Authentication setup

Axtolab AI Connector supports multiple ways to let an AI client talk to your WordPress site. Use the method your client supports.

Which method should I use?

Situation	Recommended method
Claude Desktop / compatible local MCP client	Download the .mcpb extension from the AI Connector setup page and paste a connection token
Web client with custom connector support (Claude Web, ChatGPT)	OAuth
Bespoke client only supporting username/password-style auth	WordPress Application Passwords

Start from AI Connector in wp-admin. The plugin screen is the source of truth for the exact connection details for your site.

Guided connector setup

Some desktop clients can use a connector bundle or guided setup file.

1. In WordPress admin, open AI Connector.
2. Open the connection/authentication area.
3. Choose the guided desktop/client setup option if it is shown.
4. Follow the on-screen download or copy instructions.
5. Open your AI client and add the connector.
6. Return to the AI client and run a read-only test: “List my five most recent posts.”

If your client does not show the connector immediately, restart the client and check its connector/MCP settings.

OAuth setup

OAuth is the best option when your AI client supports it. The client receives a scoped token instead of your WordPress password, and you can revoke the connection later.

1. In WordPress admin, open AI Connector.
2. Choose Add connection, Authorize, or the equivalent OAuth option.
3. Select a narrow permission preset for the first connection.
4. Copy the connector URL or authorization details if your client asks for them.
5. Complete the authorization prompt.
6. Test with a read-only request.

Use HTTPS on production sites. OAuth flows may fail on live HTTP sites.

Application Passwords fallback

Application Passwords are a WordPress fallback for clients that do not support OAuth or guided connector setup.

1. In WordPress admin, go to Users → Profile.
2. Scroll to Application Passwords.
3. Create a new password named for the AI client.
4. Copy the generated password immediately.
5. Add your WordPress site URL, username, and generated password to the client.

Application Passwords are convenient, but less precise than connector-scoped authorization. Rotate them periodically and delete any you no longer use.

Managing connections

Use AI Connector in wp-admin to review and remove connections.

Recommended habits:

• Create separate connections for separate clients or people.
• Use a narrow permission preset for each connection.
• Revoke old test connections.
• Re-test with read-only requests after changing permissions.

First verification prompt

After any setup method, ask your AI client:

List the five most recent posts on my WordPress site, including title and status.

If that works, the connection is live. If it fails, check Troubleshooting.