Connect AI Agents to WordPress.com with OAuth 2.1 and MCP

In October, we announced that WordPress.com now supports MCP (Model Context Protocol), enabling AI agents to interact with your sites.

Today, WordPress.com supports OAuth 2.1, making MCP integrations simpler. 

MCP clients work natively with OAuth 2.1, so authorizing the AI tools you already use is as straightforward as adding a URL and approving access — no workarounds or manual configuration required.

With MCP, AI agents can help with everyday tasks on your WordPress.com site, such as finding posts, pulling site details, or drafting new content, while you control what they can access.

How OAuth 2.1 powers MCP integrations

When an AI assistant (like Claude Desktop, ChatGPT, or a custom AI tool) wants to access your WordPress.com content, OAuth 2.1 now handles the secure connection:

1. The MCP client requests authorization.
2. You’re redirected to WordPress.com to approve the connection.
3. After approval, the client receives secure tokens.
4. The client uses those tokens to access the WordPress.com MCP.
5. Tokens refresh automatically as needed.

All of this is protected by PKCE (Proof Key for Code Exchange). 

Even if someone intercepts the authorization code, they can’t use it without the secret verification code that stays on your device.

Simple setup: Just add a URL

WordPress.com provides an MCP server that AI tools can connect to using OAuth 2.1.

All you’ll need to do is:

• Create a custom connector or app in your AI tool
• Add the WordPress.com MCP server URL
• Authenticate and approve access through WordPress.com using OAuth 2.1

That’s it. 

WordPress.com handles authentication and permissions, so there’s no manual credential setup and no passwords to share.

Tip: View the MCP connection guide in the developer documentation for Claude Desktop and ChatGPT–specific instructions.

What MCP clients can do with WordPress.com

Once authenticated, MCP clients can interact with your WordPress.com sites through the MCP API:

• Search and retrieve posts: Find content across your sites
• Read post details: Access full post content, metadata, and comments
• Access site information: Get site settings, statistics, and user data

All of this happens with the permissions you’ve explicitly granted, and you can revoke MCP access at any time from your WordPress.com MCP settings.

Get started with MCP and OAuth 2.1

OAuth 2.1 is available now for all AI agents to connect to WordPress.com. 

Whether you’re building a custom integration or using existing MCP-compatible AI tools, it provides the secure authentication foundation for your work.

If you haven’t already, enable MCP on your WordPress.com account to start connecting your AI assistants.

Useful resources

• WordPress.com MCP documentation
• Available MCP tools reference
• MCP prompt examples
• Model Context Protocol documentation

Share Your Feedback

We’d love to hear how you’re using OAuth 2.1 and MCP with WordPress.com. Have questions or suggestions? Drop a comment below or share your experience in the developer forums.

Original Post https://wordpress.com/blog/2026/01/22/connect-ai-agents-to-wordpress-oauth-2-1/