Themeisle Docs

Appearance

Getting Started with Easy MCP AI ​

Easy MCP AI is the most complete end-to-end MCP (Model Context Protocol) solution for WordPress. It runs an MCP server directly inside your WordPress site, letting AI assistants such as Claude Desktop, Cursor, or ChatGPT securely read and manage your content.

In this article

What is the Model Context Protocol? ​

MCP is an open standard created by Anthropic that lets AI assistants securely connect to external tools and data sources. It is supported by Anthropic, OpenAI, Google, and dozens of IDEs.

The plugin is pure PHP and runs entirely inside WordPress on any standard hosting. It needs no Node.js, long-running processes, or external proxies.

How to Install Easy MCP AI ​

Method 1: Install from WordPress.org ​

  1. Log in to your WordPress dashboard.
  2. Navigate to Plugins > Add New Plugin.
  3. Search for "Easy MCP AI".
  4. Click Install Now on the plugin.
  5. Click Activate once installation completes.

Method 2: Upload Manually ​

  1. Download the plugin ZIP file from WordPress.org.
  2. In your WordPress dashboard, go to Plugins > Add New Plugin > Upload Plugin.
  3. Choose the downloaded ZIP file and click Install Now.
  4. Click Activate after installation.

First-Time Setup ​

Step 1: Create Your First Token ​

  1. Go to Easy MCP AI > API Tokens in your WordPress dashboard.
  2. Click Create New Token.
  3. Fill in the token details: name, associated user, allowed tools, and expiry. Choose an Administrator user for full write access or an Editor for content-only access.
  4. Click Create Token.

For role guidance, per-tool permissions, expiration, and site-wide guardrails, see Creating and Managing API Tokens.

Copy the token immediately. It looks like wpmcp_a1b2c3... (78 characters). It is shown only once and cannot be recovered, because only its SHA-256 hash is stored in the database.

Step 2: Find Your Endpoint URL ​

Your MCP endpoint is always:

https://yoursite.com/wp-json/easy-mcp-ai/v1/mcp

HTTPS is strictly required for secure token transmission.

Step 3: Connect Your AI Client ​

Follow the step-by-step guide for your AI assistant:

Using a different client? See How to Connect Other MCP Clients to WordPress for Windsurf, Cline, Roo Code, Zed, LibreChat, Pydantic AI, and generic settings that work with any MCP-compatible client.

Frequently Asked Questions ​

Is it safe to run on a live site? ​

Yes, when used over HTTPS. Every API request is authenticated via Bearer token, rate-limited, strictly capability-checked against standard WordPress roles, and fully logged in an internal audit log.

Why does the endpoint return 404? ​

Go to Settings > Permalinks in your WordPress dashboard and click Save Changes to flush the rewrite rules. Pretty permalinks must be enabled for the REST API endpoint to register properly.

Can I prevent my AI from deleting content? ​

Yes, in two ways:

  • Grant only read-only tools when creating a token.
  • Use the global Disabled Delete Tools setting in the admin panel to block all 7 destructive delete tools for every token system-wide.

Security ​

If you identify a potential security vulnerability in this plugin, please disclose it responsibly. Follow the protocols on the Themeisle Security Page.

Was this helpful?