Complete Feature List
Built specifically for WordPress, Easy MCP AI turns your site into a headless powerhouse for any artificial intelligence assistant.
🚀
Core Capabilities
48+ AI-Ready WordPress Tools
Complete CRUD coverage for posts, pages, media, comments, users, categories, tags, menus, plugins, themes, and site settings — all instantly available to your AI assistant. More tools added regularly.
Streamable HTTP Transport
Compatible with any MCP AI client.
Pure PHP Architecture
No Node.js, no external proxy, no long-running processes — runs entirely on standard shared hosting.
Connect to Any AI Client
Supports any AI client that is compatible with MCP (Model Context Protocol).
🔒
Security & Control
| Feature | Description |
|---|---|
| Bearer Token Auth | SHA-256 hashed token storage — raw token never stored, shown only once. |
| Per-Token Permissions | Checkbox-based tool permission tree — restrict each token to specific tools. |
| Capability Checks | Every tool call verifies the acting user has the required WordPress capability (`current_user_can`). |
| Rate Limiting | Configurable per-token rate limiting (default: 60 req/min) with atomic object cache support. |
| IP Whitelisting | Restrict MCP access to specific IPs or CIDR ranges (IPv4 and IPv6 supported). |
| Full Audit Log | Every call is logged with token ID, tool name, parsed arguments (passwords redacted), result status, and IP. |
| Disabled Tools | Globally block dangerous tools (like `wp_delete_user` or `wp_delete_post`) regardless of token permissions. |
⚡
Performance
- Lazy Loading: MCP classes only load on REST API requests—not on frontend.
- Token Caching: Token validation cached in object cache for blazing fast request times.
- Throttled Updates: Usage timestamps only update every 5 minutes to prevent DB lockups.
🌐
Internationalization
- 9 Admin Languages: English, Spanish, French, German, Portuguese, Japanese, Chinese, Indonesian, Arabic.
- Per-Plugin Customization: Set the plugin's language independently from the global WordPress locale.