<div align="center">

Royal MCP

Run your WordPress site from Claude, ChatGPT or any AI app: write and edit content, manage your store, fix SEO and undo any change. Works alongside Elementor's and WooCommerce's own MCP tools. 100% self-hosted.

Download on WordPress.org · Documentation · Royal MCP Pro · Royal Plugins

</div>

---

Royal MCP is an open-source WordPress plugin that turns your site into a Model Context Protocol server. Connect it once, and your AI app can read and change your site the way you would from wp-admin: posts, pages, media, menus, your WooCommerce store, Elementor and Divi pages, SEO, backups and security. Every call runs as a WordPress user, is checked against that user's capabilities, and lands in an activity log, and every destructive change can be undone.

Nothing is relayed through a third-party service. Your API keys, sign-in tokens and logs stay in your own WordPress database.

What you can do with it

Ask in plain language. These all work on the free plugin:

| Ask your AI to... | What happens | |---|---| | "Draft a post about our spring sale, use this image as the featured image and write the SEO title and description." | Creates a draft, uploads the image to your media library, sets the featured image and writes the meta for Yoast, Rank Math, AIOSEO or SEOPress. Nothing goes live until you publish. | | "Find the pages that still mention our old phone number and update them." | Searches your content and replaces the text page by page, with an undo token for each change. | | "Which products are low on stock? Create a 15% coupon for orders over $100." | Reads products filtered by stock status and creates the WooCommerce coupon. | | "Clone the Services page as a new landing page, change the headline and swap the hero image." | Clones the Elementor page and edits the copy and image in place, keeping the layout intact. | | "Show me this month's top pages and search queries." | Reads the overview, top pages, traffic sources and Search Console queries from MonsterInsights. | | "Take a backup, then check for vulnerable plugins and failed logins this week." | Starts a backup (SiteVault or UpdraftPlus) and reads scan results and login activity (GuardPress, Wordfence or Solid Security). | | "The site feels slow. What's wrong?" | Reads site status, the PHP error log and the cron schedule, and purges the cache once the issue is fixed (ForgeCache, LiteSpeed Cache or W3 Total Cache). | | "Undo that last change." | Reverses the last destructive write from its stored snapshot, within 72 hours. |

Built to work alongside other MCP tools

Royal MCP is designed to run next to the MCP tools other plugins ship, so your AI can reach for the best tool for each part of a job.

• Elementor. When Elementor's own MCP is switched on, Royal MCP detects it and tells your AI that Elementor's builder is there for designing new layouts. Royal MCP's Elementor tools keep handling edits to the pages you already have: text and image swaps, widgets, cloning and templates.
• WooCommerce. WooCommerce's own MCP abilities keep working. Royal MCP adds the rest of the store: coupons, variations, attributes, customers and store stats.
• WordPress Abilities API. Royal MCP's tools also register as WordPress abilities. With the MCP Adapter installed they are served on Royal MCP's own adapter server, royal-mcp-server, with the same permission checks, switches and logging as the native endpoint.

Royal MCP answers on its own endpoint and never switches off another plugin's tools, so together they cover more of your site than any one of them alone.

Safety

• Your AI app asks first. Claude, ChatGPT and other clients ask you to approve each destructive tool call by default.
• Drafts first. New posts and pages start as drafts.
• Read-only and drafts-only modes. One switch refuses every tool that changes the site, or every tool that would publish.
• An access level per connection. Give each connected AI app Full, Read-only or Drafts-only access from the Connected Clients screen, and revoke any of them.
• Recent Changes with undo. Every destructive write stores a snapshot first. The Recent Changes screen shows the before, after and current values, and one mcp_undo_last_operation call reverses a change within 72 hours.
• Activity log. Every tool call is logged with the tool name, argument keys, IP and user agent. Argument values are never stored.
• Dry runs. High-impact writes such as site options and permalink structure can be previewed before they are applied.

Capabilities

266 tools: 109 core tools that are always available, plus 157 integration tools that load only when the matching plugin is active.

WordPress core (109 tools)

• Content - Posts, pages and custom post types (create, read, update, delete, revisions, featured images)
• Taxonomies - Categories, tags, custom taxonomies, term meta, post-term linking
• Media - Browse; upload images, PDFs and other allowed files (by URL, base64 or a file handed over by ChatGPT); convert, resize and compress images on upload; find a file already in the library by address or content and reuse it instead of uploading a copy; update metadata; delete
• Blocks - Read a post's block tree; insert, replace, move or delete single blocks; replace text across blocks; read and edit synced patterns; read global styles and Site Editor templates
• Comments - Create and moderate (approve, spam, trash)
• Users - Display names, roles, registration dates and any capabilities granted beyond a user's roles. Emails and usernames are not exposed unless a site owner opts in with the royal_mcp_user_fields filter
• Menus - Read, create items, reorder, update
• Theme - Custom CSS, theme mods, active theme
• Site - Permalink structure, allowlisted options, site info
• Search - Search across content
• SEO - Meta read and write for Yoast, Rank Math, AIOSEO, SEOPress and SEObolt
• Safety - Read-only mode, drafts-only mode, per-connection access levels, Recent Changes and 72-hour undo
• Plugins and themes - Every installed plugin, including must-use plugins and drop-ins, with versions, active status and last-modified dates; installed themes
• Diagnostics - Site status (WordPress, PHP, MySQL, plugins, themes and cron in one call), PHP error-log tail, cron schedule, and royal_mcp_connection_health

Plugin integrations (157 tools)

| Plugin | Tools | What's covered | |---|---|---| | WooCommerce | 29 | Products, variations, attributes, coupons, orders (create, update, notes), customers, store stats; paged lists with totals; product filters by ID, SKU and stock status; order filters by date | | Elementor | 14 | Clone pages, replace text, swap images, page outline, widget settings, add widgets, templates (list, import, apply), widget schema, dynamic tags, rebuild post content | | Divi | 9 | Format detection (Divi 4 or Divi 5), page outline, layout validation, library list and read, find and replace, clone, image swap, apply a library item | | Wordfence | 8 | Security status, firewall mode and scan findings, blocked IPs, block or unblock an IP, failed logins, blocked requests, start a scan | | GuardPress | 7 | Security score, failed logins, blocked IPs, vulnerability scans, audit log | | SiteVault | 6 | Start backups, monitor progress, list backups and schedules | | Royal AI Firewall | 6 | Dashboard stats, recent bot hits, per-bot policies (allow, block, challenge), daily rollups | | TablePress | 6 | List, read, create, copy and export tables, change cells, with undo | | Yoast SEO | 5 | Meta read and write, JSON-LD schema graph, indexed internal links, Premium redirects | | Code Snippets | 5 | List and read snippets (credentials in code are masked), recent deactivations, deactivate a snippet, edit its name, description and tags | | Redirection | 4 | List, create and update redirects; list groups | | Royal Ledger | 4 | Software costs, renewal dates, license keys (values never exposed) | | Advanced Custom Fields | 4 | Read and write fields with each field's Return Format respected; list field groups | | UpdraftPlus | 4 | Backup history, per-backup status, start a backup, schedule | | WPForms | 4 | Forms, a form's fields, entries (WPForms Pro) | | Solid Security | 4 | Security status, locked-out IPs, security log, ban an IP | | MonsterInsights | 4 | Analytics overview, top pages, traffic sources, top Search Console queries | | BuddyPress | 4 | Members, a member profile, groups, activity feed (BuddyBoss Platform too) | | LiteSpeed Cache | 4 | Cache status and settings, purge everything or specific pages | | ForgeCache | 4 | Cache stats, clear cache, purge a URL, real-user Core Web Vitals | | Contact Form 7 | 3 | Forms, a form's fields, submissions (with Flamingo) | | W3 Total Cache | 3 | Cache configuration, purge (all, by URL or by post), usage statistics | | Duplicator | 3 | Migration packages, package status, installer URL | | Complianz | 7 | Consent setup status, cookies, services, banner texts and legal documents; change banner texts and cookie descriptions, with undo | | WPCode | 3 | Read only: snippets, a snippet (credentials masked), its status and last error | | Royal Links | 3 | Branded short links, click stats |

Not seeing your plugin? The core tools still cover posts on any custom post type, any plugin's custom fields through post meta, and any plugin's comments. Request an integration on the WordPress.org support forum. If you build that plugin, you can add its tools to Royal MCP yourself or partner with us.

Connect

Install

1. Install from WordPress.org (recommended, updates through wp-admin) or upload the zip from the latest GitHub release.
2. Go to Royal MCP → Settings, switch Royal MCP on and copy the MCP Server URL. For clients that use an API key, generate one on the same screen.
3. Pick a client below.

Your MCP Server URL is https://yoursite.com/wp-json/royal-mcp/v1/mcp.

Claude (claude.ai, Claude Desktop) - sign in with OAuth

1. Settings → Connectors → Add custom connector.
2. Paste your MCP Server URL.
3. Approve the sign-in screen on your site. No API key needed.

ChatGPT

Add a custom connector with your MCP Server URL and follow the sign-in flow.

Claude Desktop with an API key

{
  "mcpServers": {
    "my-wordpress": {
      "command": "npx",
      "args": [
        "-y", "mcp-remote",
        "https://yoursite.com/wp-json/royal-mcp/v1/mcp",
        "--header", "Authorization:${AUTH_HEADER}"
      ],
      "env": {
        "AUTH_HEADER": "Bearer YOUR_API_KEY"
      }
    }
  }
}

Config file: ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows).

Cursor,