AtlasMCP turns your WordPress site into an MCP server, so the AI app you already use can do everything your WordPress role allows — in WordPress and in any plugin — straight from the chat. Ask Claude, ChatGPT, Gemini, Cursor or Claude Code to write and fix posts, change a page built with Elementor,
PricingFree downloadThe WordPress.org download is free. Pro versions, add-ons or external services may cost extra.
CompatibilityRequires WordPress 6.8 and PHP 7.4.
SourceWordPress plugins · Nov 8, 2026
01 / Source details
Aboutthistool.
AtlasMCP turns your WordPress site into an MCP server, so the AI app you already use can do everything your WordPress role allows — in WordPress and in any plugin — straight from the chat. Ask Claude, ChatGPT, Gemini, Cursor or Claude Code to write and fix posts, change a page built with Elementor, clear a cache, update your SEO plugin’s settings, or refund a WooCommerce order, and it happens on your site with your permissions.
Direct, no middleman. The AI app talks straight to your site. There is no AtlasMCP account, no relay server, and your content never passes through us.
We never count or limit tool calls. Not in the free plugin, not in any Pro plan.
Every change can be undone. Each AI change is recorded with how it looked before; undo it from the Activity log in one click.
Your role is the permission. A connection acts as a WordPress user and can never do more than that user can do in wp-admin.
How do I connect Claude, ChatGPT or Gemini to WordPress?
A setup guide walks a new site from install to “my AI app answered a question”. Any time later, open AtlasMCP → Connections and click Connect an AI app : Claude opens with your site already filled in, Cursor and VS Code add it in one click, and ChatGPT, Claude Code and Gemini CLI get short steps. You approve on your own site and choose what the app may do — Full by role , Read only or Content only — and the screen tells you the moment the app is connected. No tokens to copy. Scripts can use an access token or an Application Password instead.
Everything your role can do, in any plugin
There is no “enable tools first” step. What the connecting user may do in wp-admin, the AI app may do:
Content: posts, pages, any custom post type, categories, tags, custom fields; change one block of a post without rewriting the rest; list, compare and restore revisions; find and replace across content, after a preview; media from a web address or your computer, with alt text and captions; comments, replies and moderation.
Site: menus, widgets, block templates, global styles, site settings (with a protected list), users and roles (never the last administrator, never a role above the caller).
Any plugin’s settings: read and change the saved settings of SEO, cache, multilingual, feed, invoice and ad plugins. Keys, passwords and core settings stay locked.
SEO plugins: SEO title, description, focus keyword, canonical and indexing of any post, in Yoast SEO, Rank Math, All in One SEO, SEOPress, The SEO Framework and Slim SEO.
Advanced Custom Fields: list field groups, read and change field values.
Any plugin’s content and API: every ability other plugins register through the WordPress Abilities API, every plugin’s REST API as tools (reads and writes), and every post type and taxonomy a plugin adds.
Plugin actions: safe one-step jobs your plugins offer — clear a cache, rebuild a sitemap, regenerate a feed, run a scheduled task.
Plugins and themes: install from WordPress.org, activate, update, deactivate and switch themes. A backup is made first, the site is checked after, and it is put back by itself if it stops answering.
Database and files, read only: table sizes, autoload, a cleanup report, read-only queries and theme or plugin files.
WooCommerce AI agent
Products, variations, stock, orders, order notes, refunds, coupons, customers and sales reports. Bulk jobs change hundreds of products in the background (titles, prices, a sale for a category) and can be undone as one job. Refunds always ask first.
Page builders, by element
The AI app reads an Elementor page as an outline of sections, containers and widgets with their ids, and changes one element at a time: a heading, a text, a button, an image, colours, page settings; or it adds, moves, duplicates and removes elements. Saves go through Elementor itself, a copy of the design is kept before every change, and undo rebuilds the page’s CSS. Elementor V4 (atomic) elements are read only. Beaver Builder, Bricks and Divi 4 pages can be read and changed by element too, and block-based builders such as Kadence and GenerateBlocks work through the block tools.
Approve and upload inside the chat
In apps that show panels, such as Claude, AtlasMCP opens a panel right in the chat. Before something is removed or replaced you see what will change, with Approve , Decline and Request changes buttons. To add files, drag them from your computer into the upload panel. Other AI apps ask you in words instead.
Search, traffic and security data
Connect your own Google account and the AI app can read Search Console queries and Analytics reports; connect your own Semrush key and it can read domain and keyword figures. Your site talks to these services directly, and nothing is sent until you connect. A read-only security checklist looks at waiting updates, HTTPS, administrators, users with extra powers and unlisted plugin folders, and the AI app can read Wordfence and Solid Security findings.
Safety you can see
Undo journal: every AI write is recorded with its before-state for 7 days; undo or redo it from Activity log → Changes .
Checkpoints: a backup of files or tables before risky changes, restored from Versions → Checkpoints .
Ask before deleting: the AI app shows you what will be removed and waits for your yes in the chat.
Dry run: any change can be previewed first, without changing anything.
New content starts as a draft: an optional switch, so nothing an AI app creates goes public on its own.
Tool calls per minute: an optional limit you set yourself, for a site or host that needs less traffic. It is off by default, and no plan changes it.
Hard locks: the last administrator, your own account, AtlasMCP itself, keys and core files can never be changed by an AI app.
Pause, read-only and safe mode: pause all AI access with one switch, make any app read only, or define AWFAH_SAFE_MODE to refuse every write.
Connections screen: every app, token and app password, who it acts as and when it was last used, with one-click disconnect and a health check.
Multisite
On a network, each site keeps its own MCP address, apps, limits and undo history, and a site administrator’s AI app works on that site only. Network tools — list sites, create a site, network-activate a plugin, network settings — are for super admins only. Network Admin shows every site with a pause switch.
AI writing in the editor
Six panels in both the Block Editor and the Classic Editor: full content generation, excerpts, title suggestions, summaries, featured images and alt text, on your own AI provider (OpenAI, Google or Anthropic through the WordPress AI Client). AtlasMCP works with the official AI plugin and the official MCP Adapter instead of competing with them.
Site health
A connection health check (HTTPS, permalinks, the login header, security plugins, page caches), one-click roll back to an earlier AtlasMCP version, and an Error Debugger with email alerts and a copy-paste fix command for any AI assistant.
AtlasMCP Pro
The free plugin never breaks a site and is complete on its own. AtlasMCP Pro adds power, development and governance: a development pack (theme and plugin code on a draft copy with syntax check, preview, publish with backup and automatic roll back; new child themes and plugins; SQL writes with a dry run; install from a ZIP), design a whole site from a brief, workflows (“when this happens, do that”: triggers, conditions and any tool as an action, with AI steps, webhooks, templates and scheduled agent jobs), 1-year undo with a signed audit export, per-tool access and approval rules, the Shopping assistant, an AI error fixer and an agency sites list. Every Pro plan has the same features; plans differ only in the number of sites, and none counts tool calls.
External services
AtlasMCP connects to the outside services below only for the features named. Nothing else leaves your site, and the MCP server itself does not send your content anywhere: the AI apps you connect call your site, not the other way round.
Google Search Console and Google Analytics (only if you connect them)
If you paste a Google service account key under Tools → Add from plugins → Data sources , your site signs in at oauth2.googleapis.com and asks www.googleapis.com (Search Console) and analyticsdata.googleapis.com (Analytics) for the reports an AI app or you request. Your site talks to Google directly and sends only the report request. Nothing is sent before you connect. Google Terms of Service · Privacy Policy
Semrush (only if you connect it)
If you enter a Semrush API key on the same screen, your site sends that key and the domain or keyword asked about to api.semrush.com and www.semrush.com , and each report uses your own Semrush API units. Nothing is sent before you connect. Semrush Terms of Service · Privacy Policy
Free image libraries: Openverse, Unsplash, Pexels, Pixabay (only when images are searched)
When an AI app (or you) uses find-images , your site sends the search words to api.openverse.org (Openverse, run by WordPress.org, no key needed). If you saved your own free key under Tools → Add from plugins → Data sources , it also asks api.unsplash.com , api.pexels.com or pixabay.com with that key. import-image downloads the chosen picture from the library’s image host, and for Unsplash tells Unsplash it was downloaded, as their rules ask. Nothing is sent until an image is searched or imported. Openverse ( Terms , Privacy ), Unsplash ( Terms , Privacy ), Pexels ( Terms , Privacy ), Pixabay ( Terms , Privacy ).
Google PageSpeed Insights (only when a page is audited)
When an AI app (or you) uses analyze-page-speed , your site sends the address of that one page, and your own PageSpeed Insights key if you saved one under Data sources, to www.googleapis.com/pagespeedonline . Google then loads that public page and returns its Lighthouse scores. Nothing is sent until a page is audited. Google Terms of Service · Privacy Policy
AtlasMCP connection check (AtlasAiDev)
When you press Run check on the Connections screen, the last step asks an AtlasAiDev ser
See it in action
Screenshots & previews.
Approve a change inside the chat: see what will change, then Approve, Decline or Request changes.Add files from your computer with the upload panel inside the chat.Connections: every AI app that can use your site, what it may do and when it was last used.Tools: every tool your AI apps are offered, from WordPress and from your other plugins.Activity log: every change an AI app made, with Undo.Safety settings: ask before deleting, new content starts as a draft, and tool call limits.Add from plugins: page builders and your own Search Console, Analytics and Semrush accounts.AI writing in the editor, on your own AI provider.
02 / Source details
Frequently asked questions.
What is an MCP server for WordPress?
An MCP server for WordPress exposes your site to AI assistants through the Model Context Protocol (MCP) — an open standard for connecting AI agents to tools. AtlasMCP adds this server to WordPress so clients like Claude, ChatGPT, Gemini, and Cursor can securely read and manage your posts, pages, media, users, settings, and WooCommerce store via natural language.
How is AtlasMCP different from other WordPress MCP plugins?
Three things. It reaches everything your role can do in wp-admin, in any plugin — settings, content, REST APIs, plugin actions — instead of a fixed list of tools. It is direct : no AtlasMCP account or relay server, and we never count or limit tool calls . And every change can be undone from the Activity log, with backups before risky changes and approval in the chat before anything is deleted. It also brings AI writing panels to both the Block Editor and the Classic Editor.
How do I generate a blog post with AI in WordPress?
Open a new post, click AtlasMCP Write in the editor, and enter your topic. The AI content generator suggests titles, drafts an outline you can edit, then writes the full article. You preview the draft and insert it yourself — nothing is written to your post or published until you choose to.
Can it write WooCommerce product descriptions?
Yes. On a product screen the AI product description generator is selected automatically and writes for shoppers — what the item is, what it is made of, who it suits, and how to care for it. It will not invent measurements, materials or claims you did not give it.
Does the AI writer work with the Classic Editor?
Yes. AtlasMCP Write sits beside the Add Media button on the classic content editor, with the same topic, outline and preview steps as the block editor.
How do I connect Claude to WordPress?
Open AtlasMCP → Connections , click Connect an AI app and pick Claude: it opens with your site already filled in. Click Add, then approve on your site. No tokens to copy. The same screen has the steps for other apps.
How do I connect ChatGPT to WordPress?
Add the same MCP server URL as a connector in ChatGPT (OpenAI’s connector settings), authorize via the OAuth consent screen, and ChatGPT can manage your WordPress site through the abilities you allow. JWT and Application Password authentication are available as alternatives.
Does it work with Cursor, Windsurf, or Claude Code?
Yes — any MCP-compatible client works: Cursor, Windsurf, Claude Code, Claude Desktop, Gemini CLI, and more. Point the client at your MCP endpoint and authenticate with OAuth 2.1, JWT, or an Application Password.
Troubleshooting: my AI client cannot connect (Cloudflare, SiteGround, caching)
Most connection failures are caused by the host or a firewall interfering with the MCP endpoint, not by the plugin:
Cloudflare — the “Block AI Bots” setting and Bot Fight Mode block requests from Claude, ChatGPT, and other AI clients. Add a WAF skip/exception rule that allowlists the /wp-json/awfah_mcp/ path (or turn off Block AI Bots), then reconnect.
SiteGround and similar hosts — built-in anti-bot filters can answer MCP requests with an HTML challenge page. Ask support to exclude /wp-json/awfah_mcp/ from bot protection.
LiteSpeed / server caching — REST responses must never be cached. Exclude /wp-json/ (or at least /wp-json/awfah_mcp/ ) from LiteSpeed Cache, Varnish, or any full-page/server cache; a cached OAuth or JSON-RPC response breaks the handshake.
Does OAuth work if WordPress is installed in a subdirectory?
Yes, since 1.9.0. Sign-in works when WordPress lives in a subfolder ( https://example.com/blog ) as well as at the domain root. It needs HTTPS for web apps like Claude and ChatGPT. If an app still cannot connect, run the health check on the Connections screen.
Does it work with the Classic Editor?
Yes. All six AI experiments — full content generation, excerpt, titles, summary, featured image, and image alt text (via the media modal) — work in the Classic Editor as well as the Block Editor. The official WordPress AI plugin’s experiments are Block Editor only.
Does it work with the official WordPress AI plugin?
Yes — by design. Our experiments show up as feature cards on its Settings → AI screen, respect its toggles, and inject its editorial Guidelines into every prompt. You can also hide its duplicate experiments (per experiment or globally) so editors see a single AI button.
Does it work with the official MCP Adapter plugin?
Yes, install both. The MCP Adapter keeps its own server and AtlasMCP keeps its own, so an AI app can connect to either. AtlasMCP’s tools are offered only through AtlasMCP’s server, so pausing AI access, read-only connections and your role settings cover them however an AI app connects. Abilities that other plugins mark as public stay on the MCP Adapter’s server as before. The Connections screen health check confirms both are working.
Does it work with WooCommerce?
Yes. While WooCommerce is active, the AI app can manage products, variations, stock, orders, notes, refunds, coupons, customers and sales reports through the same MCP server. Refunds always ask first, and bulk jobs can be undone as one job.
What AI providers are supported?
Any provider the WordPress AI Client supports, including OpenAI (GPT models), Google Gemini, and Anthropic Claude. Configure providers under Settings → Connectors .
How many AI abilities do I get?
There is no fixed number and no limit. AtlasMCP ships tools for WordPress itself, WooCommerce, Elementor, plugin settings and plugin actions, and adds every ability other plugins register through the WordPress Abilities API and every plugin’s REST API. Install more plugins and the list grows on its own, in the free version.
Will hundreds of AI tools slow my site down?
No. Nothing in this plugin runs on your front end, so visitor page loads are unaffected. Tools are only built when an AI app or an AtlasMCP screen asks for them. If an AI app picks the wrong tool on a very large site, switch off the groups you do not need in Tools → Groups .
Does it work with my other plugins?
Yes, in several ways, all free: abilities other plugins register through the WordPress Abilities API, every plugin’s REST API as tools (reads and writes; a plugin you add starts read only), every plugin’s saved settings (with a protected list), its post types, taxonomies and custom fields, and the safe one-step actions it offers, such as clearing a cache or rebuilding a sitemap.
Can an AI change my WooCommerce store?
Yes, as far as the connecting user may. Products, stock, orders, notes, coupons and customers can be changed; refunds always ask you first in the chat; bulk jobs run in the background and can be undone as one job. Choose Read only when you connect if the app should only look.
Does it work with WordPress versions before 6.9?
Yes. AtlasMCP bundles the WordPress Abilities API and MCP Adapter as vendor dependencies, so it works on WordPress 6.8 and above, even on versions where these APIs are not yet included in core.
Is AtlasMCP free?
Yes. The free plugin is complete: the direct MCP server with one-click sign-in, everything your role can do in any plugin, WooCommerce, Elementor editing by element, installs from WordPress.org with backups, the undo journal and other safety features, multisite support, the six editor AI panels and the Error Debugger. There is no limit on tool calls.
Can I control what the AI is allowed to do?
Yes. The connecting user’s WordPress role is the permission. On top, pick a preset when you approve an app ( Full by role , Read only or Content only ), switch off whole tool groups or single tools, limit what each role may use in Access control , keep Ask before deleting on, or pause all AI access with one switch.
Can the AI break my site?
AtlasMCP is built so it cannot leave your site broken. Every AI change is recorded and can be undone; plugin and theme changes make a backup first and are put back automatically if the site stops answering; deletes wait for your yes in the chat; the last administrator, AtlasMCP itself, keys and core files are locked. Writing code, SQL writes and installs from outside WordPress.org are not in the free plugin at all.
Is there a Pro version?
Yes. AtlasMCP Pro adds a development pack, design a site from a brief, workflows with AI steps and agent jobs, 1-year undo with a signed audit export, per-tool access and approval rules, the Shopping assistant, an AI error fixer, advanced editor AI and an agency sites list. Every Pro plan has the same features; plans differ only in sites, and none counts tool calls. The free plugin keeps working whether or not you use Pro.
Where are workflows?
Workflows (“when this happens, do that”) are part of AtlasMCP Pro . If you made workflows with an earlier version of this plugin, they stay on your site exactly as they were, with their run history, and they run again as soon as AtlasMCP Pro is active. Nothing is deleted.
Can I disable modules I do not need?
Yes. In Tools → Groups each group of tools has its own switch. These are optional limits: a group that is off is not offered to AI apps.
Why do I see “AI analysis failed”?
This usually means no AI provider is configured. Go to Settings → Connectors and verify at least one provider is set up. Enable WP_DEBUG_LOG and check debug.log for lines beginning with [AtlasMCP] .
How does the Error Debugger work?
Enable the Error Debugger module from the dashboard. PHP errors in plugins and themes are tracked automatically and shown in the Error Log tab, and optional email alerts include a pre-filled Fix Command you can paste into any AI assistant for step-by-step fix instructions. With Pro, the command becomes an MCP tool call: paste it into Claude Desktop or Cursor and the AI reads the file, creates a backup, and applies the fix. A rate limiter prevents duplicate emails for the same error.
Does AtlasMCP count or limit tool calls?
No, never, in any version. The AI app talks straight to your site, so there is no relay or quota in between. Your host’s ow
FinderPress Media Auditor helps site administrators scan for broken images, missing Media Library files, unreachable media URLs, and other media issues across WordPress content. Use it to audit images, video, audio, PDFs, featured images, and attachment files without sending scan data to an external
The Accepted Payment Methods plugin is a straightforward, lightweight solution that enhances your website by displaying visually appealing icons of the payment methods you accept. This plugin is ideal for a variety of websites, including e-commerce platforms, service-oriented websites, and informati