BallesDev RealMCP

In Claude (claude.ai, Claude Desktop or the mobile app), go to Settings > Connectors > Add custom connector, paste your server URL ( https://example.com/wp-json/ballesdev/mcp ) and keep the sign-in options Claude detects. Then log in to your site and approve. Or click “Add to Claude” in RealMCP > Connect. Claude connects from Anthropic’s servers, so your site must be reachable from the internet.

Run:

claude mcp add --transport http my-site https://example.com/wp-json/ballesdev/mcp

Then type /mcp in Claude Code, choose the server and sign in.

Run:

codex mcp add my-site --url https://example.com/wp-json/ballesdev/mcp codex mcp login my-site

The Codex CLI, the IDE extension and the app share this configuration.

In ChatGPT on the web, open the plugins page, choose to add a custom MCP server and paste your server URL. Custom servers depend on your ChatGPT plan.

Open RealMCP > Connect and choose the “Other assistants” tab. For OpenCode, run opencode mcp add my-site --url https://example.com/wp-json/ballesdev/mcp and then opencode mcp auth my-site . For VS Code and Cursor, the buttons open the editor with the server ready to add.

Create a connection token in RealMCP > Connect (“Connection token”) and send it in the Authorization header as Bearer rmcp_mt_… . In Claude, add the custom connector with “No sign-in” and that header. The token is shown only once. You choose when it expires (90 days by default), and you can disconnect it at any time.

Click “Check now” in RealMCP > Connect. If OAuth discovery says Blocked, your web server doesn’t pass /.well-known/ addresses to WordPress (the nginx configuration suggested by WordPress blocks every path that starts with a dot). Ask your host to allow /.well-known/oauth-authorization-server , or use a connection token. The server URL must not redirect to another address, such as from example.com to www.example.com : use the final one.

If your site is behind Cloudflare or a firewall that blocks AI bots, it may let the sign-in through and block Claude’s requests afterwards. Allow Anthropic’s address range 160.79.104.0/21, or the paths /wp-json/ballesdev/ and /.well-known/oauth- .

Some servers drop the Authorization header before it reaches WordPress: “Check now” in RealMCP > Connect tells you if yours does. On Apache, re-saving Settings > Permalinks restores the rule that passes it through. On other servers, ask your host. Also check that the Application Passwords section appears in your profile: RealMCP stores each connection as one, and some security plugins and hosts turn them off.

Only what the connected user can do. It reads pages, posts, blocks, patterns, media, comments and design settings; it creates, edits and, if the user is allowed to, publishes pages and posts; and, if you turn those tools on, it moderates and replies to comments. New content is a draft unless the AI sets another status. What the AI saves goes through WordPress’s HTML filter, even for administrators: scripts, iframes and event-handler attributes are removed. To limit it further, turn tools off in RealMCP > Tools: turning off every Write tool allows reading only. Comment text is written by visitors, so the AI is told to treat it as data, never as instructions. To revoke access, click Disconnect in RealMCP > Connect, or delete the connection’s Application Password from the user’s profile.

Each tool call made through the plugin’s MCP endpoint: the date, the WordPress user, the name of the connection used, the client (its User-Agent), the tool, the item it affected, the result and how long it took. It never records content. Entries older than the retention you set (30 days by default) are deleted once a day, and a user’s entries are deleted with the user. They are also included in WordPress’s personal data export and erasure tools. Calls that reach the same tools through other routes, such as the MCP Adapter plugin, are not logged.

The plugin only contacts other sites in two cases, and never sends your content:

• When you approve an assistant, your site reads that assistant’s public description (its name and the addresses it returns to), published by its maker at the address the assistant gives, for example https://claude.ai/oauth/claude-code-client-metadata . The request carries no data from your site, and the description is cached for up to a day.
• When you ask site-health to check the site now, it runs WordPress’s own Site Health tests, which, as in their weekly run, check that your site can reach WordPress.org.

The activity log stays in your site’s database. Your AI assistant requests content from your site; what happens to that content depends on the assistant you use.