# Connect WordPress and WooCommerce to Claude (MCP) | XenMCP

> Connect your WordPress site and WooCommerce shop to Claude and ChatGPT: ask about content, comments, orders and sales, and let it write drafts – no plugin.

[Catalog](https://xenmcp.com/catalog/) / WordPress

# Connect WordPress and WooCommerce to Claude

In beta

Ask about your site and your shop in plain language – and let Claude write drafts that you review and publish yourself.

Your address for Claude `https://wordpress-acme.xenmcp.com/mcp`

[Register interest](https://xenmcp.com/waitlist/?server=wordpress)

XenMCP signs in with an application password, built into WordPress since 5.6. There is nothing to install on the site. Claude or ChatGPT sees what this WordPress user may see – everyone on the team signs in to XenMCP as themselves, and access can be revoked at any time.

If WooCommerce runs, orders, products and sales reports come along – with the same password. Read-only by default. With read-only off the AI client writes drafts of posts, pages and products and moderates comments. Publishing, changing what is live and deleting are not possible.

## What you can ask Claude

- Which posts have I not updated for a year, and which of them have no category?
- Write a draft “10 tips for winter” in the Guides category, in the style of our last three posts.
- Which comments are waiting for approval? Mark the obvious spam.
- How much did the shop sell in October, and which five products sold best?

## Typical tools

## What you need to connect

- WordPress 5.6 or newer with HTTPS and the REST API reachable
- A WordPress user (best an Editor, for WooCommerce a Shop Manager) and their application password (Users → Profile → Application Passwords)

## Security

- Read-only by default; even with read-only off only drafts are written. XenMCP never changes what is live and never sends WordPress a delete request.
- An application password is not your login password: it works only for the API and can be revoked on its own in the profile at any time. We store it encrypted (AES-256-GCM) and never show it again.
- Email, phone and street of customers and commenters appear in no answer – only name, city and country.
- The sandbox reaches only your site, always from the same IP address. XenMCP’s call log keeps only tool, status and duration.

## Built on

There is no open server for this system yet that meets our criteria. We are building one on the official API.

## Frequently asked questions

**Do I need to install a plugin?**

No. Application passwords are built into WordPress since 5.6. Some security plugins (e.g. Wordfence) switch them off – allow them there again.

**Can Claude publish or delete anything?**

No. New posts, pages and products are always drafts; published content is not changed. You review and publish in WordPress yourself.

**The check says 401 – what now?**

Check the username and the application password (not the login password). Some hosts drop the Authorization header; one line in .htaccess fixes it, which your host or agency knows.

## More servers

- [Shopify In beta Ask your shop in plain language: what sold this week, what is running out, which order is stuck? And let Claude write drafts that you release yourself.](https://xenmcp.com/catalog/shopify/)

## Connect WordPress to Claude?

Sign up and confirm your email. Servers marked “In beta” you can connect right after your invitation; for planned ones your interest decides the order.

[Join the beta](https://xenmcp.com/waitlist/?server=wordpress)

---

Source: https://xenmcp.com/catalog/wordpress/ (English, updated 2026-11-09)
Other languages: Deutsch: https://xenmcp.com/de/katalog/wordpress/index.html.md