8 plugins, sources named, installs checked 13 October 2026
The best WordPress MCP servers
Every plugin here turns a WordPress site into an MCP server an AI agent can call. They are built for different jobs, so this list ranks by job rather than crowning one winner. We make one of them, it is ordered last, and we say where the others beat it.
Every plugin on this list is free to start, only three have nothing paid above the free version, and the honest answer to "which is best" changes with what you need it for.
Biggest
AI Engine, a whole AI suite with MCP as one module.
Fastest setup
WPVibe, through a hosted relay with a metered free tier.
Most controls
miniOrange Secure MCP Server, with the biggest advertised catalog too.
Most clients
Royal MCP, local models included.
Outside data
Easy MCP AI, the only external data connectors here.
Strictest defaults
Agent Abilities: everything off, a WordPress account instead of a key, and no paid tier.
Our stake
We publish Agent Abilities for MCP. It is entry 8 of 8 below.
How we picked, and who wrote this
This list is written by one of the plugins on it, which makes the method worth stating up front.
We publish Agent Abilities for MCP, one of the 8 plugins below. That is the first thing to know, not a line buried at the bottom. It is also why the ordering is active installs, largest first, rather than a ranking we award ourselves: install count is the one number on this page none of us controls, and it puts our entry last.
Every claim about another plugin comes from that plugin’s own site or its WordPress.org listing, carries the date we checked it, and is stated as their claim rather than as a finding of ours. Where a rival genuinely beats us, the entry says so in the same paragraph as everything else. There are no affiliate links on this page, no sponsored slots, and nobody paid to be included or excluded.
The recommendation is the "Best for" column. A WordPress MCP server is not one product category doing one job: an agency wiring Elementor pages, a shop owner who wants a boundary around WooCommerce, and a team that wants AI features everywhere are shopping for genuinely different things. Each plugin below is the right answer for at least one of them.
Each entry links to a longer head-to-head that names its sources, lists where the other plugin leads, and lists where we fall short. If a fact here has drifted since then, the plugin’s own listing wins over this page.
The list at a glance
Ordered by WordPress.org active installs, largest first, checked 13 October 2026. EMCP is not on WordPress.org, so it follows them, and ours goes last.
A Free plan at 0 USD and a Premium plan their pricing page lists as starting at 249 USD a month, sold through a Contact Us form rather than a checkout
Core content, users and comments abilities always available, and integration sets switch on when their plugin is present, per their 1.4.0 changelog. Per-tool toggles narrow it afterwards.
6,000+ active installs, 8 ratings (WordPress.org, checked 13 October 2026)
Free build on GitHub, plus a Pro tier via Freemius (roughly 25 to 100 USD per year)
Destructive operations off or confirmation-gated; administrators protected from MCP
Distributed on GitHub and Freemius, not on WordPress.org
Agent Abilities for MCPOur plugin
Strict defaults, a WordPress account instead of a vendor key, and no paid tier
Free on WordPress.org. No paid tier, no API key to buy, no usage limits.
Off by default. You enable one ability at a time, and an update never widens access on its own.
600+ active installs, 5 ratings (WordPress.org, checked 13 October 2026). The smallest WordPress.org install base on this list.
Every plugin, in detail
What each one is genuinely good at, and the trade that comes with it.
01
AI Engine
A full AI suite, with MCP as one piece of it
This is the largest plugin on the list by a wide margin, and MCP is a module inside it rather than the product itself. If you want chatbots, content generation, AI forms and image generation on the same site, nothing else here is close, and its refusal to run arbitrary PHP in the official plugin is a fair line to draw.
The cost of that reach shows up in the MCP layer. Switch it on and a wide core tool set is exposed at admin level, narrowing what a role can call means writing a code filter, and the tools with the most blast radius, file editing and SQL among them, sit behind the paid tier.
PriceFree core on WordPress.org. The full MCP tool set needs AI Engine Pro, from 99 USD per year
Installs90,000+ active installs, 870 ratings (WordPress.org, checked 13 October 2026)
DefaultMCP is a module you switch on; once on, a wide core tool set is exposed by default
Source: the WordPress.org listing and the Meow Apps documentation, checked July 2026
02
WPVibe
The fastest setup, through a hosted relay
WPVibe pairs a plugin with a cloud connector that WPVibe operates. That is how it gets a site talking to Claude or ChatGPT in about thirty seconds, with no bridge to install and no MCP endpoint published on your domain. It comes from SeedProd and it is the most installed plugin on this list that does MCP and nothing else. Before anything destructive runs, it stops and shows an approval panel in the chat with a dry-run preview. We have not built that. It will also edit theme files against a draft theme with a preview URL, which we deliberately do not do.
The catch is the relay. Every call passes through the WPVibe service, the Application Password that reaches your site is created and stored on their infrastructure, and the free tier is metered at 100 tool calls a day, with paid tiers from 99 to 899 USD a year. They disclose all of this plainly on their own listing. It still puts a company between your agent and your site, so your automation depends on their service staying up and your account with them staying open.
PriceFree tier at 0 USD, then Pro at 99 USD a year, Power at 299, Agency at 599, and Scale at 899
Installs70,000+ active installs, 117 ratings (WordPress.org, checked 13 October 2026)
DefaultDestructive operations pause for an in-chat approval with a dry-run preview. Whether other tools start off is not stated on the pages we checked.
DistributedWordPress.org, plus a relay service WPVibe runs
Source: the WordPress.org listing and the WPVibe pricing page at mcp.wpvibe.ai, checked 20 August 2026
03
Royal MCP
Client and platform breadth, local models included
Royal documents more AI platforms than anyone else here, local models included, and keeps a deep library of host-level troubleshooting guides. Its Playground demo also opens with an API key already set and sample log entries in place, which is a friendlier first look than ours. It is inbound only with an explicit no-telemetry stance, so on privacy it sits close to us.
The differences are specific rather than sweeping. Its API-key path runs as full admin by its own changelog, scoping the tool set needs code-level filters instead of per-ability toggles, and the free plugin anchors a 14-plugin paid suite.
PriceFree, no Pro tier, plus optional premium support at 149 USD per year
Installs10,000+ active installs, 7 ratings (WordPress.org, checked 13 October 2026)
DefaultOff until enabled, but broad once on; scoping tools requires code-level filters
Source: royalplugins.com and the WordPress.org listing, checked July 2026
04
Easy MCP AI
SEO and analytics data inside your agent
Easy MCP advertises one of the biggest catalogs here, second only to miniOrange, and ships connectors that pull Google Analytics, Search Console and the major SEO providers into your agent. Nobody else on this page offers that, and for an SEO or analytics workflow it is a real advantage.
Those connectors are also the trade. By design they call third parties with your keys, so data does leave once you configure them, and the tools are exposed broadly from the moment you install rather than opened one at a time.
PriceFree on WordPress.org, no paid tier
Installs10,000+ active installs, 13 ratings (WordPress.org, checked 13 October 2026)
DefaultBroad by default: tools exposed the moment you install
Source: easymcpai.com and the WordPress.org listing, checked July 2026
05
miniOrange Secure MCP Server
The longest list of security controls
Of everything on this page, miniOrange is closest to us in shape. It runs on your own site, builds on the WordPress 6.9 Abilities API, and its listing says every request runs as a genuine WordPress user, so core capability checks apply. That is our model in their words. On top of it they advertise controls nobody else here attempts: human approvals on risky actions, data rules and DLP, prompt-injection and anomaly detection, and agent reputation scoring. They also advertise more than 300 tools, the biggest catalog on this list, with form plugin coverage we do not have at all.
Two things to weigh. By their own changelog the core abilities are on from the start and integrations switch on by themselves, so narrowing is something you do afterwards, and the write surface reaches plugin management, password resets and user deletion. Their WordPress.org listing and their pricing page also disagree about which controls the free plan keeps, next to a Premium plan listed from 249 USD a month. Ask them before you plan around it.
PriceA Free plan at 0 USD and a Premium plan their pricing page lists as starting at 249 USD a month, sold through a Contact Us form rather than a checkout
Installs6,000+ active installs, 8 ratings (WordPress.org, checked 13 October 2026)
DefaultCore content, users and comments abilities always available, and integration sets switch on when their plugin is present, per their 1.4.0 changelog. Per-tool toggles narrow it afterwards.
Source: the WordPress.org listing and the miniOrange pricing page at plugins.miniorange.com/mcp-server-ai-policy-enforcement-wordpress, checked 21 August 2026
06
Enable Abilities for MCP
A light companion if you already run the official MCP Adapter
The smallest thing on the list, deliberately. It exposes a set of abilities grouped by category that you toggle for the official MCP Adapter to serve, and it shares the off-by-default instinct we build around, which counts in its favor.
It cannot serve anything on its own, so the Adapter has to sit alongside it and you assemble the stack yourself. It also does not headline the identity, guarded-write and denials-logged layer that a full server carries.
PriceFree, donation supported
Installs4,000+ active installs, 12 ratings (WordPress.org, checked 13 October 2026)
Source: the WordPress.org listing, checked 28 September 2026
07
EMCP (Elementor MCP)
Elementor page building
If Elementor is where you actually work, EMCP goes further into that editor than any general server here, and its one-click bundle is the fastest way to get Claude talking to a site on this whole page.
Two things to weigh. It is distributed on GitHub and Freemius, so it skips the WordPress.org directory review and scan, and the bundle that makes onboarding quick does it by putting your site URL and credentials in a file.
PriceFree build on GitHub, plus a Pro tier via Freemius (roughly 25 to 100 USD per year)
InstallsDistributed on GitHub and Freemius, not on WordPress.org
DefaultDestructive operations off or confirmation-gated; administrators protected from MCP
Source: emcptools.com and the project’s GitHub repository, checked July 2026
08
Agent Abilities for MCP
Strict defaults, a WordPress account instead of a vendor key, and no paid tier
Ours, so read it with that in mind. Every ability starts off, the agent signs in as a real WordPress user holding only that user’s permissions, WordPress re-checks that capability before each call rather than trusting it from discovery, and every call including refusals is written to a log in your own database. The plugin makes no outbound requests of its own and there is no paid tier behind the free one.
It is also the newest and smallest plugin on this page. We connect fewer clients than Royal or Easy MCP, ship no external data connectors, and there is no AI suite around it. Several of the plugins above now describe their own defaults and audit logs in much the same language we use, so the honest reason to pick this one is that it hands the agent a WordPress account instead of a key, and that none of it costs anything. If breadth is what you are shopping for, one of the plugins above is a better answer than this one.
PriceFree on WordPress.org. No paid tier, no API key to buy, no usage limits.
Installs600+ active installs, 5 ratings (WordPress.org, checked 13 October 2026). The smallest WordPress.org install base on this list.
DefaultOff by default. You enable one ability at a time, and an update never widens access on its own.
Credible options we have not written a head-to-head for yet. Only what their own listing or announcement says, read 28 September 2026, with install counts rechecked 13 October 2026.
WSP MCP
2,000+ active installs, 5 ratings (WordPress.org)
Ships its own MCP server, so the MCP Adapter and companion plugins are not needed. It connects with an Application Password or an API key the plugin generates. Every tool has its own toggle, write tools start off, each call is capability-checked, and an audit log sits in your own database.
Free and open source with no Pro tier and no relay. Its standout is undo: a per-change journal plus database checkpoints that roll back one edit or the whole site. It also reaches further into the server than most, with WP-CLI, file edits in wp-content and database repair, behind a safe mode that confirms destructive steps and an audit log.
Official WordPress project, open source (GPL-2.0), on GitHub
The piece that exposes Abilities API abilities to MCP clients as tools. It is a foundation for other plugins to build on rather than a finished product for a site owner. Agent Abilities for MCP and Enable Abilities for MCP both build on it.
Built into Elementor, beta 15 September 2026, launched 23 September 2026
Elementor’s own MCP, set up from an Elementor MCP page in the WordPress dashboard. Its main job is building and editing Elementor pages, saved as drafts, from Claude Code, Claude Desktop, Codex, Cursor and others. Access is limited to site admins, one connection per site. With Elementor’s Angie installed it also passes through every ability registered with the Abilities API. It is a different product from EMCP.
Match the plugin to the job, not to the tool count on its front page.
Want AI features across the whole site, with MCP as one of them? AI Engine is the obvious start. If you want an agent connected in under a minute and are happy with a service in the middle, that is WPVibe. Royal MCP covers more ground than anyone here on documented clients and platforms, and it is the one to reach for if you run local models. Easy MCP AI is the only plugin on this page that pulls analytics and SEO data into the agent, which decides it if that is your work. If what worries you is the agent itself being manipulated or drifting, miniOrange advertises approvals, DLP and prompt-injection detection that nobody else here attempts. Elementor sites are EMCP, no contest, since no general server goes that deep into one editor. And if the official MCP Adapter is already running on your site, Enable Abilities for MCP adds a curated set of abilities to switch on and nothing else.
Pick Agent Abilities for MCP when what worries you is not how much an agent can do but how much it can reach by accident. Nothing is exposed until you enable it, the agent is bound to a real WordPress user rather than an admin key, the capability is checked again before every call, and the log records refusals as well as successes. The 9 WooCommerce abilities that move money or grant authority stay locked even after you enable them, until you switch on a second control in Settings. Coupon management is one of them: see a governed coupon workflow.
Direct answers about the WordPress MCP field, including the awkward one.
What is the best MCP server for WordPress?
There is no single best one, which is why this page sorts by job instead of handing out a crown. AI Engine is the pick if you want a whole AI suite and MCP as one part of it. WPVibe is the quickest way to a working connection, through a hosted relay with a metered free tier. Royal MCP leads on documented clients and platforms. Easy MCP AI is the only one that pulls SEO and analytics data into the agent. miniOrange Secure MCP Server advertises the biggest catalog and the longest list of security controls. Enable Abilities for MCP is a light layer for sites already running the MCP Adapter. EMCP goes deepest into Elementor. Agent Abilities for MCP is the one that starts with everything off, gives the agent a WordPress account rather than a key of its own, and charges nothing at any tier. Pick the one whose strength is the thing you actually need.
Which WordPress MCP plugin has the strictest security defaults?
On defaults, Agent Abilities for MCP: every ability starts off, so nothing is exposed before you touch it. On identity we are not alone. miniOrange Secure MCP Server also runs every request as a real WordPress user with core capability checks, and it advertises a longer list of controls than ours, from approvals to prompt-injection detection, though its core abilities are on from the start. WPVibe asks for approval in the chat before destructive work, but its relay holds your Application Password on its own infrastructure. Royal MCP and AI Engine expose a broad tool set once enabled, scoped through code-level filters rather than per-ability toggles. Most of the field now describes strict defaults, per-call capability checks and audit logs, and some of them mean it. What is still uncommon is starting from nothing, with no key of the vendor’s own in the chain and no paid tier behind the free one.
Are there free WordPress MCP servers?
Yes. Every plugin on this list can be installed for free, but only three have nothing paid above the free version: Agent Abilities for MCP, Easy MCP AI and Enable Abilities for MCP. Royal MCP is free with optional paid support alongside a wider paid suite. AI Engine has a free core, but its plugin, theme, database and WooCommerce MCP tools need the Pro subscription. WPVibe’s free tier is metered at 100 tool calls a day, with paid tiers from 99 to 899 USD a year. miniOrange Secure MCP Server has a free plan and a Premium plan its pricing page lists from 249 USD a month. EMCP has a free GitHub build and a paid tier through Freemius.
Can I trust a roundup written by one of the plugins in it?
Only as far as it holds up when you check it, which is why the sources are named. Every claim about another plugin here comes from that plugin’s own site or its WordPress.org listing, carries the date we checked it, and is stated as their claim. The list is ordered by active installs, largest first, which puts ours last. There are no affiliate links and nobody paid to appear. Each entry also links to a full head-to-head that says where the other plugin beats us.
Which WordPress MCP plugins work with ChatGPT and Claude?
Agent Abilities for MCP connects ChatGPT, Claude.ai, Claude Desktop and Manus through custom connectors over OAuth, plus Claude Code, Cursor, VS Code, Windsurf and Gemini CLI. Easy MCP AI advertises setup guides for 16 clients, Royal MCP documents more than 10 platforms including local models, and miniOrange Secure MCP Server lists Claude.ai, Claude Desktop, Claude Code, ChatGPT, Cursor, Windsurf, Gemini CLI, Google Antigravity and n8n. WPVibe lists Claude, ChatGPT, Cursor, Windsurf and OpenCode, and AI Engine documents ChatGPT, Claude and Claude Code. On raw client count, several of the others reach further than we do today.
This roundup is published by Agent Abilities for MCP, which is one of the plugins listed. Claims about every other plugin come from its public documentation and its WordPress.org listing, carry the date we checked them, and are stated as that plugin’s claims; products change, so check the listing before you decide.Agent Abilities for MCP is not affiliated with, or endorsed by, any of the other products here. No affiliate links, no sponsored placements. Source for our own facts: the plugin readme and the public repository.
Install Agent Abilities for MCP, keep every ability disabled, and switch on one at a time. Requires WordPress 6.9+ and PHP 7.4+. Free on WordPress.org.