WPVibe

A quick note on naming:The product isWPVibe. The WordPress.org plugin slug isvibe-ai(slugs can never change after approval, and the plugin file isvibe-ai.phpto match), so the plugin URL and file names keep that spelling. The plugin itself displays as WPVibe everywhere.

WPVibe is theWordPress MCP integration— a plugin you install on your WordPress site that exposes WordPress operations as MCP tools. Combined with the hosted WPVibe MCP service, your AI assistant gets a sandboxed, authenticated, capability-checked path to:

- Manage WordPress content— create, update, and publish posts, pages, and custom post types via the WordPress REST API
- Edit WordPress themes safely— sandboxed draft-preview-publish workflow with PHP syntax validation
- Run WordPress WP-CLI commands— 34 allowlisted commands via native PHP dispatch (no wp-cli binary required)
- Use the WordPress Abilities API— call any plugin's registered abilities (WordPress 6.9+)
- Upload WordPress media— pull images from URLs or Unsplash directly into your media library
- Discover site state— list files, search code, inspect installed plugins and themes — all read-first by default

No copy-pasting between AI chat and wp-admin. No API key juggling. One-click OAuth, AES-256-GCM encrypted credentials, and your WordPress site is AI-accessible.

┌──────────────────┐ │ AI assistant │ Claude · ChatGPT · Cursor · Windsurf · Claude Code · … │ (MCP client) │ └────────┬─────────┘ │ MCP protocol (JSON-RPC over HTTPS) ▼ ┌──────────────────┐ │ WPVibe MCP │ Hosted at wpvibe.ai — OAuth, routing, tool registration │ server │ (closed-source service, separate from this repo) └────────┬─────────┘ │ HTTPS (authenticated REST) ▼ ┌──────────────────┐ │ WPVibe plugin │ ← This repo. Installed on your WordPress site. │ │ Capability checks, sandboxing, PHP lint, denylists │ │ └────────┬─────────┘ │ Native WordPress PHP APIs ▼ ┌──────────────────┐ │ Your WordPress │ Content, theme files, options, database └──────────────────┘

- Claude Desktop:Settings → Developer → Edit Config
- Claude Code:claude mcp add wpvibe https://mcp.wpvibe.ai/mcp
- Cursor / Windsurf:MCP settings panel
- ChatGPT:Connectors → Add MCP server

Your WordPress site is now AI-accessible.

WPVibe is designed for safe AI access to production WordPress sites:

- One-click OAuth— no application passwords typed into chat, no long-lived tokens on disk
- AES-256-GCM credential encryptionat rest with per-site salting
- Per-endpoint WordPress capability checks—edit_themes,manage_options,install_plugins, etc.
- DISALLOW_FILE_MODShonored for all write operations
- Path sandboxingfor file operations — scoped to the active theme or its draft sandbox
- File extension allowlistfor writes —.php,.css,.js,.json,.html,.txt
- PHP syntax validation— every saved PHP file passes an in-process syntax check before write
- WP-CLI default-deny allowlist— only 34 explicitly listed commands, dangerous flags stripped, shell metacharacters blocked
- DB queries restricted to SELECT— LIMIT enforced (max 1000), blocked-keyword regex with word boundaries
- Sensitive option denylist—auth_,_salt,active_plugins,db_version, and 20+ other core options can't be read or modified through the plugin
- Two-phase confirmation flowforplugin install/plugin update
- DELETE moves to trashfor posts and pages — never a permanent delete via the MCP
- Per-user scopingon AI-action notifications so multi-admin sites don't leak activity between users

This is a web browser that enables your coding agent, such as Claude Code, to visit websites on your behalf and assist you in identifying bugs or creating UI test cases.

Manage and utilize website content within the DevHub CMS platform

A server for integrating with WordPress sites, enabling content management and interaction via the Model Context Protocol.

Agency-grade MCP server for WordPress Elementor — multi-site fleet management, safe page/widget-level editing, template export/import, version tracking with snapshot/rollback.

An MCP server for WordPress and Elementor, enabling AI assistants to manage content and build pages.

Connect Cursor, Claude Code, or any MCP-compatible tool directly to your ElmapiCMS instance. Manage collections, content, and assets through natural language.

Model Context Protocol (MCP) server for Kinsta WordPress hosting

MCP server for NomaCMS. Manage collections, fields, content, and assets via AI agents.

MCP server for managing Squidex CMS content and schemas from AI agents

Manage your Storyblok CMS using natural language through AI tools.