WordPress MCP Server

miniOrange Secure MCP Server is a security-focused WordPress MCP server that enables AI agents and MCP clients such as Claude, ChatGPT, Cursor, and Gemini to securely interact with WordPress.

Official website: plugins.miniorange.com Marketplace: wordpress.org/plugins/miniorange-secure-mcp-server

It gives administrators centralized control over AI access to WordPress through role-based access control, ability-level policies, approval controls, and audit logging. Administrators can define which WordPress abilities AI agents can access and control sensitive actions before they are executed.

miniOrange Secure MCP Server acts as a policy-enforcing security layer between AI agents and WordPress, helping organizations control, monitor, and secure AI-driven access to WordPress.

Key Features

• WordPress Abilities API support (WooCommerce, Elementor, SEO)
• Ability-level policies and ability packs
• Role-based access control for AI agents
• Human-in-the-loop approval for sensitive actions
• Prompt validation and tool access control
• Activity logs and audit trails
• AI agent and execution monitoring
• Rate limiting and anomaly detection
• Prompt-injection detection
• Sensitive data redaction
• Non-human identity (NHI) management

Installation

There are three ways to connect the miniOrange Secure MCP Server with Claude.

Step 1: WordPress Setup

Complete the following WordPress setup before using any of the connection methods:

1. In your WordPress admin dashboard, go to Plugins → Add Plugin.
2. Search for miniOrange Secure MCP Server, then click Install Now and Activate.
3. Open the plugin from the WordPress admin sidebar and click Register your first agent.
4. Enter an Agent Name and click Next.
5. Configure role-based access for the required abilities. For example, enable Get Site Information for the Administrator role.
6. Click Create & Continue to create the agent.
7. Under Connect your AI client, select Claude.
8. Copy the Connection URL and WordPress Site URL.

Once the WordPress setup is complete, choose any of the following methods to connect Claude.

Method 1: Connect Using the Published miniOrange Connector

Supported Platforms: Claude Web and Claude Desktop

This method uses the miniOrange Secure MCP Server connector published in Claude.

Claude Setup

1. Open Claude Web or Claude Desktop.
2. Go to Settings → Connectors.
3. Click Discover.
4. Search for WordPress MCP Server.
5. Select miniOrange MCP Server for WordPress and click Connect.
6. Enter your WordPress Site URL and click Continue.
7. Once the connection is complete, you can interact with your WordPress site through Claude.

Method 2: Connect Claude Using a Custom Connector

Supported Platforms: Claude Web, Claude Desktop, and Claude CLI

This method allows you to connect Claude using the connection details provided by the miniOrange Secure MCP Server.

Claude Setup

1. Open Claude → Settings → Connectors.
2. Click Add → Add custom connector.
3. Enter a Connector Name.
4. Enter the Connection URL or MCP Endpoint URL provided by the miniOrange plugin.
5. Click Continue, then click Add.
6. Select No client ID – register one automatically and click Connect.
7. Enter your WordPress Site URL and click Continue.
8. Once the connection is complete, you can interact with your WordPress site through Claude.

Method 3: Connect Using Claude CLI

Supported Platform: Claude CLI

Claude CLI Setup

To connect the miniOrange Secure MCP Server using Claude CLI, run:

npx add-mcp "https://gateway.miniorange.ai/v2/mcp"

Follow the prompts to complete the connection. Once the connection is complete, you can interact with your WordPress site through Claude CLI.