MCP Wordpress MCP server

by crunchtools·io.github.crunchtools/wordpress·v0.4.1·1 stars

No reviews yet

Secure MCP server for WordPress content management

A91/100grade A

Write a review Install

What users say

No reviews yet

Be the first

Safety scan

A91/100

full report

Adoption

Growing

1 stars14 downloads/wk

Reviews

Write one

Nobody has reviewed MCP Wordpress yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

MCP Wordpress tools (30, 13 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

wordpress_create_commentwrite action
Create a new comment on a WordPress post.
wordpress_create_pagewrite action
Create a new WordPress page.
wordpress_create_postwrite action
Create a new WordPress post.
wordpress_delete_commentwrite action
Delete or trash a WordPress comment.
wordpress_delete_mediawrite action
Delete a WordPress media item.
wordpress_delete_pagewrite action
Delete or trash a WordPress page.
wordpress_delete_postwrite action
Delete or trash a WordPress post.
wordpress_get_comment
Get a single WordPress comment by ID.
wordpress_get_media
Get a single WordPress media item by ID.
wordpress_get_media_url
Get the public URL for a WordPress media item.
wordpress_get_page
Get a single WordPress page by ID with full content.
wordpress_get_postwrite action
Get a single WordPress post by ID with full content.
wordpress_get_revision
Get a specific revision of a WordPress post.
wordpress_get_site_info
Get WordPress site information.
wordpress_list_categories
List available WordPress categories.
wordpress_list_comments
List WordPress comments with filtering.
wordpress_list_media
List WordPress media items with filtering.
wordpress_list_page_revisions
List revisions for a WordPress page.
wordpress_list_pages
List WordPress pages with filtering and pagination.
wordpress_list_posts
List WordPress posts with filtering and pagination.
wordpress_list_revisions
List revisions for a WordPress post.
wordpress_list_tags
List available WordPress tags.
wordpress_moderate_comment
Moderate a WordPress comment by changing its status.
wordpress_search_posts
Search WordPress posts by keyword in title and content.
wordpress_test_connection
Test connection to WordPress REST API.
wordpress_update_commentwrite action
Update an existing WordPress comment.
wordpress_update_mediawrite action
Update WordPress media item metadata.
wordpress_update_pagewrite action
Update an existing WordPress page.
wordpress_update_postwrite action
Update an existing WordPress post.
wordpress_upload_mediawrite action
Upload a media file to WordPress from a local file path.

Public scan report

scanner v0.1.10 · 2026-09-28 · same rubric, same numbers if you re-run it

no findings

Code scan15 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 2 days ago15/15
Maintainer identityregistry namespace matches repository owner7/10

Overall 91/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

How MCP Wordpress compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score: 91/100; higher than 85% of 48,243 servers
Tools: 30; the typical server has 7
Tools that change things: 43%; typical: 0%. Fewer write tools means less an agent can break
GitHub stars: 1; more than 65% of 28,706 servers
Downloads a week: 14; more than 4% of 12,306 servers with a package

What its tools let an agent do: 17 read · 13 change

Install MCP Wordpress in Claude Code, Cursor or VS Code

claude mcp add wordpress -- uvx mcp-wordpress-crunchtools

Add to Cursor

What the publisher says

From the MCP Wordpress repository's README, as published. We do not edit it. Read it on GitHub

MCP WordPress CrunchTools

A secure MCP (Model Context Protocol) server for WordPress content management. Designed for developers publishing about their work.

Overview

This MCP server is designed to be:

Secure by default - Input validation, credential protection, and SSRF prevention
No third-party services - Runs locally via stdio, your credentials never leave your machine
Cross-platform - Works on Linux, macOS, and Windows
Automatically updated - GitHub Actions monitor for CVEs and update dependencies
Containerized - Available at quay.io/crunchtools/mcp-wordpress

Naming Convention

Features

30 Tools for posts, pages, media, and comments
Security-focused: Credentials protected, input validation, SSRF prevention
Developer workflow: Scheduled publishing, revisions, search
Easy integration: Works with Claude Code and other MCP clients

Installation

With uvx (recommended)

uvx mcp-wordpress-crunchtools

With pip

pip install mcp-wordpress-crunchtools
mcp-wordpress-crunchtools

With Container

# Create a shared upload directory (required before first run)
mkdir -p ~/.local/share/mcp-uploads-downloads

podman run -v ~/.local/share/mcp-uploads-downloads:/tmp/mcp-uploads:z \
  -e WORDPRESS_URL=https://example.com \
  -e WORDPRESS_USERNAME=admin \
  -e WORDPRESS_APP_PASSWORD='xxxx xxxx xxxx xxxx' \
  quay.io/crunchtools/mcp-wordpress

SELinux note: Use :z (lowercase, shared) instead of :Z (uppercase, private).

MCP servers run as long-lived stdio processes. With :Z, files copied into the

directory after container start won't have the container's private MCS label and

will be invisible inside the container. The :z flag sets a shared

containerfilet context that all containers and the host can read/write.

Tip: Use the same shared directory (~/.local/share/mcp-uploads-downloads/)

across multiple MCP container servers (e.g., mcp-wordpress and mcp-gemini) so

generated files are immediately available for upload without copying.

From source

git clone https://github.com/crunchtools/mcp-wordpress.git
cd mcp-wordpress
uv sync --all-extras
uv run mcp-wordpress-crunchtools

Configuration

Set these environment variables:

Creating an Application Password

Log in to WordPress admin
Go to Users → Profile
Scroll to Application Passwords
Enter a name (e.g., "MCP Server") and click Add New
Copy the generated password (shown once)

Usage with Claude Code

Using uvx (recommended)

claude mcp add mcp-wordpress-crunchtools \
    --env WORDPRESS_URL=https://example.com \
    --env WORDPRESS_USERNAME=admin \
    --env WORDPRESS_APP_PASSWORD="xxxx xxxx xxxx xxxx" \
    -- uvx mcp-wordpress-crunchtools

Using pip

pip install mcp-wordpress-crunchtools

claude mcp add mcp-wordpress-crunchtools \
    --env WORDPRESS_URL=https://example.com \
    --env WORDPRESS_USERNAME=admin \
    --env WORDPRESS_APP_PASSWORD="xxxx xxxx xxxx xxxx" \
    -- mcp-wordpress-crunchtools

Using Container

# Create a shared upload directory (required before first run)
mkdir -p ~/.local/share/mcp-uploads-downloads

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

MCP Wordpress: common questions

Is MCP Wordpress MCP server safe?: Yes, by our scan: it is graded A (91/100). Read the MCP Wordpress safety report
How do I install MCP Wordpress?: It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does MCP Wordpress need an API key?: Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is MCP Wordpress maintained?: The last commit was 40 days ago (2026-09-26). The latest release is v0.4.1.
How does MCP Wordpress compare with other MCP servers?: safety score 91/100 (higher than 85% of 48,243 servers); tools 30 (the typical server has 7); tools that change things 43% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.