Xaflo
The modern WordPress × AI connection

Build & manage WordPress with AI, the right way.

Xaflo is the open-source bridge between Claude, ChatGPT and your WordPress sites. A plugin, an MCP server, and a desktop control center — so AI can finally do real work on real WordPress.

MIT open source Zero telemetry Windows & Linux · macOS soon Works with Claude & ChatGPT
Xaflo Desktop · v1.2.0 Connected
Dashboard
Sites
File Explorer NEW
Tokens
Backups
Audit log
Welcome backAll systems operational
MCP · stdio
Site health98/100
Endpoints90
Active sites3
Updates0up to date
API activity ● live
0typed REST endpoints
0MCP tools for AI clients
0telemetry sent — ever
0open source, MIT licensed
See it think

A conversation, not a dashboard.

You describe the outcome. The AI picks the right Xaflo tools, shows its work, and asks before it writes.

claude · wpconnect.xaflo.com · 83 tools loaded
YOU Rewrite the title tags of the 10 worst-performing pages on my site for better CTR, but don't touch anything ranking in the top 3.
I'll pull analytics, filter by position, and propose new titles before applying anything.
wp_analytics_top_posts wp_audit_seo_bulk wp_get_seo
Found 8 pages averaging positions 12–28 with CTR below 1.4%. Drafted new titles using your brand voice. Show diff before wp_set_seo?
YOU Apply the changes & create a backup first
wp_backup_create · snapshot in progress…
What it does

One AI command. Real changes. Audited.

Xaflo exposes WordPress as a structured tool surface. Claude or ChatGPT calls real REST endpoints — every write is permission-scoped, every action is logged.

MCP-native

One claude mcp add and your AI client sees 83 typed tools: posts, media, SEO, analytics, plugins, files, CLI, DB queries — all your sites in one place.

claude mcp add my-wp claude-wp-mcp --site https://example.com --token eyJ0eXAi…

Scoped JWT auth

Issue tokens with surgical scopes — 23 of them: content:write, seo:read, cli:exec. Revoke instantly. No app passwords, no full admin.

Auto-backups

Every destructive write triggers a snapshot. Restore in one call. No "AI rewrote my homepage and now it's gone."

Analytics built in

Top posts, no-traffic pages, keywords, referrers — no GA4 SDK setup, no OAuth dance. Just instant tools your AI can reason over.

NEW in 1.4

File explorer

Browse, search, upload, download, rename and organize files on the server — six new endpoints, with confirmation required before anything is deleted.

Audit log

Every tool call: who, what, when, payload. Stored in WordPress, exportable, GDPR-friendly.

Bring your own AI

Claude or ChatGPT? Both.

Xaflo speaks MCP over stdio — the open protocol both assistants understand. Connect whichever you already pay for. Or both, to the same sites.

Claude Code & Claude Desktop

Anthropic · MCP native

  • All 83 tools available in Claude Code with one claude mcp add
  • Claude Desktop support via a snippet in claude_desktop_config.json
  • Great for long, multi-step site work: audits, refactors, migrations

ChatGPT Desktop

OpenAI · MCP via stdio

  • The same 83 typed tools, exposed through ChatGPT's MCP support
  • Same scoped tokens, same audit log, same auto-backups
  • Switch assistants without touching your WordPress setup

One-click setup instructions

Xaflo Desktop v1.2 generates ready-to-paste setup configs per site — one for Claude, one for ChatGPT. Pick a site, click "Setup instructions", paste. Done.

Get Xaflo Desktop →
How it works

Three components. One conversation.

The plugin lives on WordPress. The MCP server runs on your machine. The desktop app keeps your sites organized. Your AI talks to all three.

1

Install the plugin

Drop Xaflo WP Connect into your site. Issue a JWT with exactly the scopes you trust — nothing more.

Get the plugin →
2

Connect Desktop

Open Xaflo Desktop, paste site URL + token. The MCP server gets wired into Claude or ChatGPT automatically.

Get the app →
3

Just ask AI

"Audit my SEO" · "Rewrite this post in Italian" · "Find broken links" · "Optimize my hero image". The AI calls the right tools.

Read the docs →
Prompts that just work

Things you can say today.

Find every page with no internal incoming links and propose 3 cluster topics to interlink them into.

Calls: wp_list_pages · wp_db_query · wp_search

Compress every image larger than 200 KB on the homepage. Keep alt text, swap to webp.

Calls: wp_list_media · wp_optimize_image

Compare last 30 days vs the previous 30. Which category dropped most?

Calls: wp_analytics_compare_period · wp_analytics_trend_by_category

Restore the homepage from the backup taken 10 minutes ago.

Calls: wp_backup_list · wp_backup_restore
Ready when you are

Built with WordPress respect.
Shipped under MIT.

No SaaS lock-in. No data exfiltration. No "AI assistant" paywall stacked on your hosting bill. Fork it, audit it, run it on your own infra.

Open source · MIT v1.0.0 · 2026-05-15 Windows · macOS · Linux 74 WP tools