Installation

Requirements

• WordPress 6.9 or newer. This is where the Abilities API and the official MCP Adapter the plugin builds on are available.
• PHP 8.0 or newer.

Install and activate

1. Upload the plugin to the /wp-content/plugins/agent-abilities-for-mcp directory, or install it from the WordPress plugins screen.

2. Activate it from the Plugins screen.

3. Open the Agent Abilities for MCP menu in your admin sidebar. On the Abilities tab, turn on only the abilities you want the agent to have. Everything starts off.

4. On the Connection tab, copy your site’s MCP endpoint. The simplest path is OAuth: paste the endpoint into your MCP client and approve the connection once in the browser, where the agent acts as your own account.

5. Prefer not to use OAuth, or on a client that cannot? Create the dedicated low-privilege agent user the Connection tab offers, generate an Application Password for it, and connect with that instead.

6. Use the connection check on the Connection tab to confirm the endpoint is reachable from your server.

Nothing is exposed until you switch it on

On a fresh install every ability is off. You enable them one at a time, and an update never silently widens access. Start with a single read ability, confirm the connection, then add reach as you build trust.

Integrations are detected automatically

When a supported host plugin is active, Agent Abilities for MCP adds abilities for it under the same rules as core: detected automatically, off until you turn them on, capability-gated, and logged. Version 1.0.0 covers WooCommerce, Advanced Custom Fields, Rank Math SEO, Yoast SEO, and All in One SEO. The WooCommerce and ACF abilities can read and write real customer and order data, including personal data such as names, emails, and addresses, so they sit behind a clear notice in the admin and stay off until you switch them on.

Next steps

• Connecting a client: OAuth and Application Password.
• Troubleshooting: if the connection check fails.