🤖 AgentPress

MCP server for WordPress with direct database access.

Give AI agents controlled access to your entire WordPress site — posts, products, orders, users, AND any database table from any plugin. With granular permissions per agent.

Why AgentPress?

Other WordPress MCP plugins only expose standard WordPress APIs. AgentPress goes further:

Quick Start

1. Install

Download the latest release and upload to wp-content/plugins/, or:

cd wp-content/plugins/
git clone https://github.com/multideskio/agentpress.git

Activate the plugin in wp-admin.

2. Create an API Key

Go to AgentPress > API Keys and create a key with the permissions you need.

3. Connect your agent

Add to your MCP config (Kiro, Cursor, Claude Code, ChatGPT):

{
  "mcpServers": {
    "wordpress": {
      "url": "https://yoursite.com/wp-json/agentpress/v1/mcp",
      "headers": {
        "Authorization": "Bearer ap_YOUR_KEY_HERE"
      }
    }
  }
}

That's it. Your agent now has access to your WordPress site.

Endpoints

Shared hosting? Use /mcp (Streamable HTTP). The /sse endpoint requires persistent connections (VPS/dedicated server).

Available Tools

WordPress Native

WooCommerce (auto-detected)

Database Direct Access (the differentiator)

Keys created from the AgentPress > API Keys table picker use aliases: you pick real tables from a searchable list and give each one a short alias (e.g. crm_subscribers). The agent only ever sees and uses that alias in table — it never learns the underlying wp_... table name. Call db_list_tables first to get the list of aliases available to your key.

MCP Resources

Permission Examples

Read-only agent (safe for support bots)

{
  "posts": ["read"],
  "users": ["read"],
  "woocommerce": ["read"],
  "database": {
    "tables": ["wp_cf7_submissions", "wp_fluentcrm_subscribers"],
    "operations": ["read"]
  }
}

Content editor agent

{
  "posts": ["read", "create", "write"],
  "users": ["read"]
}

Full CRM access agent

{
  "posts": ["read"],
  "woocommerce": ["read", "write"],
  "database": {
    "tables": ["wp_fc_subscribers", "wp_fc_campaigns", "wp_cf7_submissions"],
    "operations": ["read", "create", "write"]
  }
}

Features

• Streamable HTTP + SSE — works on shared hosting and VPS
• Direct database access — query ANY whitelisted table
• Granular permissions — per-key control over tables, columns, and operations
• Blocked columns — passwords, tokens, keys are NEVER exposed
• Rate limiting — per-key request limits (atomic, race-condition safe)
• Audit log — every tool call logged with IP, params, and result
• Webhooks — notify external services on write operations
• Multi-agent — multiple API keys with different permission levels
• Auto-discovery — detects CF7, FluentCRM, WPForms, GravityForms tables
• Custom Tools API — register your own MCP tools via PHP
• Hooks system — WordPress actions for extensibility
• Emergency kill switch — disable via URL if plugin breaks the site
• Dashboard — visual metrics (requests/day, top tools, errors)
• i18n — Portuguese (BR) included, translation-ready

Custom Tools API

Register your own tools from any plugin or theme:

add_action( 'agentpress_register_tools', function() {
    \AgentPress\Custom_Tools::register(
        'my_custom_tool',
        [
            'name'        => 'my_custom_tool',
            'description' => 'Does something custom',
            'inputSchema' => [
                'type'       => 'object',
                'properties' => [
                    'param1' => [ 'type' => 'string', 'description' => 'Input' ],
                ],
                'required' => [ 'param1' ],
            ],
        ],
        function( array $args, array $key_data ): array {
            return [
                'content' => [
                    [ 'type' => 'text', 'text' => 'Result: ' . $args['param1'] ],
                ],
            ];
        }
    );
});

Hooks

// Before any tool call
add_action( 'agentpress_before_tool_call', function( $tool, $args, $key_data ) {
    // Custom logic, logging, validation
}, 10, 3 );

// After any tool call
add_action( 'agentpress_after_tool_call', function( $tool, $args, $result, $key_data ) {
    // Post-processing, notifications
}, 10, 4 );

// When a key authenticates
add_action( 'agentpress_key_authenticated', function( $key_data ) {
    // Track agent activity
}, 10, 1 );

Security

• Hashed API keys — keys stored as SHA-256 hash, never plain text
• Constant-time comparison — prevents timing attacks
• Table whitelist — only explicitly allowed tables accessible
• Column blacklist — sensitive columns never exposed
• Parameterized queries — all DB queries use prepared statements
• Identifier validation — regex validation on all table/column names (no SQL injection)
• Rate limiting — atomic increment prevents race conditions
• Update safety — max 50 rows per UPDATE, WHERE required
• Input limits — max field count, value size, LIKE pattern length
• Post type restrictions — internal types blocked
• Meta key protection — internal WP meta keys not writable
• Audit log — full trail with IP address
• Emergency kill switch — disable via secret URL without wp-admin access

Emergency Kill Switch

If AgentPress breaks your site and you can't access wp-admin:

https://yoursite.com/?agentpress_kill=YOUR_EMERGENCY_TOKEN

Generate/view your token in AgentPress > Settings.

Requirements

• WordPress 6.0+
• PHP 8.0+
• WooCommerce (optional, for order/product tools)

Compatibility

Contributing

PRs welcome! See issues tagged good-first-issue.

git clone https://github.com/multideskio/agentpress.git
cd agentpress
# Install in a local WordPress for development

License

GPL-2.0-or-later