AlphaBridge MCP
Security-hardened native MCP server for WordPress: 126 structured tools plus hardened FTP/SFTP site deploy — build locally with Claude, push to your own hosting.
Documentation
Works with Claude.ai · Claude Desktop · Cursor
Run WordPress by conversation.
Everything that made websites slow and expensive — done in conversation. Build with Claude, publish to your own hosting in one step (Site Deploy, Agency plan), hand the site over — and its owner keeps running it at pro level. Permissions, previews and a full audit log included.
39 tools free forever · no account needed · no middleware to host
Why websites just stopped being slow and expensive →
$0 to start — 39 tools free forever
1 sentence puts a site live — Agency plan
Handover-ready the owner runs it at pro level
Every action capability-checked & logged
In practice
Your site does what you say.
A real working session: deploy the site you built locally, then keep improving it — sentence by sentence.
Claude — connected to your-site.ch
Here's the site we built — put it live on my hosting.
wp_deploy_push_zip · agencyDeployed 214 files to your server. Your site is live. ✓
Put our summer sale on the homepage and publish it.
wp_update_postDone — the banner is live on your homepage. ✓
Do old posts still link to the old shop domain?
wp_search_replace · dry-runYes — 14 posts, 23 links. I previewed the fix. Replace them all?
Yes, go ahead.
wp_search_replaceAll 23 links updated. ✓
Features
One plugin. Full control over your whole site.
126 tools under the hood — every single one under your control, 39 of them free. See the full tool reference →
01
Content while you talk
Create, edit and publish posts, pages and media by chatting. Typos, banners, new drafts — done in seconds.
02
Full site controlPRO
Theme files, database, users, menus, plugins and cron — everything you'd open wp-admin for, without opening wp-admin.
03
Clean up at scalePRO
Site-wide search & replace with a safe preview first, bulk status changes, one-click revision restore.
04
Safe by default
Powerful tools stay off until you enable them. Tokens, WordPress permissions and a full audit log — nothing happens that you didn't permit.
05
Nothing extra to host
100% native PHP inside WordPress. No bridge server, no Node.js, no extra bill — works on ordinary shared hosting.
06
Built-in first aidPRO
Something's broken? Claude reads the error log, flushes caches, checks cron and fixes permalinks — before you even start to panic.
07
Deploy whole sitesAGENCY
Build locally with Claude, then push the entire site to your server over FTP/SFTP in one step. Chunked uploads beat every size limit.
08
Guidance for the model
Ships with built-in instructions and playbooks, so Claude works your site efficiently — fewer wrong turns, fewer tokens.
09
Multilingual & WooCommerce
26 admin languages, tools for products, orders, stock and coupons (Pro) — ready for real shops and real teams.
Comparison
The most capable MCP plugin for WordPress.
Others build standalone apps. Others manage your posts. AlphaBridge builds, publishes and runs your CMS site — on your server.
| Capability | AlphaBridge | AI builders (Lovable, Bolt, v0) | Free / OSS | Other paid |
|---|---|---|---|---|
| Deploy straight into your CMS, by conversation | ✓ | ✗ builds standalone apps | — | — |
| Structured tools | 126 | — | varies | ~50 |
| Native — no bridge server or Node.js | ✓ | — | some | some |
| Destructive actions off by default | ✓ | — | rare | some |
| Per-tool WordPress permission checks | ✓ | — | rare | some |
| Full audit log of every action | ✓ | — | — | rare |
| Full-site deploy over FTP/SFTP | ✓ | ✗ | — | — |
| Dry-run preview before mass changes | ✓ | — | — | rare |
| Rate limiting + SQL & path guards | ✓ | — | rare | some |
| Atomic deploy with automatic rollback | ✓ | — | — | — |
| Developed in Switzerland · privacy-first | ✓ | — | — | — |
Comparison of commonly documented MCP-for-WordPress plugins, mid-2026. Capabilities differ by product and version — check before you buy. Claims about AlphaBridge reflect the shipped plugin.
How it works
Your website, live in four steps.
From idea to a live, self-managed website — without hiring an agency.
Read the step-by-step walkthrough →
Build your site with Claude
Design and build locally in conversation — pages, theme, images. No code knowledge needed.
Get simple hosting
Any ordinary WordPress hosting works. Install WordPress, upload AlphaBridge MCP, activate.
Connect Claude
Create a token in the settings and add your endpoint to Claude as a connector: /wp-json/alphabridge/v1/mcp
Publish & run by chat
Claude pushes your whole site to the server (Agency) and keeps managing content, theme and updates — you just say what you want.
Security
Powerful — and accountable.
AlphaBridge is built on one principle: the assistant may only do what you would let a colleague do — and everything leaves a trace.
- Real user mapping. Every token belongs to a WordPress user; every tool checks that user's capabilities.
- Off by default. Powerful ("mighty") tool groups are disabled until the admin switches them on.
- Full audit log. Every tool call is recorded — who, what, when, result.
- Guards everywhere. Rate limiting, SQL write protection, path-traversal guards, SSRF-safe downloads.
- Deploy only to your own server. Site Deploy verifies with a probe file that the FTP/SFTP target really is the server your site runs on.
- Encrypted credentials. Deploy credentials are stored encrypted and never exposed through the MCP interface.
Read the full security story — review, allowlists, tests →
Setup
Connected in minutes.
Your endpoint: one URL, one token. Full documentation ships with the plugin — or browse all 126 tools online →
Claude.ai (web & app)Easiest
Settings → Connectors → Add custom connector, then paste your connector URL from the plugin settings:
https://your-site.tld/wp-json/alphabridge/v1/mcp/abmcp\_YOUR\_TOKEN
Claude Desktop · Cursor · Claude Code
The token travels in a header. Add this to your client's MCP configuration:
{ "mcpServers": { "alphabridge": {
"command": "npx",
"args": ["mcp-remote", "https://your-site.tld/wp-json/alphabridge/v1/mcp",
"--header", "Authorization:${AUTH}"],
"env": { "AUTH": "Bearer abmcp_YOUR_TOKEN" }
}}}
Pricing
Start free. Upgrade when you need more.
The free core is fully usable — no trial clock, no locked buttons. Paid plans add power for professionals and agencies.
Free
$0 · forever
1 site · no account needed
- 39 tools — fully usable, forever
- Content, media, comments, taxonomies, widgets, search
- Safe defaults & audit log
- Unlimited connections, scopes & audit log
Install directly from your WordPress admin
Most popular
Pro
$9 /month $49 /year
1 site · cancel anytime1 site · like $4 a month
- 120 tools — everything except Site Deploy
- Theme files, database, users, menus
- WooCommerce, SEO, install & update
- Chunked uploads for large files
- Priority support
Cancel anytime — or try Pro free for 7 days, no credit card
Agency
$49 /month $299 /year
Up to 10 sites · cancel anytimeUp to 10 sites · like $25 a month
- All 126 tools
- Site Deploy: push whole sites via FTP/SFTP
- Up to 10 sites & connections
- Early access to new tools
Pays for itself with one client task
Prices in USD, excl. VAT where applicable. Payment, invoicing and EU/Swiss VAT are handled by our merchant of record, Freemius. The paid add-on installs alongside the free plugin from WordPress.org.
FAQ
Questions, answered plainly.
What is MCP — and why does it matter?
The Model Context Protocol is the open standard that lets AI assistants like Claude use external systems through well-defined tools. AlphaBridge implements it natively inside WordPress — so Claude doesn't scrape or guess, it calls precise, permission-checked functions on your site.
Is it safe to let an AI work on my site?
You stay in charge. Every token maps to a WordPress user with its real permissions, powerful tool groups are off until you enable them, mass changes support dry-run previews, and every single call lands in the audit log. You can revoke a token at any moment.
What exactly is free — and what do the paid plans add?
The free plugin ships 39 fully usable tools: content, media, comments, taxonomies, widgets, search and site info. Pro (120 tools) adds theme files, database, users, menus, WooCommerce, SEO and maintenance. Agency adds Site Deploy — pushing entire sites to your server via FTP/SFTP — plus up to 10 sites.
Does it run on ordinary shared hosting?
Yes. AlphaBridge is pure PHP (8.0+) inside WordPress and speaks MCP over the REST API. There is no Node.js service, no bridge and nothing extra to host or pay for.
How is this different from bridge or middleware solutions?
Bridges put an extra service between Claude and your site — one more thing to install, secure, update and pay for. AlphaBridge implements MCP directly in the plugin: fewer moving parts, lower latency, and your data flows only between your site and your AI client.
Can I cancel? What about refunds?
Paid plans can be cancelled anytime; your site then simply falls back to the free core — nothing breaks. Payments and refunds are handled by Freemius as merchant of record under their buyer-friendly policy.
The family
One bridge. More CMS on the way.
The same idea — AI access with hard security — is coming to more content management systems. Same principles everywhere: encrypted credentials, verified deploys, allowlists, audit log.
WordPress Available now
Craft CMS Next up
Kirby Next up
Contao Planned
TYPO3 Planned
Joomla Planned
Magnolia Enterprise — on request
Working with one of these systems and want early access? Tell us which one →