Free, open source, and GPLv2. Pair it with the official MCP Adapter and your WordPress site gets twelve abilities an AI client can call: raw SQL, files, Media Library uploads, serialization-safe search and replace, WP CLI, and an audit log of every call.
The official MCP Adapter from WordPress wires an MCP endpoint onto your site and makes it easy for plugins to publish abilities. On its own it does not ship any abilities, so an AI client connects and finds nothing to do. QuickWP MCP is the second half of that story: twelve abilities that cover the moving parts an agent needs on a WordPress site.
Everything is behind a WordPress capability called quickwp_access, which only administrators get on activation. You can grant it to any role, and a quickwp_user_can filter lets you refuse specific abilities to specific users without touching the plugin's code.
In wp-admin, go to Plugins > Add New. Search for MCP Adapter and install the one by the WordPress AI team. Activate it. Search again for QuickWP MCP and install this plugin. Activate it. Both are on wordpress.org and both are free.
If your site is on a host that blocks plugin installs from the admin, the ZIP files are on wordpress.org too. Upload them with your normal method and activate.
Create a new WordPress user whose only job is to be the AI, give it the role you want (Administrator for a trusted agent, a custom role for a limited one), and sign in as that user. Go to Users > Profile, scroll to Application Passwords, give the password a name such as "Claude", and click Add New Application Password. WordPress shows the password once; copy it before leaving the page.
If the Application Passwords section is missing, a security plugin such as Wordfence or Solid Security has turned it off. Flip it back on, or use the plugin's own token flow if it has one.
Open the WordPress AI connection generator. Paste the site URL, the username and the application password, and copy the config block for whichever AI tool you use. The generator builds everything in your browser; nothing you type leaves the page.
Paste the config into your MCP client:
claude mcp add command from the generator in any terminal.claude_desktop_config.json (Settings > Developer > Edit Config), add the block under mcpServers, and restart the app.To confirm the connection, ask your AI "what MCP tools do you have?". It should list a dozen with names starting with wordpress-.
A fresh connection is the point where most people stare at the chat and go "now what?". The next section has four or five prompts you can paste straight in. Start with the audit one; it only reads.
Each one works on a fresh install. Paste it into your AI as the first message after it says it is connected. Edit the placeholders in angle brackets before you send a prompt that uses them.
Site audit (safe, no changes)
You are connected to my WordPress site through the QuickWP MCP plugin. Before you change anything, give me a short audit: how many posts I have, how many are drafts, how many are published, which plugins are active and their versions, what my current theme is, and the first ten entries in the quickwp_log table. Do not write anything. Report back in a numbered list.Draft cleanup (ask before deleting)
Through the QuickWP MCP plugin, find every post with status "draft" whose last modified date is more than ninety days ago. List them with their id, title, author display name and last modified date. Ask me which ones to delete before deleting anything.Write a blog post as a draft
Using the QuickWP MCP plugin, write a 600 word blog post titled "Five questions renters ask on every tour" and save it as a draft with my user as the author. Use proper WordPress block editor markup for the paragraphs and headings. When it is saved, give me the admin edit URL and do not publish.Domain move with a dry run
I am moving this site from old-domain.ca to new-domain.ca. Using the QuickWP MCP plugin, run a DRY RUN of search-replace from old-domain.ca to new-domain.ca across wp_posts, wp_postmeta, wp_options and wp_usermeta. Report how many rows and how many string hits would change in each table. Wait for me to say "go" before writing anything, and when I do, run it for real and give me the before and after counts.Add an image to a post
Through the QuickWP MCP plugin, upload the image at <PASTE PUBLIC IMAGE URL HERE> to the Media Library with the alt text "<PASTE ALT TEXT>", then attach it as the featured image on post id <PASTE POST ID>. Give me the attachment id, the media URL and confirm the featured image is set.QuickWP MCP gives the AI a lot of rope. That is the whole point; a plugin that could not run wp cache flush or edit a theme file would not be worth installing. The usual guardrails still apply.
quickwp_log table is the record of truth. The audit starter prompt asks the AI to show you the last ten rows, which is a good habit after any destructive change.The MCP Adapter from WordPress gives any plugin a way to expose "abilities" as MCP tools, but it does not ship with abilities of its own. On a fresh install an AI client can connect to the endpoint and sees no tools. QuickWP MCP registers twelve abilities that cover the things an agent needs on a real site: database access, files, search-replace, WP CLI, media library, and a log of what it did. Without a plugin like this one the adapter is useful groundwork and nothing else.
Yes. GPLv2 or later, free on wordpress.org, no account, no license key, no call home. QuickCasa is a separate product for property managers; the plugin stands on its own and will keep working whether or not you are a QuickCasa customer.
WordPress 6.9 or newer, because QuickWP MCP builds on the Abilities API that was added in 6.9. PHP 7.4 or newer. HTTPS on the live site, for application passwords to work. The MCP Adapter plugin, installed and activated. A user with the quickwp_access capability, which is granted to administrators on activation and can be given to any role you want.
Use the free <a href="/tools/wordpress-ai-connection-generator">WordPress AI connection generator</a> on this site. Paste the site URL, the username and the application password; it builds the HTTP Basic authorization header and the config block for Claude Code, Claude Desktop, Cursor and curl, all in your browser. Nothing you type leaves the page.
Yes, in two ways. First, every ability checks a capability called quickwp_access, which you can hand out to a role of your choice; a user without it gets refused. Second, the plugin exposes a filter called quickwp_user_can that fires on every call, so you can write a drop-in that forbids destructive abilities like sql-write or file-delete for anyone but a named admin. Both patterns are documented in the readme.
The design has three guards. Writes are opt-in: sql-write and search-replace both default to dry-run and the AI has to pass an explicit flag to apply changes. Reads and writes are jailed: file abilities only touch paths under the WordPress install root. Every call is logged: a database table records the user, the ability, the arguments and the result, so you can read back what happened. None of these replace common sense. If you ask an AI to delete every post and it does, that is on the prompt, not the plugin.
WPVibe is a hosted product with its own account layer, usage limits and a per-site plan. QuickWP MCP is a plain WordPress plugin: install it, activate it, point your AI at the site, done. It gives the AI lower-level access than most AI plugins (raw SQL, raw files, WP CLI) and is honest about that, which is why the readme spends a lot of time on how to restrict it. Pick whichever fits how you work.
The plugin creates a table called quickwp_log on activation. Every ability call writes a row with the user id, the ability name, the arguments the AI sent, the status and a short summary of the result. The starter prompts above include a line that asks the AI to read the first ten rows, which is a good smoke test right after you connect.
See what empty units cost in lost rent, costs while empty and turnover, per day and in total.
Open the calculatorWork out a partial month's rent for a move-in or move-out, and compare the three common methods side by side.
Open the calculatorFind the most you can raise the rent in your province this year, and the earliest date the increase can start.
Open the calculatorEvery calculator we have built for property managers and leasing teams, in one place.
See all toolsQuickCasa plugs into your website to answer rental inquiries by web chat, SMS, email and phone around the clock, qualify every renter, and let them book a tour from your real availability.