Site Agent MCP

Connect an AI to your WordPress site

Installation, connecting each client, revocation and uninstallation. Updated on 2026-11-12 for version 0.4.1.

Install the plugin

Requirements: WordPress 6.9 or later, PHP 7.4 or later, site served over HTTPS. No extra server.

  1. Download the ZIP of version 0.4.1.
  2. In WordPress: Plugins › Add New › Upload Plugin, choose the ZIP, then activate Site Agent MCP.
  3. To update, upload the new ZIP and agree to replace the installed version.

Find the server address

The plugin screen shows the address of your MCP server and a ready-to-copy command for each client. It looks like this:

https://your-site.com/wp-json/samcp/v1/mcp

In the examples below, replace this address with yours and my-site with a name of your choice.

Claude (web, desktop, mobile)

Tested with a real site over HTTPS. In Claude: Customize › Connectors › Add custom connector, then paste the server address. Claude then opens your site’s sign-in page.

Claude Code

claude mcp add --transport http my-site https://your-site.com/wp-json/samcp/v1/mcp

Codex CLI

Not tested with this plugin yet.

codex mcp add my-site --url https://your-site.com/wp-json/samcp/v1/mcp
codex mcp login my-site

Gemini CLI

Not tested with this plugin yet.

gemini mcp add --transport http my-site https://your-site.com/wp-json/samcp/v1/mcp

Antigravity

Not tested with this plugin yet. Add this to mcp_config.json:

{
  "mcpServers": {
    "my-site": { "serverUrl": "https://your-site.com/wp-json/samcp/v1/mcp" }
  }
}

Approve the connection

The client opens a page of your site. Sign in with the WordPress account whose rights the agent will have, check the application name and the address it will be sent back to, then approve. No password or key is passed to the application: it receives a token that it renews on its own.

If you are an administrator, the page also offers server access (files, SQL, PHP, WP-CLI). Leave the box unchecked if you do not need it: you can reconnect the application later to add it.

Revoke access

In the plugin screen, the list of active connections shows each application, the account used and the last activity. The revoke button cuts off access immediately.

Uninstall

Deactivate, then delete the plugin in WordPress. Deleting it removes its tables and settings. Backup archives stay on the server, because they are your data: delete them from the plugin screen before uninstalling if you no longer want them.