Wpagent MCP server

Read from the package source without running it. The installed server may list more.

• wp_activate_plugin

  Activate an installed WordPress plugin. You can provide the plugin file path (e.g. "woocommerce/woocommerce.php"), slug (e.g. "woocommerce"), or name.

• wp_activate_theme

  Switch the active WordPress theme. Provide the theme slug (directory name).

• wp_audit_best_practices

  Audit the WordPress site for best practices. Returns a checklist covering security (SSL, debug mode, file editing, admin user, XML-RPC, spam protection, security plugin), SEO (permalinks, SEO plugin), performance (caching plugin), maintenance (backups, auto-updates, WP/plugin updates), and theme (child theme). Each check includes a status (pass/fail/warning) and whether it can be auto-fixed.

• wp_cli_executewrite action

  Execute a WP-CLI command. Deny by default: only allowlisted commands run (cache, comment, core, cron, language, media, menu, option, plugin, post, rewrite, role, sidebar, site, term, theme, transient, user, widget). db, eval, eval-file, shell, server, config and package are refused, as are the --require, --exec, --ssh, --http and --path flags. Quote any value containing shell metacharacters. The f

• wp_cli_list_commands

  List the allowlisted WP-CLI commands and their permitted subcommands, plus the refused global flags. Anything absent from the list is refused.

• wp_cli_status

  Check WP-CLI availability. Returns whether the feature is enabled in wp-config.php, whether proc_open is available, the WP-CLI path and version. Call this before any WP-CLI command.

• wp_create_contentwrite action

  Create a new WordPress post, page, or product. For WooCommerce products, you can set prices, SKU, stock, etc.

• wp_create_userwrite action

  Create a new WordPress user with username, email, and optional role/name fields.

• wp_deactivate_plugin

  Deactivate an active WordPress plugin.

• wp_delete_commentwrite action

  Permanently delete a comment.

• wp_delete_contentwrite action

  Delete a WordPress post, page, or product. By default moves to trash; use force=true to permanently delete.

• wp_delete_mediawrite action

  Delete a media file from the WordPress media library.

• wp_delete_optionwrite action

  Delete a WordPress option by key.

• wp_delete_pluginwrite action

  Delete a WordPress plugin (deactivates it first if active). This permanently removes the plugin files.

• wp_elementor_get_page

  Get the Elementor data for a page/post by its ID. Returns the full element tree (sections > columns > widgets), page settings, and metadata. Use this to understand the current structure before making modifications.

• wp_elementor_list_templates

  List all saved Elementor templates (sections, pages, headers, footers, etc.).

• wp_elementor_status

  Check if Elementor is active and get its version.

• wp_elementor_update_pagewrite action

  Update the Elementor data for a page/post. Send the full element tree as JSON. The structure follows Elementor's hierarchy: sections (elType: "section") contain columns (elType: "column") which contain widgets (elType: "widget", widgetType: "heading"|"text-editor"|"image"|etc.). Each element has an "id" (8-char hex), "settings" object, and "elements" array for children. Always read the page first

• wp_elementor_widget_types

  List all available Elementor widget types with their names, titles, icons, and categories. Use this to know which widgets you can use when building pages.

• wp_fix_best_practices

  Apply auto-fixes for best practice issues. Currently supports fixing: "permalinks" (sets to /%postname%/) and "xmlrpc" (disables via mu-plugin). Pass an array of fix IDs to apply.

• wp_get_comment

  Get a single comment with full details by its ID.

• wp_get_content

  Get a single WordPress content item by ID with full details including content, meta fields, categories, tags, and WooCommerce product data if applicable.

• wp_get_media

  Get detailed information about a single media file including all available sizes and URLs.

• wp_get_option

  Get a single WordPress option value by key. Common options: blogname, blogdescription, timezone_string, date_format, time_format, permalink_structure, posts_per_page, etc.

• wp_get_options_batch

  Get multiple WordPress options at once. Provide a comma-separated list of option keys.

• wp_get_user

  Get detailed information about a specific WordPress user by ID.

• wp_install_plugin

  Install a plugin from the WordPress.org repository by its slug. Optionally activate it immediately after installation.

• wp_install_theme

  Install a theme from WordPress.org by its slug. Optionally activate it after installation.

• wp_list_comments

  List comments with optional filtering by status (approve, hold, spam, trash, all), post ID, and search.

• wp_list_content

  List WordPress content (posts, pages, products, or any custom post type). Supports search, pagination, and filtering by status.

• wp_list_media

  List media files in the WordPress media library. Can filter by MIME type (image/jpeg, video/mp4, etc.) and search by name.

• wp_list_plugins

  List all installed WordPress plugins with their status (active/inactive), version, and update availability.

• wp_list_themes

  List all installed WordPress themes with their status (active/inactive), version, and parent theme info.

• wp_list_users

  List WordPress users with optional filtering by role, search query, and pagination.

• wp_reply_comment

  Reply to a comment as the site administrator.

• wp_search_plugins

  Search the WordPress.org plugin directory. Use this to find plugins by name or keyword before installing them.

• wp_search_themes

  Search the WordPress.org theme directory for themes matching a query.

• wp_set_options

  Set one or more WordPress options. Provide an object of key-value pairs. Note: some sensitive options (siteurl, admin_email, etc.) are blocked for security.

• wp_site_health

  Check if the WordPress site is reachable and the WP AI Assistant plugin is active.

• wp_site_info

  Get comprehensive WordPress site information including version, plugins, theme, post types, WooCommerce status, and server details.

• wp_update_comment_statuswrite action

  Change a comment status: approve, hold (unapprove), spam, or trash.

• wp_update_contentwrite action

  Update an existing WordPress post, page, or product. Only provide the fields you want to change.

• wp_update_pluginwrite action

  Update a WordPress plugin to the latest version from WordPress.org.

• wp_update_userwrite action

  Update an existing WordPress user (email, role, name fields).

• wp_upload_mediawrite action

  Upload a file to the WordPress media library using base64-encoded data. Maximum file size: 10MB.

• wp_woocommerce_create_couponwrite action

  Create a new WooCommerce coupon with discount rules.

• wp_woocommerce_create_tax_ratewrite action

  Create a new WooCommerce tax rate for a specific country/state.

• wp_woocommerce_get_orderwrite action

  Get full details of a single WooCommerce order including line items, billing/shipping addresses, and payment info.

• wp_woocommerce_get_settings

  Get WooCommerce settings by group. Available groups: "general" (store address, currency), "products" (weights, stock), "shipping", "checkout" (guest checkout, etc.), "emails".

• wp_woocommerce_list_coupons

  List all WooCommerce coupons with their discount types, amounts, and usage stats.

• wp_woocommerce_list_orders

  List WooCommerce orders with customer info, totals, and status. Supports filtering by status and pagination.

• wp_woocommerce_list_tax_rates

  List all WooCommerce tax rates configured on the site.

• wp_woocommerce_payment_gateways

  List all available WooCommerce payment gateways with their enabled/disabled status.

• wp_woocommerce_shipping_zones

  List WooCommerce shipping zones with their configured shipping methods.

• wp_woocommerce_stats

  Get WooCommerce sales statistics for a given period: total revenue, order count, average order value, and customer count.

• wp_woocommerce_status

  Check if WooCommerce is installed and active. Returns store details: currency, address, product/order counts, and enabled features.

• wp_woocommerce_update_payment_gatewaywrite action

  Enable/disable or configure a WooCommerce payment gateway.

• wp_woocommerce_update_settingswrite action

  Update WooCommerce settings. Provide key-value pairs of woocommerce_ prefixed options. For example: {"woocommerce_currency": "EUR", "woocommerce_default_country": "FR"}.

• Code scan31 source files scanned25/25
• –Live reliabilityno gateway calls yet and no remote to proben/a
• –Tool poisoningtools not inspected (local package is not executed); not countedn/a
• Auth qualitystatic API keys via environment variables6/15
• Maintenancelast push 65 days ago12/15
• Maintainer identitynamespace and repository owner differ; GitHub account older than a year5/10

Safety score

74/100

higher than 48% of 2,170 E-commerce servers

Tools

58

the typical E-commerce server has 6

Tools that change things

33%

typical: 0%. Fewer write tools means less an agent can break

Downloads a week

64

more than 56% of 412 E-commerce servers with a package

Wpagent: common questions

Is Wpagent MCP server safe?

Mostly: it is graded B (74/100). Read the Wpagent safety report

How do I install Wpagent?

It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.

Does Wpagent need an API key?

Yes. The registry entry asks for WP_API_SECRET.

Is Wpagent maintained?

The last commit was 70 days ago (2026-08-27). The latest release is v1.1.4.

What can I use instead of Wpagent?

Servers from other publishers that do the same job: Loki Mode MCP server, Ecommerce Trends MCP server and Shopify MCP server.

How does Wpagent compare with other E-commerce MCP servers?

safety score 74/100 (higher than 48% of 2,170 E-commerce servers); tools 58 (the typical E-commerce server has 6); tools that change things 33% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.