Skip to content
WordPress MCP · Hosted · Plugin v0.28.2

The hosted WordPress MCP server for AI search.

Install the free plugin, paste one URL into Claude Code, Cursor, or Claude Desktop, and let your agent read and write posts, Yoast / Rank Math meta, JSON-LD schema, and llms.txt across the whole site. Reads free, writes 5¢, undo on every call.

26 WordPress tools · 41 total · No server to run · $5 credit, no card

.cursor/mcp.jsonStreamable HTTP
{
  "mcpServers": {
    "auditae": {
      "url": "https://auditae.app/api/mcp",
      "headers": { "Authorization": "Bearer ae_live_…" }
    }
  }
}
list my wordpress sites
wp_list_sites → 1 site · read · draft · publish · write_seo
26
WordPress tools
Per write · reads free
1
URL to connect
0
Servers you host
01 · Setup

Three steps, about five minutes.

  1. Step 1

    Install the plugin

    Free on WordPress.org. Pair it with a one-time code and tick the permissions you want an agent to have: read, draft, publish, write SEO.

  2. Step 2

    Create an API key

    Dashboard → API keys → Generate. One key covers every paired site in your workspace. Revoke it any time.

  3. Step 3

    Add the server to your client

    Point your client at https://auditae.app/api/mcp with the key as a Bearer header. Configs for each client are below.

02 · Clients

WordPress MCP for Claude Code, Cursor, and Claude Desktop.

Streamable HTTP, stateless, authenticated by header. Swap in your key and restart the client.

Claude Code WordPress MCP

One command

Adds the server to your project or user scope. Run it once, then ask Claude Code to list your WordPress sites to confirm the connection.

claude mcp add --transport http auditae https://auditae.app/api/mcp \
  --header "Authorization: Bearer ae_live_…"

Cursor · Windsurf · any HTTP client WordPress MCP

.cursor/mcp.json

Streamable HTTP with an Authorization header. The same block works in Windsurf, Cline, Zed, and any client that speaks remote MCP with custom headers.

{
  "mcpServers": {
    "auditae": {
      "url": "https://auditae.app/api/mcp",
      "headers": { "Authorization": "Bearer ae_live_…" }
    }
  }
}

Claude Desktop WordPress MCP

claude_desktop_config.json

Desktop launches stdio servers, so mcp-remote bridges to the hosted endpoint. Restart the app after saving.

{
  "mcpServers": {
    "auditae": {
      "command": "npx",
      "args": [
        "-y", "mcp-remote", "https://auditae.app/api/mcp",
        "--header", "Authorization:${AUTH_HEADER}"
      ],
      "env": { "AUTH_HEADER": "Bearer ae_live_…" }
    }
  }
}

No MCP client? AEBOT in the AuditAE dashboard runs the same tools from a chat box — no config, and it can also run citation audits and push the fixes.

03 · Bulk changes

Say it once. Your agent does it to every post.

The tools are per-post on purpose — your client loops, reads the current state, writes the change, and keeps the previous state for undo. Three prompts people actually run:

Prompt 1

Add FAQ schema to every post in the Guides category that doesn't have it yet.

wp_list_posts → wp_get_faq_schema → wp_get_post → wp_set_faq_schemaone 5¢ write per post changed
Prompt 2

Rewrite the meta description on all posts where it's missing or over 160 characters, and keep the focus keyword.

wp_list_posts → wp_get_post_seo → wp_set_post_seo (Yoast or Rank Math fields)one 5¢ write per post changed
Prompt 3

Run a citation check on our top 10 prompts, then draft a comparison page for the one where competitors get cited and we don't.

check_brand_citation → wp_create_post (status: draft)5¢ per engine cell + 5¢ for the draft
04 · Tools

26 WordPress tools, plus the audit stack.

The same server also exposes citation checks across ChatGPT, Perplexity, Gemini and AI Overviews, a technical audit, and schema discovery / validation — so one agent can find the gap and fix it.

Sites

free
  • wp_list_sites
  • wp_site_status

Posts & pages

reads free · writes 5¢
  • wp_list_posts
  • wp_get_post
  • wp_create_post
  • wp_update_post
  • wp_trash_post

SEO meta (Yoast / Rank Math)

reads free · writes 5¢
  • wp_get_seo_settings
  • wp_set_seo_settings
  • wp_get_post_seo
  • wp_set_post_seo

Schema

reads free · writes 5¢
  • wp_get_faq_schema
  • wp_set_faq_schema
  • wp_delete_faq_schema
  • wp_get_post_schema
  • wp_set_post_schema
  • wp_delete_post_schema
  • wp_get_organization_schema
  • wp_set_organization_schema
  • wp_delete_organization_schema
  • wp_probe_schema

llms.txt

reads free · writes 5¢
  • wp_get_llms_txt
  • wp_set_llms_txt
  • wp_reset_llms_txt

Page composer

read 1¢ · design 25¢
  • wp_read_page_blocks
  • wp_design_page

Also on the server: check_brand_citation · get_share_of_voice · explore_llm_mentions · run_technical_audit · discover_brand_entities · validate_schema · generate_schema

05 · Guardrails

Built for an agent that makes 40 changes in a row.

Permissions live in the plugin

You pick read, draft, publish, and write-SEO when you pair the site. The dashboard checks the matrix before proxying a call and the plugin re-checks it on arrival — an agent can't escalate its own access.

Every write returns previous_state

Post content, SEO meta, schema, llms.txt — each mutation hands back what it replaced, so your client can undo a bad bulk run without a database restore.

Every call is logged

Every create, update, and SEO write lands in the site's action log in the dashboard: which tool, which post, when, and what it cost.

Coexists with Yoast and Rank Math

SEO writes go into your SEO plugin's own fields. AuditAE never emits its own title, meta, canonical, or sitemap, so there is one owner per field and nothing to un-tangle later.

Encrypted token, one-click revoke

The site token is stored AES-256 encrypted. Disconnect in Settings → AuditAE or revoke the API key in the dashboard and every client stops instantly.

Rate-limited per key

A runaway loop hits a per-key limit (60 calls a minute), not your server. Reads are free so exploring a site costs nothing; only successful writes bill.

06 · vs. self-hosted

How it compares to the WordPress MCP adapter.

WordPress core’s MCP adapter and Automattic’s wordpress-mcp are good developer tools. They solve a different problem.

AuditAEmcp-adapter / wordpress-mcp
HostingRemote URL — nothing to runYou host the server (PHP plugin + local bridge)
AuthOne API key + per-site capability matrixWordPress application passwords or JWT
ScopeSEO meta, schema, llms.txt, posts, citationsGeneric REST / Abilities API surface
Undoprevious_state on every writeNone built in
SEO plugin awarenessWrites Yoast or Rank Math fields directlyRaw post meta
AI-search dataCitation checks + technical audit in the same server
PriceReads free · writes 5¢ · $5 free creditFree, self-hosted
07 · FAQ

Questions people ask before connecting.

  • Does WordPress have an MCP server?
    Not built in. WordPress core shipped an MCP adapter for its Abilities API in early 2026 and Automattic maintains a wordpress-mcp plugin; both are self-hosted developer tools that expose the REST API. AuditAE is a hosted alternative: install the free plugin, create a key, and point any MCP client at auditae.app/api/mcp.
  • What is a WordPress MCP?
    MCP (Model Context Protocol) is the standard AI clients like Claude, Cursor, and ChatGPT use to call external tools. A WordPress MCP server exposes your site as tools — list posts, update a post, set schema — so an AI agent can read and change the site through a permissioned API instead of a browser.
  • Is an MCP WordPress integration safe?
    It is as safe as its permissions. AuditAE gates every call twice (dashboard and plugin) against a capability matrix you set per site, returns previous_state on every write for undo, logs every action, stores the site token encrypted, and never emits its own SEO tags. Start with read + draft, add publish when you trust the workflow.
  • How is this different from the WordPress MCP adapter or Automattic's wordpress-mcp?
    Those expose the generic REST or Abilities surface and you run them yourself. AuditAE is remote (no server to host), scoped to AI-search work (SEO meta, schema, llms.txt, citations), aware of Yoast and Rank Math, and returns undo state on every mutation. If you need arbitrary REST access for development, use theirs; if you want an agent to fix SEO across a site, use this.
  • Which MCP clients work?
    Claude Code, Cursor, Windsurf, Cline, Zed, and any client that supports Streamable HTTP with an Authorization header. Claude Desktop works through mcp-remote. Claude.ai and ChatGPT web connectors require OAuth, which the endpoint doesn't offer yet — use AEBOT in the AuditAE dashboard for a no-setup chat that runs the same tools.
  • Can it bulk-edit posts?
    Yes — that is the point. The tools are per-post, and your client loops: list posts, read the current state, write the change, keep the previous_state. A 40-post meta-description rewrite is 40 writes at 5¢, about $2, and every one is reversible.
  • Does it work with Yoast and Rank Math?
    Yes. wp_set_post_seo and wp_set_seo_settings write to whichever SEO plugin is active — focus keyword, title, description, canonical — and only the engines that are active get written. Schema reuses their @ids so the graph stays linked.
  • What does it cost?
    The plugin is free and every read tool is free. Writes are 5¢ each, the page composer is 25¢, and citation checks are 5¢ per prompt-engine cell. New accounts get a $5 credit with no card. There is no subscription and no per-site fee.

Connect your first site in five minutes.

Free plugin, $5 starting credit, no card. Reads are free, so pointing an agent at your site to look around costs nothing.