Six of the 54 tools exist purely to test, report on and switch authentication — which sounds like padding until the first time a WordPress connection silently fails and you cannot tell whether it is the URL, the password or the plugin. Application passwords are the recommended path; the fallbacks are there because plenty of real installs cannot use them.
A TypeScript server covering the WordPress REST API v2 broadly rather than selectively. It runs a setup wizard that walks you through the site, the authentication method and a connection test, then exposes the whole management surface — content, media, people and settings — as tools.
- Posts (6): `wp_list_posts`, `wp_get_post`, `wp_create_post`, `wp_update_post`, `wp_delete_post`, `wp_get_post_revisions`
- Pages (6): the same shape for pages, including `wp_get_page_revisions`
- Media (6): `wp_list_media`, `wp_get_media`, `wp_upload_media`, `wp_update_media`, `wp_delete_media`, `wp_get_media_sizes`
- Users (6) and Comments (7): full CRUD plus `wp_get_current_user`, `wp_approve_comment` and `wp_spam_comment`
- Taxonomies (10): categories and tags, each with list, get, create, update and delete
- Site management (7): `wp_get_site_settings`, `wp_update_site_settings`, `wp_get_site_stats`, `wp_search_site`, and the three application-password tools
- Authentication (6): `wp_test_auth`, `wp_get_auth_status`, the OAuth flow tools, and `wp_switch_auth_method`
WordPress 5.0 or newer with the REST API enabled, and a user whose role carries the permissions you intend to use — an Administrator reaches everything, an Author only their own posts and media. Run it as `npx @aiondadotcom/mcp-wordpress`, or install globally with npm. Set `WORDPRESS_SITE_URL`, `WORDPRESS_USERNAME`, `WORDPRESS_APP_PASSWORD` and `WORDPRESS_AUTH_METHOD`; application passwords need WordPress 5.6 or newer and are created under Users → Profile. JWT, Basic and API-key authentication are also supported through the same `WORDPRESS_AUTH_METHOD` setting. `npm run setup` runs the wizard, `npm run status` checks the connection.
One command plus a key — npx @aiondadotcom/mcp-wordpress, then supply credentials