How it works

A sentence in chat.
A checked change on your site.

GripMCP is a WordPress plugin that lets the AI assistant you already use run your site, with every request checked and logged.

Install free See the setup
  • One endpoint, on your own domain
  • Zero calls proxied through us
  • Every action capability-checked

Watch your assistant work on your site through GripMCP

Animated example. You ask your own AI assistant, such as Claude or ChatGPT, to publish a post, put a product on sale, update plugins and delete spam comments. Each request goes to the GripMCP plugin on your site, which verifies the token, checks the WordPress capability, holds the delete for your approval, runs the change through WordPress and writes it to the activity log. Your wp-admin updates to match.

You bring the assistant. GripMCP is the plugin that lets it work on your WordPress site, with every call checked against your permissions and written to your log.

Setup

4 steps, once.

No servers or middleware to run. The plugin is the whole integration.

  1. 01

    Install & activate

    Download the free plugin from this site, then go to Plugins → Add New → Upload Plugin, choose the zip and activate it. On a paid plan, upload the zip from your GripMCP account instead. Works on WordPress 6.2+ with PHP 7.4+, tested up to WordPress 7.1 and PHP 8.5.

    About 30 seconds
  2. 02

    Switch the endpoint on

    Turn on the endpoint in the GripMCP menu, copy your /mcp address and choose what the assistant may do.

    One toggle
  3. 03

    Connect your assistant

    In Claude, add a custom connector, paste the address, sign in to WordPress and approve. Config-file clients use an access token.

    Claude, ChatGPT, Cursor
  4. 04

    Just ask

    Describe what you want. Your assistant picks the right tools, and in apps like Claude bigger jobs show a live progress card with each step and the outcome.

    Every day after that
Safe by default

Your assistant can only do what you can.

Never more than your permissions

Every call runs as a real WordPress user and is checked against that user’s capabilities. Nothing is ever elevated.

Deletes wait for your approval

Destructive actions are set to Ask me first by default: each one waits for your click, shows what it would break, and expires after 30 minutes.

Edits are checked and backed up

Theme and plugin file changes (Fleet) are syntax-checked and backed up before they land, and undone if a PHP change crashes the site. Builder pages (Operator) keep a restore point, and any post can roll back to a revision.

Logged, and revocable

The activity log records which tool ran, as whom and when. Tokens are hashed, can expire and can be revoked any time.

Try it free, on every site you run.

It runs on your own server with the assistant you already use. Install, connect, and ask.

Install free Compare plans