finderpress.
Finding your next read
Practical craft for people building for the web.
Explore DevelopmentFinding your next read
THE FINDERPRESS TOOL DIRECTORY
Explore this tool and check the official listing for its latest features and requirements.
01 / SOURCE DETAILS
miniOrange Secure MCP Server is a complete WordPress MCP server plugin that turns your WordPress site into a fully working Model Context Protocol (MCP) server. Once installed, you can connect Claude to WordPress, connect ChatGPT to WordPress, or link any MCP-compatible AI in just 2 minutes. Ask AI to write blog posts, edit Elementor and Kadence page layouts, manage custom post types and their custom fields, upload media, update WooCommerce products, manage Yoast SEO, moderate comments, handle contact form submissions, and much more, all through simple chat. With Governed REST API Access, AI can even use REST endpoints from your other plugins, under the same permissions. Unlike other WordPress MCP server plugins that give AI full admin access, we put you in complete control. Role-based AI permissions, Turn each tool on or off, self-hosted OAuth 2.1 login, and full activity logs are all included, with no restrictions. Quick Links Official Website | ChatGpt Setup Guide | Claude Setup Guide | Documentation | Book a Demo Key Features of the Secure WordPress MCP Server Built security-first, so you can let AI work on a live site with confidence: 426 MCP tools in 26 categories – WordPress core, WooCommerce, Yoast SEO, Rank Math, Advanced Custom Fields, Elementor, Kadence, Contact Form 7, WPForms, Gravity Forms, Fluent Forms and more. Governed REST API access – AI can use any WordPress REST endpoint, including those from your other plugins, with route-by-route, role-based permissions. Agent Registry – decide, per WordPress role, exactly which tools an AI agent can use. Self-hosted OAuth 2.1 with PKCE – the AI never sees your WordPress password. Every call checked against WordPress capabilities – an AI can never do more than its user can do in wp-admin. Full audit log – every call, allowed or refused, is recorded. Safe theme and code editing – changes go to a draft, are syntax-checked and previewed, and publish with automatic backup and rollback. Built-in troubleshooting – a Troubleshooting page finds out why an AI client can’t connect and tells you what to fix. Everything runs on your own server. No third-party relay sits between your AI client and your site. How to Install the WordPress MCP Server (2 Minutes) Log in to your WordPress admin dashboard. Go to Plugins → Add New . Search for Secure MCP Server . Click Install Now , then Activate . Create Your First AI Agent Open Secure MCP Server from the WordPress admin sidebar. Click Register your first agent . Enter an agent name and click Next . Choose which abilities each user role can use, then click Create & Continue . Click Continue . You’ll see Connect your AI client . How to Connect ChatGPT to WordPress Under Connect your AI client , select ChatGPT . A setup panel opens. Copy Your Site URL from the panel. Click the MCP Server for WordPress link in the panel. It opens the app in ChatGPT. Click Install Plugin . Enter your WordPress Site URL and click Continue . Click Allow Access . Now start chatting with your site through ChatGPT. Full guide: Set up ChatGPT with WordPress using MCP How to Connect Claude to WordPress Under Connect your AI client , select Claude . A setup panel opens. Open the connector page miniOrange MCP for WordPress and click Connect . Enter your site’s address. You’ll land on the sign-in gateway — paste your site’s URL there. Log in with your WordPress account and click Allow access . Your approved tools now appear in Claude – start chatting with your site. Full guide: Connect WordPress with Claude using MCP Video: Connect Claude to WordPress Using Secure MCP Server Connect Gemini, Cursor, Windsurf & Any MCP Client The plugin follows the open Model Context Protocol standard, so it works with Gemini, Cursor, Windsurf, and any MCP-compatible client. Connect several AI clients at once, each with its own permissions and audit trail. Your MCP server endpoint: https://gateway.miniorange.ai/v2/mcp What Your AI Agent Can Do 426 tools in 26 categories. Integration tools appear only when the related plugin is active. WordPress Content Posts & Pages (56 tools) – Create, publish, schedule, duplicate, set templates and featured images, trash and restore. Categories, Tags & Media (40 tools) – Manage taxonomies, upload media from a URL or file, update alt text and captions. Revisions (9 tools) – List, compare and restore revisions and autosaves. Comments (21 tools) – Moderate, reply, search, mark spam and view counts. Custom Post Types & Fields (19 tools) – Discover any custom post type and edit its items, terms and fields. Content Find & Replace (6 tools) – Change part of a post, custom field or setting without rewriting it. Users & Site Management Users & Roles (38 tools) – Create users, assign roles, update profiles, send password reset links. Settings, Plugins, Themes & Updates (34 tools) – Site title, tagline, homepage, timezone, plugin activation and updates, auto-updates, site health. Maintenance (8 tools) – Clear caches, refresh permalinks, run cron events, read the error log. Theme Editing (32 tools) – Block templates, global styles, patterns and theme files, with draft, preview, publish and restore. Plugin Integrations WooCommerce (41 tools) – Products, orders, refunds, customers, coupons and sales reports. Advanced Custom Fields (25 tools) – Field groups, repeaters, flexible content, relationships, options pages. Yoast SEO & Rank Math (15 tools) – SEO titles, meta descriptions, focus keywords, canonicals, schema, Open Graph. Forms & Leads (54 tools) – Contact Form 7 (Flamingo), WPForms, Gravity Forms and Fluent Forms entries, with CSV export. Elementor (10 tools) – Read, edit, style, move and duplicate Elementor elements Divi 4 & Divi 5 – Read and edit Divi Builder layouts, modules, text, images and styling. Kadence Blocks (18 tools) – Build Kadence pages, insert rows, columns, headings, buttons and images. Governed REST API Access: Go Beyond Built-in Tools AI can use any WordPress REST API endpoint – core, WooCommerce, Yoast or any other plugin – with no plugin update needed. Read-only by default – a new AI agent can read posts, pages and media; any write needs your approval. Granular control – allow each route and method (read or write) per user role, all logged. Site-wide write switches – turn all create, update or delete REST calls off for the whole site in one click. Dangerous routes stay blocked – plugin and theme installs, activations, batch and blueprint-import routes can never be granted. WooCommerce MCP Server Run your store through chat. Create and update products, attributes, categories and tags. Look up, create and update orders, change order status, add order notes and issue refunds. Manage customers, view purchase history and customer segments, and create or update coupons. Get sales, orders, products, customers, coupon usage and top-seller reports. SEO MCP: Yoast SEO & Rank Math Bulk-update SEO titles and meta descriptions, set focus keywords, mark cornerstone content, and control robots meta, advanced robots directives, canonical URLs, breadcrumb titles and sitemap inclusion. Manage Open Graph, Twitter/X cards and schema types. Rank Math SEO metadata is supported too. Advanced Custom Fields (ACF) MCP Read and update any ACF field value, in bulk or one at a time. Work with repeater rows, flexible content layouts, relationship fields and options pages. Create field groups, add fields, update location rules, check conditional logic, and validate a value before it is saved. You can also search posts by ACF field value. Page Builder MCP: Elementor, Divi & Kadence Elementor: read a page layout, change element text, images, links and styling without breaking the design, move, duplicate or delete elements, look up widget schemas and preview the rendered result. Divi 4 & Divi 5: read Divi Builder layouts and update modules, text, images, links and styling through chat, without opening the visual builder. Kadence Blocks: build new Kadence layout pages, insert rows, columns, headings, buttons, icons and images, update block text and styling, and set page layout options. Forms & Leads MCP Work with Contact Form 7 (via Flamingo), WPForms , Gravity Forms and Fluent Forms . List forms and fields, read and count entries, mark them read or unread, trash, restore or delete them, and export entries as CSV . Inspect form settings and notifications, and for Fluent Forms you can create, update and test notifications and confirmations. Safe Theme & Code Editing AI can now edit your theme safely: Edit block templates, template parts, global styles, style variations and patterns. Read, search and edit theme files – PHP, CSS, JavaScript and theme.json. Nothing touches the live site directly. Every change goes into one private draft. PHP is checked for syntax errors, JSON for validity, and templates for broken blocks before a change is accepted. Preview the draft, and test that the site still loads before it goes live. Publishing takes an automatic backup . If the site fails, everything rolls back automatically . Undo any publish later with one restore. Site Management & Maintenance Update site title, tagline, homepage, posts page, timezone and privacy page. List, activate, deactivate and update plugins and set auto-updates. Check WordPress core, plugin and theme updates, site health and server information. Clear caches, refresh permalinks, inspect and run scheduled (cron) events, and read the site error log to troubleshoot problems. Smart Content Editing Find & replace inside posts, custom fields and settings – change one sentence without rewriting the whole page. Page lock – edits are refused if the page changed after the AI read it. Revision restore – roll back any post to an earlier version. Agent Registry: Role-Based Access for Every AI Agent The Agent Registry controls what each AI agent may do. Create named agent policies that map WordPress roles to allowed tools. Tools outside a role’s grant are hidden from the AI client and cannot be called. Turn an
02 / SOURCE DETAILS
Requirements WordPress 6.9 or newer (Abilities API required) PHP 7.4 or higher (PHP 8.0+ recommended) HTTPS enabled (for OAuth login) From your WordPress dashboard Go to Plugins → Add New Plugin . Search for miniOrange Secure MCP Server . Click Install Now , then Activate . Open Secure MCP Server from the admin sidebar and click Register your first agent . Name the agent, set ability access by user role, and click Create & Continue . Under Connect your AI client , choose Claude, ChatGPT or another client and follow the setup panel. Sign in to WordPress and click Allow Access . Done! Manual installation Download the plugin zip. Go to Plugins → Add New → Upload Plugin and upload the zip. Activate the plugin and continue from step 4 above.
03 / SOURCE DETAILS
What is an MCP server for WordPress? MCP (Model Context Protocol) is an open standard that lets AI assistants use tools. This plugin makes your WordPress site an MCP server, so AI clients like Claude and ChatGPT can safely read and update your site through tools you control. Which AI clients are supported? Claude, ChatGPT, Gemini, Cursor, Grok, Windsurf and any MCP-compatible client. How many tools are included? 426 tools in 26 categories, covering WordPress core, WooCommerce, Yoast SEO, Rank Math, Advanced Custom Fields, Elementor, Divi, Kadence, Contact Form 7, WPForms, Gravity Forms, Fluent Forms, theme editing and site maintenance. Integration tools appear only when the related plugin is active. Is it safe to give AI access to my WordPress site? Yes. Access uses self-hosted OAuth 2.1 with PKCE, so the AI never sees your password. Every call is limited by role through the agent Registry, checked against WordPress capabilities, rate-limited and logged. You can require human approval for sensitive actions and mask sensitive data. Can the AI do more than my WordPress user can? No. Every tool runs as the WordPress user who approved the connection, and every call is checked against that user’s capabilities exactly as in wp-admin. Can AI use the REST API of my other plugins? Yes. AI can discover and call any WordPress REST route, including those from WooCommerce, Yoast and other plugins, with no plugin update needed. A new agent starts with read-only access to core WordPress content. Writes and routes outside it need an explicit, per-role grant, and you can switch off all create, update or delete REST calls for the whole site. Plugin and theme install, activate, batch and blueprint-import routes are always blocked. Can AI break my theme or site? Theme changes never touch the live site directly. They go into a draft, PHP is syntax-checked and JSON validated, and you can preview the draft. Publishing takes a backup and rolls back automatically if the site fails to load, and you can restore any earlier publish. Does it work with WooCommerce? Yes. 41 tools cover products, attributes, orders, order notes, refunds, customers, coupons and sales reports. Does it work with Yoast SEO and Rank Math? Yes. 14 Yoast SEO tools cover titles, meta descriptions, focus keywords, cornerstone content, robots, canonicals, breadcrumbs, Open Graph, Twitter/X cards, schema and sitemaps. Rank Math SEO metadata is also supported. Does it support Advanced Custom Fields (ACF)? Yes. 25 ACF tools cover field values, repeaters, flexible content, relationships, options pages, field groups and location rules. Does it support Elementor, Divi and Kadence? Yes. Elementor (10 tools), Divi 3 and Divi 4, and Kadence Blocks (18 tools) are supported, so AI can read, edit, style and build layouts. Which form plugins are supported? Contact Form 7 (with Flamingo for submissions), WPForms, Gravity Forms and Fluent Forms, including CSV export of entries. Can I disable specific tools? Yes. Every tool has a global on/off toggle, and the agent Registry controls tools per role. Developers can also limit exposed tools with the MOSMCP_EXPOSED_PREFIXES constant. How do I revoke an AI client’s access? Click Revoke in the agent Registry. Access ends immediately. Can I connect multiple AI clients at the same time? Yes. Connect as many as you need, each with separate permissions and its own audit trail. What happens if an AI edit goes wrong? Page lock blocks edits to content that changed after the AI read it, post revisions can be restored, theme changes publish with automatic backup and rollback, and destructive actions require confirmation. Does my data go through a third-party server? No. The MCP server and OAuth server run on your own WordPress site. Your AI client connects directly to your site. Why does my AI client say it cannot reach my site? AI clients need a public HTTPS URL. Sites on localhost or behind a firewall cannot be reached. Also make sure your CDN or cache is not caching the MCP endpoint. Open the Troubleshooting tab in Secure MCP Server to run a connection test; it lists the likely causes with the fix for each. Do I need to know how to code? No. Install, follow the onboarding checklist, and paste one URL into your AI client.
KEEP EXPLORING