Sigma MCP Connector implements the Model Context Protocol (MCP) on top of your WordPress site, so AI assistants can act on your content as a real, authenticated WordPress user — never anonymously, never with more access than that user already has.

It exposes a JSON-RPC 2.0 MCP endpoint secured by a full OAuth 2.0 Authorization Code + PKCE flow. An administrator registers each AI client (Claude.ai, Codex, VS Code, Cursor AI, or any other MCP-aware tool) as an OAuth client; a WordPress user then explicitly signs in and approves a consent screen before that client can do anything. From then on, every tool call is checked against that specific user’s WordPress capabilities and written to a full audit log.

Key Features

OAuth 2.0 + PKCE — Authorization Code grant with mandatory PKCE, hashed client secrets, short-lived access tokens, and long-lived refresh tokens
27 Role-Aware MCP Tools — Read and write posts, pages, media, taxonomies, menus, ACF fields, post meta, and users, each gated by a specific WordPress capability
Live Role Access Matrix — Generated at runtime from real WordPress role capabilities, shown identically on the Connections page, the Documentation page, and the OAuth consent screen, so it can never drift out of sync with what’s actually enforced
Per-Role Rate Limiting — Configurable request ceilings so no single connection can overwhelm the site
Full Activity Log — Filterable, paginated audit trail of every OAuth and tool-call event, with before/after snapshots on content-mutating calls and configurable retention
Built-In Setup Documentation — Step-by-step configuration instructions for Claude.ai, Claude Desktop, Codex, VS Code (GitHub Copilot), and Cursor AI
No External Dependencies — No bundled third-party service, no analytics, no phone-home; the plugin only responds to requests from clients you explicitly register and authorize

Who Is This For?

Site owners who want to let an AI assistant help manage content without handing out admin passwords or API keys with unlimited access
Agencies and developers building AI-assisted editorial workflows on top of WordPress
Teams who need an auditable, revocable, role-scoped way to connect AI tools to a WordPress site

Additional Information

System Requirements

Minimum
* WordPress 6.0
* PHP 8.0
* MySQL 5.7 or MariaDB 10.3

Recommended
* HTTPS enabled
* Pretty permalinks enabled

Custom Database Tables

{prefix}sigma_mcp_oauth_clients — Registered OAuth applications
{prefix}sigma_mcp_oauth_codes — Short-lived, single-use authorization codes
{prefix}sigma_mcp_oauth_tokens — Access and refresh tokens
{prefix}sigma_mcp_log — Legacy per-call log
{prefix}sigma_mcp_event_log — Full structured audit log

Support

Support Forum: https://wordpress.org/support/plugin/sigma-mcp-connector/
Email: [email protected]