Works with Claude, ChatGPT, Cursor and other MCP clients

Let AI work on your WordPress sites. You stay in control.

Connect the AI assistant you already use to your WordPress sites through one secure link. Reads run instantly, risky changes wait for your approval, and every action is signed and logged.

https://wpterminal.com/api/mcp

Free for one site · No card · GPL plugin

WPTerminal Site connected

Your AI assistant

MCP client

You asked

“Set the SEO title of the Pricing page to ‘Plans for agencies’.”

  1. 1. list_sites

    1 site found

  2. 2. get_seo_data

    Yoast SEO · page 42

  3. 3. update_seo_data

    approved in chat · done

WPTerminal gateway

policy · approval · signing

Policy: needs approval
Approved once, by you
Signed (Ed25519)
Sent to your site

Your WordPress site

Pricing · SEO title

Plans for agencies

Updated

Signature

Verified by the plugin

OK

Activity log

Who, what, which site

Logged

Runs as the AI agent account, never as you.

Universal client support

Plug in the AI you already use

One URL for every client. Assistants that support sign-in open a WPTerminal consent screen; the rest use an API key.

What it can do

Full WordPress control without leaving your AI chat

Over 40 tools for content, stores, builders and maintenance, built on the WordPress Abilities API. Each one shows whether it runs straight away or asks first.

replace_text

Content, with surgical edits

Draft, edit and publish posts and pages. Targeted find-and-replace changes exact text without rewriting whole pages, and all edits apply or none do.

replace_text · dry run200 OK

{ "post_id": 42, "field": "post_content",

"edits": [{ "old_string": "Free trial", "new_string": "Free plan" }] }

✓ 1 match · would change 1 field

no shell needed

About 100 WP-CLI commands

Emulated inside WordPress, so they work on any host. Reads run instantly; changes wait for approval.

wp_cli

$ wp plugin list --status=inactive

hello-dolly · akismet

$ wp plugin delete hello-dolly

⏸ waiting for approval of this exact command

roles · approvals

Rules you can read

Every tool says what happens before it runs.

get_postRUNS
update_postASKS FIRST
wp plugin installDASHBOARD
wp user create --role=administratorREFUSED
multi-site

Many sites, one conversation

Run the same action across every connected site and get one combined report. Team access can be limited to the sites each person works on.

Client A

shop.example.com

Cache flushed

Client B

blog.example.org

Cache flushed

Client C

news.example.net

Cache flushed

SEO

Titles, descriptions and focus keywords in Yoast SEO, Rank Math and All in One SEO.

Media

Find images without alt text and fix them; upload from a URL with SVG sanitizing.

Comments

List, approve, reply to, mark as spam and trash.

WooCommerce

Orders, customers and stock; coupons, prices and order status.

Page builders

Elementor, Bricks, Breakdance and Beaver Builder saved through their own code.

Theme draft

Edit a draft copy of your theme, preview privately, publish with a backup.

Diagnostics

Site health, the PHP error log and a connection check that names the cause.

Receipts

If a response is lost, the site's receipt says whether the change ran.

Every tool, and when it asks first, is in the tool reference.

Under the hood

From your request to a signed change

Every change goes through the same four hands, and each one can say no.

  1. 01

    Your AI assistant

    Turns your request into tool calls over remote MCP, signed in with OAuth or an API key.

    MCP · tools/call

  2. 02

    WPTerminal gateway

    Checks your role and plan, asks for approval when the action needs it, and signs the change.

    Policy · approval · Ed25519

  3. 03

    Cmdlane Agent Link

    The plugin verifies the signature, refuses replays and hard-limited actions, and records the operation.

    Verify · ledger · limits

  4. 04

    Your WordPress site

    The change runs through WordPress's own APIs as the separate AI agent account.

    Abilities API · REST

request trace (illustrative)all checks passed

[1] tools/call update_seo_data · site_id=shop · from Claude

[2] policy needs approval · approved once by owner

[3] sign Ed25519 · bound to site, route, body · expires in 5 min

[4] verify signature ok · operation id new · 200 · logged

Tools

40+

For content, SEO, media, comments, stores, builders and maintenance.

WP-CLI

~100commands

Emulated inside WordPress. No shell, no WP-CLI install.

Proof window

5min

Each signed change expires within five minutes and runs once.

Audit history

12months

On every plan, including Free.

Security

Built so you can say yes to AI

Handing an AI the keys to a live site is a real risk. WPTerminal is designed around it. Read the security model.

Its own account, never yours

A dedicated WordPress user with its own Application Password. Content only, until you turn on administrator tools.

You approve what matters

Publishing, deleting, plugins, settings and theme code wait for a person. Critical actions are approved in the dashboard only.

Every change is signed

Ed25519 signatures bound to your site, the exact request and a five-minute window. A leaked password alone changes nothing.

Hard limits

No new administrators, no password changes, no site URL changes and no SQL on user or settings tables, whatever is approved.

A full audit trail

Who ran what, on which site, with what result. Kept for 12 months on every plan.

Revoke in one click

Disconnect a site, an AI client or an API key and access ends at once.

Who it's for

One product, three ways in

Site owners

Your site, managed by the assistant you already use

  • Free for one site, no card
  • About five minutes to the first answer
  • Nothing risky happens without your say-so
Agencies

One connection for every client site

  • One MCP URL for all your sites
  • Team roles with per-site access
  • One audit log across clients
Developers

Standard protocols, no glue code

  • Remote MCP with OAuth 2.1 and PKCE
  • API keys for scripts, n8n and CI
  • WordPress Abilities API underneath

Pricing

Priced by sites, not by actions

Start free. Upgrade when you manage more sites or need the advanced tools. Compare plans.

Try WPTerminal on one site

Free

1site

100 write actions a month

For freelancers

Pro

5sites

Unlimited write actions

For agencies and teams

Agency

25sites

Unlimited write actions · team members

FAQ

Questions people ask first

Does it work on my hosting?

Yes, on any host where WordPress 6.9 or newer runs over HTTPS with Application Passwords switched on (the WordPress default). WP-CLI commands run inside WordPress, so shared hosting works, and subdirectory installs and plain permalinks need no changes.

Can the AI break my site?

By default the AI account can only work on content. Risky changes wait for your approval, theme code is edited in a draft copy, some actions are refused outright, and you can disconnect at any time.

What does WPTerminal store?

Your account, your organization's settings, the AI account's Application Password (encrypted with AES-256-GCM) and a 12-month audit log. Site content passes through to answer requests. It is never sold or used to train AI models.

Which AI assistants work with it?

Claude, ChatGPT, Codex, Cursor, VS Code, Windsurf and any other client that supports remote MCP. Assistants without browser sign-in can use an API key.

What is free?

The Free plan covers 1 site and 100 write actions a month, with every read tool, approvals and the audit log. WP-CLI, the theme draft, plugin installs, WooCommerce and page builder changes and multi-site actions come with Pro and Agency.

Is the plugin open source?

Yes. Cmdlane Agent Link is GPL-licensed, and you can read every line before you install it.

Ask your AI to do the WordPress work. Approve what matters.

Connect your first site free in about five minutes.

~/.cursor/mcp.jsonany MCP client
{
  "mcpServers": {
    "wpterminal": { "url": "https://wpterminal.com/api/mcp" }
  }
}
GPL plugin Signed changes 12-month audit log