# Agent Abilities for MCP > A free WordPress plugin that turns any WordPress site into a governed MCP server for AI agents. It exposes 153 curated abilities (83 across WordPress core, 70 from auto-detected integrations), all off by default, scoped to a least-privilege WordPress user you choose, capability-gated on every call, and written to an audit log. Built on the WordPress 6.9+ Abilities API and the official MCP Adapter. Makes zero outbound calls and has no telemetry. Facts are single-sourced from the plugin readme.txt. Requires WordPress 6.9+ and PHP 8.0+. Free on WordPress.org: no paid tier, no API key to buy, no usage limits. ## What it is - Agent Abilities for MCP is an MCP (Model Context Protocol) server for WordPress. Your AI client connects in to your site; the plugin never calls out to any AI provider. - The pitch is governance, not tool count: off by default, least privilege, capability-gated on every call, fully audited. - The MCP endpoint lives on each installing site's Connection tab (shape: https://your-site.com/wp-json/.../mcp). This marketing domain does not expose a live endpoint. ## Key pages - [Home](https://agentabilitieswp.com/): what it is and how the governance model works. - [Features](https://agentabilitieswp.com/features): the governance layer, from least privilege to the audit log. - [Abilities catalog](https://agentabilitieswp.com/abilities): all 153 abilities by group (83 core, 70 integration). - [Integrations](https://agentabilitieswp.com/integrations): WooCommerce (52), Advanced Custom Fields (7), Rank Math SEO (5), Yoast SEO (3), All in One SEO (3). Detected automatically, off until enabled. - [Supported clients](https://agentabilitieswp.com/clients): what connects today and what does not yet. - [Security](https://agentabilitieswp.com/security): the trust model and vulnerability-disclosure path. ## Documentation - [Getting started](https://agentabilitieswp.com/docs/getting-started/): four steps from install to first call. - [Installation](https://agentabilitieswp.com/docs/installation/): the full walkthrough and requirements. - [Connecting a client](https://agentabilitieswp.com/docs/connecting-a-client/): OAuth or Application Password. - [Governance concepts](https://agentabilitieswp.com/docs/governance-concepts/): the ideas the plugin is built on. - [Safety controls](https://agentabilitieswp.com/docs/safety-controls/): optional rate limit, IP allowlist, force-to-draft, title cap. - [Troubleshooting](https://agentabilitieswp.com/docs/troubleshooting/): common connection snags and fixes. - [FAQ](https://agentabilitieswp.com/docs/faq/): access, safety, data handling, clients. - [Full docs as one file](https://agentabilitieswp.com/llms-full.txt): the complete documentation corpus. - [Abridged docs](https://agentabilitieswp.com/llms-small.txt): a compact version of the documentation. ## WordPress core coverage 83 abilities across: Posts & Pages, Terms & Taxonomies, Comments, Media, Post Meta (allowlisted keys only), Users (capability-limited), Site structure & menus, Revision history, Blocks & Templates, Limited settings & site health, Site-wide search across every post type. Reads plus guarded writes. Deletes go to Trash where WordPress supports it, and the last administrator can never be removed. ## Clients that connect today Claude Desktop, Claude Code, Cursor, VS Code, Windsurf, Gemini CLI. Some connect directly and some through the open-source mcp-remote bridge that runs on your own machine. The hosted Hosted ChatGPT app and the Gemini app are NOT supported yet: they want a streamable HTTP or SSE connector the underlying adapter does not serve natively yet. ## Links - [Download on WordPress.org](https://wordpress.org/plugins/agent-abilities-for-mcp/) - [Source on GitHub](https://github.com/unaibamir/agent-abilities-for-mcp)