Snapshot before every write
Let AI build your WordPress site. It can't wreck it.
WP MCP is an MCP server that runs inside WordPress, built on the official Abilities API. It gives agents like Claude and Cursor the keys to your site, pages, products, settings, while quietly snapshotting everything before each write. If an agent ever gets something wrong, one click puts your site back exactly as it was.
GPL-2.0 core · self-hosted · works with WordPress & WooCommerce
› Rewrite the homepage banner and add the Spring Tote Bag product
⛨ snapshot homepage saved · way back guaranteed
⚒ update-post banner rewritten
⛨ snapshot catalog saved
⚒ create-product "Spring Tote Bag" · $49.00
✓ Done. Every change now has a Restore button in wp-admin.
Works with any MCP-compatible client
The problem
AI is confident, not careful.
One speed, every change
An AI agent editing a live site does not pause before a risky change. It moves with the same confidence whether it is fixing a typo or wiping out your homepage.
Every other tool asks you to just trust it
Trust is not a safety net. AI is good, not perfect, and one bad change on a live site is a broken homepage, an angry client, and an afternoon you cannot get back.
Last night's backup will not save you
A nightly backup does not help when the AI broke something ninety seconds ago. You need protection at the moment of the change, not the moment of the night.
How it works
Nothing reaches your site without a snapshot saved first.
Every change the AI makes, a new page, an edited product, a settings update, follows the same four steps before it counts as done. You never have to trust that it went well. You can check, and undo it if it did not.
Save a snapshot
Before anything changes, WP MCP quietly saves exactly how that page, product, or setting looked, so there is always a way back.
Make the change
The AI does what you asked: update copy, add a product, adjust a setting. One clean change, nothing left half-done.
Check the result
A quick check confirms the page still works. If something looks broken, it gets reversed automatically before a visitor ever sees it.
Undo, any time
Restore one change, or roll back an entire AI session, from a single screen in your dashboard, or by asking the agent itself.
Under the hood
188 real abilities. Every write snapshot-wrapped.
WP MCP registers every tool as an ability through the official WordPress Abilities API and speaks the Model Context Protocol. The names below are the real tools the agent calls, not marketing labels , 163 free, 25 Pro, every one documented in the reference.
01 / undo
Safety & history
Undo is the architecture. Every mutating tool routes through one snapshot-first engine; no write path can bypass it. Restore a single change or an entire agent session.
02 / safe change
Content & pages
Create, edit, organize, and delete posts and pages, snapshotted before every change and checked automatically after it.
03 / safe change
WooCommerce
Create products, update price and stock, change order status, add notes, and pull sales reports. Every store write as undoable as a page edit.
04 / safe change
Page builders
Deep Elementor editing from a curated 44-widget catalog, plus Bricks and Divi support. The agent edits real builder structure, not screenshots.
05 / safe change
Media
Read and update image and file details, or pull an image from a URL or stock search straight into the library. Disk-level deletes are off by default.
06 / safe change
Menus & structure
Build menus, add and move items, and assign menus to theme locations, all reversible like everything else.
07 / safe change
Users & comments
List and update user profiles, approve and moderate comments. Passwords and admin accounts are never touched.
08 / guard-railed
Plugins, themes, DB & files
Install and update plugins and themes. Database and filesystem access is read-mostly; raw writes are off by default, admin-only, and honestly flagged when outside the undo guarantee.
09 / read
Scanners & SEO
Scored performance and security reports, plus Yoast SEO and Rank Math metadata editing with one-click session rollback.
Why WP MCP
Built for the moment the AI gets it wrong.
Nothing is ever truly gone
Every change the AI makes is snapshotted before it happens. Built into the core of how WP MCP works, not something you remember to turn on.
Works with your page builder
WP MCP saves your actual site data, so restoring a page works the same no matter which builder or theme created it.
Lives inside your WordPress
A single plugin on the official WordPress Abilities API. No separate service, no Node proxy, no third party holding a copy of your site.
Undo a whole afternoon
Roll back a single change, or unwind everything the AI did in a session, back to exactly how your site looked before it started.
Catches problems before visitors do
A quick check runs after every change. If something looks broken, it gets reversed automatically before it reaches a visitor.
Watches for trouble, not just mistakes
A built-in security scanner checks for malware, tampered core files, weak configuration, and outdated software.
Free vs Pro
The safety net is free. It is not the upsell.
Pro adds reach and convenience for busy sites and the agencies that run several of them. It does not gate the thing that keeps your site safe.
core / free
Fully functional. No trial, no time limit.
- The full save, change, check, and restore engine
- 163 abilities: content, media, menus, users, WooCommerce, SEO
- One-click restore from your dashboard or the AI
- Last 20 changes kept in history
- GPL-2.0, self-hosted, no forced tracking
pro / via freemius · from $26.99/yr
For busy sites and the agencies that run several.
- Unlimited change history and full session restore
- Elementor deep editing: 44-widget catalog, structural suite
- Scoped agent identities and governance controls
- Guarded WP-CLI and PHP execution, off by default
- Priority support
Where it earns its keep