Summary
This connects Claude directly to your WordPress site via the REST API, exposing 30 tools across posts, pages, media, and comments. You can create drafts, schedule publishing, upload images, moderate comments, and search content without leaving your editor. It runs locally over stdio with credential validation, SSRF protection, and input sanitization baked in. Available as a Python package or container, with automated CVE monitoring through GitHub Actions. Useful if you're publishing technical articles or managing WordPress content programmatically and want Claude to handle the REST API calls instead of writing curl commands or switching to wp-admin.
Plug Mailtrap into your AI workflow and let it handle the email.
Connect Mailtrap MCP →
Agent, run crypto. Access onchain data & trade routes via 1inch.
Install now →
Make coding agent sessions - Searchable, Shareable, Vendor-neutral & Scored.
Try For Free →
Your agent targets a perfect 10 Code Health score. Deterministic. Every commit.
Try For Free →
Integrate web data into your AI product. One API to scrape website & brand data.
Get API Key Now →
belt cli automatically finds the best tools and skills for your agent. image, video, music, tts...
one prompt install →
Tools
Public tool metadata for what this MCP can expose to an agent.
20 tools
wp_list_postsList WordPress posts with optional filters. Returns post ID, title, status, date, and categories. Use to browse existing content or find posts by keyword.3 params
List WordPress posts with optional filters. Returns post ID, title, status, date, and categories. Use to browse existing content or find posts by keyword.
Parameters* required
per_pagenumberNumber of posts to return (default 10, max 100)
searchstringSearch posts by keyword
statusstringFilter by status: publish, draft, pending, private, trash
wp_get_postGet a single WordPress post with full content, metadata, categories, and tags. Use to inspect post content before editing.1 params
Get a single WordPress post with full content, metadata, categories, and tags. Use to inspect post content before editing.
Parameters* required
idnumberPost ID
wp_create_postCreate a new WordPress post. Provide title and content (HTML). Optionally set status (draft/publish), categories, and tags.5 params
Create a new WordPress post. Provide title and content (HTML). Optionally set status (draft/publish), categories, and tags.
Parameters* required
categoriesarrayCategory IDs
contentstringPost content (HTML)
statusstringPost status: draft (default), publish, pending, private
tagsarrayTag IDs
titlestringPost title
wp_update_postUpdate an existing WordPress post. Change title, content, status, categories, or tags.6 params
Update an existing WordPress post. Change title, content, status, categories, or tags.
Parameters* required
categoriesarrayNew category IDs (optional)
contentstringNew content HTML (optional)
idnumberPost ID to update
statusstringNew status (optional)
tagsarrayNew tag IDs (optional)
titlestringNew title (optional)
wp_delete_postDelete a WordPress post. Moves to trash by default.1 params
Delete a WordPress post. Moves to trash by default.
Parameters* required
idnumberPost ID to delete
wp_list_pagesList WordPress pages. Returns page ID, title, status, and parent page. Use to browse site page structure.2 params
List WordPress pages. Returns page ID, title, status, and parent page. Use to browse site page structure.
Parameters* required
per_pagenumberNumber of pages to return (default 10, max 100)
statusstringFilter by status: publish, draft, pending, private
wp_get_pageGet a single WordPress page with full content and metadata.1 params
Get a single WordPress page with full content and metadata.
Parameters* required
idnumberPage ID
wp_create_pageCreate a new WordPress page. Provide title and content (HTML). Optionally set parent page for hierarchy.4 params
Create a new WordPress page. Provide title and content (HTML). Optionally set parent page for hierarchy.
Parameters* required
contentstringPage content (HTML)
parentnumberParent page ID for hierarchical pages
statusstringPage status: draft (default), publish
titlestringPage title
wp_update_pageUpdate an existing WordPress page.4 params
Update an existing WordPress page.
Parameters* required
contentstringNew content HTML (optional)
idnumberPage ID to update
statusstringNew status (optional)
titlestringNew title (optional)
wp_delete_pageDelete a WordPress page.1 params
Delete a WordPress page.
Parameters* required
idnumberPage ID to delete
wp_list_mediaList media files in the WordPress library. Returns file URLs, types, and metadata.2 params
List media files in the WordPress library. Returns file URLs, types, and metadata.
Parameters* required
media_typestringFilter by type: image, video, audio, application
per_pagenumberNumber of items to return (default 10)
wp_delete_mediaPermanently delete a media file from WordPress.1 params
Permanently delete a media file from WordPress.
Parameters* required
idnumberMedia ID to delete
wp_list_commentsList comments on WordPress posts. Filter by post ID.2 params
List comments on WordPress posts. Filter by post ID.
Parameters* required
per_pagenumberNumber of comments to return
postnumberFilter by post ID
wp_create_commentCreate a new comment on a WordPress post.4 params
Create a new comment on a WordPress post.
Parameters* required
author_emailstringComment author email
author_namestringComment author name
contentstringComment content
postnumberPost ID to comment on
wp_update_commentUpdate or moderate a comment. Change content or approval status.3 params
Update or moderate a comment. Change content or approval status.
Parameters* required
contentstringNew comment content (optional)
idnumberComment ID
statusstringNew status: approved, hold, spam, trash
wp_delete_commentPermanently delete a comment.1 params
Permanently delete a comment.
Parameters* required
idnumberComment ID to delete
wp_list_categoriesList all WordPress categories with post counts.2 params
List all WordPress categories with post counts.
Parameters* required
per_pagenumberNumber of categories to return (default 100)
searchstringFilter categories by search term
wp_list_tagsList all WordPress tags with post counts.2 params
List all WordPress tags with post counts.
Parameters* required
per_pagenumberNumber of tags to return (default 100)
searchstringFilter tags by search term
wp_list_usersList WordPress users with their roles.2 params
List WordPress users with their roles.
Parameters* required
per_pagenumberNumber of users to return (default 10)
searchstringFilter users by search term
wp_get_site_infoGet WordPress site information: name, description, URL, timezone, and available features.1 params
Get WordPress site information: name, description, URL, timezone, and available features.
Parameters* required
_fieldsstringComma-separated list of fields to include in the response (e.g. "name,description,url")
MCP WordPress CrunchTools
A secure MCP (Model Context Protocol) server for WordPress content management. Designed for developers publishing about their work.
Overview
This MCP server is designed to be:
- Secure by default - Comprehensive input validation, credential protection, and SSRF prevention
- No third-party services - Runs locally via stdio, your credentials never leave your machine
- Cross-platform - Works on Linux, macOS, and Windows
- Automatically updated - GitHub Actions monitor for CVEs and update dependencies
- Containerized - Available at
quay.io/crunchtools/mcp-wordpress
Naming Convention
| Component | Name |
|---|---|
| GitHub repo | crunchtools/mcp-wordpress |
| Container | quay.io/crunchtools/mcp-wordpress |
| Python package (PyPI) | mcp-wordpress-crunchtools |
| CLI command | mcp-wordpress-crunchtools |
| Module import | mcp_wordpress_crunchtools |
Features
- 30 Tools for posts, pages, media, and comments
- Security-focused: Credentials protected, input validation, SSRF prevention
- Developer workflow: Scheduled publishing, revisions, search
- Easy integration: Works with Claude Code and other MCP clients
Installation
With uvx (recommended)
uvx mcp-wordpress-crunchtools
With pip
pip install mcp-wordpress-crunchtools
mcp-wordpress-crunchtools
With Container
# Create a shared upload directory (required before first run)
mkdir -p ~/.local/share/mcp-uploads-downloads
podman run -v ~/.local/share/mcp-uploads-downloads:/tmp/mcp-uploads:z \
-e WORDPRESS_URL=https://example.com \
-e WORDPRESS_USERNAME=admin \
-e WORDPRESS_APP_PASSWORD='xxxx xxxx xxxx xxxx' \
quay.io/crunchtools/mcp-wordpress
SELinux note: Use
:z(lowercase, shared) instead of:Z(uppercase, private). MCP servers run as long-lived stdio processes. With:Z, files copied into the directory after container start won't have the container's private MCS label and will be invisible inside the container. The:zflag sets a sharedcontainer_file_tcontext that all containers and the host can read/write.Tip: Use the same shared directory (
~/.local/share/mcp-uploads-downloads/) across multiple MCP container servers (e.g., mcp-wordpress and mcp-gemini) so generated files are immediately available for upload without copying.
From source
git clone https://github.com/crunchtools/mcp-wordpress.git
cd mcp-wordpress
uv sync --all-extras
uv run mcp-wordpress-crunchtools
Configuration
Set these environment variables:
| Variable | Description | Example |
|---|---|---|
WORDPRESS_URL | WordPress site URL | https://example.com |
WORDPRESS_USERNAME | WordPress username | admin |
WORDPRESS_APP_PASSWORD | Application password | xxxx xxxx xxxx xxxx |
MCP_UPLOAD_DIR | Upload directory inside container (optional) | /tmp/mcp-uploads (default) |
Creating an Application Password
- Log in to WordPress admin
- Go to Users → Profile
- Scroll to Application Passwords
- Enter a name (e.g., "MCP Server") and click Add New
- Copy the generated password (shown once)
Usage with Claude Code
Using uvx (recommended)
claude mcp add mcp-wordpress-crunchtools \
--env WORDPRESS_URL=https://example.com \
--env WORDPRESS_USERNAME=admin \
--env WORDPRESS_APP_PASSWORD="xxxx xxxx xxxx xxxx" \
-- uvx mcp-wordpress-crunchtools
Using pip
pip install mcp-wordpress-crunchtools
claude mcp add mcp-wordpress-crunchtools \
--env WORDPRESS_URL=https://example.com \
--env WORDPRESS_USERNAME=admin \
--env WORDPRESS_APP_PASSWORD="xxxx xxxx xxxx xxxx" \
-- mcp-wordpress-crunchtools
Using Container
# Create a shared upload directory (required before first run)
mkdir -p ~/.local/share/mcp-uploads-downloads
claude mcp add mcp-wordpress-crunchtools \
--env WORDPRESS_URL=https://example.com \
--env WORDPRESS_USERNAME=admin \
--env WORDPRESS_APP_PASSWORD="xxxx xxxx xxxx xxxx" \
-- podman run -i --rm \
-v ~/.local/share/mcp-uploads-downloads:/tmp/mcp-uploads:z \
-e WORDPRESS_URL \
-e WORDPRESS_USERNAME \
-e WORDPRESS_APP_PASSWORD \
quay.io/crunchtools/mcp-wordpress
Available Tools
Site Tools
| Tool | Description |
|---|---|
wordpress_get_site_info | Get site title, description, URL, timezone |
wordpress_test_connection | Verify API credentials work |
Post Tools
| Tool | Description |
|---|---|
wordpress_list_posts | List posts with filtering (status, category, search) |
wordpress_get_post | Get single post by ID with full content |
wordpress_search_posts | Search posts by keyword |
wordpress_create_post | Create new post (supports scheduling) |
wordpress_update_post | Update existing post |
wordpress_delete_post | Delete/trash a post |
wordpress_list_revisions | List revisions for a post |
wordpress_get_revision | Get specific revision content |
wordpress_list_categories | List available categories |
wordpress_list_tags | List available tags |
Page Tools
| Tool | Description |
|---|---|
wordpress_list_pages | List pages with filtering |
wordpress_get_page | Get single page by ID |
wordpress_create_page | Create new page |
wordpress_update_page | Update existing page |
wordpress_delete_page | Delete/trash a page |
wordpress_list_page_revisions | List page revisions |
Media Tools
| Tool | Description |
|---|---|
wordpress_list_media | List media items |
wordpress_get_media | Get media item details |
wordpress_upload_media | Upload file from local path |
wordpress_update_media | Update media metadata |
wordpress_delete_media | Delete media item |
wordpress_get_media_url | Get public URL for media |
Comment Tools
| Tool | Description |
|---|---|
wordpress_list_comments | List comments with filtering |
wordpress_get_comment | Get single comment |
wordpress_create_comment | Add a comment to a post |
wordpress_update_comment | Update comment content/status |
wordpress_delete_comment | Delete a comment |
wordpress_moderate_comment | Approve, hold, spam, or trash |
Examples
Create a Draft Post
Create a new WordPress post titled "My Technical Article" with the content below. Keep it as a draft.
Schedule a Post
Update post ID 123 to publish on December 25, 2024 at 10:00 AM.
Upload an Image
Upload this image to WordPress and set the alt text to "Architecture diagram".
Find and Moderate Comments
List all comments in "hold" status and approve the legitimate ones.
Security
- Credential Protection: All credentials stored as
SecretStr, never logged - SSRF Prevention: REST API path hardcoded, cannot be overridden
- Input Validation: All inputs validated via Pydantic models
- Rate Limiting: Handles WordPress rate limits gracefully
- TLS Enforcement: All requests use HTTPS with certificate validation
- Size Limits: Response size limited to 10MB to prevent memory issues
- Timeout: All requests timeout after 30 seconds
Development
# Install dev dependencies
uv sync --all-extras
# Run tests
uv run pytest
# Run linting
uv run ruff check src tests
# Run type checking
uv run mypy src
# Format code
uv run ruff format src tests
License
AGPL-3.0-or-later
Credits
Built by crunchtools.com
Featured
Plug Mailtrap into your AI workflow and let it handle the email.
Connect Mailtrap MCP →Agent, run crypto. Access onchain data & trade routes via 1inch.
Install now →Make coding agent sessions - Searchable, Shareable, Vendor-neutral & Scored.
Try For Free →Your agent targets a perfect 10 Code Health score. Deterministic. Every commit.
Try For Free →Integrate web data into your AI product. One API to scrape website & brand data.
Get API Key Now →belt cli automatically finds the best tools and skills for your agent. image, video, music, tts...
one prompt install →