Supported tools
Reference for every MCP tool exposed by Axtolab AI Connector. Posts, pages, custom post types, media, comments, taxonomies, SEO (Yoast / Rank Math / AIOSEO), navigation menus, theme appearance, and WordPress 6.9 Abilities API.
Updated
The AI Connector exposes WordPress functionality to AI agents as a set of MCP tools. This page is the canonical reference for every tool the free core ships with.
Tools that require an add-on are clearly marked. Each add-on extends this list with additional tools — see the relevant add-on doc for those.
A note on tool naming. All AI Connector tools are prefixed
wp_(e.g.wp_create_draft,wp_publish_content). When you see a tool name in your AI client’s tool list, that’s the canonical name — and it’s what you’d call directly if you were scripting against the MCP server.
Onboarding & introspection
Call these first to orient the AI to the site it’s working on.
| Tool | Description |
|---|---|
wp_getting_started | Returns the site context, theme info, and the editorial workflow guide. Call this first at the start of every session — it tells the AI which content types, image rules, and SEO conventions apply on this site. |
wp_site_info | Site name, URL, WordPress version, language, theme, plugin context. |
wp_get_my_capabilities | Returns the calling connection’s capability groups, the matching named preset (e.g. standard, read_only), and the resolved tool list. Lets the AI know up-front what it’s allowed to do. |
Content (posts, pages, custom post types)
Default allowlist accepts post, page, and featured_item. Set the allowlist to ["*"] in MCP Gateway settings to accept any registered public post type (e.g. WooCommerce product, EDD download, custom CPTs). Each tool resolves the wildcard at call-time so the AI sees the live list of post types on the site.
| Tool | Description |
|---|---|
wp_list_content_types | List the post types the connection is allowed to work with. |
wp_find_content | Search posts/pages with filters: status, author, date range, taxonomy, query string, pagination. |
wp_search_content | Full-text search alias over wp_find_content — surfaces under the discoverable name competing tools use. |
wp_get_content | Retrieve a single item with full content, metadata, and revision history. |
wp_create_draft | Create a new draft post / page / custom-type. Defaults to draft; never publishes. |
wp_update_content | Patch title, content, excerpt, slug, scheduled date, author. |
wp_publish_content | Publish or schedule. Requires a confirmation token — issued via wp_request_review — so the agent never publishes silently. |
wp_clone_content | Duplicate an existing post into a new draft, copying terms and featured image. |
wp_request_review | Issue a confirmation token before any destructive action (publish, trash, restore). Single-use, time-limited. |
wp_get_preview_link | HMAC-signed preview URL for sharing draft state with reviewers. |
Trash & restore
| Tool | Description |
|---|---|
wp_trash_content | Move to trash (soft delete). Requires confirmation token. |
wp_restore_content | Restore from trash. Requires confirmation token. |
wp_list_revisions | List revisions for a post, with author and timestamp. |
wp_restore_revision | Restore a specific revision. Requires confirmation token. |
Post meta / custom fields
| Tool | Description |
|---|---|
wp_get_post_meta | Read post meta fields (Yoast SEO keys, ACF fields, custom keys). |
wp_update_post_meta | Write a post meta value. |
wp_delete_post_meta | Delete a post meta entry. |
Media
| Tool | Description |
|---|---|
wp_search_media | List media items with filters: type, date, post-attachment, search. |
wp_get_media | Retrieve a single attachment with all metadata. |
wp_update_media | Update alt text, caption, description, post-attachment. |
wp_set_featured_image | Set or clear a post’s featured image. |
wp_upload_media_from_url | Upload from a URL (sets MIME type, alt text, caption). |
wp_find_media_file | Find a local media file on disk by path or pattern (used by the desktop client setup). |
wp_upload_media_from_path | Upload a local file from disk by absolute path (desktop client only). |
Inline images
Block-aware image insertion that understands the Gutenberg structure of the post.
| Tool | Description |
|---|---|
wp_insert_inline_image | Insert an image at a specific position (start, end, before/after a heading, or at a marker). |
wp_replace_inline_image | Swap an existing inline image for a new one. |
wp_remove_inline_image | Remove an inline image and any orphan caption. |
For AI-generated images, see the AI Image Generation add-on which adds Imagen, OpenAI, and stock-photo tools.
Comments
Default allowlist gates depend on the connection’s capability set; comments tools require read for list/get and trash_restore for moderation.
| Tool | Description |
|---|---|
wp_list_comments | List comments with filters: post, status, author, date range. |
wp_list_pending_comments | Convenience alias — list comments with status=pending (the most common moderation case). |
wp_get_comment | Retrieve a single comment. |
wp_create_comment | Post a comment as the connected user. |
wp_moderate_comment | Approve, mark as spam, hold, or trash a comment. |
wp_delete_comment | Permanently delete a comment. |
Authors & taxonomy
| Tool | Description |
|---|---|
wp_list_authors | List authors the connection is allowed to act as / assign. |
wp_assign_author | Reassign a post’s author (subject to allowlist). |
wp_list_terms | List terms in a taxonomy. |
wp_create_term | Create a new term. |
wp_assign_terms | Assign or remove terms on a post. |
wp_get_term_meta | Read term meta. |
wp_update_term_meta | Write term meta. |
wp_delete_term_meta | Delete a term meta entry. |
SEO
The AI Connector auto-detects which SEO plugin is active on the site (Yoast SEO, Rank Math, or AIOSEO) and routes generic SEO calls to the right meta keys.
| Tool | Description |
|---|---|
wp_get_seo_meta | Read SEO title, meta description, focus keyphrase, OG fields for a post. Provider-neutral. |
wp_update_seo_meta | Write any of the above. Provider-neutral. |
wp_get_yoast_analysis | Yoast-specific: read Yoast’s content + readability scores (Yoast required). |
wp_get_yoast_head_preview | Yoast-specific: render the <head> block Yoast would emit. |
wp_update_yoast_metadata | Yoast-specific writer for backward compatibility. |
Navigation menus
| Tool | Description |
|---|---|
wp_list_menus | List nav menus. |
wp_get_menu | Retrieve one menu including item tree. |
wp_create_menu_item | Add an item to a menu. |
wp_update_menu_item | Edit an item (title, URL, parent, target). |
wp_delete_menu_item | Remove an item. |
wp_reorder_menu_items | Reorder items within a menu. |
All write operations require edit_theme_options capability on the connected user.
Theme appearance (admin-gated)
These tools mutate the site’s theme presentation. All writes require an administrator to enable theme_writes_enabled in MCP Gateway settings and pass an allowlist filter.
| Tool | Description |
|---|---|
wp_get_active_theme | Active theme name, version, parent, supports list. |
wp_get_theme_mods | Read theme mods (Customizer values), with sensitive-key redaction. |
wp_update_theme_mod | Write a theme mod (gated). |
wp_get_custom_css | Read the site’s Custom CSS. |
wp_update_custom_css | Write the site’s Custom CSS (gated). |
Site configuration & inventory
| Tool | Description |
|---|---|
wp_get_permalink_structure | Current permalink structure, category base, tag base. |
wp_update_permalink_structure | Update the permalink structure. Requires admin to enable permalink writes in MCP Gateway settings (off by default), plus manage_options capability, plus input validation. |
wp_list_plugins | Read-only inventory of installed plugins (no install/activate). |
wp_list_themes | Read-only inventory of installed themes. |
wp_get_option | Read a WordPress option. Sensitive keys (api_key, secret, password, license, salt) are auto-redacted. |
wp_update_option | Write a WordPress option. Requires admin to enable options writes, plus a runtime allowlist filter, plus a hard denylist for siteurl / home / license keys. |
wp_get_plugin_settings | Read this plugin’s own settings. |
WordPress Abilities API bridge (WP 6.9+)
WordPress 6.9 (released November 2025) added the official Abilities API — a primitive for plugins to register typed AI-callable capabilities. The AI Connector bridges those abilities through to MCP automatically.
| Tool | Description |
|---|---|
wp_list_abilities | Discover abilities registered on this site by any plugin or theme using the WP 6.9 Abilities API. |
wp_invoke_ability | Execute a registered ability by name with typed arguments. Each ability enforces its own capability check inside execute(). |
If a plugin uses the Abilities API to register, say, a “create_woocommerce_coupon” ability, it becomes callable through MCP without us writing code for it. This is the long-term direction for WordPress AI tooling.
Upload portal
A drag-and-drop upload page with time-limited tokens, used to onboard non-technical users who don’t have App Passwords set up yet.
| Tool | Description |
|---|---|
wp_create_upload_session | Create a tokenised upload session — returns a one-time URL to share with the user. |
wp_get_upload_session | Check session status (pending / uploading / complete). |
Add-on tools
These are visible but return a clear “add-on required” error when the corresponding module isn’t installed.
| Tool | Add-on |
|---|---|
wp_generate_image | AI Image Generation — Imagen, OpenAI |
wp_search_stock_photos, wp_import_stock_photo | AI Image Generation — Unsplash, Pexels |
wp_list_image_providers, wp_confirm_image | AI Image Generation |
Tool capability gates
Every tool respects two layers of WordPress permissions:
- Per-connection capability groups. Each AI connection is assigned a capability preset (
read_only,standard,content_manager,media_manager,seo_specialist,full_access, orcustom). Tools outside the preset don’t appear in the agent’s tool list at all — there’s no “permission denied” mid-action. - Underlying WordPress capabilities. Even if a tool is exposed, the connected WordPress user still needs the matching capability (
edit_posts,manage_options, etc.). The plugin doesn’t elevate; if the user can’t do it through wp-admin, the AI can’t either.
For administrative tools (option writes, theme writes, permalink writes), there’s a third gate: an admin toggle in MCP Gateway settings that’s off by default. This means a site can install the plugin and never expose those tools unless the admin explicitly opts in.
Versioning
Tools follow the connector’s semantic versioning:
- New tools added in minor releases (1.2 → 1.3)
- Tool argument changes in major releases (1.x → 2.x), with deprecation warnings in the prior major
When a tool’s behaviour changes, the change is documented in the GitHub release notes and surfaced in the WP admin via an admin notice.
Where to go next
- Getting started — first-time setup
- Installation — install methods (WP-Admin, WP-CLI, Composer)
- OAuth setup — authorising web AI clients (ChatGPT, Claude Web)
- Security — locking down sensitive tools in production
- Add-on modules — image generation, billing protection, per-agent permissions, multisite, WooCommerce