miniOrange Secure MCP Server for WordPress

Description

miniOrange Secure MCP Server is a WordPress MCP server plugin that connects AI assistants such as ChatGPT, Claude, Gemini, and Cursor to your WordPress website through the Model Context Protocol (MCP). It enables AI agents to interact with WordPress content, users, media, WooCommerce products, SEO settings, and supported plugin integrations through controlled, permission-based tools.

Unlike basic MCP integrations that focus primarily on connectivity, miniOrange emphasizes AI access control and security. It provides role-based permissions, configurable tool access, self-hosted OAuth 2.1 authentication, and activity logs to help website owners manage how AI agents interact with their websites. Its governed access to WordPress capabilities and supported REST API endpoints helps organizations maintain greater visibility and control over AI-driven operations.

The plugin is suitable for businesses, developers, agencies, and WooCommerce store owners who want to use AI to manage website content and supported business operations while maintaining control over permissions and access.

Benefits

• Secure AI connectivity: Connect compatible AI assistants to WordPress through an MCP server with self-hosted OAuth 2.1 authentication.
• Granular access control: Configure which tools and WordPress capabilities AI agents can access based on user roles and permissions.
• Controlled website management: Use supported AI tools to create or edit content, manage media, update WooCommerce products, and interact with compatible plugins.
• Improved visibility: Review AI agent activity and tool executions through activity logs and the plugin dashboard.
• Flexible integrations: Extend AI-assisted operations across WordPress, WooCommerce, SEO plugins, custom post types, and supported page builders.
• Security-focused governance: Apply permission checks and configurable access restrictions to help prevent unauthorized AI actions.

Key Features

• Connect ChatGPT, Claude, Gemini, Cursor, and other compatible MCP clients
• Self-hosted OAuth 2.1 authentication with PKCE
• Role-based access control for AI agents
• Individual tool and WordPress ability permissions
• Governed access to supported WordPress REST API endpoints
• Activity logs and AI execution monitoring
• WordPress content and media management through AI tools
• WooCommerce product management and supported integrations
• Support for compatible plugins, including Yoast SEO, Advanced Custom Fields, and supported form plugins
• Elementor and Kadence page-building capabilities
• Configurable access restrictions and security controls