AI Agents Get Write Access to WordPress.com, Transforming Site Management

Automattic has unlocked write capabilities for AI agents interacting with WordPress.com sites, marking a significant step beyond simple data access. This update empowers AI tools like Claude, ChatGPT, Cursor, and OpenClaw to directly create, edit, and manage website content—with human oversight remaining central to the process.

From Read-Only Access to Active Collaboration

For the past six months, connecting an AI agent to a WordPress.com site primarily allowed for information retrieval. Users could query content, analyze site data, and identify areas for improvement. While valuable, this functionality was largely passive. Now, Automattic has added a “door,” enabling AI agents to actively contribute to site management.

What Can AI Agents Now Do?

The update introduces 19 new operations across six content types: posts, pages, comments, categories, tags, and media. Specifically, AI agents can now:

• Draft and publish blog posts: Generate content based on prompts or outlines.
• Build and update pages: Create landing pages, About pages, and other site pages, adhering to existing design specifications.
• Manage comments: Approve, reply to, or delete comments.
• Organize content: Create, rename, and restructure categories and tags.
• Update media metadata: Add or modify alt text, captions, and titles for improved accessibility and SEO.

Underlying Technology and Security

This functionality is built upon the Model Context Protocol (MCP), an open protocol designed to standardize how applications provide context to large language models. MCP was initially introduced on WordPress.com in October 2025 with read-only access. The addition of OAuth 2.1 authentication in January 2026 enhanced the security of these connections. An official Claude Connector was launched in February 2026, initially offering read-only access.

Human Oversight and Control

Automattic has prioritized user control and safety. Before any action is taken, the AI agent outlines its planned changes and requests confirmation. New posts are created as drafts, allowing for review before publication. Modifications to existing posts trigger warnings about immediate visibility. Deletions send items to the trash for 30-day recovery (except for categories and tags, which require an additional confirmation due to their permanent deletion). All actions are logged in the site’s Activity Log, and user role permissions are fully enforced.

Theme Awareness and Design Consistency

A key feature of the implementation is theme awareness. AI agents can analyze a site’s design system—including colors, fonts, spacing, and block patterns—to ensure new content aligns with the existing aesthetic.

Availability and Compatibility

Write capabilities are available on all WordPress.com paid plans. Users can enable them through the MCP dashboard (wordpress.com/me/mcp), toggling specific operations for each site. Compatible clients currently include Claude, ChatGPT, Cursor, and any other MCP-enabled tool.

WordPress.com’s Market Share and the Expanding MCP Ecosystem

WordPress.com powers a significant portion of the web, running more than 43% of all websites globally and holding a 60.5% share of the content management system market, according to data presented at Automattic’s State of the Word event in December 2025. The MCP ecosystem is too expanding, with the WordPress MCP Adapter progressing towards inclusion in WordPress Core. Automattic’s other products, WooCommerce and Beeper, also have their own MCP implementations.

Trust and the Future of AI-Powered Site Management

The shift towards granting AI agents write access to production sites necessitates a focus on trust. Automattic has addressed this by prioritizing the approval model and granular control over permitted operations. This approach aims to balance the benefits of AI-powered automation with the need for human oversight and site integrity.