Fix & troubleshoot
WordPress MCP connector returns 401 or 403
A 401 (Unauthorized) or 403 (Forbidden) when connecting WordPress to Claude/ChatGPT is almost always auth or a firewall. Work through these in order.
Rather not do this yourself?Book a free setup call and we will connect your site to Claude or ChatGPT with you, live. Pick a time →On this page
- 401 Unauthorized - it's the credentials
- 403 Forbidden - it's a firewall or the REST API
- Quick checklist
Not fixed after these?What to do next →
1401 Unauthorized - it's the credentials
- Use an Application Password, not your login password. Create one at Users → Profile → Application Passwords.
- If it says application passwords are disabled, re-enable them here.
- Copy the password with the spaces, exactly as shown.
2403 Forbidden - it's a firewall or the REST API
- A security plugin (Wordfence, Solid Security) or a host WAF may block the REST API or the
Authorizationheader. Allowlist/wp-json/and the wptaskify IPs. - Some servers strip the
Authorizationheader - add theSetEnvIf Authorizationrule to.htaccess. - Confirm the REST API works: open
https://yoursite.com/wp-json/in a browser.
3Quick checklist
- Plugin installed & activated.
- Application password created (not disabled).
- REST API reachable at
/wp-json/. - Firewall/security plugin allowlists the connection.
Still stuck?
Send us the exact error and your site address and we will look at it with you.
The free wptaskify plugin shows the exact connect error and how to fix it - install and reconnect.
Get the free plugin & connect →More fixes
Other things that trip people up
ChatGPT Developer Mode or "Add Custom Connector" Is MissingNo Developer Mode or "Add custom connector" in ChatGPT? Which plans have it (Plus, Pro, Business), where the switch is now, and thRead the fix →MCP tools not showing up in Claude or ChatGPT after connectingConnector says connected but no tools appear? Turn it on inside the chat, start a new chat, check Developer Mode and blocked toolsRead the fix →WordPress MCP connection failed, timed out, or returned a 5xx errorConnection failed, timeout, or 5xx when linking WordPress to your AI? Fix Cloudflare/WAF bot blocks, host firewalls, blocked /wp-jRead the fix →Fix: Shopify "access token invalid" or store won't connectShopify rejecting your token? Use the shpat_ Admin API token, the .myshopify.com domain and the right scopes. Exact steps, plus thRead the fix →WordPress REST API blocked by a security plugin (Wordfence, Solid Security, Disable REST API)Seeing rest_forbidden, rest_cannot_access or "Only authenticated users can access the REST API"? Find what blocks /wp-json/ and leRead the fix →WordPress REST API returns 404 (/wp-json/ not found)/wp-json/ returns 404 Not Found? Test ?rest_route=/, re-save permalinks, fix .htaccess or the Nginx rule, and clear the cache. SteRead the fix →Application passwords disabledRe-enable WordPress application passwords when a security plugin (Wordfence, Solid Security) turned them off.Read the fix →Setup docsStep-by-step guides for WordPress, WooCommerce, Shopify, Claude and ChatGPT.Open the docs →