NiranzWP

An MCP server for WordPress that an agent can be trusted with.

Sixty-five purpose-built abilities instead of a shell and a hope. Every write previews before it runs, is snapshotted first, and puts itself back if it takes the site down.

npm install -g niranzwp
niranzwp auth login https://your-site.com

Open this page and enter the code:
  https://your-site.com/wp-admin/admin.php?page=niranzwp-connect&code=BFME-6QUV
  code: BFME-6QUV

Waiting...
Connected "your-site" -> https://your-site.com via OAuth
Tokens stored in macOS Keychain; they refresh automatically.

Type the code into wp-admin, approve, done. No password is copied anywhere, and nothing is stored on the site that the site could hand back.

The problem this exists for

Most tools in this space hand an agent one very sharp instrument: run arbitrary PHP, write arbitrary files. It works beautifully until it doesn't, and then the site is down at three in the morning and nobody is sure which of the last forty commands did it.

The usual answer is to lock the agent into a sandbox directory, which solves the problem by making the tool useless on a real site.

NiranzWP takes the third position. Give the agent abilities that know what they are for, so the dangerous operation is not the default one — and make every write reversible so being wrong is survivable.

Four things that are always true

A write is checked before it lands. A PHP file that does not parse is never written. A block whose markup would not survive a round trip through the editor is refused rather than saved and regretted. An upload only moves into place once its declared size and SHA-256 match what actually arrived.

A write leaves a checkpoint. Every change records what was there before. checkpoint-restore puts it back.

A write that breaks the site undoes itself. A must-use plugin watches the next request. If the site has stopped answering, the change is reverted — without anyone being awake to notice.

The dangerous switches are off out of the box. Filesystem access and PHP execution are opt-in, on a screen that says plainly what they mean.

evaluate is still there for what nothing else covers. It just isn't the first thing reached for, and its own description tells the agent so.

What it can do

niranzwp discover                      # everything this site exposes
niranzwp run niranzwp/seo-audit        # and run any of it

Documentation

Moving files

create-upload-link mints a single-use bearer token and takes the bytes as the body of one request. Use it for anything large or binary — a plugin ZIP, a theme, media, a generated file.

The alternative most tools are left with is base64 inside a PHP payload: a third larger than the file, and shaped exactly like an attack to every firewall in front of it.

Measured on an 803 KB archive against a production host behind a WAF:

Security

Access is granted by a person clicking a button in wp-admin. There is no other path in.

Found something? Open an issue, or write to security@niranz.dev.

Requirements

WordPress 6.9+ (for the Abilities API) · PHP 8.0+

Install

1. Download the latest niranzwp-wp-*.zip from Releases
2. Plugins → Add New Plugin → Upload Plugin
3. NiranzWP → Configuration — turn on the abilities you want

Updates appear in wp-admin like any other plugin from then on.

The CLI

npm install -g niranzwp

Credentials go to the macOS Keychain, Windows DPAPI, or secret-tool on Linux — never a plaintext file, and never a command-line argument.

Uninstalling

Deleting the plugin removes what belongs to the plugin: its settings, the domain lock, and the recovery guard.

It does not remove what you wrote — the site brief, design notes, skills, and every checkpoint, which are the only record of what a write replaced. Those go only if you ask, and it asks at the click on Deactivate, where a person is still present, rather than leaving the decision buried in a settings screen.

Contributing

Issues and pull requests welcome. The CLI lives in its own repository and ships with 104 end-to-end tests that run against a real WordPress install — please keep them passing.

Licence

MIT.