AgentPress WP Registry grade A. No security issues foundWP RegistryNo security issues foundOpen the reportA

MCP server for WordPress with direct database access.

Give AI agents controlled access to your entire WordPress site — posts, products, orders, users, AND any database table from any plugin. With granular permissions per agent.

Why AgentPress?

Other WordPress MCP plugins only expose standard WordPress APIs. AgentPress goes further:

Quick Start

1. Install

Download the latest release and upload to wp-content/plugins/, or:

cd wp-content/plugins/
git clone https://github.com/multideskio/agentpress.git

Activate the plugin in wp-admin.

2. Create an API Key

Go to AgentPress > API Keys and create a key with the permissions you need.

3. Connect your agent

Add to your MCP config (Kiro, Cursor, Claude Code, ChatGPT):

{
  "mcpServers": {
    "wordpress": {
      "url": "https://yoursite.com/wp-json/agentpress/v1/mcp",
      "headers": {
        "Authorization": "Bearer ap_YOUR_KEY_HERE"
      }
    }
  }
}

That's it. Your agent now has access to your WordPress site.

Endpoints

Shared hosting? Use /mcp (Streamable HTTP). The /sse endpoint requires persistent connections (VPS/dedicated server).

Available Tools

WordPress Native

WooCommerce (auto-detected)

Database Direct Access (the differentiator)

Keys created from the AgentPress > API Keys table picker use aliases: you pick real tables from a searchable list and give each one a short alias (e.g. crm_subscribers). The agent only ever sees and uses that alias in table — it never learns the underlying wp_... table name. Call db_list_tables first to get the list of aliases available to your key.

MCP Resources

Permission Examples

Read-only agent (safe for support bots)

{
  "posts": ["read"],
  "users": ["read"],
  "woocommerce": ["read"],
  "database": {
    "tables": ["wp_cf7_submissions", "wp_fluentcrm_subscribers"],
    "operations": ["read"]
  }
}

Content editor agent

{
  "posts": ["read", "create", "write"],
  "users": ["read"]
}

Full CRM access agent

{
  "posts": ["read"],
  "woocommerce": ["read", "write"],
  "database": {
    "tables": ["wp_fc_subscribers", "wp_fc_campaigns", "wp_cf7_submissions"],
    "operations": ["read", "create", "write"]
  }
}

Features

• Streamable HTTP + SSE — works on shared hosting and VPS
• Direct database access — query ANY whitelisted table
• Granular permissions — per-key control over tables, columns, and operations
• Blocked columns — passwords, tokens, keys are NEVER exposed
• Rate limiting — per-key request limits (atomic, race-condition safe)
• Audit log — every tool call logged with IP, params, and result
• Webhooks — notify external services on write operations
• Multi-agent — multiple API keys with different permission levels
• Auto-discovery — detects CF7, FluentCRM, WPForms, GravityForms tables
• Custom Tools API — register your own MCP tools via PHP
• Hooks system — WordPress actions for extensibility
• Emergency kill switch — disable via URL if plugin breaks the site
• Dashboard — visual metrics (requests/day, top tools, errors)
• i18n — Portuguese (BR) included, translation-ready

Custom Tools API

Register your own tools from any plugin or theme:

add_action( 'agentpress_register_tools', function() {
    \AgentPress\Custom_Tools::register(
        'my_custom_tool',
        [
            'name'        => 'my_custom_tool',
            'description' => 'Does something custom',
            'inputSchema' => [
                'type'       => 'object',
                'properties' => [
                    'param1' => [ 'type' => 'string', 'description' => 'Input' ],
                ],
                'required' => [ 'param1' ],
            ],
        ],
        function( array $args, array $key_data ): array {
            return [
                'content' => [
                    [ 'type' => 'text', 'text' => 'Result: ' . $args['param1'] ],
                ],
            ];
        }
    );
});

Hooks

// Before any tool call
add_action( 'agentpress_before_tool_call', function( $tool, $args, $key_data ) {
    // Custom logic, logging, validation
}, 10, 3 );

// After any tool call
add_action( 'agentpress_after_tool_call', function( $tool, $args, $result, $key_data ) {
    // Post-processing, notifications
}, 10, 4 );

// When a key authenticates
add_action( 'agentpress_key_authenticated', function( $key_data ) {
    // Track agent activity
}, 10, 1 );

Security

• Hashed API keys — keys stored as SHA-256 hash, never plain text
• Constant-time comparison — prevents timing attacks
• Table whitelist — only explicitly allowed tables accessible
• Column blacklist — sensitive columns never exposed
• Parameterized queries — all DB queries use prepared statements
• Identifier validation — regex validation on all table/column names (no SQL injection)
• Rate limiting — atomic increment prevents race conditions
• Update safety — max 50 rows per UPDATE, WHERE required
• Input limits — max field count, value size, LIKE pattern length
• Post type restrictions — internal types blocked
• Meta key protection — internal WP meta keys not writable
• Audit log — full trail with IP address
• Emergency kill switch — disable via secret URL without wp-admin access

Emergency Kill Switch

If AgentPress breaks your site and you can't access wp-admin:

https://yoursite.com/?agentpress_kill=YOUR_EMERGENCY_TOKEN

Generate/view your token in AgentPress > Settings.

Requirements

• WordPress 6.0+
• PHP 8.0+
• WooCommerce (optional, for order/product tools)

Compatibility

Contributing

PRs welcome! See issues tagged good-first-issue.

git clone https://github.com/multideskio/agentpress.git
cd agentpress
# Install in a local WordPress for development

License

GPL-2.0-or-later