connect_siteLABSCO SUMMARY
Written for production sites, with the guardrails to match.
Everything destructive is fenced: file writes are limited to .php, .css, .js, .json, .html and .txt inside the theme sandbox, every saved PHP file passes a syntax check before it lands, DELETE on posts and pages moves to trash rather than removing, plugin install and update need two-phase confirmation, and DB reads are SELECT-only with a 1000-row limit. Theme editing in particular is worth the plugin on its own — the draft, preview and publish steps are separate tools, so a bad edit never reaches the live theme.
What it is
The WordPress side of WPVibe: a GPL plugin you install on your site that exposes WordPress operations as MCP-callable REST endpoints. It pairs with the hosted WPVibe service, which handles OAuth, routing and tool registration.
What you get
connect_site,site_info,list_sitesandremove_sitemanage which sites the assistant can reachrest_apicalls any WordPress REST endpoint over GET, POST, PUT or DELETE — the general path for content workread_file,edit_file,write_file,delete_file,list_files,search_filesandget_file_outlinework on theme files, sandboxed to the active theme or its draftcreate_draft_theme,get_preview_urlandpublish_draft_themegive theme edits a draft-preview-publish path;create_classic_themescaffolds a new onerun_wp_clidispatches 34 allowlisted commands through native PHP, so no wp-cli binary is neededupload_mediaandsearch_imagespull images from a URL or Unsplash into the media librarydiscover_abilities,get_ability_infoandrun_abilitycall abilities other plugins register under the WordPress Abilities APIget_page_htmlandnavigateread the rendered site;load_skillsupplies step-by-step instructions for common workflows
Requirements
WordPress 6.0 or newer (tested up to 6.9) and PHP 7.4 or newer on the site, plus the hosted service at mcp.wpvibe.ai. Setup is a one-click OAuth authorization from the plugin's admin page — no application password is pasted into a chat. Credentials are stored AES-256-GCM encrypted with a per-site salt.
Setup effort
Follow the published steps
USE CASES
Drafting and publishing without leaving the chat
Write a post, revise it in conversation, and publish it into the live site.
Changing a theme without risking the live site
Work in a draft copy, open the preview URL to check it, then publish once it looks right.
Running site maintenance commands
Ask for the WP-CLI operation you want and get it dispatched through PHP, with dangerous flags stripped.
Understanding an inherited site
List files, search the code, and read what plugins and abilities are actually installed before changing anything.
26 tools
Listed in project docs. Your client may show a different list.
site_infolist_sitesremove_siterest_apiupload_mediasearch_imagesdiscover_abilitiesget_ability_inforun_abilityread_fileedit_filewrite_filedelete_filelist_filessearch_filesget_file_outlinecreate_draft_themepublish_draft_themedelete_draft_themeget_preview_urlcreate_classic_themerun_wp_cliget_page_htmlnavigateload_skillBEFORE YOU INSTALL
What to know first
Tools you get
26 tools named in the project's documentation. File operations are sandboxed to the active theme or its draft, run_wp_cli allows only 34 commands, database queries are SELECT-only with a 1000-row limit, and deletes go to trash. discover_abilities, get_ability_info and run_ability need WordPress 6.9 or later.
Requires
PHP 7.4+
INSTALLATION
Connect your client
Server setup
Install the plugin from https://wordpress.org/plugins/vibe-ai/ (or clone this repo into wp-content/plugins/vibe-ai/) on your self-hosted WordPress site
Activate the plugin in wp-admin — "WPVibe" appears in the admin sidebar
Click the OAuth authorization link in the WPVibe admin page
Add the hosted WPVibe MCP server URL https://mcp.wpvibe.ai/mcp to your AI client — the client tabs below show how for each
MCP Clients
Claude Code
claude mcp add --transport http wpvibe https://mcp.wpvibe.ai/mcpClaude Desktop
In Claude (claude.ai or the desktop app), open Customize in the sidebar, then Connectors
Click Add, then Add custom connector
Name it WPVibe and paste https://mcp.wpvibe.ai/mcp as the server URL; leave the OAuth client ID and secret fields empty and click Add
Click Connect on the new WPVibe row and sign in with your email and the 6-digit code WPVibe sends
Connectors are shared across your Claude account, so a connector added on claude.ai also appears in Claude Desktop — restart the app if it does not
Cursor, Windsurf
Add https://mcp.wpvibe.ai/mcp in the MCP settings panel
ChatGPT
Connectors → Add MCP server → https://mcp.wpvibe.ai/mcp