Easy MCP AI is the most complete free WordPress MCP server — a remote MCP server built so AI assistants and autonomous AI agents can run your entire site workflow, from content and publishing to SEO research, traffic monitoring, and daily admin, through the Model Context Protocol. It works as an MCP adapter for any MCP-compatible AI client, making your site agent-ready out of the box. Ask your AI about Google Analytics, Google Search Console, and SEO data without leaving your chat. You bring the direction. Your AI handles the execution.
No Node.js. No external proxy. No complicated setup. Just install, generate a token, and start building.
At a glance:
- 214 tools across posts, pages, media, users, comments, menus, Google Analytics 4, Google Search Console, Semrush, DataforSEO, and more
- 1-click OAuth 2.0/2.1 with per-scope consent (Claude Desktop, Cursor, etc.)
- Plugin integrations — WooCommerce, ACF, The Events Calendar, BuddyPress, Yoast, Rank Math, AIOSEO
- Google Analytics 4 & Google Search Console — ask your AI about traffic, top pages, conversions, search queries, clicks, impressions, and indexing status
- Semrush — ask your AI for keyword research, domain overviews, organic keywords, competitor research, keyword difficulty, related keywords, question phrases, and backlink analytics
- DataforSEO — ask your AI for live SERP results, keyword search volumes, on-page SEO audits, backlink data, and ranked/site keywords
- Auto-discovers WordPress 6.9+ Abilities API
- Full audit trail — every AI action on your site is logged in a searchable user activity log
- Change History — every MCP-originated write (posts, meta, terms, users, options, comments, WooCommerce, BuddyPress) is recorded with before/after snapshots and queryable via 3 dedicated
wp_history_*tools
Works With Every Major AI
Connect any of the following AI assistants or AI agents to your site through the WordPress MCP endpoint — full integration guides here:
- Manus — the autonomous AI agent that can run multi-step workflows start to finish
- Claude (Claude.ai, Claude Desktop, Claude Code) — connect Claude to WordPress in one click via OAuth
- ChatGPT (OpenAI) — connect ChatGPT to WordPress and manage your entire site by chat
- Gemini AI (Gemini CLI / Google Antigravity) — Google’s AI tools with MCP support
- Cursor, Windsurf, Cline, Roo Code — AI-powered code editors that can also manage your content
- n8n — automation for content pipelines and publishing workflows
- Any MCP-compatible client — the protocol is open and supported by a growing ecosystem
What Can Your AI Do On Your Site?
Once connected, your AI agent can handle everything you’d normally do in the WordPress admin:
AI Content Writing & Publishing — let your AI agent draft, rewrite, SEO-optimize, schedule, and publish WordPress posts and pages; update existing posts and pages
AI Media Library & Alt Text — upload images from chat, browse the media library, and auto-generate AI alt text and captions for SEO and accessibility
Taxonomy & Navigation — manage categories, tags, term meta, and WordPress navigation menus; assign terms from any taxonomy to posts
User Management — create WordPress user accounts, assign roles, update profiles, and manage user meta
Plugins & Themes — list installed plugins and themes; see which theme is currently active
WordPress Settings — read and update site title, tagline, timezone, date format, time format, and posts-per-page
WooCommerce AI Agent — manage WooCommerce products, variations, attributes, orders, customers, coupons, and webhooks; view order refunds, shipping zones, shipping methods, tax rates, and payment gateways; pull sales, top-seller, and revenue reports; bulk update products, variations, and orders
SEO with Yoast, Rank Math & AIOSEO — read and update Yoast SEO, Rank Math, and All in One SEO (AIOSEO) post metadata: SEO titles, meta descriptions, Open Graph and Twitter card fields, plus focus keywords (Yoast, Rank Math), canonical URLs (Rank Math, AIOSEO), no-index (AIOSEO), and cornerstone content flag (Yoast)
Advanced Custom Fields (ACF) — read and write ACF custom field values on posts and users; read ACF fields on taxonomy terms; list ACF field groups
Events Calendar & BuddyPress — create, edit, and delete events with The Events Calendar; create and view venues; create and list organizers; list BuddyPress members, groups, group members, and private message threads; create and delete activity stream posts
Comment Moderation — let AI list, approve, hold, mark as spam, edit, or delete WordPress comments
Change History & Rollback Awareness — every write your AI makes is recorded with structured before/after snapshots. Ask “what did the AI change on this post last week?”, diff any two revisions, or audit per-user activity through the wp_history_list, wp_history_get, and wp_history_diff tools — plus a full Change History admin page with retention and on/off controls
Gutenberg & Full Site Editing — create, edit, and reuse Gutenberg blocks; update block templates and global styles for FSE themes
Custom Post Types (CPT) — read and write any registered custom post type — portfolios, listings, courses, reviews, anything
Google Analytics 4 — ask about traffic, top pages, conversions, custom dimensions/metrics, and realtime active users
Google Search Console — ask about top search queries, clicks, impressions, sitemaps, and URL indexing status
Semrush — pull domain overviews, keyword research, organic competitors, keyword difficulty and related keywords, question phrases, and backlink overview / referring domains / anchors for any target
DataforSEO — run on-page SEO audits on any URL, check keyword search volumes and trends, pull live SERP results, analyse backlinks, and look up ranked keywords for any domain
Any Plugin — automatically connects to plugins that support WordPress 6.9+ Abilities API, no custom code needed
Ask your AI anything — for example: * “Write a 500-word blog post about healthy eating and publish it as a draft” * “Show me today’s WooCommerce orders and their total revenue” * “What are the top 10 search queries bringing traffic to my site this month?” * “Update all product prices in the Summer Sale category by -20%” * “What keywords does my homepage rank for and what are the click counts?” * “Rewrite the introduction of my About page to sound more professional”
Tools
93 core tools covering every major WordPress content type:
Posts — list, get, create, update, delete, search, count; get full post (with meta + terms in one call); find-and-replace inside post content Pages — list, get, create, update, delete Media — list, get, upload, upload from URL, update, delete, count; update AI alt text on any image Categories — list, get, create, update, delete, count Tags — list, get, create, update, delete, count Taxonomy Terms (any taxonomy) — generic create, get, update, delete for any registered taxonomy Comments — list, get, create, update, delete Users — list, get, create, update, delete Menus — list menus, get, create, update, delete; list, create, update, delete menu items Custom Post Types — list, get, create, update, delete CPT items Post Meta — get, update, delete post meta; add taxonomy terms to a post Term Meta — get, update, delete term meta User Meta — get, update, delete user meta Revisions — list, get, delete, restore post revisions Blocks — list, get, create, update, delete AI blocks and reusable blocks Templates — list, get, update block templates Styles — get and update global styles Site — get and update settings, list post types, taxonomies, and post statuses Plugins — list installed plugins Themes — list themes, get active theme Search — search across all content Change History — list, get, and diff every MCP-originated write across posts, meta, terms, users, options, comments, WooCommerce, and BuddyPress
3 Change History Tools
wp_history_list — query change records by user, object type, object id, tool name, or date range; supports since / until filters and pagination
wp_history_get — fetch a single change record with full before/after JSON snapshots
wp_history_diff — compute a structured diff between any recorded snapshot and either another snapshot or the current live state of the object
Non-admin tokens see only their own changes. Administrators (with the new easy_mcp_ai_view_all_history capability — granted to the Administrator role on activation) see every user’s changes. Sensitive keys are redacted before storage, sensitive post meta keys (matching patterns like *_token, *_secret, *password*, *api_key*) are redacted at write time, and snapshot size is capped. The wp_history_diff tool also enforces these gates when reading the current live state: meta requires edit_post, options require manage_options, and protected meta keys are excluded entirely. Site owners can narrow query scope further via the easy_mcp_ai_history_query_scope filter (the self-pin for non-admins cannot be weakened by the filter).
11 Google Analytics 4 Tools
Account & Property — list account summaries, get property details, check compatibility, get metadata Reports — run standard reports, pivot reports, and realtime reports Configuration — list data streams, conversion events, custom dimensions, and custom metrics
6 Google Search Console Tools
Sites — list verified properties Search Analytics — query top search terms, pages, countries, devices with clicks, impressions, CTR, and position Sitemaps — list and inspect submitted sitemaps URL Inspection — check indexing status and coverage for any URL on your site
13 Semrush Tools
Domain — domain overview and organic competitor research Keywords — keyword research tools: domain organic keywords, URL organic keywords, keyword overview, related keywords, keyword difficulty, and phrase questions Backlinks — backlinks overview, backlinks list, referring domains, and anchors Account — check your Semrush API units balance at any time
8 DataforSEO Tools
SERP — fetch live search engine results pages for any keyword and location Keywords — look up monthly search volume and trend data for one or more keywords Labs — get ranked keywords for any domain, or find keywords a specific page ranks for Backlinks — get a backlink summary and list of referring domains for any target URL On-Page — run a full on-page SEO audit on any URL and get a list of actionable issues Account — check your DataforSEO API account balance at any time
46 WooCommerce MCP Tools
Products — list, get, create, update, delete products Product Variations — list, get, create, update, delete product variations Product Attributes — list, create, and set product attributes Product Categories — list product categories Orders — list, get, create, update orders; list order notes, create order note; list order refunds (read-only) Customers — list, get, create, update, delete customers Coupons — list, get, create, update, delete coupons Webhooks — list, get, create, update, delete webhooks Shipping — list shipping zones, list shipping methods Tax — list tax rates Payment — list payment gateways Reports — sales, orders, products, top sellers, customers Batch — bulk create, update, or delete products, variations, and orders in a single request
7 Plugin Integrations
WooCommerce — 46 WooCommerce AI tools for products, orders, customers, coupons, shipping, reports, and more Advanced Custom Fields (ACF) — 6 tools to get and update ACF fields on posts, users, and terms; list ACF field groups The Events Calendar — 10 tools to create and manage events, venues, and organizers BuddyPress — 10 tools for members, activity stream, groups, group members, and private messages Yoast SEO — get and update post SEO metadata, meta description, and rendered SEO head output Rank Math — get and update post SEO metadata, meta description, and rendered SEO head output All in One SEO (AIOSEO) — get and update post SEO metadata
Connect Any Plugin with Abilities API
WordPress 6.9+ introduces Abilities API — a standard way for plugins to declare what they can do. Easy MCP AI acts as an MCP adapter for any plugin that registers Abilities — automatically discovering and exposing them as MCP tools with no custom code needed. If a plugin supports the Abilities API, your AI can use it out of the box.
One-Click Connect with OAuth 2.0/2.1
Skip manual token copy-paste. Your WordPress MCP endpoint ships with a full OAuth 2.0/2.1 authorization server — PKCE, refresh-token rotation, and Dynamic Client Registration (RFC 7591) built in. Compatible MCP clients like Claude Desktop can connect with a single click: they register themselves, you approve the scopes on a consent screen, and you’re done. Bearer tokens still work for power users and automation.
Built for Security
Giving an AI access to your site is serious — so security is built into every layer:
- Bearer token authentication with SHA-256 hashing — the raw token is never stored
- Per-token permissions — create a read-only token for one AI, a full-access token for another
- WordPress capability checks on every single tool call
- Rate limiting per token (default 60 requests/min, configurable)
- Full audit trail — every tool call is logged in a searchable user activity log with the token used, arguments, result, and client IP
- IP whitelisting — optionally restrict which IPs can use the MCP endpoint
Simple Admin Interface
- Dashboard — your MCP endpoint URL and one-click connection configs for every major AI client
- API Tokens — create and manage tokens with a checkbox-based tool permission tree
- Audit Log — a paginated, searchable user activity log of every AI action taken on your site
- Change History — a dedicated page with before/after snapshots of every MCP-originated write, inline diff expand, and user / object / date filtering
- Settings — tune rate limits, audit and change-history retention, IP whitelist, and more
External services
This plugin connects to the following third-party services only when a site administrator explicitly configures their own external account credentials in Easy MCP AI → External Data. Nothing is contacted on a default install.
Semrush API — api.semrush.com, www.semrush.com
- When: only if an admin saves a Semrush API key.
- What is sent: the configured Semrush API key plus the parameters supplied per call (target domain, target URL, keyword/phrase, database/region code, display limits).
- Terms: https://www.semrush.com/company/legal/terms-of-service/
- Privacy: https://www.semrush.com/company/legal/privacy-policy/
DataForSEO — api.dataforseo.com
- When: only if an admin saves a DataForSEO account login + API password.
- What is sent: the configured DataForSEO login + API password (HTTP Basic auth), plus the parameters supplied per call (keyword, target domain, target URL, location code, language code).
- Terms: https://dataforseo.com/terms-of-use
- Privacy: https://dataforseo.com/privacy-policy
Google Analytics 4 Data API — analyticsdata.googleapis.com (token exchange via oauth2.googleapis.com)
- When: only if an admin uploads a Google service-account JSON.
- What is sent: a signed JWT minted from the service-account key, plus the GA4 property id and report definition (dimensions, metrics, date range, filters) chosen per call.
- Terms: https://policies.google.com/terms
- Privacy: https://policies.google.com/privacy
Google Search Console API — searchconsole.googleapis.com / www.googleapis.com/webmasters/v3 (token exchange via oauth2.googleapis.com)
- When: only if an admin uploads a Google service-account JSON.
- What is sent: a signed JWT minted from the service-account key, plus the Google Search Console site URL and per-call parameters (date range, dimensions, URL to inspect, sitemap URL).
- Terms: https://policies.google.com/terms
- Privacy: https://policies.google.com/privacy
Author
Developed by EasyMCPAI.