WordPress Boost is an MCP server that gives AI agents visibility into:
- Registered hooks, post types, taxonomies
- Database schema and REST endpoints
- ACF field groups and WooCommerce config
- Security vulnerabilities (SQL injection, XSS, etc.)
- And 30+ other introspection tools
It also includes a security auditor that grades your site A-F and generates test data via Faker.
Setup is just:
composer require thanoseleftherakos/wordpress-boost --dev
php vendor/bin/wp-boost --initWorks with Claude Code, Cursor, Windsurf, PhpStorm, and any MCP-compatible tool.
GitHub: https://github.com/thanoseleftherakos/wordpress-boost
Would love feedback from anyone working with WordPress or MCP.