Authentication
AutoWP MCP uses WordPress application passwords for secure authentication. This ensures that all actions performed by the server respect your WordPress user permissions and do not require sharing your main account password.
How Authentication Works
- You generate an application password in your WordPress user profile.
- The MCP server uses this password to authenticate API requests on your behalf.
- All actions are performed with your user’s permissions and are logged by WordPress.
Generating an Application Password
- Log in to your WordPress site as the user you want to connect.
- Go to Users > Profile (or Your Profile).
- Scroll down to the Application Passwords section.
- Enter a name (e.g., "AutoWP MCP") and click Add New Application Password.
- Copy the generated password and keep it safe (you won’t see it again).
Connecting MCP to WordPress
When prompted by Claude or your LLM client, provide:
- Your WordPress site URL
- Your WordPress username
- The application password you generated
Tip: Never share your main WordPress password. Use application passwords for each integration.
Testing the Connection
Use the test-wp-connection
tool to verify that your credentials and site URL are correct.
Example:
json
{
"tool": "test-wp-connection",
"params": {
"site_url": "https://your-site.com",
"username": "yourusername",
"application_password": "xxxx xxxx xxxx xxxx"
}
}
For more on setup, see Installation & Setup.