XeroWP
WSP MCP – AI Agents Connector

WSP MCP – AI Agents Connector

5/5 (4 ratings) 600 active installs Updated Aug 8, 2026
AIClaudemcpmodel context protocolwoocommerce
Download v2.6.7

WSP MCP – AI Agents Connector turns your WordPress site into a Model Context Protocol (MCP) server. AI clients can read and edit posts, pages, categories, tags, media, comments, users, and (when installed) Yoast SEO meta and Elementor page content — all under granular, per-ability admin control.

The plugin ships its own native MCP server. You do not need the WordPress MCP Adapter or any companion plugin: activate, copy your connection details from MCP > Connection, and connect. WooCommerce tools (products, orders, refunds, coupons, customers, reports) are available when WooCommerce is active, Advanced Custom Fields tools (field groups, fields, values, post types, taxonomies, options pages) when ACF is active, Ultimate Addons for Elementor (UAE) tools (widgets, templates, layout building, and settings) when UAE is active, and Gravity Forms tools (forms, entries, notifications, and confirmations) when Gravity Forms is active.

Built and maintained by the WebSensePro team. For documentation, setup guides, and connection help, visit the plugin home at freewordpressmcp.com.

Video tutorial

Key features

  • Built-in MCP server over a single REST endpoint (Streamable HTTP, JSON-RPC 2.0) — no external dependency.
  • Per-ability on/off toggles in MCP > Settings; write abilities are off by default.
  • Two authentication methods: WordPress Application Passwords (HTTP Basic) or a plugin-generated API key (Authorization: Bearer or X-WSP-MCP-API-Key).
  • Capability checks on every tool — an AI client can only do what its authenticated user can do.
  • Optional Yoast SEO and Elementor tools, shown only when those plugins are active.

Complete tools list

Every tool is individually toggleable in MCP > Settings, and all write tools are off by default.

Core WordPress

  • Posts — read, create, update, delete
  • Pages — read, create, update, delete
  • Categories — list, create, update, delete
  • Tags — list, create, update, delete
  • Comments — read, approve, and delete
  • Media — read the media library
  • Users — read user data
  • Site info — read general site details
  • Plugins — list active plugins
  • Search — search across site content

Yoast SEO (requires Yoast SEO)

  • Read SEO title, meta description, and focus keyphrase
  • Update SEO title, meta description, and focus keyphrase

Elementor (requires Elementor)

  • Pages — list pages/posts built with Elementor
  • Page structure — read the full element tree of a page
  • Elements — get a single element’s settings, or find elements by widget type or content
  • Templates — list saved templates from the library
  • Editing — add widgets, add layout containers/sections, update element settings, and remove elements
  • Code-bearing widget types (HTML, Shortcode, Code) are rejected and code-bearing settings (Custom CSS, Custom Attributes) are stripped; all text settings are sanitized with wp_kses_post()

WooCommerce (requires WooCommerce — financial and PII tools require the manage_woocommerce capability)

  • Products — list, get, create, update
  • Product variations — create
  • Orders — list, update status
  • Refunds — process refunds
  • Coupons — create, list
  • Order notes — add order notes
  • Customers — read customer data
  • Sales report — read sales reporting
  • Low-stock alerts — read low-stock products
  • Reviews — moderate product reviews

Advanced Custom Fields (requires ACF — structural changes require manage_options; value tools enforce per-object capabilities)

  • Field groups — list, get, create, update, delete, import
  • Fields — list, get, create, update, delete, duplicate, sync
  • Field values — get and set with dot-notation deep access, delete, get-all, bulk-update, and field object
  • Custom post types — manage
  • Taxonomies — manage
  • Options pages — manage

Gravity Forms (requires Gravity Forms — reads require gravityforms_edit_forms or gravityforms_view_entries; writes require form/entry-specific Gravity Forms caps)

  • Forms — list (ON by default), get (ON by default), create, update, delete, update form settings
  • Entries — list, get, update (status, read/starred flags, field values), delete (trash or permanent)
  • Notifications — get, create, update, delete
  • Confirmations — get, create, update, delete
  • All 18 tools are off by default (except list-forms and get-form); only registered when Gravity Forms is active

Ultimate Addons for Elementor (requires UAE — structural and settings writes require edit_posts, publish_posts, or manage_options)

  • Widgets — list, check usage, activate, deactivate, bulk toggle
  • Templates — list, get, create, duplicate, update, trash, restore Header/Footer/Blocks templates
  • Layout building — add sections, add columns, move elements, build layouts from JSON
  • Settings — get/update UAE settings, theme info, extensions, and design-system tokens
  • All 45 tools are off by default; string inputs are sanitized with wp_kses_post()

Links