.0 + PKCE

Secure authorization code flow for AI clients that support it. Plus static and temporary tokens for maximum flexibility across all clients.

🛡️
Rate Limiting

Configurable per-IP request throttling to protect your site from abuse. Set limits per time window from the admin panel.

📋
Activity Log + CSV Export

Debug and audit all MCP requests. Circular buffer of 200 recent entries. Export to CSV for analysis. Tokens always redacted in logs.

🎨
Deep Elementor Integration

Generate, edit, and manage Elementor pages through AI conversation. Create widget instances, apply blueprints, import/export templates — all through natural language. No Elementor UI required.

Generate Pages Edit Widgets Templates Blueprints
🔧
Fully Extensible

Register your own custom tools, resources, and prompts using WordPress action hooks. Build on top of the MCP foundation.

Custom Tools Hooks API
🛠️ 60+ Built-in Tools

Every WordPress action, covered.

Ask your AI client to do anything — these tools execute instantly, securely, directly on your site.

📝 Posts & Pages
wp_get_posts
wp_get_post
wp_get_post_by_slug
wp_create_post
wp_update_post
wp_delete_post
wp_bulk_post_operations
wp_get_pages
wp_get_page_by_slug
👤 Users & Media
wp_get_users
wp_create_user
wp_update_user
wp_get_media
wp_upload_media
wp_set_featured_image
wp_set_featured_image_from_url
wp_get_comments
wp_create_comment
🔌 Plugins & Themes
wp_list_plugins
wp_install_plugin
wp_activate_plugin
wp_configure_plugin
wp_list_themes
wp_install_theme
wp_activate_theme
wp_configure_theme
🎨 Elementor
generate_elementor_blueprint
apply_elementor_blueprint
get_elementor_widgets
save_elementor_template
⚙️ Site & WooCommerce
wp_get_option
wp_update_option
wp_get_site_info
wp_get_seo_meta
wp_update_seo_meta
woo_get_products
woo_get_orders
woo_get_customers
woo_create_product
woo_update_product
🤖 AI & Search
ai_generate_blog_outline
ai_suggest_internal_links
ai_generate_content_brief
search & fetch
🖥️ Supported Clients

Connect with any MCP client.

Works out-of-the-box with all major MCP-compatible AI tools. Same SSE endpoint, same token.

Claude Desktop
Anthropic's AI assistant. Best experience for natural language WordPress management.
Most Popular
Cursor IDE
AI-powered code editor. Manage your WordPress site without leaving your IDE.
Developers
Kiro Dev
Development assistant with autoApprove support for seamless workflow integration.
Dev Tools
Continue.dev
VS Code AI extension for developers who want WordPress control inside their editor.
VS Code
🚀 Quick Setup

Up and running in 5 minutes.

No server configuration. No complex OAuth flows. Just install, copy token, paste config.

1
📦
Install Plugin
Upload zip to WordPress Admin → Plugins → Add New → Upload. Activate it.
2
⚙️
Enable & Get Token
Go to Settings → Sekhlo MCP. Check "Enable MCP Server". Copy your API Token.
3
📋
Add to AI Client
Paste the SSE endpoint + token into your Claude Desktop or Cursor config file.
4
🎉
Start Talking
"List my posts", "Create a draft about X", "Install WooCommerce" — done!
Claude Desktop Config
claude_desktop_config.json JSON 
// Settings → Developer → Edit Config
{
  "mcpServers": {
    "wordpress": {
      "url": "https://yoursite.com/
        wp-json/sekhlo-mcp/v1/sse",
      "headers": {
        "Authorization":
        "Bearer YOUR_TOKEN"
      }
    }
  }
}
Cursor / Kiro Config
~/.cursor/mcp.json JSON 
// Same config works for Kiro too
{
  "mcpServers": {
    "wordpress": {
      "url": "https://yoursite.com/
        wp-json/sekhlo-mcp/v1/sse",
      "headers": {
        "Authorization":
        "Bearer YOUR_TOKEN"
      },
      "disabled": false
    }
  }
}
📡 Available Endpoints
SSE (Primary)
/wp-json/sekhlo-mcp/v1/sse
Messages
/wp-json/sekhlo-mcp/v1/messages
RPC
/wp-json/sekhlo-mcp/v1/rpc
🔐 Security

Your data never leaves your server.

All MCP communication happens directly between your AI client (running on your machine) and your WordPress site. Zero third-party involvement.

🔑 Token Authentication

Static tokens for permanent access and temporary tokens with expiry for enhanced security. Scoped tokens (read/write/admin) let you issue read-only access.

  • Static tokens — permanent, regeneratable
  • Temporary tokens — time-limited with expiry
  • Scoped access — read, write, admin
  • Tokens stored hashed — never plain text
  • Tokens always redacted in activity log

🛡️ OAuth 2.0 + PKCE

Full authorization code flow for AI clients that support OAuth. Short-lived auth codes and refresh tokens that auto-expire and are pruned on use.

  • Authorization code flow
  • PKCE challenge verification
  • Auto-expiring OAuth codes
  • Refresh token rotation

🏠 100% On-Premise — Your Data Stays Yours

This plugin makes zero calls to any external API. It does not send data to Anthropic, Mubashir Hassan, or any third party. Everything stays on your WordPress installation.

  • No external API calls
  • No telemetry or analytics
  • No tracking pixels or cookies on frontend
  • Rate limiting — configurable per-IP throttling
  • All WordPress user capabilities respected
  • Complete data deletion on uninstall
  • Multisite-aware cleanup on network uninstall
Activity Log Privacy
200-entry circular buffer stores method names and sanitized parameters only. Full request/response bodies are never stored. All logs deleted on plugin uninstall.
💬 Real Examples

Just say what you want done.

📝 Content
"Create a blog post about WordPress SEO tips"
"List all draft posts and publish the approved ones"
"Create an About Us page with team section"
"Add an internal link from post #5 to post #12"
🛒 WooCommerce
"List all WooCommerce products"
"Create a new product 'Hosting Plan' at $29/mo"
"Show me all pending orders from today"
"Get customer list and export their data"
⚙️ Site Management
"List all installed plugins and their status"
"Install and activate the Yoast SEO plugin"
"Create a user 'john' with editor role"
"What WordPress version and active theme?"
⚖️ Comparison

Why Sekhlo MCP vs manual REST API?

Capability Sekhlo MCP Manual REST API Other WP AI Plugins
Natural language commands✅ Full❌ Code required⚠️ Limited
MCP protocol compliance✅ 2025-03-26❌ Not MCP❌
Elementor deep integration✅ 14 tools❌❌
OAuth 2.0 + PKCE✅ Full⚠️ Manual❌
Works with Claude / Cursor / Kiro✅ All❌ Custom work⚠️ Claude only
Data sent to external servers✅ NoneDepends⚠️ Often yes
Rate limiting + activity log✅ Built-in❌⚠️ Varies
Monthly cost✅ $0Dev time⚠️ Often paid
⭐ Reviews

Loved by WordPress developers.

★★★★★
"I connected Claude Desktop to my WordPress site in under 5 minutes. Now I just tell Claude 'write a post about topic X' and it appears directly in my drafts. This is the future."
A
Asad R.
WordPress Developer
★★★★★
"Managing WooCommerce products through natural language is a game changer. I said 'list all products under $20 and update their price to $25' — done in seconds. No code."
S
Sara K.
E-commerce Store Owner
★★★★★
"The Elementor integration is incredible. I told Claude 'generate a services page with 3 service cards using my brand colors' — it built the entire Elementor layout automatically."
U
Usman B.
Web Design Agency
★★★★★
"As a Cursor user, having WordPress tools right inside my IDE is perfect. I code the theme and manage content without switching apps. The rate limiting feature keeps things safe."
M
Maryam T.
Full-Stack Developer
★★★★★
"Zero data sent externally — that was my biggest concern. Verified it with network monitoring. Everything stays between Claude Desktop (on my machine) and my own server. Perfect."
F
Farhan I.
Security Consultant
★★★★★
"The activity log with CSV export is perfect for client reporting. I can show exactly what AI operations were performed on their site. OAuth 2.0 PKCE support is proper enterprise-grade."
Z
Zeeshan A.
WordPress Consultant

Start controlling WordPress
with natural language today.

Free plugin. 60+ tools. Works with Claude Desktop, Cursor, Kiro, and more. Your data stays on your server.

🔌 Get Sekhlo MCP Free 👨‍💻 By Mubashir Hassan