內容簡介
Sigma MCP Connector 將模型上下文協議 (MCP) 實現於您的 WordPress 網站，讓 AI 助手能以真實的 WordPress 使用者身份操作內容，確保安全性與權限控制。
【主要功能】
• OAuth 2.0 + PKCE 認證流程
• 27 種角色感知的 MCP 工具
• 實時角色訪問矩陣
• 每角色速率限制
• 完整活動日誌
• 內建設置文件
外掛標籤
開發者團隊
原文外掛簡介
Sigma MCP Connector implements the Model Context Protocol (MCP) on top of your WordPress site, so AI assistants can act on your content as a real, authenticated WordPress user — never anonymously, never with more access than that user already has.
It exposes a JSON-RPC 2.0 MCP endpoint secured by a full OAuth 2.0 Authorization Code + PKCE flow. An administrator registers each AI client (Claude.ai, Codex, VS Code, Cursor AI, or any other MCP-aware tool) as an OAuth client; a WordPress user then explicitly signs in and approves a consent screen before that client can do anything. From then on, every tool call is checked against that specific user’s WordPress capabilities and written to a full audit log.
Key Features
OAuth 2.0 + PKCE — Authorization Code grant with mandatory PKCE, hashed client secrets, short-lived access tokens, and long-lived refresh tokens
27 Role-Aware MCP Tools — Read and write posts, pages, media, taxonomies, menus, ACF fields, post meta, and users, each gated by a specific WordPress capability
Live Role Access Matrix — Generated at runtime from real WordPress role capabilities, shown identically on the Connections page, the Documentation page, and the OAuth consent screen, so it can never drift out of sync with what’s actually enforced
Per-Role Rate Limiting — Configurable request ceilings so no single connection can overwhelm the site
Full Activity Log — Filterable, paginated audit trail of every OAuth and tool-call event, with before/after snapshots on content-mutating calls and configurable retention
Built-In Setup Documentation — Step-by-step configuration instructions for Claude.ai, Claude Desktop, Codex, VS Code (GitHub Copilot), and Cursor AI
No External Dependencies — No bundled third-party service, no analytics, no phone-home; the plugin only responds to requests from clients you explicitly register and authorize
Who Is This For?
Site owners who want to let an AI assistant help manage content without handing out admin passwords or API keys with unlimited access
Agencies and developers building AI-assisted editorial workflows on top of WordPress
Teams who need an auditable, revocable, role-scoped way to connect AI tools to a WordPress site
Additional Information
System Requirements
Minimum
* WordPress 6.0
* PHP 8.0
* MySQL 5.7 or MariaDB 10.3
Recommended
* HTTPS enabled
* Pretty permalinks enabled
Custom Database Tables
{prefix}sigma_mcp_oauth_clients — Registered OAuth applications
{prefix}sigma_mcp_oauth_codes — Short-lived, single-use authorization codes
{prefix}sigma_mcp_oauth_tokens — Access and refresh tokens
{prefix}sigma_mcp_log — Legacy per-call log
{prefix}sigma_mcp_event_log — Full structured audit log
Support
Support Forum: https://wordpress.org/support/plugin/sigma-mcp-connector/
Email: [email protected]
