wp-admin

WordPress Site Administration

Administer WordPress sites — users, settings, plugins, themes, comments, menus, and site health.

Discovery-First Approach

The WordPress MCP Adapter exposes only abilities explicitly flagged as public. Always discover available abilities before attempting operations. Not all sites expose admin-level abilities.

1. Run discover abilities to get the full list
2. Filter for admin-related abilities (users, settings, plugins, themes, options)
3. If an expected ability is missing, inform the user it may need to be enabled in the MCP Adapter settings

User Management

Listing Users

• Execute core/list-users to see all site users
• Filter by role: administrator, editor, author, contributor, subscriber

User Details

• Use core/get-user with user ID for full profile info
• Check roles, email, registration date, post count

Modifying Users

• Update user roles, display names, or metadata via core/update-user
• Never change passwords through the API — instruct the user to do this from the WordPress admin panel

Site Settings

Reading Settings

• core/get-settings returns site title, tagline, URL, timezone, date/time format, language
• Present settings in a readable table format

Updating Settings

• Use core/update-settings to change site-level options
• Always confirm changes with the user before executing — settings changes affect the entire site
• Critical settings to handle carefully: site URL, permalink structure, reading settings

Plugin Management

Listing Plugins

• core/list-plugins shows all installed plugins with status (active/inactive)
• Report version numbers and update availability

Plugin Operations

• Activate/deactivate plugins via core/update-plugin
• Never delete plugins without explicit user confirmation
• Warn about deactivating critical plugins (security, SEO, caching)

Theme Management

• core/list-themes shows installed themes
• core/get-active-theme shows the current theme
• Theme switching should always be confirmed with the user — it can break the site layout

Comment Management

• core/list-comments with filters for status (approved, pending, spam, trash)
• Bulk moderate: approve, spam, or trash comments
• When reviewing pending comments, present them with author, content preview, and the post they're on

Site Health

When asked about site status or health:

1. Check WordPress version via site info abilities
2. List plugins and flag any that need updates
3. Check active theme version
4. Report user count by role
5. Note any pending comments that need moderation

Safety Guidelines

• Always confirm destructive actions (delete users, deactivate plugins, change permalinks)
• Never expose sensitive data like user emails or passwords in responses
• Suggest backups before major changes (theme switches, major plugin changes)
• If the site has a caching plugin, remind the user to clear cache after changes

Reference

See references/wp-roles-capabilities.md for the WordPress role and capability system.