Works with Claude, ChatGPT, Cursor and other MCP clients
Let AI work on your WordPress sites. You stay in control.
Connect the AI assistant you already use to your WordPress sites through one secure link. Reads run instantly, risky changes wait for your approval, and every action is signed and logged.
Free for one site · No card · GPL plugin
Your AI assistant
MCP clientYou asked
“Set the SEO title of the Pricing page to ‘Plans for agencies’.”
1. list_sites
1 site found
2. get_seo_data
Yoast SEO · page 42
3. update_seo_data
approved in chat · done
WPTerminal gateway
policy · approval · signing
Your WordPress site
Pricing · SEO title
Plans for agencies
Signature
Verified by the plugin
Activity log
Who, what, which site
Runs with your WordPress permissions, signed and logged.
Universal client support
Plug in the AI you already use
What it can do
Full WordPress control without leaving your AI chat
49 tools for content, stores, builders and maintenance, built on the WordPress Abilities API. Each one shows whether it runs straight away or asks first.
Content, with surgical edits
Draft, edit and publish posts and pages. Targeted find-and-replace changes exact text without rewriting whole pages, and all edits apply or none do.
{ "post_id": 42, "field": "post_content",
"edits": [{ "old_string": "Free trial", "new_string": "Free plan" }] }
✓ 1 match · would change 1 field
97 WP-CLI commands
Emulated inside WordPress, so they work on any host. Reads run instantly; changes wait for approval.
$ wp plugin list --status=inactive
hello-dolly · akismet
$ wp plugin delete hello-dolly
⏸ waiting for approval of this exact command
Rules you can read
Every tool says what happens before it runs.
Many sites, one conversation
Run the same action across every connected site and get one combined report, or start a background job that keeps going after the chat closes. Team access can be limited to the sites each person works on. On Pro and Agency.
Client A
shop.example.com
Cache flushed
Client B
blog.example.org
Cache flushed
Client C
news.example.net
Cache flushed
SEO
Titles, descriptions and focus keywords in Yoast SEO, Rank Math and All in One SEO.
Media
Find images without alt text and fix them; upload from a URL with SVG sanitizing.
Comments
List, approve, reply to, mark as spam and trash.
WooCommerce
Orders, customers and stock; coupons, prices and order status.
Page builders
Elementor, Bricks, Breakdance and Beaver Builder saved through their own code.
Site audits
Lighthouse scores, the page HTML visitors get, and before and after checks on updates.
Diagnostics
Site health, the PHP error log and a connection check that names the cause.
Receipts
If a response is lost, the site's receipt says whether the change ran.
Every tool, and when it asks first, is in the tool reference.
Under the hood
From your request to a signed change
Every change goes through the same four hands, and each one can say no.
- 01
Your AI assistant
Turns your request into tool calls over remote MCP, signed in with OAuth or an API key.
MCP · tools/call
- 02
WPTerminal gateway
Checks your role and plan, asks for approval when the action needs it, and signs the change.
Policy · approval · Ed25519
- 03
Cmdlane Agent Link
The plugin verifies the signature, refuses replays and hard-limited actions, and records the operation.
Verify · ledger · limits
- 04
Your WordPress site
The change runs through WordPress's own APIs, with the permissions of the person who connected the site.
Abilities API · REST
[1] tools/call update_seo_data · site_id=shop · from Claude
[2] policy needs approval · approved once by owner
[3] sign Ed25519 · bound to site, route, body · expires in 5 min
[4] verify signature ok · operation id new · 200 · logged
Tools
49
For content, SEO, media, comments, stores, builders and maintenance.
WP-CLI
97commands
Emulated inside WordPress. No shell, no WP-CLI install.
Proof window
5min
Each signed change expires within five minutes and runs once.
Audit history
12months
On Pro and Agency; 6 months on Free.
Security
Built so you can say yes to AI
Your permissions, nothing more
You approve the connection on WordPress’s own screen. The AI works with your WordPress role through an Application Password, never your login, and no user is created. Content only until an administrator turns on administrative tools.
You approve what matters
Publishing, deleting, plugins and settings wait for a person. Critical actions are approved in the dashboard only.
Every change is signed
Ed25519 signatures bound to your site, the exact request and a five-minute window. A leaked password alone changes nothing.
Hard limits
No new users, no password changes, no site URL changes and no raw SQL, whatever is approved.
A full audit trail
Who ran what, on which site, with what result. Kept for 12 months on paid plans and 6 months on Free.
Revoke in one click
Disconnect a site, an AI client or an API key and access ends at once.
Who it's for
One product, three ways in
Your site, managed by the assistant you already use
- Free for one site, no card
- About five minutes to the first answer
- Nothing risky happens without your say-so
One connection for every client site
- One MCP URL for all your sites
- Team roles with per-site access
- One audit log across clients
Standard protocols, no glue code
- Remote MCP with OAuth 2.1 and PKCE
- API keys for scripts, n8n and CI
- WordPress Abilities API underneath
Pricing
Priced by sites, not by actions
For freelancers
Pro
5–15sites
From $19 a month, or $149 a year
Unlimited changes (fair use) · up to 3 users
For agencies and teams
Agency
25–100sites
From $79 a month, or $619 a year
Unlimited changes · unlimited users
FAQ
Questions people ask first
Does it work on my hosting?
Yes, on any host where WordPress 6.9 or newer runs over HTTPS with Application Passwords switched on (the WordPress default). WP-CLI commands run inside WordPress, so shared hosting works, and subdirectory installs and plain permalinks need no changes.
Can the AI break my site?
The AI can only do what your WordPress role allows, and site administration stays off until an administrator turns it on. Risky changes wait for your approval, theme and plugin code is never edited, some actions are refused outright, and you can disconnect at any time.
What does WPTerminal store?
Your account, your organization's settings, the connection's Application Password (encrypted with AES-256-GCM) and the audit log (12 months on paid plans, 6 on Free). Site content passes through to answer requests. It is never sold or used to train AI models.
Which AI assistants work with it?
Claude, ChatGPT, Codex, Cursor, VS Code, Windsurf and any other client that supports remote MCP. Assistants without browser sign-in can use an API key.
What is free?
The Free plan covers 1 site with unlimited reads and 100 changes a day: content, SEO, media, WooCommerce, WP-CLI and plugin installs, with approvals and the audit log. Page builder changes, running a tool across many sites and team members come with Pro and Agency.
Is the plugin open source?
Yes. Cmdlane Agent Link is GPL-licensed, and you can read every line before you install it.
Ask your AI to do the WordPress work. Approve what matters.
Connect your first site free in about five minutes.
{
"mcpServers": {
"wpterminal": { "url": "https://wpterminal.com/api/mcp" }
}
}