A WordPress plugin that extends the WordPress MCP Adapter to expose Elementor data, widgets, and page design tools as MCP (Model Context Protocol) tools. This enables AI agents like Claude, Cursor, and other MCP-compatible clients to create and manipulate Elementor page designs programmatically.

Introducing EMCP Pro! 25% Discount for GitHub Community: MSRGIT

Grab the Deal

Features

• New in v3.3.0 — five "intelligence, not just transport" features that let an AI agent understand, undo, and reuse your site, plus a big community contribution:
  • Page Snapshot (get-page-snapshot) — one normalized digest of a page (structure, tokens-in-use, responsive overrides, content outline, SEO-lite, + opt-in performance/a11y/SEO audits) so the AI reasons about a page in a single call
  • Change History & Rollback (list-changes / get-change / rollback-change) — every AI-made Elementor/filesystem/database change is recorded to one ledger and can be undone, from MCP and a new History admin tab
  • Content Search (search-content / reindex-search) — find the site's own pages, templates, widgets, and global styles by natural-language query so the AI reuses existing work instead of rebuilding it
  • Content Mirror (export-content / restore-content / list-content-exports) — export page/template content to git-trackable JSON files for external version control
  • Navigation Menus (menu-read / menu-write + [emcp_menu] shortcode) — full WordPress nav-menu management over MCP (community-contributed)
  • Multi-site proxy (@msrbuilds/emcp-proxy 1.9.0) — drive many WordPress installs from one connection with a site registry and emcp_use_site
• A focused MCP toolset covering the full Elementor page-building workflow — and, since v3.0.0, growing beyond Elementor into general WordPress management across many domains: content, nav menus, settings, plugins & themes, media library, users, performance, filesystem, and database. The 62 per-widget tools are folded into a catalog-backed model, so the active surface stays small — every widget is still reachable via discover → inspect → act. Counts scale with your environment (registered counts; v3.3.0 adds 11 always-on tools over the live-verified 4.1.4 baseline):
  • 128 tools — free Elementor only (104 active by default)
  • 142 tools — free Elementor + Elementor 4.0 atomic elements (118 active)
  • 138 tools — with Elementor Pro (99 active)
  • 152 tools — with Elementor Pro + Elementor 4.0 (113 active; + WooCommerce adds no new tools)
  • +2 ACF tools when Advanced Custom Fields (free or PRO) is active — acf-read and acf-write, two dispatchers exposing 15 ACF operations (8 read, 7 write; the Custom-Post-Type/taxonomy operations need ACF 6.1+). Each dispatcher is a single toggle under Tools → Plugins → ACF (listing the operations it covers); acf-read is on by default, acf-write ships off (v3.2.1)
  • 39 of these ship disabled-by-default (SEO & Accessibility, Widget Builder, PHP Snippets, the 9 Plugins & Themes write tools, delete-media, the 2 Users write tools, the 3 Filesystem write tools, and the 3 Database write tools) — plus the 7 ACF write operations are off by default within acf-write — so the typical active surface is smaller until you opt in on the Tools tab
• WordPress Content (beyond Elementor) — Create and manage posts, pages, and any custom post type — content, status, taxonomy terms, custom fields, and featured images — via MCP, without touching Elementor data. Built on WP core; every post carries an is_elementor flag that steers agents to the Elementor tools for builder pages
• WordPress Settings (beyond Elementor, domain 2) — Read and batch-update core WordPress settings (general/reading/writing/discussion/media/permalinks) over MCP. Curated allowlist only — no arbitrary option access; admin_email is read-only; permalink changes auto-flush rewrite rules. manage_options. (v3.0.0)
• Plugins & Themes (beyond Elementor, domain 3) — Discover, install (wordpress.org only), update, activate/deactivate, and delete plugins and themes over MCP. Strong guardrails (EMCP Tools + Elementor protected; per-op capability gating; direct-filesystem-only); the 9 mutation tools ship disabled-by-default. manage_options-class capabilities. (v3.0.0)
• Media Library (beyond Elementor, domain 4) — Fetch full attachment detail (get-media: every registered size, dimensions, metadata, alt/caption/description), edit metadata (update-media: alt text, title, caption, description — a one-call accessibility/SEO fix), and delete attachments (delete-media: destructive and effectively permanent; disabled-by-default and requires confirm:true). URL uploads continue via sideload-image. (v3.0.0)
• Users (beyond Elementor, domain 5) — List and read WordPress users, and safely create/edit non-admin profiles over MCP. Hard guardrails: no delete-user and no role-change tool; create-user assigns only non-admin roles and auto-generates a strong password (emailed to the new user — never returned); update-user edits profile fields only and refuses any user with admin-level capabilities (administrators are off-limits). list-users/get-user are enabled by default; create-user/update-user are disabled-by-default. (v3.0.0)
• ACF / ACF PRO (beyond Elementor) — Read and write Advanced Custom Fields values on posts and options pages, discover and author field groups, and register ACF-managed Custom Post Types and taxonomies (ACF 6.1+) — enough to stand up a full content structure end-to-end (CPT → taxonomy → field group → posts with values). Full Pro field support: repeaters, flexible content (layout-validated), galleries, groups, and clones round-trip as nested JSON. Only registers when ACF is active; writes resolve field names to keys, ship disabled-by-default, and there is deliberately no delete and no slug/field rename (renames orphan stored content). (v3.2.1)
• Performance & Security (beyond Elementor, domain 6) — Two read-only diagnostics. analyze-performance audits server config, WordPress internals (database size, autoloaded options, post revisions, cron backlog, persistent object cache, OPcache, plugin count), and a target page (defaults to the frontpage; optional url/post_id) for performance bottlenecks. scan-security — the security counterpart — scans across malware heuristics (eval/base64 obfuscation, request-driven execution, command execution, webshells, encoded blobs, executable PHP under uploads), WordPress core-file integrity (against the official wordpress.org checksums), hardening (file editing, debug output, admin username, XML-RPC, version disclosure, HTTPS, security headers), and outdated/abandoned software. Both return a scored report (0-100 + A–F grade) with severity-tagged findings and ranked recommendations; the malware walk is bounded and never returns full file contents (path:line + snippet only). Read-only, self-contained (no external API beyond optional, graceful wordpress.org calls), enabled by default. (v3.0.0)
• Filesystem (beyond Elementor) — Read and scan any file inside the WordPress install (read-file, list-directory, search-files — enabled by default). Modify and delete files (write-file, edit-file, delete-file) are disabled-by-default: every path is confined to ABSPATH (no traversal/symlink escape), writes auto-back up the original, wp-config.php/.htaccess are refused, the edit_files capability is enforced (honoring DISALLOW_FILE_EDIT), and all writes are audit-logged. delete-file requires confirm:true. manage_options. (v3.0.0)
• Database (beyond Elementor) — Inspect the database with flexible read-only SQL (list-tables, describe-table, query — SELECT/SHOW/DESCRIBE/EXPLAIN only; writes, DDL, stacked statements, MySQL /*! executable comments, and file-access SQL are rejected; results capped; enabled by default). Structured parameterized writes (insert-row, update-rows, delete-rows) are disabled-by-default: uses $wpdb throughout (no raw write-SQL/DDL), forces a non-empty WHERE on update/delete, refuses wp_users/wp_usermeta, captures a before-image snapshot to an audit log, and delete-rows requires confirm:true. manage_options. (v3.0.0)
• Query & Discovery — List widgets, inspect page structures, read element settings, browse templat