GripMCP turns your site into a secure MCP server - so Claude, ChatGPT, and other AI assistants plug straight in and run it from a normal chat. No living inside wp-admin.
Install the plugin, connect the assistant you already use, and describe what you want. No infrastructure to run, no learning curve.
Add GripMCP to any WordPress site, activate it, and switch on the MCP endpoint.
Connect in one click with the built-in OAuth 2.1 server, or paste your /mcp URL and a token.
Describe the outcome in plain language. GripMCP performs the action safely and reports back exactly what it did.
Animated example: you ask your AI assistant to publish a post, put a product on sale, update plugins or delete spam comments. The request goes to the GripMCP plugin on your site, which verifies the token, checks your WordPress permissions, holds deletes for your approval and logs the call, and your wp-admin updates.
Every capability is a live MCP namespace - click to explore what your assistant can actually do.
Draft, edit and publish content by chat - titles, tags and excerpts included.
Upload files, or images your assistant made in the chat, straight into the library and into the post.
Install and update plugins and themes from Creator up. On Fleet, edit theme and plugin files too - syntax-checked, backed up, and rolled back if a change crashes the site.
Edit, add or remove an element by name - or build a whole Elementor page. The rest of the layout is written back exactly as it was.
Site Health, the debug log and the crash recorder on every plan. Operator adds a guarded, read-only view of the database; Fleet adds search and replace for migrations.
Users, taxonomies, menus and comments on every plan, plus WP-CLI from Operator up - all permission-bound to the connected user.
In Claude and other apps that show in-chat panels, bigger jobs get one live card. Each step appears as it runs with its real result, then the card shows the outcome, the key figures and a suggested next step. Approval links land on the same card.
On the Operator plan and above, when WooCommerce is active, your assistant works the store through Woo’s own data layer - so stock, totals and emails behave exactly as they do in wp-admin, HPOS included.
Store tools appear automatically and respect the connected user’s permissions. Refunds and deletes stay opt-in.
One sentence in chat replaces a trip through wp-admin. Here is what people actually type, and the clicks it saves them.
Turn my last 5 posts into a newsletter draft.
Instead of Posts › All Posts › Open 5 posts › Copy › Add New Post
Create a 15%-off coupon for the weekend.
Instead of Marketing › Coupons › Add coupon › Usage limits › Publish
Update my plugins and theme.
Instead of Dashboard › Updates › Select all › Update Plugins › Update Themes
Refund order #1043 in full.
Instead of WooCommerce › Orders › #1043 › Refund › Refund manually
Is anything broken on my site?
Instead of Tools › Site Health › Info › FTP › debug.log
Fix the PHP error on my homepage.
Instead of FTP › debug.log › Theme File Editor › header.php › Update File
Show me this month’s WooCommerce sales.
Instead of Analytics › Revenue › Date range › Month to date
Change the homepage headline to “Ship faster”.
Instead of Pages › Home › Edit with Elementor › Heading › Update
Give Sarah editor access to the blog.
Instead of Users › All Users › Sarah › Role › Update User
Add a Docs link to the main menu.
Instead of Appearance › Menus › Custom Links › Add to Menu › Save Menu
Upload these photos and set the featured image.
Instead of Media › Add New › Posts › Edit › Featured image
Delete the spam comments from last week.
Instead of Comments › Spam › Select all › Delete Permanently
Every request runs as your WordPress user. Deletes, refunds and admin-access changes wait for your OK.
Giving an AI the keys to your site should feel safe. GripMCP is designed so it always does.
Deletes, refunds and admin-access changes wait for you on a page in your own wp-admin, together with a check of what they would break. An assistant can never approve its own request.
“Ask me first” is the defaultEvery call runs as a real WordPress user and is checked against that user’s own capabilities, exactly as wp-admin would. Nothing is elevated.
Every action is recorded with the time, what was done, who did it, the result and how long it took, so nothing happens on your site unseen.
One endpoint on your own site. Connect in one click with OAuth 2.1, or use hashed tokens that expire and can be revoked any time.
Explorer is free on every site you run. Paid tiers add plugin and theme management, WooCommerce and page builders, the developer toolkit and up to 50 sites - with a year of updates and support.
The five things people ask before they install. Flip a card for the answer.
Yes. It acts as a WordPress user you pick, with that user’s permissions and nothing more. Deletes, refunds and new admins wait for your OK, and every action is logged.
Claude connects in one click. ChatGPT, Cursor and other MCP apps connect the same way or with an access token.
No. GripMCP is the bridge, not the AI. It works with the Claude or ChatGPT plan you already have.
Yes, from the Operator plan: orders, refunds, products, customers, coupons and sales reports, through WooCommerce’s own data layer.
Easy to fix. New posts start as drafts, file and page-builder edits keep a backup, and deletes wait for your approval.
Install GripMCP, connect your AI, and run your whole site from a chat - starting today, for free.