Cowboy MCP

Cowboy MCP is a free, open-source WordPress plugin that enables self-hosted WordPress sites to be managed by AI agents such as ChatGPT, Claude, Codex, and Cursor. Instead of acting as a chatbot or writing assistant, it turns a WordPress site into a Model Context Protocol (MCP) server, allowing AI agents to directly perform administrative and content management tasks using plain English instructions. The tool is designed for site administrators who wish to automate and delegate WordPress management tasks to AI, reducing the need for manual dashboard navigation or coding.

Key capabilities include creating, editing, scheduling, and bulk-updating posts, pages, and media; managing plugins, themes, users, and site settings; building pages with the block editor or Elementor; handling SEO elements via Yoast such as meta tags, sitemaps, redirects, and schema; editing custom fields through ACF; and administering WooCommerce stores, including products, orders, coupons, and inventory. The plugin also supports managing Gravity Forms, clearing caches, preloading pages, optimizing CDN settings, running Wordfence security scans, and triggering or scheduling UpdraftPlus backups with restore options. All operations can be requested in natural language through connected AI agents.

Cowboy MCP emphasizes security and accountability. Safe mode is enabled by default, requiring explicit confirmation for destructive actions such as deletions and updates, with a dry-run feature to preview changes before they are applied. Every action performed via MCP is logged with details including timestamp, user, tool, and parameters, providing a full audit trail. Rate limiting is configurable per API key, and authentication keys are stored as bcrypt hashes. Sensitive operations and risky commands are blocklisted, and the most powerful tools require activation of a power mode accessible only by site administrators.

0 or above. It is installed via the standard WordPress plugin interface and configured through a guided setup. Cowboy MCP operates entirely on the user's own server, does not send data to third parties, and requires no external service beyond the connected AI client.