Agent Abilities
GitHubGet it free
Features
Abilities
Browse all abilities

WordPress core

ContentTaxonomies & TermsCommentsUsersMediaSite settingsPluginsThemes & stylesBlocksMenusSearch

Integrations

WooCommerceAdvanced Custom FieldsRank Math SEOYoast SEOAll in One SEO
Integrations
All integrationsWooCommerce52Advanced Custom Fields7Rank Math SEO5Yoast SEO3All in One SEO3
Bridge
AI clients
All clientsChatGPTClaude.aiManusClaude DesktopClaude CodeCursorVS CodeWindsurfGemini CLI
Resources
DocsChangelogPrompt LibraryBlogComparisonsSupport
GitHubGet it free

Connect Claude.ai to WordPress over MCP

Point Claude.ai at your site's MCP endpoint as a scoped user. Connect once, then it can call only the abilities you switched on, and every call is checked and logged.

Set it up in four steps

Claude.ai is a hosted web app, so it connects by adding your endpoint as a custom connector and approving once over OAuth. You do not need a config file or an application password.

Claude.ai specifics: In Claude.ai, open Settings, then Connectors, add your site as a custom connector using your MCP endpoint URL, and approve it once over OAuth. Custom connectors on Claude.ai are a beta feature.

  1. Turn on what you want

    Open the Agent Abilities for MCP screen and enable only the abilities you want the agent to have. Everything starts off.

  2. Copy your endpoint

    On the Connection tab, copy your site’s MCP endpoint.

  3. Add it as a custom connector

    In your app’s connector settings, add your site as a custom connector using that endpoint URL, then approve the connection once over OAuth in the browser. Approve while logged in as the account you want the agent to be. The connection takes that account’s capabilities, so approving as an administrator gives the agent administrator reach.

  4. Check the connection

    Use the connection check on the Connection tab to confirm the endpoint is reachable, then run a call from your client.

Connect over OAuth. Least privilege.

Claude.ai authenticates as a real WordPress user, never an admin-equivalent key, and it takes that account’s capabilities. Approve while logged in as the account you want the agent to be.

OAuth

Approve once in the browser

Approve the agent once in the browser, while logged in as the account you want the agent to be, because it takes that account’s capabilities. There is no secret to store.

The plugin's Connection tab, showing OAuth, the operating-system toggle, and a card for each client it lists
The Connection tab lists your endpoint and a connector card for each client, including Claude.ai. Real plugin screen.

Where to get your real endpoint and token: open Agent Abilities for MCP in wp-admin, go to the Connection tab, and copy the endpoint there. The same screen builds the client config for you and runs a connection check so you can confirm the endpoint is reachable before you connect Claude.ai.

If the connection will not start

A few common snags and their fixes. These apply to MCP setup generally, not just Claude.ai.

OAuth discovery returns 403 or 404

Some servers deny anything that starts with a dot before PHP runs, which blocks the /.well-known/ documents MCP clients need. On nginx, add a location block so /.well-known/ falls through to WordPress.

Once Claude.ai is connected

Decide what it can reach, then check the details.

Choose which abilities to expose

All 153 governed abilities, each off until you switch it on. Enable only what Claude.ai needs.

Browse the catalog

Connecting a client, in full

The full reference for both routes in: OAuth in the browser, or an Application Password on a scoped user.

Read the connection docs

How a WordPress MCP server works

What your site exposes over MCP, and how governance sits in front of every call Claude.ai makes.

See the server model

Other clients

Back to all clients

Governed by default, from the first call.

Install the plugin, connect Claude.ai as a scoped user, and enable one ability at a time. Requires WordPress 6.9+ and PHP 7.4+. Free on WordPress.org, no paid tier, no API key to buy, no usage limits.

Get it on WordPress.orgRead the docs

Governed from the first call. Nothing leaves your site without you.