It’s time to add you to your WordPress site a MCP server, or more than one, to make all the the abilitiers available to your preferred AI Agent. For example Calude Desktop or Mistral.
There are a few steps to follow and keep in mind that single word: security. Open up the site carefully selecting what it makes available to external services.
- Install the MCPServers plugin, by me
- Create a server and select the abilities you want to expose (shortly, a fine-grained abilities selection will be available)
- Note on the server list the URL of your brand new MCP server (if you open you get an error, it’s ok!)
Using the native WP application password
You can use the WP application password to get the credentials to connect your AI agent.
- Create a new WP user, name it, for example, “mcp”
- Give it the role of “administrator”
- At the bottom of the page, while editing the new user, you can see the “Application passwords” section
- Generate a password and copy and paste it somewhere, remove the spaces since I had problems with them
If your AI agent allows connectors with Basic Auth, you can use that password, key, or token, or whatever you want to name it.
Now your AI agent can call the abilities you allowed on the MCP server configuration. Only those ones, and with the role of an administrator.
It’s recommended to lower the role of the “mcp” to a minimum.
Using OAuth2
WP does not provide OAuth2, but it is required by many AI agents to connect to an MCP. How to solve? Of course, with a plugin.
- Install WP Oauth Server (I’ve tried only this one, but it isn’t the only one)
- Go to its settings page and enable the OAuth server (important, I missed this step the first time, and… it’s better not to say).
- Create a client and get the client ID and the client secret (those are the credentials required to connect the AI agent)
- Be sure to set the reference WP user for this client to the mcp user
Follow your AI agent’s instructions to complete the connection.
I tried, and it worked.
