WordPress docs

What it is

The free wptaskify Search Signal for MCP plugin links your WordPress site to your wptaskify account. Your AI then works on the site through the WordPress REST API.

How to connect

1. In WordPress: Plugins → Add New, search “wptaskify”, install and activate.
2. Open the wptaskify menu and click Connect to wptaskify. The site appears in your dashboard.
3. Add https://wptaskify.com/mcp to your AI (see Claude or ChatGPT).

Requirements: WordPress 5.6 or newer, PHP 7.4 or newer, and the REST API reachable. Self-hosted sites work; WordPress.com sites need a plan that allows plugins.

Permissions

The plugin creates a separate WordPress application password for wptaskify. It is not your login, and you can revoke it in Users → Profile → Application Passwords at any time.

Available tools

Your AI can use 169 WordPress tools, including:

• Posts and pages: write, edit, schedule, publish
• SEO titles, meta and focus keywords (Yoast, Rank Math or the plugin)
• Schema, internal links, redirects and llms.txt
• Media, featured images and alt text
• Menus, categories, tags, users and comments
• Themes, plugins and backups (paid plans)

See every tool.

Example prompts

• “Write a post on spring lawn care and save it as a draft.”
• “Find posts with no meta description and write them.”
• “Add internal links to my 20 newest posts.”
• “Back up the site before I change the theme.”

Approval

New content is saved as a draft unless you ask for it to be published. These actions always wait for your approval on the server, in the chat or in your dashboard under Approvals:

• Refunds (WooCommerce and Shopify)
• Cancelling a Shopify order
• Permanent deletes of posts, pages and products
• Deleting media, users, coupons, categories, terms and menus
• Deleting Shopify products, collections, pages, articles and discounts
• Putting a product on sale
• Switching the active theme
• Deactivating a plugin
• Writing the .htaccess file
• A live find-and-replace across the site

Each approval covers that exact action once. Choose always allow for a tool to stop being asked. See Security for the full model.

Security

The application password is encrypted with AES-256-GCM before it is stored. See Security.

Disconnect

Remove the site from your dashboard, deactivate the plugin, or revoke the application password in WordPress. Access stops at once.

Troubleshooting

If connecting fails with “could not reach your site” or a security-plugin block, allowlist these fixed IP addresses: 162.220.232.250, 152.55.176.240, 152.55.177.181.

• Wordfence: Firewall → Allowlisted IP Addresses, add all three, and keep “Disable application passwords” off.
• Cloudflare: add a WAF allow rule for the three IPs, or skip the challenge for /wp-json/.
• Sucuri or your host's firewall: allowlist the IPs or ask the host to allow REST API access.

More fixes: Fixes & troubleshooting.

Step-by-step fixes: WordPress connection failed, 401 or 403 errors, Application passwords disabled.