Auth and security for a WordPress MCP server
Application passwords vs. service users, capability scoping, rate limits, audit logs. The threat model you need before you let an AI touch your site.
Application passwords vs. service users, capability scoping, rate limits, audit logs. The threat model you need before you let an AI touch your site.
The Model Context Protocol turns any system into a tool an AI agent can use. Here's how — and why — to wrap WordPress in one. Hub for the WP-MCP cluster.
From empty folder to Claude Desktop running typed tools against your WordPress site. Step-by-step setup of an MCP server that wraps the REST API.
Tool granularity, intent-shaping, default surface area, and which WordPress resources matter for retrieval. A starter schema you can copy.
Three patterns I learned shipping 25+ WordPress plugins. Skip the gotchas; let the editor do the heavy lifting.
Master Advanced Custom Fields (ACF) for WordPress. Learn how to create custom fields, display data, use field types, and extend WordPress functionality.
Practical tips, tutorials and resources. No spam.
Practical tips, tutorials and resources. No spam.