Build & manage WordPress
with AI, the right way.
Xaflo is the open-source bridge between Claude Code and your WordPress sites. A plugin, an MCP server, and a desktop control center — so AI can finally do real work on real WordPress.
wp_analytics_top_posts wp_audit_seo_bulk wp_get_seo
Found 8 pages averaging positions 12–28 with CTR below 1.4%. Drafted new titles using your brand voice. Show diff before
wp_set_seo?
One AI command. Real changes. Audited.
Xaflo exposes WordPress as a structured tool surface. Claude (or any MCP client) calls real REST endpoints, every write is permission-scoped, every action is logged.
MCP-native
One claude mcp add and Claude Code sees 74 typed tools: posts, media, SEO, analytics, plugins, CLI, DB queries — all your sites in one client.
claude mcp add my-wp claude-wp-mcp --site https://example.com --token eyJ0eXAi...
Scoped JWT auth
Issue tokens with surgical scopes: content:write, seo:read, cli:exec. Revoke instantly. No app passwords, no full admin.
Auto-backups
Every destructive write triggers a snapshot. Restore in one call. No “AI rewrote my homepage and now it’s gone.”
Analytics built in
Top posts, no-traffic pages, keywords, referrers — no GA4 SDK setup, just instant tools.
Multilingual aware
Polylang + WPML adapters. Read & write translations as first-class objects.
Audit log
Every tool call: who, what, when, payload. Stored in WP, exportable, RGPD-friendly.
Three components. One conversation.
The plugin lives on WordPress. The MCP server runs on your machine. The desktop app keeps your sites organized. Claude talks to all three.
Install plugin
Drop the Xaflo WP Connect plugin into your site. Issue a JWT with the scopes you trust.
Connect Desktop
Open Xaflo Desktop, paste site URL + token. The MCP server gets wired into Claude Code automatically.
Just ask Claude
“Audit my SEO” · “Rewrite this post in Italian” · “Find broken links” · “Optimize my hero image”. Claude calls the right tools.
Things you can say today.
Calls: wp_list_pages · wp_db_query · wp_search
Calls: wp_list_media · wp_optimize_image
Calls: wp_analytics_compare_period · wp_analytics_trend_by_category
Calls: wp_backup_list · wp_backup_restore
Built with WordPress respect.
Shipped under MIT.
No SaaS lock-in. No data exfiltration. No “AI assistant” paywall stacked on your hosting bill. Fork it, audit it, run it on your own infra.