Attach AI Brokers to WordPress.com with OAuth 2.1 and MCP

In October, we introduced that WordPress.com now helps MCP (Type Context Protocol), enabling AI brokers to have interaction along with your websites.

As of late, WordPress.com helps OAuth 2.1, making MCP integrations more effective. 

MCP shoppers paintings natively with OAuth 2.1, so authorizing the AI equipment you already use is as easy as including a URL and approving get right of entry to — no workarounds or guide configuration required.

With MCP, AI brokers can lend a hand with on a regular basis duties for your WordPress.com web site, comparable to discovering posts, pulling web site main points, or drafting new content material, when you keep an eye on what they may be able to get right of entry to.

How OAuth 2.1 powers MCP integrations

When an AI assistant (like Claude Desktop, ChatGPT, or a customized AI software) desires to get right of entry to your WordPress.com content material, OAuth 2.1 now handles the protected connection:

1. The MCP shopper requests authorization.
2. You’re redirected to WordPress.com to approve the relationship.
3. After approval, the customer receives protected tokens.
4. The customer makes use of the ones tokens to get right of entry to the WordPress.com MCP.
5. Tokens refresh robotically as wanted.

All of that is safe by means of PKCE (Evidence Key for Code Change). 

Even supposing anyone intercepts the authorization code, they may be able to’t use it with out the name of the game verification code that remains for your software.

Easy setup: Simply upload a URL

WordPress.com supplies an MCP server that AI equipment can hook up with the usage of OAuth 2.1.

All you’ll want to do is:

• Create a customized connector or app to your AI software
• Upload the WordPress.com MCP server URL
• Authenticate and approve get right of entry to thru WordPress.com the usage of OAuth 2.1

That’s it. 

WordPress.com handles authentication and permissions, so there’s no guide credential setup and no passwords to proportion.

Tip: View the MCP connection information within the developer documentation for Claude Desktop and ChatGPT–particular directions.

What MCP shoppers can do with WordPress.com

As soon as authenticated, MCP shoppers can engage along with your WordPress.com websites during the MCP API:

• Seek and retrieve posts: To find content material throughout your websites
• Learn put up main points: Get entry to complete put up content material, metadata, and feedback
• Get entry to web site data: Get web site settings, statistics, and person information

All of this occurs with the permissions you’ve explicitly granted, and you’ll revoke MCP get right of entry to at any time out of your WordPress.com MCP settings.

Get began with MCP and OAuth 2.1

OAuth 2.1 is to be had now for all AI brokers to hook up with WordPress.com. 

Whether or not you’re construction a customized integration or the usage of present MCP-compatible AI equipment, it supplies the protected authentication basis on your paintings.

Should you haven’t already, permit MCP for your WordPress.com account to begin connecting your AI assistants.

Helpful sources

Proportion Your Comments

We’d love to listen to the way you’re the usage of OAuth 2.1 and MCP with WordPress.com. Have questions or tips? Drop a remark underneath or proportion your revel in within the developer boards.