plugin-icon

Picot MCP

By tsubu·
Expose WordPress as an MCP server with API key auth and scoped permissions.
Version
0.2.3
Last updated
Aug 31, 2026

Picot MCP turns your WordPress site into an MCP (Model Context Protocol) server so AI clients such as Cursor or Claude Code can work with content safely.

Architecture: the official WordPress MCP Adapter is the protocol runtime; Picot adds the product layer (API keys, scopes, admin UI, audit log).

  • One MCP URL and API keys to connect (plaintext shown only once at issue)
  • Multiple API keys with per-key scopes, optional expiry, and rate limits
  • Seven feature toggles (posts/pages, taxonomies, media, settings, plugins, themes, users)
  • Plugin/theme install and update from wordpress.org slugs only
  • Plugin/theme activation, deactivation, and ZIP package transfer are not available via MCP (use WordPress admin)
  • Audit log with user, key id, IP, and failure codes
  • Built on the WordPress Abilities API and official MCP Adapter
Freeon paid plans
Tested up to
WordPress 7.2
This plugin is available for download for your site.