Skip to content

Features

Everything an administrator can do

The plugin exposes the REST API, WP-CLI style operations, the options table, and the theme file system as MCP tools. Below is what that means in practice, with the kind of thing you would actually type.

Content and pages

Posts, pages, drafts, revisions, scheduling, taxonomies, and page hierarchy are all available. Your AI reads the existing content first, so an edit request lands on the right post without you pasting IDs.

Bulk work is where this earns its keep. Renaming a category across two hundred posts, fixing a repeated typo, or rewriting every meta description in one section is a single request rather than an afternoon.

New content is created as a draft by default. You review it in wp-admin the way you would review anything else.

Things you could type

  • “Find every post that mentions our old pricing and update the numbers to the current ones.”
  • “Turn this transcript into a 900-word post, add three subheadings, and save it as a draft.”
  • “Move all posts in "News" published before 2023 into a new "Archive" category.”

Media library

The full media library is readable and writable: uploads, attachment metadata, alt text, captions, titles, and the links between attachments and the posts that use them.

Alt text is the obvious first job. Most sites have hundreds of images with none, and the AI can see the image, so it writes something accurate rather than a filename.

Things you could type

  • “List every image with no alt text, write alt text for each one, and show me the list before saving.”
  • “Find every post with a broken image and replace it with the closest match from the media library.”
  • “Delete media files that no post or page references, but move them to trash rather than removing them.”

Plugins and themes

Install from the WordPress.org directory or from a zip, activate and deactivate, and run updates. The AI can read the plugin readme and changelog first and tell you what changed.

It can also audit what you already have: which plugins are inactive, which have not been updated in two years, and which two are doing the same job.

Things you could type

  • “List every active plugin, when it was last updated, and flag anything abandoned.”
  • “Install a caching plugin, configure it for a small blog, and tell me what you changed.”
  • “Update all plugins except WooCommerce, and stop if anything errors.”

Users and roles

User accounts, roles, and capabilities are fully manageable. That includes creating editors for a new writer, demoting old contributors, and auditing who holds administrator access.

Every action still runs as you. The AI cannot grant a capability that your own account does not have.

Things you could type

  • “Show me every administrator and when they last logged in.”
  • “Create an editor account for sam@example.com and email them the invite.”
  • “Downgrade every contributor who has not published in two years to subscriber.”

Settings and options

Site settings, permalink structure, menus, widgets, and the options table itself are all reachable. If you can change it on a Settings screen, you can ask for it in a sentence.

This is also the fastest way to answer questions about your own site. "What is my permalink structure and why are my dates in the URL" takes one message.

Things you could type

  • “Change permalinks to post name and tell me which URLs will need redirects.”
  • “Add the four new service pages to the primary menu under a Services parent.”
  • “Set the front page to Home and the posts page to Blog.”

SEO plugins

The major SEO plugins store their data as post meta, which means titles, meta descriptions, canonical URLs, focus keywords, and noindex flags are all available.

Writing two hundred meta descriptions is exactly the kind of work worth handing over. Reviewing them is still your job, and they save as drafts of the post where the plugin supports it.

Things you could type

  • “List every published post with no meta description and write one for each, under 155 characters.”
  • “Set the canonical URL on these three duplicate pages to the original.”
  • “Which pages are set to noindex, and is that on purpose?”

WooCommerce

Products, variations, attributes, categories, stock levels, prices, coupons, and orders are all available where WooCommerce is installed.

Catalogue maintenance is the common case: a supplier sends a spreadsheet, and updating four hundred prices becomes one request instead of a CSV import you have to babysit.

Order data is read-only unless you ask for a change explicitly, and refunds always require confirmation.

Things you could type

  • “Raise the price of everything in the Outdoor category by 8% and round to the nearest pound.”
  • “Which products have been out of stock for more than 30 days?”
  • “Write short descriptions for the twelve products that have none.”

Custom post types, ACF and meta

Custom post types and taxonomies registered by your theme or plugins show up automatically. There is no mapping step and no configuration file to maintain.

Advanced Custom Fields, Meta Box, Pods, and plain post meta are readable and writable, which is what makes this useful on a site that is more than a blog.

Things you could type

  • “Every team member post is missing the "pronouns" field. Fill it in from the bio text where you can, and list the ones you could not.”
  • “Create fifteen event posts from this list, with the date and venue fields set.”
  • “Which ACF field groups are attached to the Case Study post type?”

Theme and code files

Theme files are readable and editable, so a broken template, a missing hook, or a CSS fix can be handled in the same conversation where you noticed the problem.

File editing is the sharpest tool here, so it is the one with the most friction by design: every write shows a diff first, and the capability can be switched off entirely if you would rather keep code changes in git.

Things you could type

  • “The footer copyright year is hardcoded. Find it and make it dynamic.”
  • “Show me the diff before you change anything in functions.php.”
  • “Add a CSS rule so tables scroll on mobile instead of overflowing.”

Safe by default

Write access, with the brakes on

Handing an AI the keys to a live site is a reasonable thing to be nervous about. The defaults are set so the cautious answer is the one you get without configuring anything.

  • Application password authentication

    Connections use a WordPress application password, not your login. Your account password is never shared with the AI client.

  • Your roles and capabilities still apply

    Every action runs as the connected user. An editor cannot install plugins through the AI, because an editor cannot install plugins.

  • New content is created as a draft

    Publishing is a separate, explicit step. Nothing reaches your visitors until you say so.

  • Deletions go to trash

    Posts, pages, and media are trashed rather than removed, so a mistake is one click to undo.

  • Destructive actions need approval

    Permanent deletion, bulk overwrites, and settings changes that affect the whole site stop and ask before they run.

  • Search and replace runs dry first

    You see the list of every match and what it would become, then decide whether to apply it.

  • Credentials are stored encrypted

    Tokens are encrypted at rest in your database. They are never sent to us, because there is no server of ours in the path.

  • Revoke access in one click

    A single button in wp-admin invalidates the connection. The AI loses access immediately, with no cleanup on your side.

  • Every action is logged

    An audit log records what ran, when, and as which user, so you can answer "what changed" without guessing.

  • File editing is off by default

    Theme and plugin file access is opt-in. Turn it on when you want it and leave it off when you do not.

All of it, for nothing.

Create an account and download the plugin. There is no paid tier to upgrade to.

One plan. $0. No credit card.