WPGuard MCP server

WPGuard

Put your AI assistant to work on WordPress. Preview the edit. Keep the corrections that matter.

WPGuard connects an MCP client to WordPress so it can inspect a site, update content and settings, and return a record of its changes. When you teach it a supported correction, future edits to that exact target are checked before they are applied.

It is the open-source server behind WP MCP Server. Run it on your own machine or server and connect your WordPress sites over SSH or the companion plugin.

Get started · Product website · Security · MIT license

Useful work, with something to review

Ask your assistant to:

• Inspect the active theme, plugins, content types, and available fields before changing a page.
• Find a target page and approved reference, compare their complete stored content, and preview a bounded full-page diff.
• Replace a Gutenberg or classic page body while proving named copy survives and refusing to overwrite a later human edit.
• Update one Gutenberg block structurally, then verify the native WordPress revision created by the write.
• Test a page change on a registered staging site and capture desktop/mobile evidence before opening production approval.
• Update one plugin or theme with version pinning, health checks, and automatic restoration after a failed update.
• Preview a content replacement, setting update, or file edit before applying it.
• Preserve an approved text fragment, field value, or link during later edits to the same target.
• Retrieve earlier work for an exact client and show the originating evidence.
• Review a change packet and the snapshots captured by supported mutation tools.

The tools provide the WordPress access and change records. Your MCP client supplies the assistant and its reasoning.

Teach it once. Check the next edit.

Suppose a restaurant's reservations page must keep the link labeled Reserve a table pointing to /reserve.

You record that requirement with a rejected example, an accepted example, and its source. WPGuard first proves the check distinguishes those examples. A later content edit that removes the link fails its preview check and is blocked when the assistant tries to apply it.

This synthetic example uses the wpcorrectionrecord MCP tool after registering the site:

wp_correction_record(
    site="restaurant-staging",
    target="post:84:content",
    human_correction="Keep the reservations link on this page.",
    source_ref="review:reservation-link-example",
    human_requested_basis="The site owner requested this link in the example review.",
    kind="html_link",
    expected={"href": "/reserve", "text": "Reserve a table"},
    rejected_value="<p>Contact us to book.</p>",
    accepted_value='<p><a href="/reserve">Reserve a table</a></p>',
)

The requirement applies to this registered site and this post body. It does not become a rule for every page or another client. Retiring a correction preserves its history and the reason it was retired.

Supported checks cover exact text presence or absence, scalar equality, a value at a JSON Pointer, and an HTML anchor's destination and text. The link check examines HTML structure; it does not prove the destination works or the link is visible in a browser.

Start from source

Requires Python 3.10 or newer. These commands install this repository; they do not depend on a published package or container image.

git clone https://github.com/cgallic/wpguard-mcp.git
cd wpguard-mcp
python -m venv .venv
source .venv/bin/activate
python -m pip install ".[browser]"
playwright install chromium
export WPGUARD_TOKEN_ADMIN="$(python -c 'import secrets; print(secrets.token_hex(32))')"
wpguard-mcp

Shortened. The full README is on GitHub.