In October, we announced that WordPress.com now supports MCP (Model Context Protocol), allowing AI agents to interact with your sites.
Today it supports WordPress.com OAuth 2.1making MCP integrations easier.
MCP clients work with OAuth 2.1 natively, so authorizing the AI tools you already use is as simple as adding a URL and approving access. No workarounds or manual configuration are required.
With MCP, AI agents can help with everyday tasks on your WordPress.com site, such as finding posts, retrieving site data, or drafting new content, while you control what they can access.
How OAuth 2.1 enables MCP integrations
When an AI assistant (such as Claude Desktop, ChatGPT, or a custom AI tool) wants to access your WordPress.com content, OAuth 2.1 now handles the secure connection:
- The MCP client asks for authorization.
- You will be redirected to WordPress.com to approve the connection.
- After approval, the customer receives secured tokens.
- The client uses these tokens to access the WordPress.com MCP.
- Tokens are automatically renewed when necessary.
All this is protected by PKCE (Proof Key for Code Exchange).
Even if someone intercepts the authorization code, he or she won’t be able to use it without the secret verification code remaining on your device.
Easy installation: just add a URL
WordPress.com provides an MCP server that AI tools can connect to using OAuth 2.1.
All you have to do is:
- Create a custom connector or app in your AI tool
- Add the WordPress.com MCP server URL
- Authenticate and approve access through WordPress.com with OAuth 2.1
That’s it.
WordPress.com handles authentication and permissions, so there are no manual login details to set up and no passwords to share.
Tip: Review the MCP connection guide in the Claude Desktop developer documentation and ChatGPT specific instructions.
What MCP customers can do with WordPress.com
Once authenticated, MCP clients can communicate with your WordPress.com sites via the MCP API:
- Search and retrieve messages: Find content on your sites
- Read message details: Get access to full post content, metadata and comments
- Access site information: Receive site settings, statistics and user data
All of this happens with the permissions you explicitly grant, and you can revoke MCP access at any time through your WordPress.com MCP settings.
Get started with MCP and OAuth 2.1
OAuth 2.1 is now available for all AI agents to connect to WordPress.com.
Whether you build a custom integration or use existing MCP-compliant AI tools, it provides the secure authentication foundation for your work.
If you haven’t already, enable MCP on your WordPress.com account so you can connect your AI assistants.
Useful resources
Share your feedback
We’d love to hear how you use OAuth 2.1 and MCP with WordPress.com. Do you have any questions or suggestions? Leave a comment below or share your experiences in the developer forums.
#Connect #agents #WordPress.com #OAuth #MCP