{
  "name": "io.github.cvrt-jh/wordpress-mcp",
  "description": "WordPress runs a large share of the web and has no first-party MCP server; this community one is the most complete option we could verify. It speaks the WordPress REST API with an application password and exposes 200 tools across posts, pages, users, media, categories, tags, comments, plugins, themes and site settings — including multi-site support, where every tool takes a `site` argument.",
  "status": "active",
  "version": "latest",
  "_meta": {
    "com.top-mcps/lastVerified": "2026-09-17",
    "com.top-mcps/score": {
      "value": 50,
      "rubricVersion": "2026-09",
      "lastComputed": "2026-10-15T10:09:13.507Z",
      "methodology": "https://top-mcps.com/about/methodology"
    },
    "com.top-mcps/stats": {
      "fetchedAt": "2026-10-15T10:09:13.506Z",
      "githubStars": 3,
      "lastCommitAt": "2026-03-27T08:44:47Z",
      "npmWeeklyDownloads": 33,
      "githubFetchedAt": "2026-10-15T10:09:13.506Z",
      "npmFetchedAt": "2026-10-15T10:09:13.506Z",
      "githubRepo": "cvrt-jh/wordpress-mcp",
      "npmPackage": "@cavort-it-systems/wordpress-mcp"
    }
  },
  "repository": {
    "url": "https://github.com/cvrt-jh/wordpress-mcp",
    "source": "github"
  },
  "homepage": "https://developer.wordpress.org/rest-api/",
  "author": {
    "name": "Community (cvrt-jh)"
  },
  "packages": [
    {
      "registryType": "npm",
      "registryBaseUrl": "https://registry.npmjs.org",
      "identifier": "@cavort-it-systems/wordpress-mcp",
      "version": "latest",
      "transport": {
        "type": "stdio"
      },
      "environmentVariables": [
        {
          "name": "WORDPRESS_SITE_URL",
          "description": "WORDPRESS_SITE_URL — required credential for WordPress.",
          "isRequired": true,
          "isSecret": true
        },
        {
          "name": "WORDPRESS_USERNAME",
          "description": "WORDPRESS_USERNAME — required credential for WordPress.",
          "isRequired": true,
          "isSecret": true
        },
        {
          "name": "WORDPRESS_PASSWORD",
          "description": "WORDPRESS_PASSWORD — required credential for WordPress.",
          "isRequired": true,
          "isSecret": true
        }
      ]
    }
  ],
  "capabilities": {
    "tools": [
      {
        "name": "list_sites",
        "description": "List the WordPress sites this server manages. Every other tool needs one of these ids.",
        "sideEffect": "read"
      },
      {
        "name": "wp_list_posts",
        "description": "List posts with optional filters.",
        "sideEffect": "read"
      },
      {
        "name": "wp_create_post",
        "description": "Create a post.",
        "sideEffect": "write"
      },
      {
        "name": "wp_update_post",
        "description": "Update an existing post.",
        "sideEffect": "write"
      },
      {
        "name": "wp_delete_post",
        "description": "Trash a post, or delete permanently with force=true.",
        "sideEffect": "write"
      },
      {
        "name": "wp_create_page",
        "description": "Create a page.",
        "sideEffect": "write"
      },
      {
        "name": "wp_list_media",
        "description": "List media library items.",
        "sideEffect": "read"
      },
      {
        "name": "wp_update_media",
        "description": "Update media title, alt text and caption.",
        "sideEffect": "write"
      },
      {
        "name": "wp_list_plugins",
        "description": "List installed plugins.",
        "sideEffect": "read"
      },
      {
        "name": "wp_activate_plugin",
        "description": "Activate an installed plugin (routes via the companion plugin).",
        "sideEffect": "write"
      },
      {
        "name": "wp_activate_theme",
        "description": "Switch the active theme.",
        "sideEffect": "write"
      },
      {
        "name": "wp_update_settings",
        "description": "Update site title, tagline, timezone and date format.",
        "sideEffect": "write"
      }
    ],
    "toolsListedCount": 12,
    "toolsReportedTotal": 200,
    "security": {
      "scope": "read-write",
      "sandbox": "No sandbox. Point it at a staging site first — this server can change the active theme on a live site.",
      "gotchas": [
        "An application password inherits the WordPress user's full capabilities. Create a dedicated user with the narrowest role that still does the job rather than using an administrator.",
        "`wp_activate_theme` and the plugin activate/deactivate tools change what visitors see immediately, with no preview and no undo.",
        "`wp_delete_post` trashes by default but takes `force=true` for a permanent delete. Make sure the agent never has a reason to pass it."
      ]
    }
  },
  "_links": {
    "html": "https://top-mcps.com/mcp/wordpress",
    "markdown": "https://top-mcps.com/mcp/wordpress.md",
    "methodology": "https://top-mcps.com/about/methodology"
  }
}