Everything GripMCP
can actually do.

One plugin, 100+ tools across 9 areas - every one of them checked against the connected user’s real WordPress capabilities. Everything untagged is in the free plan; tags show which paid plan adds the rest.

100+ MCP tools
9 areas
100% capability-mapped
01

Posts & pages

Full editorial control by chat - from drafts to publish, revisions and every taxonomy in between.

  • Create posts & pages

    Draft or publish content with formatting, tags and categories.

  • Update content

    Edit titles, body, excerpts and status, or change one passage without resending the page.

  • Search & list

    Query posts by keyword, type, status or author.

  • Featured images

    Set or replace the featured image on any post.

  • Additional CSS

    Read and edit the theme’s Additional CSS.

  • Categories & tags

    Create, assign or reorganise taxonomies in one call.

  • Revisions

    Browse revision history and roll back to any prior version.

  • Custom post types

    Discover and edit any registered CPT the site defines.

  • Schedule & trash

    Schedule, unpublish or trash posts. A post meant for later never goes live early.

02

Media & images

Upload media, or save images from the chat, straight into the library and into the post you’re working on.

  • Upload files

    Add images, video or documents to the media library.

  • Images from the chat

    Images your assistant made, or files you attached, go straight to the library.

  • Featured & inline

    Attach as featured image or drop into a post.

  • Library search

    Find media by name or file type.

  • Safe uploads

    Unsafe or oversized file types are refused, not stored.

  • Delete media

    Remove attachments and their generated image sizes.

03

Themes, plugins & code

Install, update and edit - syntax‑checked, backed up, and undone if a change crashes the site.

  • Install & activate Creator

    Add plugins or themes from the WordPress.org repo.

  • Update & roll back Creator

    Bring plugins and themes up to date, or roll a plugin back to an exact version.

  • Delete safely Creator

    Remove plugins or themes only when explicitly asked.

  • Create a theme Fleet

    Generate a block, classic or child theme to build on.

  • Draft-theme sandbox Fleet

    Try theme edits on a copy before publishing them live.

  • Edit files Fleet

    Change theme or plugin files with syntax check, auto‑backup and crash rollback.

  • File outline Fleet

    Read the structure of a file before touching it.

  • Search files Fleet

    Look up strings across theme and plugin code.

  • Backups & restore Fleet

    Every file write creates a backup you can roll back to.

04

Page builders Operator

Elementor, WPBakery and Divi 4. Edit, add or remove an element by name - the rest of the layout is written back exactly as it was, and a restore point is saved every time.

  • Elementor

    Create pages, edit, move and duplicate elements, use and save templates, change page settings, and update global colours and fonts.

  • WPBakery & Divi

    Read and edit WPBakery and Divi 4 pages, Divi Library items and Theme Builder templates.

  • Read structure

    Inspect the element tree of any builder page before changing it.

  • Add & remove

    Insert new elements or take one out, checked against the builder’s own layout rules first.

  • Correct escaping

    Divi’s encoding and WPBakery’s link and raw-HTML formats are handled, so quotes, brackets and links survive.

  • Preserve layout

    Untouched sections are written back byte-for-byte.

  • Styling refreshed

    Divi’s cached CSS and WPBakery’s design styling are rebuilt, so edits show on the front end.

  • Auto restore points

    A backup is saved before every builder edit - roll back with one command.

05

Health & diagnostics

Diagnose issues, query the database and repair state - with a guarded, read‑only view where it matters.

  • Site Health

    PHP limits, database, pending updates, file permissions and HTTPS at a glance.

  • Page check

    Read the live page after a change to confirm it looks right, including drafts, private pages and coming-soon mode.

  • Debug logging

    Switch on PHP error logging for a set time, no wp-config.php edits - it turns itself off.

  • Crash recorder

    Keeps the latest fatal errors, so your assistant can say why a page went blank.

  • Read-only SQL Operator

    Query the database safely - no writes allowed.

  • Table & schema Operator

    Explore the database structure and column shapes.

  • Search & replace Fleet

    Serialized-safe, previewed first, and it fixes the copies page builders store in JSON.

  • Cron inspector

    See what’s scheduled, when it runs next and how often.

  • Cache flush

    Clear object, theme and Elementor caches, plus page caches such as LiteSpeed, WP Rocket, W3 Total Cache, WP Super Cache and SiteGround.

  • Connection diagnostics

    Find out why a connector keeps dropping.

06

Users, menus & core

Users, taxonomies, menus, comments, WP‑CLI - every core admin surface, permission‑bound.

  • Users

    List, create, update or remove users and their roles.

  • Nav menus

    Read, edit and save primary and secondary menus.

  • Comments

    Approve, spam, trash or delete comments.

  • Options

    Read and update site options behind capability checks.

  • Content types

    List every registered CPT and taxonomy the site defines.

  • Custom fields

    Read and write post meta, including multi-value fields.

  • REST API Operator

    Reach any plugin’s REST routes - writes stay off until you allow them.

  • WP-CLI runner Operator

    Run WP‑CLI commands as MCP tools without shell access.

  • Abilities discovery

    Auto-detect and run any plugin’s published WP Abilities.

07

WooCommerce Operator

When WooCommerce is active, your assistant works the store through Woo’s own data layer - stock, totals and emails behave exactly as they do in wp‑admin.

  • Orders

    Open, filter, change status, record refunds.

  • Products

    Create and update price, stock and status, and read variations.

  • Customers

    Look up spend, order count and addresses.

  • Coupons

    Create and list discounts in one sentence.

  • Sales reports

    Pull totals for any date range on demand.

  • HPOS-safe

    Works cleanly with high-performance order storage.

  • Emails intact

    Woo hooks fire, so stock and emails behave as normal.

  • Refund controls

    Refunds stay opt-in and permission-gated.

08

Live progress cards

In assistants that show in-chat panels, such as Claude, bigger jobs get one live GripMCP card instead of a wall of tool calls - every step, its real result, and the outcome in one place.

  • One card per request

    Titled with what you asked, not one card per tool call.

  • Steps as they run

    Each step lands on the card with its actual result, such as the order count and totals.

  • A clear outcome

    When the work is done: a short answer, the key figures, and a suggested next step or link.

  • Approvals on the card

    A held delete shows its approval link with a copy button, and updates once it has run.

  • Tips that fit the job

    Store tips while it works on your shop, theme tips during theme work.

  • Matches your chat

    Cards take the chat app’s colours and font, in light or dark mode.

  • In-chat image uploads

    Drag images onto the upload panel in the chat, or click to browse, and they land in your media library.

09

Security & trust

Giving an AI the keys to your site should feel safe. Every capability above runs inside the same guardrails.

  • Capability-mapped

    Every call runs as the token’s WP user, checked against real capabilities.

  • OAuth 2.1 or bearer

    One-click OAuth, or hashed tokens that expire and can be revoked, over HTTPS.

  • No privilege elevation

    GripMCP never bypasses roles or capabilities.

  • You choose who connects

    Only administrators can connect by default. Allow other roles only if you want to.

  • Tokens stay in their lane

    An access token works only at the GripMCP endpoint, never as a login for the rest of WordPress.

  • Your call on deletes

    Deletes, refunds, force-writes and admin-access changes have three settings: Off, Ask me first or Allow.

  • Approve before it deletes

    Destructive actions start on “Ask me first”, so every delete stops and waits for you to approve it in wp‑admin.

  • Checks what it would break

    Before you approve a delete, it flags the pages, menus, plugins or users that depend on it.

  • It cannot self-approve

    You approve signed in as yourself. There is deliberately no route for an assistant to approve its own request.

  • Secrets stay hidden

    Passwords and API keys inside other plugins’ settings, such as a payment gateway key, are shown to the assistant as “[redacted]”.

  • Activity log

    Every tool call is recorded by default - what ran, as whom, when. Operator and Fleet keep 90 days, with filters and CSV export.

  • On your server

    Content, tool calls and tokens never leave your site. No analytics, and licensing details go to Freemius only if you opt in or buy.

  • Clean uninstall

    Deleting the plugin removes its logs, connection records and temporary data.

Ready to hand your assistant the keys?

Install GripMCP, connect your assistant in one click, and every capability above is available in your next message.

Get GripMCP See how it works