A comprehensive MCP server for WordPress automation that enables users to manage content, themes, and site configurations using AI-driven workflows and the WordPress REST API. It provides a wide array of tools for site planning, management, and optimization compatible with tools like Cursor and Claude.
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
form-data uses unsafe random function in form-data for choosing boundary
axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`
axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge
Axios is Vulnerable to Denial of Service via __proto__ Key in mergeConfig
Axios is vulnerable to DoS attack through lack of data size check
process.env. You'll be asked to provide them before it can run.ANALYSIS_CACHE_TTLANALYTICS_DETAILED_LOGGINGANALYTICS_SAVE_INTERVAL_MSAPI_KEY_CACHE_TTLCLEANUP_INTERVAL_MSCONNECTION_TIMEOUTCONTEXT_CACHE_TTLCORS_ALLOW_HEADERS— Content-Type,Authorization,Accept,Origin,X-Requested-With,X-Api-KeyCORS_ALLOW_METHODS— GET,HEAD,PUT,PATCH,POST,DELETE,OPTIONSCORS_ALLOW_ORIGIN— (allows requests from any origin)DEFAULT_BATCH_SIZEDEFAULT_BUFFER_SIZEDEFAULT_CONCURRENCYDEFAULT_PAGE_SIZEENABLE_STREAM_COMPRESSIONENCRYPTION_KEYHEADLESS— true (optional, for browser automation)LOG_LEVELMAX_API_CONNECTIONSMAX_BROWSER_CONNECTIONSMAX_CONCURRENT_API_REQUESTSMAX_CONCURRENT_BROWSER_REQUESTSMCP_PROTOCOL_VERSIONOPENAI_ADVANCED_MODELOPENAI_API_KEY— your_openai_api_keyOPENAI_BASIC_MODEL— gpt-4.1-miniOPENAI_MAX_CONTEXT_TOKENSOPENAI_MAX_TOKENSOPENAI_MODELOPENAI_NANO_MODEL— gpt-4.1-nanoOPENAI_TEMPERATUREPORT— 3001 (optional, defaults to 3001)RATE_LIMIT_MAX_REQUESTSRATE_LIMIT_WINDOW_MSREQUIRE_API_KEY— true (recommended for production)RESOURCE_MAX_OPERATIONSRESOURCE_SAMPLING_INTERVAL_MSRESOURCE_SAVE_INTERVAL_MSRESOURCE_THRESHOLD_CPURESOURCE_THRESHOLD_MEMORYRESOURCE_THRESHOLD_OPERATION_TIMERESOURCE_THRESHOLD_RESPONSE_TIMERESOURCE_TRACKING_ENABLEDSLOWMOTANUKIMCP_MASTER_KEY— your_master_api_keyWP_APP_PASSWORDWP_MAIN_PASSWORDWP_SITE_URLWP_USERNAME[](https://m8ven.ai/mcp/applejax2-wordpress-mcp-1qt8yr)