Agent Abilities
GitHubGet it free
Features
Abilities
Browse all abilities

WordPress core

ContentTaxonomies & TermsCommentsUsersMediaSite settingsPluginsThemes & stylesBlocksMenusSearch

Integrations

WooCommerceAdvanced Custom FieldsRank Math SEOYoast SEOAll in One SEO
Integrations
All integrationsWooCommerce52Advanced Custom Fields7Rank Math SEO5Yoast SEO3All in One SEO3
Bridge
AI clients
All clientsChatGPTClaude.aiManusClaude DesktopClaude CodeCursorVS CodeWindsurfGemini CLI
Resources
DocsChangelogPrompt LibraryBlogComparisonsSupport
GitHubGet it free

Connect ChatGPT to WordPress over MCP

Point ChatGPT at your site's MCP endpoint as a scoped user. Connect once, then it can call only the abilities you switched on, and every call is checked and logged.

Set it up in four steps

ChatGPT is a hosted web app, so it connects by adding your endpoint as a custom connector and approving once over OAuth. You do not need a config file or an application password.

ChatGPT specifics: Turn on Developer Mode in ChatGPT (Settings, then Connectors, then Advanced), add your site as a custom connector, and approve it once over OAuth. Custom connectors are a beta feature on ChatGPT’s paid plans.

  1. Turn on what you want

    Open the Agent Abilities for MCP screen and enable only the abilities you want the agent to have. Everything starts off.

  2. Copy your endpoint

    On the Connection tab, copy your site’s MCP endpoint.

  3. Add it as a custom connector

    In your app’s connector settings, add your site as a custom connector using that endpoint URL, then approve the connection once over OAuth in the browser. Approve while logged in as the account you want the agent to be. The connection takes that account’s capabilities, so approving as an administrator gives the agent administrator reach.

  4. Check the connection

    Use the connection check on the Connection tab to confirm the endpoint is reachable, then run a call from your client.

Connect over OAuth. Least privilege.

ChatGPT authenticates as a real WordPress user, never an admin-equivalent key, and it takes that account’s capabilities. Approve while logged in as the account you want the agent to be.

OAuth

Approve once in the browser

Approve the agent once in the browser, while logged in as the account you want the agent to be, because it takes that account’s capabilities. There is no secret to store.

The plugin's Connection tab, showing OAuth, the operating-system toggle, and a card for each client it lists
The Connection tab lists your endpoint and a connector card for each client, including ChatGPT. Real plugin screen.

Where to get your real endpoint and token: open Agent Abilities for MCP in wp-admin, go to the Connection tab, and copy the endpoint there. The same screen builds the client config for you and runs a connection check so you can confirm the endpoint is reachable before you connect ChatGPT.

If the connection will not start

A few common snags and their fixes. These apply to MCP setup generally, not just ChatGPT.

OAuth discovery returns 403 or 404

Some servers deny anything that starts with a dot before PHP runs, which blocks the /.well-known/ documents MCP clients need. On nginx, add a location block so /.well-known/ falls through to WordPress.

Once ChatGPT is connected

Decide what it can reach, then check the details.

Choose which abilities to expose

All 153 governed abilities, each off until you switch it on. Enable only what ChatGPT needs.

Browse the catalog

Connecting a client, in full

The full reference for both routes in: OAuth in the browser, or an Application Password on a scoped user.

Read the connection docs

How a WordPress MCP server works

What your site exposes over MCP, and how governance sits in front of every call ChatGPT makes.

See the server model

Other clients

Back to all clients

Governed by default, from the first call.

Install the plugin, connect ChatGPT as a scoped user, and enable one ability at a time. Requires WordPress 6.9+ and PHP 7.4+. Free on WordPress.org, no paid tier, no API key to buy, no usage limits.

Get it on WordPress.orgRead the docs

Governed from the first call. Nothing leaves your site without you.