{"id":327075,"date":"2026-06-19T15:03:16","date_gmt":"2026-06-19T15:03:16","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/nibwp\/"},"modified":"2026-06-20T14:36:09","modified_gmt":"2026-06-20T14:36:09","slug":"nibwp","status":"publish","type":"plugin","link":"https:\/\/wordpress.org\/plugins\/nibwp\/","author":23509300,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"1.0.0","stable_tag":"1.0.0","tested":"7.0","requires":"6.9","requires_php":"8.0","requires_plugins":null,"header_name":"NIBWP","header_author":"NIBWP","header_description":"Exposes WordPress as a Model Context Protocol (MCP) server so AI agents can read posts, terms, users, media, options, search results, and a per-site key-value memory store through a standard, permissioned interface.","assets_banners_color":"101217","last_updated":"2026-06-20 14:36:09","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"https:\/\/wordpress.org\/plugins\/nibwp\/","header_author_uri":"https:\/\/nibwp.com","rating":0,"author_block_rating":0,"active_installs":0,"downloads":49,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"1.0.0":{"tag":"1.0.0","author":"nibwp","date":"2026-06-20 14:36:09"}},"upgrade_notice":{"1.0.0":"<p>First public release.<\/p>"},"ratings":[],"assets_icons":{"icon-256x256.png":{"filename":"icon-256x256.png","revision":3578835,"resolution":"256x256","location":"assets","locale":"","width":512,"height":512},"icon-512x512.png":{"filename":"icon-512x512.png","revision":3578835,"resolution":"512x512","location":"assets","locale":"","width":512,"height":512}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3578835,"resolution":"1544x500","location":"assets","locale":"","width":3088,"height":1000},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3578835,"resolution":"772x250","location":"assets","locale":"","width":3088,"height":1000}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.0"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3578835,"resolution":"1","location":"assets","locale":"","width":980,"height":501},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3578835,"resolution":"2","location":"assets","locale":"","width":1242,"height":509},"screenshot-3.png":{"filename":"screenshot-3.png","revision":3578835,"resolution":"3","location":"assets","locale":"","width":966,"height":550},"screenshot-4.png":{"filename":"screenshot-4.png","revision":3578835,"resolution":"4","location":"assets","locale":"","width":1250,"height":609}},"screenshots":[]},"plugin_section":[],"plugin_tags":[2353,216196,229563,224606,242115],"plugin_category":[],"plugin_contributors":[267930],"plugin_business_model":[],"class_list":["post-327075","plugin","type-plugin","status-publish","hentry","plugin_tags-ai","plugin_tags-chatgpt","plugin_tags-claude","plugin_tags-gemini","plugin_tags-mcp","plugin_contributors-nibwp","plugin_committers-nibwp"],"banners":{"banner":"https:\/\/ps.w.org\/nibwp\/assets\/banner-772x250.png?rev=3578835","banner_2x":"https:\/\/ps.w.org\/nibwp\/assets\/banner-1544x500.png?rev=3578835","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/nibwp\/assets\/icon-256x256.png?rev=3578835","icon_2x":"https:\/\/ps.w.org\/nibwp\/assets\/icon-256x256.png?rev=3578835","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/nibwp\/assets\/screenshot-1.png?rev=3578835","caption":""},{"src":"https:\/\/ps.w.org\/nibwp\/assets\/screenshot-2.png?rev=3578835","caption":""},{"src":"https:\/\/ps.w.org\/nibwp\/assets\/screenshot-3.png?rev=3578835","caption":""},{"src":"https:\/\/ps.w.org\/nibwp\/assets\/screenshot-4.png?rev=3578835","caption":""}],"raw_content":"<!--section=description-->\n<p>NIBWP turns your WordPress site into a <strong>Model Context Protocol (MCP) server<\/strong> so AI assistants like <strong>Claude, ChatGPT, Google Gemini and Cursor<\/strong> can read and manage your content through one standard, authenticated endpoint \u2014 no copy\u2011pasting, no scraping, and no third\u2011party service in the middle.<\/p>\n\n<p>It is built directly on the WordPress 6.9 <strong>Abilities API<\/strong> and the official <code>wordpress\/mcp-adapter<\/code>, so it stays lightweight and future\u2011proof instead of shipping a proprietary protocol layer.<\/p>\n\n<p>Authentication uses WordPress core <strong>Application Passwords<\/strong> (HTTP Basic) \u2014 the same standard the REST API already trusts. Every credential is created, listed, and revoked from your dashboard. There is <strong>no separate API key to manage, no account to create, and no subscription<\/strong>.<\/p>\n\n<h4>Why NIBWP<\/h4>\n\n<ul>\n<li><strong>Free and self\u2011contained.<\/strong> Everything runs inside your WordPress install. Nothing is sent to an external server.<\/li>\n<li><strong>Standard, revocable auth.<\/strong> Uses core Application Passwords \u2014 generate one per AI client, revoke it any time from the Connect screen.<\/li>\n<li><strong>Permissioned by design.<\/strong> Every ability runs through WordPress capability checks <em>and<\/em> per\u2011object checks (per\u2011post, per\u2011term, per\u2011user), so an AI agent can only do what the connected account is allowed to do.<\/li>\n<li><strong>Safe options &amp; meta.<\/strong> Option reading\/writing is restricted to a non\u2011sensitive <strong>allowlist<\/strong>; passwords, secrets, API keys, auth salts and capability\/session meta are filtered out and can never leak.<\/li>\n<li><strong>Master switch.<\/strong> A single toggle turns all AI abilities on or off for the whole site.<\/li>\n<li><strong>One\u2011paste setup.<\/strong> The Connect screen generates a ready\u2011made prompt you paste into your AI \u2014 it connects itself.<\/li>\n<\/ul>\n\n<h4>What your AI can do<\/h4>\n\n<ul>\n<li>Read and write <strong>posts, pages and custom post types<\/strong> (create, update, delete, search).<\/li>\n<li>Manage <strong>categories, tags and custom taxonomy terms<\/strong>.<\/li>\n<li>Work with <strong>media<\/strong>, <strong>comments<\/strong>, <strong>navigation menus<\/strong> and <strong>users<\/strong>.<\/li>\n<li>Read and write <strong>post, term and user meta<\/strong> \u2014 including custom fields (ACF, Meta Box, Pods, JetEngine) since they are stored as standard meta.<\/li>\n<li>Read <strong>site info and statistics<\/strong> and allow\u2011listed <strong>WordPress options<\/strong>.<\/li>\n<li>Use a per\u2011site <strong>key\/value memory store<\/strong> so the assistant can remember context across calls.<\/li>\n<li>Perform allow\u2011listed, read\u2011only <strong>filesystem and directory<\/strong> lookups scoped to your WordPress install.<\/li>\n<\/ul>\n\n<h4>Works with any MCP client<\/h4>\n\n<p>Claude (Anthropic) \u2014 Claude Desktop and Claude Code, OpenAI \/ ChatGPT, Google Gemini, and AI code editors such as <strong>Cursor, VS Code, Windsurf, Cline and Zed<\/strong>. Any client that speaks the Model Context Protocol over an authenticated HTTP endpoint can connect.<\/p>\n\n<h4>How it compares<\/h4>\n\n<p>Heavier MCP plugins bolt on a custom API\u2011key system and a large proprietary tool set. NIBWP takes the opposite approach: it leans on WordPress core (Abilities API + Application Passwords), exposes a focused, capability\u2011checked ability set, and ships <strong>free with no account and no external calls<\/strong>.<\/p>\n\n<h4>Premium integrations (NIBWP Pro)<\/h4>\n\n<p>The free plugin is fully functional on its own. <strong>NIBWP Pro<\/strong> turns <strong>30+ popular WordPress plugins<\/strong> into AI\u2011callable, schema\u2011typed MCP tools \u2014 no glue code. Activate an integration and your agents read and write it through clean, typed calls:<\/p>\n\n<ul>\n<li><strong>WooCommerce<\/strong> \u2014 read and manage products, variations, orders and store data.<\/li>\n<li><strong>SEO<\/strong> \u2014 Yoast SEO, Rank Math, SEOPress, Slim SEO.<\/li>\n<li><strong>Page builders<\/strong> \u2014 Elementor, Bricks, Etch, Divi.<\/li>\n<li><strong>Custom fields<\/strong> \u2014 Advanced Custom Fields (ACF), Meta Box, Pods, JetEngine.<\/li>\n<li><strong>Forms<\/strong> \u2014 Contact Form 7, Fluent Forms, Gravity Forms.<\/li>\n<li><strong>CRM, email &amp; community<\/strong> \u2014 FluentCRM, FluentSMTP, FluentCommunity, BuddyPress.<\/li>\n<li><strong>LMS &amp; membership<\/strong> \u2014 LearnDash, LifterLMS, Tutor LMS, MemberPress.<\/li>\n<li><strong>Commerce &amp; donations<\/strong> \u2014 SureCart, FluentCart, Easy Digital Downloads, GiveWP.<\/li>\n<li><strong>Design systems &amp; themes<\/strong> \u2014 Automatic.css (ACSS), GeneratePress, Kadence.<\/li>\n<li><strong>More<\/strong> \u2014 The Events Calendar, TablePress, TranslatePress, WPML, Redirection.<\/li>\n<\/ul>\n\n<p>Browse the full directory at https:\/\/nibwp.com\/integrations<\/p>\n\n<h4>Pro Skills \u2014 design in, validated build out<\/h4>\n\n<p><strong>NIBWP Pro Skills<\/strong> teach agents a specific builder or framework so the output is correct, on\u2011system and production\u2011ready \u2014 not a guess. Turn a <strong>screenshot, URL or Figma frame<\/strong> into a validated build:<\/p>\n\n<ul>\n<li><strong>Bricks Pro<\/strong> \u2014 screenshots, URLs, images or Figma \u2192 validated Bricks templates.<\/li>\n<li><strong>Elementor Pro<\/strong> \u2014 HTML, URL or image \u2192 a validated Elementor widget tree with global classes and dynamic tags.<\/li>\n<li><strong>EtchWP Pro<\/strong> \u2014 HTML, URL, image or Figma \u2192 validated EtchWP components with BEM + ACSS tokens.<\/li>\n<li><strong>ACSS Pro<\/strong> \u2014 generate a working Automatic.css configuration from a screenshot, HTML\/CSS or live URL.<\/li>\n<li><strong>Tutor LMS Builder<\/strong> \u2014 turn a brief, outline or URL into a complete, validated Tutor LMS course.<\/li>\n<\/ul>\n\n<p>Common use cases: <strong>content automation<\/strong> (draft, summarize and update posts), <strong>SEO at scale<\/strong> (audit and bulk\u2011optimize through typed tools) and <strong>WooCommerce ops<\/strong> (read and manage products and orders).<\/p>\n\n<p>Explore Pro Skills at https:\/\/nibwp.com\/solutions<\/p>\n\n<p>Premium integrations and Pro Skills are part of <strong>NIBWP Pro<\/strong>, a paid upgrade available at https:\/\/nibwp.com \u2014 they are not included in this free plugin.<\/p>\n\n<!--section=installation-->\n<ol>\n<li>Install through the WordPress.org plugin directory, or upload the <code>nibwp<\/code> folder to <code>\/wp-content\/plugins\/<\/code>.<\/li>\n<li>Activate the plugin.<\/li>\n<li>Open the <strong>NIBWP \u2192 Connect<\/strong> screen.<\/li>\n<li>Turn on <strong>AI Abilities<\/strong>, generate an <strong>Application Password<\/strong>, and copy the ready\u2011made connection prompt.<\/li>\n<li>Paste the prompt into Claude, ChatGPT, Gemini or Cursor \u2014 it connects itself.<\/li>\n<\/ol>\n\n<!--section=faq-->\n<dl>\n<dt id=\"what%20is%20mcp%20and%20why%20does%20my%20wordpress%20site%20need%20it%3F\"><h3>What is MCP and why does my WordPress site need it?<\/h3><\/dt>\n<dd><p>The Model Context Protocol is an open standard that lets AI assistants call structured \"tools\" on external systems. Without it, you copy\u2011paste content between WordPress and your AI by hand. With NIBWP, Claude, ChatGPT, Gemini and Cursor can read posts, create and update content, manage media and menus, and look up site data directly \u2014 through a secure, authenticated connection.<\/p><\/dd>\n<dt id=\"do%20i%20need%20an%20api%20key%20or%20an%20account%3F\"><h3>Do I need an API key or an account?<\/h3><\/dt>\n<dd><p>No. NIBWP uses WordPress core <strong>Application Passwords<\/strong> for authentication. You generate one on the Connect screen, paste it into your AI client, and revoke it whenever you like. There is no separate API key, no account, and no subscription.<\/p><\/dd>\n<dt id=\"how%20do%20i%20connect%20claude%20desktop%20or%20claude%20code%3F\"><h3>How do I connect Claude Desktop or Claude Code?<\/h3><\/dt>\n<dd><p>Open <strong>NIBWP \u2192 Connect<\/strong>, enable AI Abilities, and generate an Application Password. Copy the ready\u2011made prompt (it already contains your endpoint, username and password) and paste it into Claude \u2014 it adds the MCP server itself. Claude Code users can also run the shown <code>claude mcp add<\/code> command.<\/p><\/dd>\n<dt id=\"does%20it%20work%20with%20cursor%2C%20vs%20code%2C%20windsurf%2C%20chatgpt%20or%20gemini%3F\"><h3>Does it work with Cursor, VS Code, Windsurf, ChatGPT or Gemini?<\/h3><\/dt>\n<dd><p>Yes. Any MCP\u2011compatible client can connect using the site's MCP endpoint and an Application Password sent as HTTP Basic auth. The Connect screen shows the exact endpoint and credentials.<\/p><\/dd>\n<dt id=\"is%20my%20site%20safe%3F\"><h3>Is my site safe?<\/h3><\/dt>\n<dd><p>Security is enforced at several layers. Every ability requires authentication and passes WordPress capability checks plus per\u2011object checks (per\u2011post, per\u2011term, per\u2011user). Option access is limited to a non\u2011sensitive allowlist, and sensitive option and meta values (passwords, secrets, API keys, auth salts, session tokens, capabilities) are filtered out. Comment creation respects your moderation and \"comments open\" settings. A master switch disables every ability for the whole site in one click.<\/p><\/dd>\n<dt id=\"does%20it%20duplicate%20wordpress%20core%27s%20abilities%20api%3F\"><h3>Does it duplicate WordPress core's Abilities API?<\/h3><\/dt>\n<dd><p>No \u2014 it builds on it. WordPress 6.9 introduced the Abilities API for registering AI\u2011callable functions, and <code>wordpress\/mcp-adapter<\/code> bridges those abilities to the MCP protocol. NIBWP adds a curated, capability\u2011checked ability set, Application\u2011Password authentication, a master on\/off switch, an option allowlist, a memory store, and a one\u2011paste Connect flow on top of that foundation.<\/p><\/dd>\n<dt id=\"can%20ai%20read%20and%20write%20my%20custom%20fields%20%28acf%2C%20meta%20box%2C%20pods%2C%20jetengine%29%3F\"><h3>Can AI read and write my custom fields (ACF, Meta Box, Pods, JetEngine)?<\/h3><\/dt>\n<dd><p>Yes. NIBWP exposes post, term and user meta abilities. Because those plugins store data as standard WordPress meta, an AI agent can read and write their fields the same way a human editor would.<\/p><\/dd>\n<dt id=\"does%20nibwp%20work%20with%20woocommerce%2C%20elementor%2C%20bricks%2C%20yoast%20or%20rank%20math%3F\"><h3>Does NIBWP work with WooCommerce, Elementor, Bricks, Yoast or Rank Math?<\/h3><\/dt>\n<dd><p>The free plugin reads and writes any post type and meta, so it already covers products, custom fields and most builder content generically. For deeper, schema\u2011typed control, <strong>NIBWP Pro<\/strong> adds dedicated integrations for 30+ plugins \u2014 including WooCommerce, Elementor, Bricks, Etch, Divi, ACF, Yoast SEO, Rank Math, SEOPress, LearnDash, Tutor LMS, MemberPress, Fluent Forms, Gravity Forms and Automatic.css. See https:\/\/nibwp.com\/integrations.<\/p><\/dd>\n<dt id=\"what%20are%20pro%20skills%3F\"><h3>What are Pro Skills?<\/h3><\/dt>\n<dd><p>Pro Skills are premium skill packs that turn a screenshot, URL or Figma frame into a validated, on\u2011system build for a specific builder \u2014 Bricks, Elementor, EtchWP and Automatic.css \u2014 plus full course generation for Tutor LMS. They are part of NIBWP Pro; see https:\/\/nibwp.com\/solutions.<\/p><\/dd>\n<dt id=\"will%20it%20slow%20down%20my%20site%3F\"><h3>Will it slow down my site?<\/h3><\/dt>\n<dd><p>No. The MCP endpoint is a REST route that only runs when an authenticated AI client makes a request. It does not execute on visitor\u2011facing pages or normal admin screens.<\/p><\/dd>\n<dt id=\"can%20i%20use%20local%20ai%20models%20%28ollama%2C%20lm%20studio%29%3F\"><h3>Can I use local AI models (Ollama, LM Studio)?<\/h3><\/dt>\n<dd><p>Yes. Connection happens on the client side, so any local MCP\u2011compatible runner such as Ollama or LM Studio can talk to your site. Your data stays on your own infrastructure.<\/p><\/dd>\n<dt id=\"does%20it%20work%20on%20multisite%3F\"><h3>Does it work on multisite?<\/h3><\/dt>\n<dd><p>Yes, per site. Activate it on each subsite; every site gets its own endpoint, credentials and settings.<\/p><\/dd>\n<dt id=\"what%20happens%20when%20i%20turn%20ai%20abilities%20off%3F\"><h3>What happens when I turn AI Abilities off?<\/h3><\/dt>\n<dd><p>The master switch stops NIBWP from registering any abilities, so the site exposes nothing over MCP until you turn it back on. Existing Application Passwords are left untouched.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>1.0.0<\/h4>\n\n<ul>\n<li>First public release: MCP server for WordPress built on the 6.9 Abilities API and <code>wordpress\/mcp-adapter<\/code>.<\/li>\n<li>Read and write abilities for posts, terms, users, media, comments, menus, options, search, and meta.<\/li>\n<li>Application Password authentication with in\u2011dashboard generation and revocation.<\/li>\n<li>Per\u2011object capability checks, option allowlist, and sensitive option\/meta filtering.<\/li>\n<li>Master on\/off switch, per\u2011site key\/value memory store, and allow\u2011listed filesystem read.<\/li>\n<\/ul>","raw_excerpt":"Turn WordPress into a secure MCP server \u2014 let Claude, ChatGPT, Gemini &amp; Cursor read and manage your site. Core Application Passwords, no account.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/327075","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=327075"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/nibwp"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=327075"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=327075"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=327075"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=327075"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=327075"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=327075"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}