WordPress MCP plugin options, one by one 🔌
Ordered by the jobs they fit, not by installs.
1. Easy MCP AI
Easy MCP AI is the free, self-hosted option that turns a WordPress site into an MCP server for Claude (web, desktop, Cowork and Claude Code), ChatGPT, Cursor, GitHub Copilot in VS Code, OpenAI Codex CLI, Windsurf and others.
- 🎯 Best for: content, WooCommerce (its tool group starts off), SEO fields and analytics from chat, on WordPress 6.0+ with PHP 7.4+.
- đź’ł Price: Free, all 280+ tools included: no paid tier, no vendor quota, no Easy MCP account. Semrush, SE Ranking and DataForSEO data needs your own paid accounts with those services; Ahrefs Domain Rating uses a free Ahrefs APIv3 key. The AI client may cost money on its own.
- ⚙️ Where it runs: Inside WordPress on your site, with no hosted relay, and the plugin calls no AI provider; the data services you connect receive the requests made to them.
- 🛡️ Default access: OAuth 2.1 with PKCE and dynamic client registration, or API keys bound to a WordPress user and refused on any other host. The key form starts on Full access with a 30-day expiry. Since 2.1.0 the AI can also call the REST API routes of WordPress and your other plugins as the connected user, and REST writes are on by default, so bind the connection to a user whose role fits the job.
- ❌ Watch out: Delete approvals are opt-in.
A Read-only key listed no post-editing tool at all, so the client attempted no edit and the title stayed unchanged. With “Ask before destructive actions” switched on (it stays off until you enable it under Settings > Access & safety), the delete call paused and returned an approval link; after approval on the site’s own page, the draft moved to the trash, exactly what the preview had said. The audit log, on by default, records every MCP tool call while it is on; it logged both prompts’ calls.
Change history keeps before and after snapshots of changes made through MCP, and since 2.1.0 the AI can restore many of them; there is no restore button in wp-admin. Since 2.3.0, Easy MCP AI reads Elementor, WPBakery and Flatsome UX Builder layouts and edits the text, links, images and other content fields of existing elements (WPBakery editing needs version 6.0.5 or 9.0.1, Flatsome 3.16.1 or 3.20.11; other versions of either builder are read-only), but it cannot add, remove or move elements, and it has no Divi, Bricks or Beaver Builder support. It sits at 30,000+ active installs with a 98/100 rating from 16 ratings.
👉 Get Easy MCP AI free from WordPress.org
2. WPVibe
- 🎯 Best for: hosted one-click connections where approvals for destructive operations should be on from the start.
- đź’ł Price: Free includes every tool and skill with 100 tool calls a day, counted per account over a rolling 24 hours, on as many sites as you need. Paid raises the daily allowance on the pricing page: Pro $99 a year (500 calls a day), Power $299 (2,000), Agency $599 (5,000) and Scale $899 (10,000), with a 14-day refund on a first paid subscription.
- ⚙️ Where it runs: On WPVibe’s servers, and it only connects to HTTPS sites. Connecting a site creates a WordPress application password, encrypted with AES-256-GCM and stored on WPVibe’s Cloudflare-hosted servers.
- 🛡️ Default access: Approvals for destructive operations are on by default, posts default to draft, and a per-site “Dangerously bypass approvals” switch starts off.
- ❌ Watch out: The free allowance is 100 calls a day shared per account, and the site needs HTTPS.
WPVibe needs its cloud relay, an account and an HTTPS site, so this entry rests on its listing, readme, pricing page and wp-admin screens. Those screens show approvals on by default, with a “Dangerously bypass approvals” box left unchecked, and an append-only Approval Log.
👉 Get WPVibe from WordPress.org
3. AI Engine
- 🎯 Best for: sites that want AI features inside wp-admin and MCP access in the same plugin.
- đź’ł Price: The MCP server is free with no monthly fee and no usage cap. AI Engine Pro starts at $69 a year for one site.
- ⚙️ Where it runs: On your site; its MCP screen says there is no relay service in between.
- 🛡️ Default access: OAuth for Claude and ChatGPT with per-user access; scripts and developer tools such as Claude Code can also use a bearer token, starting at Admin (full access). Editor Access is opt-in and limited to the content that user can already edit.
- ❌ Watch out: The Database tool set is Pro.
The free plugin asked for no license, marks the Plugins, Themes, Database, Polylang, WPML and WooCommerce tool sets Pro, and requires PHP 8.1.
👉 Get AI Engine from WordPress.org
4. Royal MCP
- 🎯 Best for: Divi and Elementor sites that want builder-aware edits and an undo token on destructive writes.
- đź’ł Price: The free plugin is on wordpress.org. The Pro product page shows founder pricing: Personal $79 a year for one site (regular $99), Professional $249 for five, Agency $750 for a hundred (regular $999).
- ⚙️ Where it runs: On your site; credentials stay in your WordPress database with no hosted middleman.
- 🛡️ Default access: OAuth 2.0 with PKCE and dynamic client registration, plus a rate-limited API key with Full access by default for clients without OAuth; the integration stayed off until an admin enabled it, and its Read-only mode and Drafts only switches started off. The approval step its readme describes is the client’s own prompt, not a plugin-side gate. The readme promises a 72-hour undo token on every destructive write; the Pro page lists an undo token in the free tier too and sells a 72 to 168 hour window as Pro.
- 🧩 Page builders: For page-builder sites, the free plugin already has Divi 4 and Divi 5 tools and format-aware writes across Divi, Elementor and Gutenberg; Divi 5 module authoring and Elementor Pro depth are Pro.
- ❌ Watch out: Its Pro prices are founder rates behind a countdown timer.
👉 Get Royal MCP from WordPress.org
5. miniOrange Secure MCP Server
- 🎯 Best for: teams that want grant-by-grant role policies and per-tool switches.
- đź’ł Price: Free covers 100 requests a day on unlimited sites. Paid tiers are early bird prices valid until November 30: Pro $79 a year ($99 regular) for 500 requests a day.
- ⚙️ Where it runs: through miniOrange’s gateway on the supported path; the plugin runs an on-site endpoint too, but its 1.5.3 code marks direct connections deprecated.
- 🛡️ Default access: A new agent starts with zero grants; the setup wizard refused to create one until at least one ability was granted to a role.
- ❌ Watch out: The supported connection path is the vendor gateway, and the free tier allows 100 requests a day.
The readme says no third-party relay sits between your AI client and your site, and an on-site endpoint with its own OAuth 2.1 server does exist. But every connect screen in 1.5.3 points the client at gateway.miniorange.ai and asks for your site URL. Expect the gateway, whatever the readme’s no-relay line suggests.
This entry rests on its listing, docs, screens and code; the supported path signs in through the vendor’s gateway. It requires WordPress 6.9.
👉 Get miniOrange Secure MCP Server from WordPress.org
6. Novamira
🎯 Best for: Novamira is built for developers: it gives the AI PHP execution, WP-CLI commands, database queries and file edits, and its own homepage restricts it to development and staging. It is not on wordpress.org, downloads from the vendor’s site, and this entry follows its own pages.
- 💳 Price: The free plugin is €0 for unlimited sites. Pro costs €69 a year for 3 sites or €149 a year for 1,000, with a €299 one-time agency lifetime tier; there are no credits or action quotas, and a 30-day money-back guarantee.
- ⚙️ Where it runs: On your server, not a proxy; every request is authenticated over HTTPS, though its pages do not name the method.
- 🛡️ Default access: Full access to PHP, the database and files. New PHP files are sandboxed and recoverable, while database changes, config edits and direct code execution run live. A read-only mode exists, but as a Pro feature added in 1.12.0.
7. Saddle
- 🎯 Best for: Divi 5 or block-editor sites that should start read-only.
- đź’ł Price: Free plugin with no cap stated; Saddle Pro is a paid add-on for Divi 5 sites, and its prices were not checked.
- ⚙️ Where it runs: On your site; you sign in through a browser approval, or paste a key backed by application passwords.
- 🛡️ Default access: New apps start at read only, every delete shows a preview and waits for your approval, and the activity log shows every change and every blocked request. Logged changes can be undone, but permanent deletes, installs, updates and anything edited again since cannot, and the AI cannot write or edit files on your server.
- ❌ Watch out: On Divi sites, Saddle edits Divi 5 pages only and leaves Divi 4 shortcode pages untouched, and multi-page Divi work is Pro.
One of the newest options here: added to wordpress.org in September 2026, with 50+ installs and no ratings yet, and compared from its listing and readme only.
