REST API and MCP access control: disable REST API routes for guests, limit AI agents and application passwords, see which plugin opened each door.
Alternatives to Picot MCP
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
Relevant replacements
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
WPRaiz Content API Toolv2.0.2
REST API + MCP Server for WordPress. Create, update, and manage posts programmatically. AI content generation with your own API keys (BYOK).
Enable Abilities for MCPv2.13.7
Connect Claude, ChatGPT & any MCP client to WordPress. 112 abilities: content, SEO, WooCommerce, FSE, LMS & more. Free & self-hosted.
ClearComet Cloak for MCPv4.0.7
Hide your WordPress MCP server and Abilities API from strangers. Only you and the AI assistants you choose get in.
KOZ Site Bridgev0.6.0
Read-only site diagnostics for a private GPT or AI client: scoped API keys, SEO and sitemap audits, 404 log, security and consent checks.
DraftFence AI Reviewv0.4.0
Govern AI agent access to WordPress with approvals, scoped content actions, rate limits, and audit logs.
An admin-curated ability registry for the WordPress Abilities API, with a per-ability on/off switch and optional multisite network control.
Abilities Bridgev1.4.1
MCP server for WordPress. Connect Claude AI or OpenAI to execute WordPress Abilities with configurable permissions.
The most secure MCP Server for WordPress with Undo, plus AI Copilot & Chat Agent. ChatGPT, Claude, Gemini, OpenRouter & Mistral.
Sticklightv1.1.0
Use WordPress authentication and permissions in external React applications via secure REST API endpoints.