WordPress MCP Server

Environment

• WP_SITE_URLrequired

  The WordPress site URL

• WP_USERNAME

  WordPress username for application_password or basic auth

• MCP_TRANSPORT

  Transport type: stdio (default) or http

• WP_AUTH_METHOD

  Authentication method: application_password (default), bearer, basic, or none

• WP_ALLOW_PUBLISH

  Set to 'true' to allow publishing

• WP_ALLOW_RAW_REST

  Set to 'true' to allow raw REST mutations

• WP_ALLOW_DESTRUCTIVE

  Set to 'true' to allow destructive actions

• MCP_HTTP_BEARER_TOKENsecret

  Bearer token for HTTP transport

• WP_ALLOW_SETTINGS_WRITE

  Set to 'true' to allow settings writes

• WP_APPLICATION_PASSWORDsecret

  Application password for application_password auth

• WP_REQUIRE_CONFIRMATION

  Set to 'true' to require confirmation tokens

• WP_ALLOW_USER_MANAGEMENT

  Set to 'true' to allow user management