MountDev AI MCP Connector

MountDev AI MCP Connector is a WordPress MCP plugin that lets you connect ChatGPT, Claude, and other MCP-compatible AI clients directly to your WordPress site. Use it to give AI agents secure, controlled access to WordPress posts, pages, media, comments, users, and other site resources through the Model Context Protocol.

If you are searching for a way to connect ChatGPT to WordPress, connect Claude to WordPress, or run AI agents on WordPress with secure authentication and permission controls, this plugin provides a practical WordPress AI connector for content management, publishing workflows, media handling, and site updates.

Built for agencies, developers, publishers, and teams using AI to manage WordPress, MountDev AI MCP Connector supports OAuth 2.0 for ChatGPT, WordPress Application Passwords for Claude Desktop, Cursor, and Windsurf, and profile-based access controls to help keep WordPress automation secure.

Features

• MCP Server Implementation – Full JSON-RPC 2.0 endpoint for MCP protocol
• OAuth 2.0 Support – Native OAuth authentication for ChatGPT with secure credential generation
• WordPress Application Passwords – Secure Basic Auth for Claude Desktop, Cursor, Windsurf
• Profile-Based Access Control – Predefined profiles for flexible tool management
• 75+ Essential Tools – Posts, pages, media, comments, users, and more
• Zero External Dependencies – Pure WordPress implementation
• AES-256-CBC Encryption – Client secrets stored securely

Supported Clients

• ChatGPT – OAuth 2.0 authentication with Client ID/Secret
• Claude Desktop – Basic Auth with Application Passwords
• Cursor – Basic Auth with Application Passwords
• Windsurf – Basic Auth with Application Passwords
• Any MCP-compatible client supporting OAuth 2.0 or Basic Auth

Available Tools

This plugin provides 75+ WordPress management tools organized into 10 categories. Each tool respects WordPress user capabilities and permissions, ensuring secure AI-powered automation.

Posts & Pages (17 tools) * list_posts – Retrieve a paginated list of posts with advanced filtering options including post type, status, search terms, and custom ordering * get_post – Fetch complete details of a single post by ID including title, content, excerpt, author, categories, tags, and metadata * create_post – Create new posts or custom post types with support for title, content, excerpt, status, categories, and tags * update_post – Modify existing posts including content, title, status, categories, tags, and other post properties * delete_post – Move posts to trash or permanently delete them with optional force delete parameter * search_posts – Search through post content and titles using keywords with support for different post types and result limits * get_posts – Alternative method to retrieve posts with the same functionality as list_posts * create_page – Create new WordPress pages with hierarchical support, parent page assignment, and custom status settings * update_page – Update existing page content, title, status, and hierarchical relationships * delete_page – Remove pages from your site with trash or permanent deletion options * get_pages – Retrieve a filtered list of all pages with pagination and status filtering * get_post_types – Discover all registered post types on your site including custom post types with their capabilities and settings * get_post_revisions – Access the complete revision history of any post to track changes over time * restore_post_revision – Roll back posts to previous versions by restoring specific revisions * get_post_meta – Retrieve custom field metadata for posts, either specific keys or all metadata at once * update_post_meta – Add or modify custom field values for posts to store additional data * delete_post_meta – Remove custom field metadata from posts when no longer needed

Media Library (10 tools) * upload_media – Upload images, videos, documents, and other files to WordPress media library with base64 encoding support * list_media – Browse media library items with filtering by MIME type, search terms, and pagination for large libraries * get_media – Retrieve detailed information about media items including URLs, dimensions, alt text, captions, and file metadata * update_media – Modify media metadata such as title, alt text, captions, and descriptions for better SEO and accessibility * delete_media – Remove media files from the library with options to move to trash or permanently delete * get_media_item – Alternative method to fetch media details with identical functionality to get_media * update_media_item – Alternative method to update media metadata with the same capabilities as update_media * delete_media_item – Alternative method to delete media files with trash or permanent deletion options * upload_image – Specialized method for uploading images with support for alt text and captions during upload * upload_image_from_url – Import images directly from external URLs into your media library without manual downloading

Comments (8 tools) * list_comments – Retrieve comments with filtering by post ID, status (approved, pending, spam), and pagination support * get_comment – Fetch complete details of a single comment including author information, content, and status * create_comment – Add new comments to posts programmatically with support for author name, email, and parent comment threading * update_comment – Modify existing comment content and status for moderation purposes * delete_comment – Remove comments with options to move to trash or permanently delete from database * moderate_comment – Quickly approve, mark as spam, or trash comments for efficient comment management * get_comments – Alternative method to list comments with the same filtering and pagination capabilities

Users (9 tools) * list_users – Retrieve WordPress users with filtering by role, search terms, and pagination for large user bases * get_user – Fetch detailed information about a specific user including username, email, display name, roles, and registration date * get_current_user – Identify the currently authenticated user making the API request with their complete profile information * list_roles – Discover all available user roles on your site including custom roles with their associated capabilities * check_capability – Verify whether a specific user has permission to perform certain actions based on their role and capabilities * get_users – Alternative method to list users with identical filtering and search functionality * get_user_meta – Retrieve custom user metadata and profile fields for specific users or all metadata at once * update_user_meta – Add or modify custom user metadata to store additional profile information and preferences * delete_user_meta – Remove custom user metadata when no longer needed or to clean up user profiles

Taxonomies (15 tools) * list_terms – Retrieve terms from any taxonomy (categories, tags, custom taxonomies) with search and empty term filtering * get_term – Fetch detailed information about a specific taxonomy term including name, slug, description, and hierarchy * create_term – Add new terms to taxonomies with support for descriptions, parent terms, and custom slugs * update_term – Modify existing taxonomy terms including names, descriptions, and hierarchical relationships * delete_term – Remove terms from taxonomies while reassigning or removing associations with posts * assign_terms – Associate multiple taxonomy terms with posts for better content organization and categorization * create_category – Specialized method to create new post categories with hierarchical parent-child relationships * update_category – Modify existing category names, descriptions, and parent category assignments * delete_category – Remove categories from your site with automatic reassignment of posts to default category * get_categories – Retrieve all post categories with filtering options for empty categories and search terms * create_tag – Add new post tags with optional descriptions and custom slugs for better URL structure * update_tag – Modify existing tag names and descriptions to improve content organization * delete_tag – Remove tags from your site while maintaining post associations or reassigning to other tags * get_tags – Retrieve all post tags with filtering for empty tags and search functionality * get_taxonomies – Discover all registered taxonomies on your site including custom taxonomies with their settings and capabilities

Site Settings (7 tools) * get_option – Retrieve WordPress configuration options from whitelisted settings for safe access to site preferences * update_option – Modify WordPress settings including site title, description, timezone, and other whitelisted configuration options * delete_option – Remove specific WordPress options to reset settings to default values * get_site_info – Fetch comprehensive site information including name, URL, WordPress version, language, timezone, and multisite status * get_site_health – Access site health diagnostics including PHP version, memory limits, upload size limits, and system status * get_settings – Retrieve multiple WordPress settings at once for efficient configuration management * update_settings – Batch update multiple WordPress settings in a single operation for streamlined site configuration

Navigation Menus (4 tools) * get_menus – Retrieve all registered navigation menus on your site with menu names, slugs, and item counts * get_menu – Fetch complete menu structure including all menu items, URLs, hierarchy, and custom classes for a specific menu * create_nav_menu – Create new navigation menus programmatically for dynamic menu management * get_nav_menus – Alternative method to retrieve all menus with identical functionality to get_menus

Plugins (1 tool) * list_plugins – Discover all installed plugins with details including version, author, description, active status, and plugin file paths

Themes (1 tool) * get_themes – Retrieve all installed themes with information about theme name, version, author, description, and active status

Utilities (3 tools) * ping – Test MCP server connectivity and responsiveness with timestamp and WordPress version information * fetch – Make HTTP requests to external URLs with support for GET/POST methods, custom headers, and request bodies * search – Perform global WordPress content searches across posts, pages, and custom post types with keyword matching

All tools enforce WordPress capability checks and user permissions, ensuring AI agents can only perform actions the authenticated user is authorized to execute. Use the Profiles tab in plugin settings to create custom tool combinations and restrict access based on your security requirements.

External Services

This plugin includes a Node.js bridge script that connects MCP clients (Claude Desktop, Cursor, Windsurf, etc.) to your WordPress site’s REST API endpoints. The bridge facilitates communication between the MCP client and your WordPress installation.

What the service is and what it is used for: The wordpress-mcp-bridge is a Node.js script that acts as a communication bridge between MCP-compatible AI clients and your WordPress site’s REST API. It translates MCP protocol requests into WordPress REST API calls and returns the responses to the AI client.

What data is sent and when: When you use an MCP client (like Claude Desktop) with this plugin, the bridge sends the following data to your WordPress site’s REST API endpoints: * Your WordPress username and Application Password (for authentication) * MCP protocol requests (tool calls, resource requests, prompts) * Content data when creating or updating WordPress posts, pages, media, etc. * This data is sent every time you interact with WordPress through the MCP client

Where the data is sent: All data is sent to YOUR OWN WordPress site’s REST API endpoints at: * https://yoursite.com/wp-json/mountdev-ai-mcp-connector/v1/messages (main MCP endpoint) * https://yoursite.com/wp-json/mountdev-ai-mcp-connector/v1/oauth/* (OAuth endpoints for ChatGPT)

Important notes: * No data is sent to any third-party external services * All communication is between the MCP client and your own WordPress installation * Your WordPress credentials and data remain on your own server * The plugin does not transmit any data to external services operated by the plugin author or any third parties

Security

• OAuth 2.0 with PKCE – Enhanced authorization flow for ChatGPT
• AES-256-CBC Encryption – Client secrets encrypted at rest
• Token Expiration – Access tokens expire after 1 hour
• Refresh Tokens – Valid for 30 days with automatic renewal
• Authorization Codes – Expire after 10 minutes
• WordPress Application Passwords – Secure Basic Auth for other clients
• Admin-Only OAuth – Only administrators can authorize ChatGPT connections
• Profile-Based Restrictions – Control which tools are available
• Capability Checks – All operations respect WordPress user permissions
• No Privilege Escalation – Users cannot perform actions beyond their role

License

This plugin is licensed under the GPL v3 or later.

See https://www.gnu.org/licenses/gpl-3.0.en.html for details.