WP Agent Bridge

Works withClaudeChatGPTDevinCursorWindsurfany MCP client

The safety net at every step.

One bridge, four guarantees — before, during and after every single write.

READONLY first

Every session starts read-only. Write access unlocks only inside an explicit APPLY window.

Snapshot before write

Before anything changes, core tables are captured. No snapshot, no write.

Rollback by operation_id

Undo with one call. Restore exactly the rows that changed — line by line, logged.

Loopback verification

After every write the site is checked. Something breaks? The operation rolls itself back.

See an operation, step by step.

One call, six checkpoints. This is the real sequence — replay it below.

operation walkthroughSIMULATION

›wpab/update-post{ post_id: 33, title: “New hero”, dry_run: true }

✓dry-run ready — 0 writesread-only path

The agent asks. Nothing happens on your site yet.

1 change proposed — preview only

−“Welcome to my site.”

+“Talk to your WordPress.”

confirmation token issuedtok_9f3a…expires in 10 min

›wpab/apply{ token: “tok_9f3a…”, dry_run: false }

✓token accepted — single-useconfirmed by you

No token, no write. Ever.

✓applied — op_9f3c7…

snapshot #412 captured firstcore tables + WooCommerce

journal entry written#1287

›loopback checkGET / → 200 · 142 ms

✓site healthy — no regression

If this check failed, the write would roll itself back.

›wpab/rollback-operation{ operation_id: “op_9f3c7…” }

✓restored — 1 row · 0 errorsas if it never happened

One call. Any time. From any client.

6 steps — select one · no autoplay, you’re in control

Prefer watching? The 68-second video shows the same flow — an AI agent proposes, applies, verifies and rolls back a WordPress write through the MCP protocol.

wp-agent-bridge · demo video · 1:08VIDEO

70 abilities exposed

Scoped snapshots — core tables + WooCommerce

15–240 min APPLY window — your call

1 call to roll back any write

Live in two minutes.

No builder, no paid theme, no lock-in. Your WordPress stays yours.

1. 1 Install & activate Upload the plugin from wp-admin and activate it. No developer required.
2. 2 Generate a token One button. A bearer token scoped to this site — revocable any time.
3. 3 Point your agent Paste one config block into any MCP client. It starts read-only.

Read the full quick start →

claude_desktop_config.json

{ “mcpServers”: { “wp-agent-bridge”: { “url”: “https://yoursite.com/wp-json/wp-agent-bridge/mcp”, “headers”: { “Authorization”: “Bearer wpab_••••••••” } } } }

starts READONLYno FTP · no SSH2-min install

Honest pricing. No lock-in.

One year of updates and support. GPL plugin. Your data stays on your server.

Solo

€49 /year

for 1 site

• All 70 abilities
• Snapshots & 1-call rollback
• 12 months of updates & support

Most popular

Studio

€149 /year

for 5 sites

• All 70 abilities
• Snapshots & 1-call rollback
• 12 months of updates & support

Agency

€399 /year

for up to 200 sites

• All 70 abilities
• Snapshots & 1-call rollback
• 12 months of updates & support

VAT not applicable — art. 293 B CGI · Prices in EUR · Compare plans in detail →

The questions everyone asks.

Short answers here — the full list lives on the FAQ page.

Is it a backup plugin?

No — it’s a safety net for agent writes. Snapshots exist so every operation can be undone, not to restore a whole site.

What if I uninstall it?

The bridge goes away cleanly. Your content, your database, your site — untouched.

Can it write to anything?

No. A defined scope of core tables, snapshotted first — and a scope is a promise, not an accident.

Do I need a developer?

No. Upload, activate, copy one config block. That’s the whole setup.

What is a WordPress MCP server?

A plugin that exposes WordPress through the Model Context Protocol, so AI agents can read and write the site safely. Read the full guide.

Which AI agents work with it?

Any MCP-compatible client — Claude, ChatGPT, Cursor, Devin, Windsurf. Connect via one endpoint and stay read-only until you approve writes.

READONLY by default · GPL · your data stays yours

Give your WordPress superpowers. Safely.

No FTP. No SSH. No lock-in. Just an agent that asks first — and can always undo.