MCP Content Manager LitebyJose Conti

MCP Content Manager Lite turns your WordPress site into a first-class Model Context Protocol (MCP) server so AI assistants like Claude, ChatGPT, GitHub Copilot, Cursor, Windsurf, Continue, JetBrains AI Assistant or Cowork can manage your content using natural language.

It is not a wrapper around the REST API. The plugin auto-discovers every CPT, taxonomy, ACF group, custom field and registered meta on your site and exposes them as MCP abilities, so your AI client instantly understands the structure of your specific install — without configuration files, without code, without YAML.

Why MCP Content Manager Lite over other MCP plugins

Most WordPress MCP plugins ship 10–20 hardcoded tools that wrap a fixed list of REST endpoints. MCP Content Manager Lite ships 60+ abilities out of the box, plus a long list of trust, onboarding and observability features that the rest of the ecosystem still treats as paid extras:

• Auto-discovery, not hardcoded tools. Your AI client sees your real schema — CPTs from CPT UI, ACF, JetEngine, Pods, Toolset; taxonomies; statuses; shortcodes; permalink structure — generated dynamically from WP_Post_Type::get_taxonomies() and register_meta(). Other plugins force you to maintain a YAML/JSON file. This one updates itself.
• OAuth 2.1 with PKCE built in. No application passwords. No long-lived bearer tokens floating around. The plugin runs its own OAuth 2.1 server with Dynamic Client Registration so Claude Desktop, ChatGPT, Cursor and Copilot connect with one click and revoke just as easily.
• Granular per-client allowlists. Each OAuth client has its own allowed_abilities list. Give Claude full read/write, give a webhook integration only read-post and list-recent-posts. Most MCP plugins are all-or-nothing. Editable visually from the Authentication tab.
• AI image generation with Google Gemini. Connect your Gemini API key in Settings and ask the AI to generate up to three images per call, save them to the Media Library, attach them to a post or set one as the featured image. Imagen API, multiple aspect ratios, 2K/4K and image editing remain Premium.
• Rate limiting per client_id. Hourly (1000) and daily (10000) caps, both filterable, prevent a runaway agent from blowing through your hosting plan.
• Activity Log of every MCP call. Date, client_id, ability slug, status, duration in ms, error code and IP — kept for 30 days with a daily cron purge. Audit what your AI did and when.
• MCP annotations on every ability (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) so well-behaved clients can warn before destructive calls and parallelize safe ones.
• Get Started wizard — environment check, OAuth client creation, AI client picker and a live connection test, all in the first admin tab.
• Connect tab with config exporter for Claude Desktop, ChatGPT, Cursor, Windsurf, Continue, JetBrains AI Assistant and a curl debug snippet — copy/paste ready.
• Public /health endpoint at /wp-json/mcpcomal/v1/health (unauthenticated) for UptimeRobot, BetterStack, Pingdom or any monitoring tool.
• Universal SEO read with adapters for Yoast, Rank Math, AIOSEO, The SEO Framework, SureRank, SEOPress, Slim SEO and Squirrly. One ability, eight plugins.
• Universal multilingual read with adapters for Polylang, WPML and TranslatePress. List languages, translations and string translations from any of them.
• WooCommerce read-only when WooCommerce is active — store info, products, recent orders (with email/name redaction by default) and coupons.
• Spanish translation bundled — mcp-content-manager-lite-es_ES.po/.mo ship with the plugin.
• Coexistence with Premium. If you later install the Premium version, Lite yields automatically and shows a friendly notice. No fatal errors, no class conflicts.

No code. No configuration. Install, activate, run the wizard, paste the URL into your MCP client.

Everything Included in Lite (60+ abilities)

Auto-discovery and schema introspection

• Discover every CPT, taxonomy, ACF group, JetEngine field and registered meta automatically.
• list-post-types — every public and private post type with labels and capabilities.
• list-taxonomies — every taxonomy with hierarchy and associated post types.
• list-post-statuses — built-in and custom post statuses.
• list-shortcodes — every shortcode registered on the site.
• get-permalink-structure — current permalink rules.
• list-blocks-registered — every block type registered server-side.
• list-block-patterns — every block pattern available.
• list-fse-templates — FSE templates and template parts (metadata).

Universal content CRUD

• Create, read, update, search and delete posts, pages and any custom post type.
• Full Gutenberg block markup support with built-in block reference so the AI generates clean blocks.
• Search with filters by status, author, date range, taxonomy, meta and more.
• Custom fields and ACF fields read/write.
• Featured image assignment from URL or Media Library.
• Bulk-friendly endpoints designed for agentic workflows.

Site stats and content shortcuts

• get-site-stats — post, comment and user counts with breakdown by status and role.
• get-media-stats — mime breakdown and total bytes on disk.
• list-recent-posts, list-pending-comments, list-scheduled-posts, list-trashed-posts, list-post-revisions.

Taxonomies

• List, create, update and delete terms in any taxonomy with full hierarchy support.

Comments

• List, read, create, reply, approve, mark as spam, send to trash and delete.
• Bulk moderation friendly.

Media library

• List attachments with mime/size filtering.
• Upload from local files or remote URL.
• Set featured image, attach media to posts.

Users (read-only)

• Browse users by role with detailed profile view.

Menus, widgets and sidebars (read-only)

• list-nav-menus, list-widgets, list-sidebars — full inventory of your navigation surface.

WooCommerce read-only (conditional)

When WooCommerce is active, four extra abilities appear automatically:

• wc-get-store-info — store name, currency, base address.
• wc-list-products — paginated catalog browsing.
• wc-list-recent-orders — with email/name redaction by default.
• wc-list-coupons — coupon catalog read.

SEO read (universal, eight plugins)

• seo-read-meta with adapters for Yoast SEO, Rank Math, All in One SEO (AIOSEO), The SEO Framework, SureRank, SEOPress, Slim SEO and Squirrly. Title, description, canonical, robots, OpenGraph and Twitter where the source plugin exposes them.

Multilingual read (universal, three plugins)

• i18n-list-languages — every active language.
• i18n-list-translations-for-post — every translation of a given post.
• i18n-get-post-in-language — fetch a specific translation.
• i18n-list-string-translations — string translations.
• Adapters for Polylang, WPML and TranslatePress.

WordPress options (read-only, security whitelist)

• Read site title, URL, admin email, timezone, date and time format, language, blogname, blog description, posts per page, default category, permalink structure, reading and writing settings.

Theme customizations (read-only)

• Read active theme modifications — custom logo, site icon, colors, header text, background.

System diagnostics

• Complete environment report — WordPress version, PHP version, database (MySQL/MariaDB version), active theme, active plugins with versions, server software, memory limit, max upload, max post size, max execution time, SSL status, REST API base, security indicators.
• list-cron-events — scheduled cron events.
• list-user-roles — every role on the site with capability count.

Plugin management

• List every installed plugin (active and inactive) and activate or deactivate them.

Recovery and debug

• site-health — Site Health summary with critical and recommended checks.
• clear-recovery — clear WordPress recovery-mode flags after fixing a fatal error (paused plugins, paused themes, recovery_keys).
• Debug logging toggle — flip [MCPCOMAL-DEBUG] messages on or off from the Settings tab without editing wp-config.php.

AI image generation (Gemini)

When a Google Gemini API key is configured in Settings:

• generate-image — generate 1–3 images for a prompt using Google Gemini, save each one to the Media Library, optionally attach to a specific post.
• set-featured-from-prompt — generate one image from a prompt and assign it as the featured image of an existing post in a single call.
• Imagen API, multiple aspect ratios, 2K/4K resolutions and image editing with prompts remain Premium-only.

OAuth 2.1 server

• Authorization Code flow with PKCE.
• Dynamic Client Registration (RFC 7591) so ChatGPT and other modern clients self-register.
• Per-client allowed_abilities allowlist with a visual editor in the Authentication tab (checkboxes grouped by area).
• Token revocation, refresh tokens, scope management.

Trust, observability and rate limiting

• Activity Log of every MCP call (30-day retention, daily cron purge, paginated admin viewer).
• Hourly and daily rate limits per client_id (filterable via mcpcomal_rate_limit_per_hour and mcpcomal_rate_limit_per_day, or overridable via constants MCPCOMAL_RATE_LIMIT_PER_HOUR and MCPCOMAL_RATE_LIMIT_PER_DAY).
• MCP annotations on every ability so clients can warn before destructive calls.
• Public /wp-json/mcpcomal/v1/health endpoint for uptime monitoring.

Onboarding and connection

• Get Started wizard as the first admin tab — environment check, OAuth client creation, AI client picker, live connection test.
• Connect tab with copy/paste config exporter for Claude Desktop, ChatGPT, Cursor, Windsurf, Continue, JetBrains AI Assistant and a curl debug snippet.
• Prompts gallery — 30+ curated prompts loaded from data/prompts.json, browsable from the admin and ready to copy into your MCP client.
• “Detected on this site” badges in the Status tab linking WooCommerce, Yoast, Rank Math, multilingual plugins and ACF to their relevant Premium category.
• Navigable Premium catalog inside the Go Premium tab — searchable browser of every Premium feature.
• Spanish translation bundled (es_ES); ready for translate.wordpress.org community translations.

Example Requests You Can Make

Just talk to your AI assistant naturally:

Content creation

• “Create a new blog post titled ‘Summer Travel Guide’ with an introduction paragraph and three headings, draft status.”
• “Write a draft page called ‘About Us’ with our company description and add a hero block at the top.”
• “Create 5 draft posts for our weekly newsletter series about healthy recipes.”

Content management

• “Show me all draft posts from the last month.”
• “Update the post ‘Holiday Sale’ to change the status from draft to published.”
• “Find all posts in the ‘Tutorials’ category that don’t have a featured image.”
• “Empty the trash.”

Taxonomies and organization

• “Create a new category called ‘Case Studies’ under ‘Resources’.”
• “List all tags that are only used once.”
• “Move all posts from the ‘News’ category to ‘Announcements’.”

Comments

• “Show me all pending comments waiting for moderation.”
• “Approve all comments from the last 24 hours.”
• “Reply to the latest comment on the ‘Contact’ page thanking them for reaching out.”

Media

• “Upload this image from URL and set it as the featured image for post 42.”
• “List all images uploaded this month, sorted by size.”

AI image generation (Gemini)

• “Generate a hero image of a sunset over the ocean and set it as the featured image of post 123.”
• “Create three illustrations of a friendly robot drinking coffee and attach them to my draft post.”
• “Generate a featured image for my new article: a minimalist desk with a laptop, plants and morning light.”

Multilingual

• “What languages does this site have configured in Polylang?”
• “List the translations of post 1234 across all languages.”
• “Fetch the Spanish version of the ‘About’ page.”

SEO

• “Read the SEO meta of the homepage.”
• “List the title and meta description of every post in the ‘Services’ category.”

WooCommerce (read-only)

• “Show me the last 20 paid orders.”
• “What coupons are currently active?”
• “List products that are out of stock.”

Site diagnostics

• “What PHP version is the server running?”
• “Show me a complete system diagnostics report.”
• “Which plugins are currently active?”
• “Deactivate the plugin that is causing issues.”
• “Enable debug mode so I can see the errors.”

Discovery

• “What content types does this site have?”
• “Show me all the custom fields registered for the ‘product’ post type.”
• “What taxonomies are available for ‘portfolio’ posts?”

Compatible MCP Clients

The plugin works with any MCP client that supports remote servers and OAuth 2.1. Confirmed clients:

• Claude Desktop, Claude Code, Cowork (Anthropic) — full native OAuth 2.1.
• ChatGPT (OpenAI) — full native OAuth 2.1 with Dynamic Client Registration.
• GitHub Copilot in VS Code — native OAuth (VS Code 1.101+).
• Cursor AI — OAuth (some servers may need the mcp-remote bridge).
• Windsurf (Codeium) — OAuth for remote MCP servers.
• Continue — full native OAuth 2.1 in VS Code and IntelliJ.
• Augment Code — native OAuth with one-click approval.
• JetBrains AI Assistant — MCP support in JetBrains IDEs (2025.2+).

Any application that implements the Model Context Protocol with remote server support should work. There are 500+ MCP clients today and the protocol is the same everywhere.

Who Is This For?

• Content creators who want to draft, schedule and update posts using natural language.
• Site administrators who want quick diagnostics, log inspection and bulk content oversight.
• Agencies managing dozens of WordPress sites from a single AI assistant.
• WooCommerce store owners who want to inspect their catalog, orders and coupons via chat.
• Multilingual site owners running Polylang, WPML or TranslatePress.
• Developers building agentic workflows on top of WordPress.

Requirements

• WordPress 6.9 or later (AI Mode requires WordPress 7.0+ — see FAQ).
• PHP 8.3 or later.
• The WordPress MCP Adapter plugin (the Lite plugin can also load the bundled adapter automatically if no other source provides it).
• An MCP-compatible client.

Need More? Get Premium

The Premium version of MCP Content Manager turns your WordPress site into a full agentic workstation. 290+ abilities across 17 categories, with everything Lite has, plus:

WooCommerce — full store control (8 modules)

• Products with variations, attributes, gallery, pricing tiers, stock and shipping classes (CRUD).
• Orders edit, refunds (full or partial) and email payment links.
• Customers CRUD with billing and shipping addresses.
• Sales analytics — top products, revenue trends, conversion, orders by status, executive KPIs.
• Shipping zones, methods, rates and shipping classes (CRUD).
• Webhooks management (CRUD).
• Store settings — payment gateways, tax, checkout, emails, accounts (read and write).
• Subscriptions across 5 platforms — WooCommerce Subscriptions, Yith, Sumo, ASWC and WBTE — list, modify, cancel.

SEO suite — full read and write across 8 plugins

• seo-write — universal SEO meta write across Yoast, Rank Math, AIOSEO, SureRank, SiteSEO, The SEO Framework, Squirrly and SEOPress.
• seo-audit — content auditor with scoring, suggestions and bulk fixes.

Security and hardening

• security-hardening — 23 hardening measures across 3 risk levels with security-audit scoring, batch-apply and per-measure revert.
• malware-cleanup — hacked-site cleanup workflow: core integrity vs. official checksums, malware pattern scanning in wp-content, database injection detection (scripts, iframes, hidden spam, pharma hacks), rogue admin detection, plugin verification against WordPress.org, .htaccess analysis, clean file replacement and salt regeneration.

Maintenance and recovery

• maintenance-mode — toggle a branded maintenance page with allowlist for admins.
• optimizer-cache — adapter for the 7 most common cache plugins (WP Rocket, W3 Total Cache, WP Super Cache, LiteSpeed, SG Optimizer, Hummingbird, FlyingPress) — purge, pre-warm and configuration viewer.
• profiler — performance profiler with 0–100 scoring, 20 built-in optimizations, before/after comparison and one-click rollback.

Time Machine — backups and restore

• Automatic snapshots before plugin/theme installs and core updates.
• One-click rollback of any change.
• Sentinel emergency recovery mode.

Automation and developer bridge

• wpcli-bridge — execute WP-CLI commands remotely with per-command permissions, default 16-command blocklist, color-coded danger levels and proc_open() execution with timeout and shell-metachar blocking.
• plugin-theme-install — install plugins and themes from WordPress.org by slug or any ZIP URL, …