agentmods.dev

mcp-wordpress

A local bridge to the WordPress REST API, the web interface WordPress provides for managing site content.

In plain words
What is it for?
Creating or editing pages and posts, and managing shortcodes and Elementor content. Elementor is a WordPress page-building tool.
Why use it?
It lets an AI agent manage WordPress content through its API instead of requiring manual work in the WordPress dashboard.

MCP server for Claude CodeCodexCursorGemini CLIOpenCode

3 18d ago A scan tokens not measured original MIT
View the source file leonardobora/mcp-wordpress
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add mcp/leonardobora/mcp-wordpress/mcp-wordpress
Clone the repo
git clone --depth 1 https://github.com/leonardobora/mcp-wordpress

Made for: Claude Code, Codex, Cursor, Gemini CLI, OpenCode.

Per session not measured What this adds to a session before it is invoked.
When invoked not measured Not applicable: nothing here is loaded into a session.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Security

Grade A, and why

mcp-wordpress scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

listed in the official MCP registry · 9 lines

What it actually says

{ "mcp-wordpress": { "command": "npx", "args": [ "-y", "@leonardobora/mcp-wordpress" ] } }

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 9 lines scan A 52a00254f086

Subscribe to this mod's changes

mcp-wordpress is an MCP server published in the GitHub repository leonardobora/mcp-wordpress (3 stars, last pushed 18d ago), licensed MIT. Its token cost is not measured: an MCP server costs its tool schemas, not its config file. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Backend and APIsai-toolsclaude-codeelementormcpmodel-context-protocolshortcodes
Related

Other mcp servers, from other repositories

obsidian-mcp-server

Read, write, search, and surgically edit Obsidian notes, tags, and frontmatter via MCP. Runs locally from the obsidian-mcp-server npm package. Needs 10 environment variables to run.

cyanheads/obsidian-mcp-server · not measured

task-master-ai

A task management system for ambitious AI-driven development that doesn't overwhelm and confuse Cursor. Runs locally from the task-master-ai npm package. Needs 9 environment variables to run.

WYRE-AI/autotask-mcp · not measured

ninjaone-mcp

MCP server "ninjaone-mcp" as configured in WYRE-AI/ninjaone-mcp. Runs in Docker (ghcr.io/wyre-ai/ninjaone-mcp:v2.3.0). Needs 6 environment variables to run.

WYRE-AI/ninjaone-mcp · not measured

figma-mcp-rust

Figma MCP server in Rust: plugin bridge, no API token, no rate limits, 73 tools. Runs locally from the @alvinindra/figma-mcp-rust npm package.

alvinindra/figma-mcp-rust · not measured

astravue-mcp

Manage projects, tasks, time tracking, and team collaboration through natural language. Remote server at api.astravue.com.

AstravueOrg/astravue-mcp-server · not measured

astravue

MCP server "astravue", hosted remotely at api.astravue.com, as configured in AstravueOrg/astravue-mcp-server.

AstravueOrg/astravue-mcp-server · not measured