Documentation
Everything you need to know to use WP Agent
Quick start
Get started with WP Agent in minutes.
Download the WP AI Assistant Bridge plugin from the dashboard and install it on your WordPress site via Plugins → Add New → Upload.
In the WordPress admin, go to AI Assistant → click "Generate API key". Note the Key ID and Secret displayed.
In the WP Agent dashboard, click "Add a site", enter your site URL and the API keys generated in the previous step.
Open the AI chat from your site page and start managing your WordPress in natural language.
Built-in AI Chat
The AI chat lets you manage your WordPress site directly from the dashboard, without needing to configure MCP.
Example commands
- →
Install WooCommerce and configure the store for France - →
Create a Contact page with a form - →
List all installed plugins and tell me which ones are outdated - →
Put the site in maintenance mode for 1 hour - →
Create a WooCommerce product "T-shirt" at $29
MCP Configuration (optional)
You can also connect your site via the MCP protocol to manage it from a compatible MCP client.
- Go to your site page in the dashboard
- Copy the MCP configuration displayed
- Paste it into your MCP client config file
WP-CLI (optional)
WP-CLI allows WP Agent to execute advanced commands on your site (cache management, imports, maintenance…). It's not required but unlocks additional features.
How to install WP-CLI
- Connect to your server via SSH
- Run: curl -O https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar
- Make it executable: chmod +x wp-cli.phar
- Move it: sudo mv wp-cli.phar /usr/local/bin/wp
- Verify: wp --info
Tip: If WP-CLI is not in the PATH, add to wp-config.php:
define('WPAIA_WPCLI_PATH', '/usr/local/bin/wp');Hosts with WP-CLI pre-installed
Security
WP Agent uses HMAC-SHA256 authentication to secure all communications between the dashboard and your WordPress site. Each request is signed with your secret key and includes a timestamp to prevent replay attacks.
- HMAC-SHA256 authentication on every request
- Timestamps to prevent replay attacks
- Blocklist for dangerous WP-CLI commands
- Complete audit trail of all actions
- TLS encryption for all communications
Frequently asked questions
Do I need an external API key?
No. The built-in AI chat is included in your subscription with a monthly token quota. No setup required.
Which WordPress versions are supported?
WP Agent supports WordPress 5.8 and above with PHP 7.4+.
Can I use WP Agent with WooCommerce?
Yes! WP Agent natively manages WooCommerce: products, orders, coupons, taxes, shipping, and more.
Is my data secure?
Yes. All requests are HMAC-SHA256 signed. We never store your WordPress content. API keys are encrypted.