简介

MCP Tools for WordPress & Page Builders

Features

• A focused MCP toolset covering the full Elementor page-building workflow — and, as of v3.0.0, growing beyond Elementor into general WordPress management across multiple domains: content, settings, plugins & themes, media library, users, performance, filesystem, and database. As of v3.0.0 the 62 per-widget tools were folded into a catalog-backed model, so the active surface is much smaller — every widget is still reachable via discover → inspect → act. Counts scale with your environment (registered counts, live-verified on Elementor 4.1.4):
• 106 tools — free Elementor only (82 active by default)
• 120 tools — free Elementor + Elementor 4.0 atomic elements (96 active)
• 116 tools — with Elementor Pro (77 active)
• 130 tools — with Elementor Pro + Elementor 4.0 (91 active; + WooCommerce adds no new tools)
• 39 of these ship disabled-by-default (SEO & Accessibility, Widget Builder, PHP Snippets, the 9 Plugins & Themes write tools, delete-media, the 2 Users write tools, the 3 Filesystem write tools, and the 3 Database write tools), so the typical active surface is smaller until you opt in on the Tools tab
• WordPress Content (beyond Elementor) — Create and manage posts, pages, and any custom post type — content, status, taxonomy terms, custom fields, and featured images — via MCP, without touching Elementor data. Built on WP core; every post carries an is_elementor flag that steers agents to the Elementor tools for builder pages
• WordPress Settings (beyond Elementor, domain 2) — Read and batch-update core WordPress settings (general/reading/writing/discussion/media/permalinks) over MCP. Curated allowlist only — no arbitrary option access; admin_email is read-only; permalink changes auto-flush rewrite rules. manage_options. (v3.0.0)
• Plugins & Themes (beyond Elementor, domain 3) — Discover, install (wordpress.org only), update, activate/deactivate, and delete plugins and themes over MCP. Strong guardrails (EMCP Tools + Elementor protected; per-op capability gating; direct-filesystem-only); the 9 mutation tools ship disabled-by-default. manage_options-class capabilities. (v3.0.0)
• Media Library (beyond Elementor, domain 4) — Fetch full attachment detail (get-media: every registered size, dimensions, metadata, alt/caption/description), edit metadata (update-media: alt text, title, caption, description — a one-call accessibility/SEO fix), and delete attachments (delete-media: destructive and effectively permanent; disabled-by-default and requires confirm:true). URL uploads continue via sideload-image. (v3.0.0)
• Users (beyond Elementor, domain 5) — List and read WordPress users, and safely create/edit non-admin profiles over MCP. Hard guardrails: no delete-user and no role-change tool; create-user assigns only non-admin roles and auto-generates a strong password (emailed to the new user — never returned); update-user edits profile fields only and refuses any user with admin-level capabilities (administrators are off-limits). list-users/get-user are enabled by default; create-user/update-user are disabled-by-default. (v3.0.0)
• Performance & Security (beyond Elementor, domain 6) — Two read-only diagnostics. analyze-performance audits server config, WordPress internals (database size, autoloaded options, post revisions, cron backlog, persistent object cache, OPcache, plugin count), and a target page (defaults to the frontpage; optional url/post_id) for performance bottlenecks. scan-security — the security counterpart — scans across malware heuristics (eval/base64 obfuscation, request-driven execution, command execution, webshells, encoded blobs, executable PHP under uploads), WordPress core-file integrity (against the official wordpress.org checksums), hardening (file editing, debug output, admin username, XML-RPC, version disclosure, HTTPS, security headers), and outdated/abandoned software. Both return a scored report (0-100 + A–F grade) with severity-tagged findings and ranked recommendations; the malware walk is bounded and never returns full file contents (path:line + snippet only). Read-only, self-contained (no external API beyond optional, graceful wordpress.org calls), enabled by default. (v3.0.0)
• Filesystem (beyond Elementor) — Read and scan any file inside the WordPress install (read-file, list-directory, search-files — enabled by default). Modify and delete files (write-file, edit-file, delete-file) are disabled-by-default: every path is confined to ABSPATH (no traversal/symlink escape), writes auto-back up the original, wp-config.php/.htaccess are refused, the edit_files capability is enforced (honoring DISALLOW_FILE_EDIT), and all writes are audit-logged. delete-file requires confirm:true. manage_options. (v3.0.0)
• Database (beyond Elementor) — Inspect the database with flexible read-only SQL (list-tables, describe-table, query — SELECT/SHOW/DESCRIBE/EXPLAIN only; writes, DDL, stacked statements, MySQL /*! executable comments, and file-access SQL are rejected; results capped; enabled by default). Structured parameterized writes (insert-row, update-rows, delete-rows) are disabled-by-default: uses $wpdb throughout (no raw write-SQL/DDL), forces a non-empty WHERE on update/delete, refuses wp_users/wp_usermeta, captures a before-image snapshot to an audit log, and delete-rows requires confirm:true. manage_options. (v3.0.0)
• Query & Discovery — List widgets, inspect page structures, read element settings, browse templates, view global design tokens
• Page Management — Create pages, update settings, clear content, import/export templates
• Layout Tools — Add flexbox containers, move/remove/duplicate elements, update containers, find elements, batch update, reorder children, get container schema
• Widget Tools — A catalog-backed model: list-widgets (filter by tier/category/search) → get-widget-schema (curated params, batch, or full raw schema) → add-free-widget / add-pro-widget (with Pro) → update-widget. The 62 widgets' curated params live in a built-in catalog (27 free / 30 Pro / 5 WooCommerce), so every widget and parameter stays reachable while the per-turn tool-list cost drops ~10×
• Pro Widget Support — Conditional tools for nav menu, loop grid, loop carousel, media carousel, nested tabs, nested accordion, portfolio, author box, login, code highlight, reviews, off-canvas, progress tracker, search, and more (only register when Elementor Pro is active)
• Atomic Elements (Elementor 4.0+) — 13 dedicated tools for Elementor's atomic system: flexbox, div-block, heading, paragraph, button, image, svg, youtube, video, divider, plus universal add-atomic-widget / update-atomic-widget and detect-elementor-version
• Theme Builder — Create theme templates (header/footer/single/archive), set display conditions (Pro)
• Dynamic Tags — List all available dynamic tags, bind dynamic data to element settings (Pro)
• Popup Builder — Create popup templates, configure triggers/conditions/timing (Pro)
• Template Tools — Save pages or elements as reusable templates, apply templates to pages
• Global Settings — Update site-wide color palettes and typography presets
• Brand Kits — One-click coordinated color + typography kits. Apply a curated brand kit and the whole site re-skins (system tokens + Theme Style defaults); back up and restore any time. 10 kits are free to apply; the full 50-kit library and the apply-brand-kit MCP tool are Pro
• AI Widget Builder (Pro) — Let an AI agent design custom Elementor widgets from a structured spec — no hand-written PHP. The plugin compiles the spec + an HTML template into a sandboxed Widget_Base class (35 control types, optional per-widget CSS/JS) that appears under a "Custom (EMCP)" category in the editor; a runtime safety net keeps a bad widget from breaking the editor
• Composite Tools — Build a complete page from a declarative JSON structure in a single call
• Stock Images — Search Openverse for Creative Commons images, sideload into Media Library, add to pages
• SVG Icons — Upload SVG icons from URL or raw markup for use with Elementor icon widgets
• Custom Code — Add custom CSS (element/page level), inject JavaScript, create site-wide code snippets for head/body injection
• Low-tools Mode — One-click toggle that filters the active tool list to a curated essentials set, for MCP clients with strict tool caps (Antigravity, Gemini API, etc.). After the v3.0.0 widget consolidation the active count already fits most caps, so this is rarely needed now
• Admin Dashboard — Dedicated top-level EMCP Tools menu with Tools / Connection / Prompts / Templates / Brand Kits / Skills / Widget Builder / Changelog tabs. Toggle individual tools on/off, view connection configs for all supported MCP clients, and reach the Get Support portal from any tab