Works with Claude, ChatGPT, Cursor and other MCP clients
Connect the AI assistant you already use to your WordPress sites through one secure link. Reads run instantly, risky changes wait for your approval, and every action is signed and logged.
Free for one site · No card · GPL plugin
Your AI assistant
MCP clientYou asked
“Set the SEO title of the Pricing page to ‘Plans for agencies’.”
1. list_sites
1 site found
2. get_seo_data
Yoast SEO · page 42
3. update_seo_data
approved in chat · done
WPTerminal gateway
policy · approval · signing
Your WordPress site
Pricing · SEO title
Plans for agencies
Signature
Verified by the plugin
Activity log
Who, what, which site
Runs as the AI agent account, never as you.
Universal client support
What it can do
Over 40 tools for content, stores, builders and maintenance, built on the WordPress Abilities API. Each one shows whether it runs straight away or asks first.
Draft, edit and publish posts and pages. Targeted find-and-replace changes exact text without rewriting whole pages, and all edits apply or none do.
{ "post_id": 42, "field": "post_content",
"edits": [{ "old_string": "Free trial", "new_string": "Free plan" }] }
✓ 1 match · would change 1 field
Emulated inside WordPress, so they work on any host. Reads run instantly; changes wait for approval.
$ wp plugin list --status=inactive
hello-dolly · akismet
$ wp plugin delete hello-dolly
⏸ waiting for approval of this exact command
Every tool says what happens before it runs.
Run the same action across every connected site and get one combined report. Team access can be limited to the sites each person works on.
Client A
shop.example.com
Cache flushed
Client B
blog.example.org
Cache flushed
Client C
news.example.net
Cache flushed
Titles, descriptions and focus keywords in Yoast SEO, Rank Math and All in One SEO.
Find images without alt text and fix them; upload from a URL with SVG sanitizing.
List, approve, reply to, mark as spam and trash.
Orders, customers and stock; coupons, prices and order status.
Elementor, Bricks, Breakdance and Beaver Builder saved through their own code.
Lighthouse scores, the page HTML visitors get, and before and after checks on updates.
Site health, the PHP error log and a connection check that names the cause.
If a response is lost, the site's receipt says whether the change ran.
Every tool, and when it asks first, is in the tool reference.
Under the hood
Every change goes through the same four hands, and each one can say no.
Turns your request into tool calls over remote MCP, signed in with OAuth or an API key.
MCP · tools/call
Checks your role and plan, asks for approval when the action needs it, and signs the change.
Policy · approval · Ed25519
The plugin verifies the signature, refuses replays and hard-limited actions, and records the operation.
Verify · ledger · limits
The change runs through WordPress's own APIs as the separate AI agent account.
Abilities API · REST
[1] tools/call update_seo_data · site_id=shop · from Claude
[2] policy needs approval · approved once by owner
[3] sign Ed25519 · bound to site, route, body · expires in 5 min
[4] verify signature ok · operation id new · 200 · logged
Tools
40+
For content, SEO, media, comments, stores, builders and maintenance.
WP-CLI
~100commands
Emulated inside WordPress. No shell, no WP-CLI install.
Proof window
5min
Each signed change expires within five minutes and runs once.
Audit history
12months
On every plan, including Free.
Security
A dedicated WordPress user with its own Application Password. Content only, until you turn on administrator tools.
Publishing, deleting, plugins and settings wait for a person. Critical actions are approved in the dashboard only.
Ed25519 signatures bound to your site, the exact request and a five-minute window. A leaked password alone changes nothing.
No new administrators, no password changes, no site URL changes and no raw SQL, whatever is approved.
Who ran what, on which site, with what result. Kept for 12 months on every plan.
Disconnect a site, an AI client or an API key and access ends at once.
Who it's for
Pricing
FAQ
Yes, on any host where WordPress 6.9 or newer runs over HTTPS with Application Passwords switched on (the WordPress default). WP-CLI commands run inside WordPress, so shared hosting works, and subdirectory installs and plain permalinks need no changes.
By default the AI account can only work on content. Risky changes wait for your approval, theme and plugin files are never edited, some actions are refused outright, and you can disconnect at any time.
Your account, your organization's settings, the AI account's Application Password (encrypted with AES-256-GCM) and a 12-month audit log. Site content passes through to answer requests. It is never sold or used to train AI models.
Claude, ChatGPT, Codex, Cursor, VS Code, Windsurf and any other client that supports remote MCP. Assistants without browser sign-in can use an API key.
The Free plan covers 1 site and 100 write actions a month, with every read tool, approvals and the audit log. WP-CLI changes, plugin installs, WooCommerce and page builder changes and multi-site actions come with Pro and Agency.
Yes. Cmdlane Agent Link is GPL-licensed, and you can read every line before you install it.
Connect your first site free in about five minutes.
{
"mcpServers": {
"wpterminal": { "url": "https://wpterminal.com/api/mcp" }
}
}