A complete guide to managing WordPress sites with AI using the WPVibe Model Context Protocol server.
1. What is WPVibe MCP?
WPVibe is a remote Model Context Protocol (MCP) server built by the team at SeedProd. It creates a secure bridge between AI assistants — Claude, ChatGPT, Cursor, and any other MCP-compatible tool — and your self-hosted WordPress sites.
Instead of manually logging into wp-admin for routine tasks, you simply talk to your AI assistant. WPVibe translates natural language instructions into real WordPress actions through the WordPress REST API and the new Abilities API introduced in WordPress 6.9.
All AI clients connect using this single endpoint:
WPVibe is completely free — no credit card, no subscription. Authentication is handled via OAuth 2.0 and magic link emails. Your WordPress passwords are never typed into any chat window.
2. Key Benefits
WPVibe fundamentally changes how you interact with WordPress. Here’s what makes it powerful:
Conversational Control
Manage posts, pages, plugins, and site settings through natural conversation — no menus to click through.
Zero Password Exposure
Uses OAuth 2.0 + magic links. WordPress credentials are AES-256-GCM encrypted and never appear in any chat.
Works Without a Plugin
Basic content management works out of the box on any WordPress 4.7+ site — no plugin required.
Plugin-Aware
Discover and control WooCommerce, Yoast SEO, SeedProd, WPForms, and other plugins via REST or Abilities API.
Multi-Client Support
Works with Claude.ai, Claude Desktop, Claude Code, ChatGPT, Cursor, and any MCP-compatible client.
Built-in Safety Rails
Deletes go to trash (not permanent), new posts default to draft, and your user role permissions are respected.
Before & After WPVibe
3. The 14 Available Tools
WPVibe exposes 14 structured tools to your AI assistant, organized into four categories. Each tool includes MCP annotations so the AI knows whether an action is read-only or potentially destructive.
Site Management
| Tool | Description | Type |
|---|---|---|
connect_site | Connect a WordPress site via a one-click authorization link in wp-admin | Write |
list_sites | List all WordPress sites registered to your WPVibe account | Read |
remove_site | Remove a site from your account (soft delete — restorable within 30 days) | Write |
site_info | Get metadata: site name, URL, WordPress version, active theme, installed plugins | Read |
WordPress REST API
| Tool | Description | Type |
|---|---|---|
rest_api | Call any WordPress REST API endpoint — GET, POST, PUT, DELETE. Supports posts, pages, categories, tags, settings, and more | Read/Write |
upload_media | Upload an image from a URL directly to the WordPress media library | Write |
WordPress Abilities API WP 6.9+
| Tool | Description | Type |
|---|---|---|
discover_abilities | List all plugin-registered abilities with names, descriptions, schemas, and annotations | Read |
get_ability_info | Get full schema details for a single ability: input/output specs and metadata | Read |
run_ability | Execute a specific Abilities API action by name (e.g. toggle coming-soon mode) | Read/Write |
Theme Files Requires Vibe AI Plugin
| Tool | Description | Type |
|---|---|---|
list_files | List all theme files with paths and sizes | Read |
search_files | Search theme file contents by pattern with matching line numbers | Read |
get_file_outline | Get a structural map of a theme file: functions, hooks, HTML sections | Read |
Utilities
| Tool | Description | Type |
|---|---|---|
navigate | Trigger a browser page load on the connected site (useful for live reload previews) | Write |
load_skill | Load task-specific instructions: setup-guide, workflows, REST API reference | Read |
4. How to Connect — Step by Step
The full setup takes about two minutes. First, add WPVibe to your AI client, then connect your WordPress site.
Step 1 — Add WPVibe to Your AI Client
After adding the server URL, you’ll be prompted to sign in with your email address via a magic link. No passwords. Click the link in your email and you’re authenticated.
Step 2 — Connect Your WordPress Site
Ask your AI to connect your site
Type: “Connect my WordPress site at example.com”
Click the authorization link
The AI generates a one-click link. Click it — it opens directly in your WordPress admin dashboard.
Approve access in WordPress
WordPress shows an authorization screen. Click Approve. Credentials are securely stored — nothing appears in the chat.
Verify the connection
Ask your AI: “Run site_info on example.com” — it should return your site name, WP version, active theme, and installed plugins.
WPVibe works with any self-hosted WordPress site (WordPress.org, any host) running WordPress 4.7 or later with the REST API enabled (on by default). It does not work with WordPress.com hosted sites.
5. Common Workflows & Examples
Content Management
# Create a draft post
"Create a draft post titled 'Top 10 Travel Tips' with a short intro"
→ Calls POST /wp/v2/posts with title, content, status: draft
# List recent posts
"Show me the last 5 published posts on my site"
→ Calls GET /wp/v2/posts?per_page=5&status=publish
# Update site settings
"Change the site tagline to 'Your Daily Tech Digest'"
→ Calls PUT /wp/v2/settings {"tagline":"..."}
# Upload an image
"Add this image to the media library: https://example.com/photo.jpg"
→ Calls upload_media tool with the URLPlugin Interaction (WP 6.9+ Abilities API)
# Discover what plugins can do
"What can the SeedProd plugin do on my site?"
→ Calls discover_abilities(site_url, category="seedprod")
# Enable coming soon mode
"Turn on coming soon mode on my site"
→ Calls run_ability("seedprod/toggle-coming-soon", {enabled: true})
# Check available REST API endpoints
"What REST API namespaces are available on my site?"
→ Calls rest_api(GET "/", fields="namespaces")6. Security & Safety Architecture
- AES-256-GCM Encrypted CredentialsWordPress application passwords are encrypted at rest. They are never revealed in any AI chat conversation, log, or response.
- Deletes Go to Trash, Not Permanent DeletionThe force=true parameter is automatically stripped from all DELETE requests. Content can always be recovered from the WordPress trash.
- New Posts Default to DraftUnless you explicitly say “publish,” all new content is created as a draft — preventing accidental live publications.
- Your Role Permissions ApplyThe AI operates within your WordPress user role. If your account can’t delete users, the AI can’t either.
- OAuth 2.0 + Magic Link AuthenticationNo passwords are ever used or stored in the MCP flow. Authentication happens via secure OAuth 2.0 and email magic links.
- Cloudflare D1 Storage (Encrypted HTTPS)Account data is stored in Cloudflare D1 (SQLite). All communication is over HTTPS. No conversation content is stored by WPVibe.
7. Frequently Asked Questions
Is WPVibe really free?
Yes. WPVibe is completely free to use with no credit card required and no hidden tiers. It’s built and maintained by the SeedProd team.
Does it work with WordPress.com sites?
No. WPVibe is designed for self-hosted WordPress.org sites on any hosting provider. For WordPress.com hosted sites, use the official WordPress.com connector.
Which plugins are supported?
Any plugin that exposes WordPress REST API endpoints or registers Abilities (WordPress 6.9+). This includes WooCommerce, Yoast SEO, All-in-One SEO, SeedProd, WPForms, Elementor, and many others.
Do I need to install the Vibe AI plugin?
No. Basic site management — posts, pages, settings, categories, media — works without any plugin via the WordPress REST API. Install the Vibe AI plugin to unlock WP-CLI, theme file editing, and live reload previews.
Can I connect multiple sites?
Yes. You can connect as many WordPress sites as you want to a single WPVibe account and manage them all from the same AI conversation.
8. Final Thoughts
WPVibe is one of the most practical applications of the Model Context Protocol to emerge in 2025. For bloggers, developers, and agency teams who spend significant time in wp-admin, it removes friction from routine tasks and puts the power of AI directly in front of the tools you already use.
The combination of strong security defaults (drafts-first, trash-not-delete, encrypted credentials), zero-plugin basic functionality, and support for every major AI client makes WPVibe a genuinely low-risk thing to try. It’s free, takes two minutes to set up, and you can disconnect at any time.
Add https://mcp.wpvibe.ai/mcp to your preferred AI client, sign in with your email, and connect your first WordPress site. Documentation: wpvibe.ai/docs · Optional plugin: Vibe AI on WordPress.org