Picot MCP
·
Expose WordPress as an MCP server with API key auth and scoped permissions.
Picot MCP turns your WordPress site into an MCP (Model Context Protocol) server so AI clients such as Cursor or Claude Code can work with content safely.
Architecture: the official WordPress MCP Adapter is the protocol runtime; Picot adds the product layer (API keys, scopes, admin UI, audit log).
- One MCP URL and API keys to connect (plaintext shown only once at issue)
- Multiple API keys with per-key scopes, optional expiry, and rate limits
- Seven feature toggles (posts/pages, taxonomies, media, settings, plugins, themes, users)
- Plugin/theme install and update from wordpress.org slugs only
- Plugin/theme activation, deactivation, and ZIP package transfer are not available via MCP (use WordPress admin)
- Audit log with user, key id, IP, and failure codes
- Built on the WordPress Abilities API and official MCP Adapter