Prerequisites
- WordPress 6.x+
- PHP 8.1+
- Admin access + MCP client (endpoint
/wp-json/wp-agent-bridge/mcp)
Installation
- Upload the plugin ZIP and activate it.
- Generate a bearer token in the admin (example:
wpab_****— never expose it). - Declare the token in your MCP client for the site’s endpoint.
- First call:
wpab-ping— it must return pong, versions, mode.
Loopback verification
Goal: HTTP 200. cURL error 6 troubleshooting — in wp-config.php, before That’s all, stop editing! :
define('WPAB_HEALTH_CHECK_URL', 'http://127.0.0.1/');
define('WPAB_HEALTH_CHECK_SSLVERIFY', false);
Also check that the snapshots folder returns 403 in a logged-out session (and that a .json file in the folder also returns 403).
READONLY by default
Open an APPLY window (15–240 min) for any write. Close it as soon as the write is done.