Picot MCP turns your WordPress site into an MCP (Model Context Protocol) server so AI clients such as Cursor or Claude Code can work with content safely.
Architecture: the official WordPress MCP Adapter is the protocol runtime; Picot adds the product layer (API keys, scopes, admin UI, audit log).
- One MCP URL and API keys to connect (plaintext shown only once at issue)
- Multiple API keys with per-key scopes, optional expiry, and rate limits
- Feature toggles for core WordPress areas plus optional Picot product integrations (SEO Writer, AIO Optimizer, Editor Converter)
- Plugin/theme install and update from wordpress.org slugs only
- Plugin/theme activation, deactivation, and ZIP package transfer are not available via MCP (use WordPress admin)
- Audit log with user, key id, IP, and failure codes
- Built on the WordPress Abilities API and official MCP Adapter