外掛標籤
開發者團隊
原文外掛簡介
WEBO MCP acts as the primary standalone MCP gateway for WordPress.
Official site: https://webomcp.com
Whether you are evaluating MCP for your stack or already run AI clients against WordPress, https://webomcp.com is the home for WEBO MCP: positioning, practical guidance, and a single place to follow what ships next. Open the site for a fuller picture than any plugin readme can offer.
n8n: https://www.npmjs.com/package/n8n-nodes-webo-mcp
Automate WordPress from n8n with the community node on npm. Install n8n-nodes-webo-mcp, configure your site URL and credentials, and call the same MCP router your desktop clients use: a strong fit for scheduled jobs, webhooks, and multi-step workflows without custom glue code.
Supported AI Platforms: Use with any MCP-compatible client (e.g. Cursor, Claude Desktop, n8n, custom apps). The client can use any of these models: Claude (Anthropic), OpenAI (GPT-4, GPT-3.5), Google Gemini, Mistral AI, Perplexity, Groq, Cohere, Together AI, DeepSeek. This plugin exposes standard MCP JSON-RPC; compatibility depends on the client, not the LLM provider.
Endpoint: POST /wp-json/mcp/v1/router
Methods: initialize, tools/list, tools/call
Bundled Abilities API support via Composer vendor
Bundled WordPress MCP Adapter runtime
Automatic bridge from registered abilities to MCP tools
Public tools policy with category and allowlist filters
Optional site-wide or per-user API key plus HMAC (after WordPress login via Application Password or session)
Session lifecycle for MCP clients
MCP access (router + GET /webo-mcp/v1/tools): accounts with is_super_admin, manage_options, or edit_posts, authenticated with WordPress Application Password (HTTP Basic) or a normal logged-in session; optional API key/HMAC are an extra layer when configured in Settings
Standalone core tools included:
– Site info
– Posts: list/get/create/update/delete, bulk update status, revisions (list/restore), search & replace
– Users: list
– Media: list/get/upload-from-url/update/delete
– Comments: list/get/update/delete
– Terms: list/create/update/delete (category, tag)
– Nav menus: list menus, list menu items (menu_order, db_id), add menu link from post (explicit post_id + menu_order required)
– Plugins: list active status, toggle (activate/deactivate)
– Options: get/update (safe allowlist only)
– SEO (WordPress post): seo/article-analysis — requires post_id; merges Rank Math meta when available (same data path as webo-rank-math/get-post-seo-meta); optional related-keyword suggestions via outbound request unless no_autocomplete is true
Excluded by default in standalone-safe mode:
– Bulk/mass execution tools
– Plugin/theme write-management abilities
– Multisite-specific abilities
Privacy
This plugin does not phone home or send telemetry. MCP traffic is initiated by clients you configure. Some tools may perform outbound HTTP requests only when a client invokes them (for example seo/article-analysis may request keyword suggestions from a third-party suggest API unless you pass no_autocomplete).
The plugin stores the following options in the WordPress database when configured:
– webo_mcp_api_key: API key used to authenticate MCP requests.
– webo_mcp_hmac_secret: HMAC secret used to sign and validate MCP requests.
These options are removed when the plugin is uninstalled via the WordPress Plugins screen.
External services
This plugin can connect to Google Suggest (Autocomplete) when a client calls the seo/article-analysis tool and does not set no_autocomplete to true. This external request is used to return related keyword suggestions for SEO analysis.
Service provider: Google LLC (Google Suggest / Autocomplete API endpoint).
Data sent and when:
– Sent only when seo/article-analysis is called with autocomplete enabled.
– Sends the analysis query text to https://suggestqueries.google.com/complete/search as the q parameter.
– Sends standard HTTP request metadata such as IP address and User-Agent as part of the web request.
Terms of Service: https://policies.google.com/terms
Privacy Policy: https://policies.google.com/privacy
Developer Hooks
The plugin exposes the following actions and filters for developers:
Actions
webo_mcp_register_tools
Fired during plugin bootstrap after standalone tools are registered. Use this to register custom MCP tools from other plugins.
Filters
webo_mcp_current_user_can_use_mcp (bool $allowed, int $user_id)
Gate for all MCP REST access. Default: super admin OR manage_options OR edit_posts. Override to tighten (e.g. super-admin only) in hardened installs.
webo_mcp_allow_internal_tools (bool $allow_internal, WP_REST_Request $request)
Controls whether internal tools are included in tools/list responses. Defaults to false for public environments.
webo_mcp_public_categories (array $categories, WP_REST_Request $request, array $tool)
Filters which tool categories are exposed as public. Defaults to array( ‘wordpress’ ).
webo_mcp_public_tool_allowlist (array $names, WP_REST_Request $request, array $tool)
Optional allowlist of specific tool names that are always considered public.
webo_mcp_bridge_deny_patterns (array $patterns)
Controls which abilities are excluded when auto-bridging abilities into MCP tools (e.g. bulk, plugins/, themes/, multisite/).
webo_mcp_auto_bridge_abilities (bool $enabled)
Enables or disables automatic bridging of registered abilities into MCP tools. Defaults to true.
webo_mcp_enable_adapter (bool $enabled)
Enables or disables the bundled WordPress MCP Adapter runtime. Defaults to true.
webo_mcp_validate_media_fetch_url (true|\WP_Error $ok, string $url, array $parsed)
Reject unsafe URLs for webo/upload-media-from-url (return WP_Error to block).
Credits
Special thanks to the authors and open source projects that contributed to this plugin:
– WordPress (https://wordpress.org)
– Abilities API (https://github.com/WordPress/abilities-api)
Reference: https://make.wordpress.org/ai/2025/07/17/abilities-api/
– MCP Adapter (https://github.com/WordPress/mcp-adapter)
Reference: https://make.wordpress.org/ai/2025/07/17/mcp-adapter/
– Composer (https://getcomposer.org)
– Other PHP and JS libraries from the community
If you use this plugin, please give credit to the authors of these libraries.
License
This plugin is licensed under the GPLv2 or later.
See https://www.gnu.org/licenses/gpl-2.0.html for details.
