Paste your WordPress site URL, a username and an application password. Get the MCP client config you need to point Claude, Cursor or any MCP tool at your site. Everything is computed in your browser.
Authorization header
Basic YWktYWdlbnQ6Y1ZSSmpiTDhyUERHMmhnc3F4dDRrQXc2
MCP endpoint URL
https://example.com/wp-json/mcp/mcp-adapter-default-serverWhere the MCP Adapter plugin exposes your site.
Claude Code (one command)
claude mcp add wordpress --transport http --url https://example.com/wp-json/mcp/mcp-adapter-default-server --header "Authorization: Basic YWktYWdlbnQ6Y1ZSSmpiTDhyUERHMmhnc3F4dDRrQXc2"Paste into any terminal with the claude CLI installed.
Claude Desktop (claude_desktop_config.json)
{
"mcpServers": {
"wordpress": {
"transport": "http",
"url": "https://example.com/wp-json/mcp/mcp-adapter-default-server",
"headers": {
"Authorization": "Basic YWktYWdlbnQ6Y1ZSSmpiTDhyUERHMmhnc3F4dDRrQXc2"
}
}
}
}Add this under mcpServers in your Claude Desktop config, then restart the app.
Cursor and other MCP clients
{
"mcpServers": {
"wordpress": {
"url": "https://example.com/wp-json/mcp/mcp-adapter-default-server",
"headers": {
"Authorization": "Basic YWktYWdlbnQ6Y1ZSSmpiTDhyUERHMmhnc3F4dDRrQXc2"
}
}
}
}The same shape most MCP clients accept.
Smoke test with curl
curl -X POST https://example.com/wp-json/mcp/mcp-adapter-default-server -H "Authorization: Basic YWktYWdlbnQ6Y1ZSSmpiTDhyUERHMmhnc3F4dDRrQXc2" -H "Content-Type: application/json" -H "MCP-Protocol-Version: 2026-07-28" -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'Should return a JSON blob listing every registered MCP tool.
WordPress lets an app sign in with an application password over HTTP Basic auth. The password is sent on every request in an Authorization header whose value is the word Basic followed by a space and the base64 encoding of username:password. This page builds that header from the three fields you fill in, together with the MCP endpoint URL and a ready-to-paste config block for the common MCP clients.
Everything is computed in your browser by one JavaScript function. The function strips the spaces WordPress adds to the application password for readability, joins the username and password with a colon, and base64-encodes the result with the standard alphabet. No request is sent and nothing is stored, so the values you paste never reach QuickCasa or anyone else.
quickwp_access capability (administrators get it on activation) and an application password generated for that user.Say the site is at https://example.com, the dedicated agent user is ai-agent, and WordPress gave you the application password cVRJ jbL8 rPDG 2hgs qxt4 kAw6. The spaces are optional, so the first step strips them. Joining the username and the stripped password with a colon gives ai-agent:cVRJjbL8rPDG2hgsqxt4kAw6. The base64 encoding of that string is YWktYWdlbnQ6Y1ZSSmpiTDhyUERHMmhnc3F4dDRrQXc2, and the full header is Basic YWktYWdlbnQ6Y1ZSSmpiTDhyUERHMmhnc3F4dDRrQXc2. The MCP endpoint is the site URL with /wp-json/mcp/mcp-adapter-default-server appended, which gives https://example.com/wp-json/mcp/mcp-adapter-default-server.
You now have everything an MCP client needs: a URL and a header. The config blocks above wrap those two values in whatever shape your client expects.
Open Users > Profile in wp-admin, scroll to Application Passwords, click Revoke on the one you want to replace, and generate a new one. Rerun this tool with the new password, repaste the config block, and you are back in.
An application password is a long per-app token WordPress gives you from Users > Profile > Application Passwords. Apps and APIs sign in with it in place of your regular password, and you can revoke one without changing anything else about your account. Application passwords only work over HTTPS, and only on sites running WordPress 5.6 or newer.
No. The username and application password are read, joined with a colon and base64-encoded by JavaScript on this page. Nothing is sent to QuickCasa or anywhere else, and the fields are not saved. Close the tab and the values are gone.
Two. The official MCP Adapter from the WordPress plugin directory, which exposes the MCP endpoint, and QuickWP MCP from QuickCasa, which adds the low-level abilities an agent needs to read and change the site. Both are free and open source. QuickWP MCP needs WordPress 6.9 or newer, since it depends on the Abilities API that landed in 6.9.
Any MCP client that speaks HTTP transport. Claude Code and Claude Desktop both support it. Cursor and Continue support it. Smaller clients and SDKs that follow the MCP spec do too. The three fields on this page produce a config block for each of the common ones, so pasting it into the client is one step.
Sign in to WordPress, go to Users > Profile, scroll to the Application Passwords section, give the password a name such as "AI agent", and click Add New Application Password. WordPress shows the password one time; copy it before leaving the page. If the section is missing, a security plugin such as Wordfence or Solid Security has probably switched application passwords off.
Treat the header string the same way you treat the password. The password is base64-encoded in it, not encrypted, so anyone who sees the header can read the password straight back out. Paste it into your MCP client config and nowhere else, and rotate the application password if you ever paste it into a chat, a screenshot or a public repo.
Technically yes, if the site allows Basic authentication. In practice no. Your regular password unlocks every part of your account, and the only way to rotate it is to change your login. An application password can be revoked from your profile with one click and only affects the one app you gave it to.
Free open source WordPress plugin that gives AI tools database, file and WP CLI access through MCP. How to install it and give your AI its first prompt.
Read the guideSee what empty units cost in lost rent, costs while empty and turnover, per day and in total.
Open the calculatorWork out a partial month's rent for a move-in or move-out, and compare the three common methods side by side.
Open the calculatorEvery calculator we have built for property managers and leasing teams, in one place.
See all toolsQuickCasa plugs into your website to answer rental inquiries by web chat, SMS, email and phone around the clock, qualify every renter, and let them book a tour from your real availability.