Code Atlantic

WebMCP Abilities
for WordPress

Turn your WordPress site into an AI agent tool server. AI agents in Chrome 146+ discover and call your site’s capabilities as structured tools — no scraping, no screenshots, no prompt engineering.

🔥 Fun fact: wppopupmaker.com is one of the first WebMCP 🔥
powered WordPress website, using this plugin.

How It Works

WebMCP replaces screen-scraping with structured function calls.

❌ Before WebMCP

Take screenshot → send to vision model → guess at UI → click and hope → repeat

~45% task accuracy · Slow · Expensive · Brittle

✅ With WebMCP Abilities

Discover tools → call function with typed JSON → get structured response

~98% task accuracy · Fast · Cheap · Reliable

// Your WordPress site registers abilities…
WordPress Abilities API
└─ tools + JSON Schema + permissions

// The plugin bridges them to the browser…
navigator.modelContext.registerTool( tool )

// AI agents invoke tools server-side…
POST /wp-json/webmcp/v1/execute/{ability}
└─ nonce + auth + rate limiting

Built-in Tools

Four starter tools work immediately — no configuration needed.

Search Posts

Full-text search across all published content. Returns titles, excerpts, and URLs.

Public

Get Post

Retrieve any post by ID or slug with full content, categories, tags, and metadata.

Public

Get Categories

List all categories with post counts and descriptions.

Public

Submit Comment

Post a comment on any post. Respects WordPress comment settings and moderation.

Configurable

Any plugin can add more. Register a WordPress Ability and it automatically becomes a WebMCP tool.

For Plugin Developers

One function call. Automatic WebMCP exposure. Zero configuration.

functions.php

add_action( ‘wp_abilities_api_init’, function () {
    wp_register_ability( ‘my-plugin/search-products’, array(
        ‘label’            => ‘Search Products’,
        ‘description’      => ‘Search the product catalog.’,
        ‘input_schema’     => array(
            ‘type’       => ‘object’,
            ‘properties’ => array(
                ‘query’ => array( ‘type’ => ‘string’ ),
                ‘limit’ => array( ‘type’ => ‘integer’, ‘default’ => 10 ),
            ),
            ‘required’ => array( ‘query’ ),
        ),
        ‘execute_callback’    => ‘my_search_products’,
        ‘permission_callback’ => ‘__return_true’,
    ) );
} );
// That’s it. WebMCP Abilities picks it up automatically.

Security First

Built for production from day one.

HTTPS Enforced — Bridge won’t load without a secure context
Nonce Verification — Write operations require X-WP-Nonce header
Permission Callbacks — Re-checked at execution time, not just discovery
Admin Allowlist — You choose exactly which tools are exposed
Secure Defaults — Third-party tools are OFF until explicitly enabled
Rate Limiting — Per-user, per-tool, and global IP-based caps

Part of the WordPress AI Stack

WebMCP Abilities complements the existing ecosystem.

Tool	Transport	Use Case
WebMCP Abilities	Browser (Chrome 146+)	AI agents visiting your site
WP MCP Adapter	CLI / API	Claude Desktop, Cursor, VS Code
Declarative WebMCP	HTML attributes	Form annotations (spec-level)

Built-in tools are real WordPress Abilities, so they also appear via the MCP Adapter for CLI/API agents.

Get Started in 5 Steps

From install to AI-ready in under a minute.

1

Download the plugin

2

Activate it

3

Go to Settings → WebMCP

4

Enable the bridge

5

AI agents can now use your site

GitHub WordPress.org WebMCP Spec Chrome Blog Abilities API

Built by Code Atlantic · GPL-2.0-or-later