Agent Abilities for MCP
700+ active installs · Rated 4.8/5 · Updated October 16, 2026
Turns a WordPress site into an MCP server so AI clients such as Claude, ChatGPT and Cursor can work on it as a chosen WordPress user. It exposes curated abilities for content, media, users and popular plugins, all off by default, with read-only mode, force-to-draft, rate limits and an audit log of every call. It suits owners and agencies wanting limited, logged AI access. It requires WordPress 6.9 or newer.
Pros
- Every ability is off until enabled, and agents act as a real WordPress user
- Audit log of every call, including denied attempts, with CSV export
- Read-only mode, force-draft, rate limit and IP allowlist switches
- OAuth sign-in or Application Passwords, with a connection checker
- Bundles the official MCP Adapter, nothing else to install
Cons
- Requires WordPress 6.9 or newer
- Large plugin with many settings to review before use
- Page builder layouts are refused rather than edited
- Tools other plugins publish straight to the adapter's default server are outside its controls
Topics: Security plugins
Alternatives
-
Wordfence Security
5M+ active installs · Rated 4.7/5 · Updated September 30, 2026
A security plugin with an endpoint firewall, malware scanner, login protection and two-factor authentication.
-
Jetpack
3M+ active installs · Rated 3.7/5 · Updated October 12, 2026
A multi-purpose suite from Automattic that bundles many site tools under one account.
-
Really Simple SSL
3M+ active installs · Rated 4.9/5 · Updated September 15, 2026
A security plugin, formerly Really Simple SSL, that moves a site to HTTPS in one click and adds core hardening features.
-
WPS Hide Login
2M+ active installs · Rated 4.8/5 · Updated August 13, 2026
Changes the login URL so wp-login.php and wp-admin are not reachable by default for logged-out visitors.
-
All In One WP Security & Firewall
1M+ active installs · Rated 4.7/5 · Updated September 17, 2026
A security plugin offering login protection, firewall rules, user account hardening, file change detection and database security.
Agent Abilities for MCP vs All In One WP Security & Firewall
-
Disable Comments
1M+ active installs · Rated 4.7/5 · Updated October 25, 2026
A plugin for switching off comments across a WordPress site, either everywhere or only on chosen posts, pages or media.
-
SVG Support
1M+ active installs · Rated 4.8/5 · Updated July 25, 2026
SVG Support lets administrators upload SVG files to the media library.
-
Safe SVG
1M+ active installs · Rated 4.9/5 · Updated September 22, 2026
Safe SVG allows SVG uploads and sanitises each file on upload to strip scripts and unsafe markup.