Tool reference

List or search posts/pages/any post type with filters and pagination.

Get a single post/page including raw content, meta and terms.

Create a post, page or custom post type entry (title, content, status, terms, meta).

Update an existing post/page. Only provided fields change.

Delete a post (trash by default, or permanently with force=true).

List revisions of a post.

Duplicate a post/page (as a new draft, including its terms).

Get post meta: one key, or all public meta for a post.

Restore a post to one of its revisions.

Set a post meta value (protected keys starting with _ are blocked).

List media library attachments with pagination.

Get a single attachment with URL, sizes, alt text and metadata.

Download a file from a URL and add it to the media library.

Upload a local image or PDF to the media library from base64-encoded content.

Update an attachment title, caption and alt text.

Delete an attachment from the media library.

List terms of a taxonomy (categories, tags, custom).

Create a term in a taxonomy.

Update a term.

Delete a term from a taxonomy.

List comments with status and post filters.

Set a comment status: approve, hold, spam or trash.

Reply to a comment (or comment on a post) as the current user.

Delete a comment (trash by default, force to remove permanently).

Get a single term by id and taxonomy.

Get a single comment by id.

List users with role/search filters.

Get a user by id, login or email.

Create a user with a role.

Update a user (role, name, email, password).

Delete a user, optionally reassigning their content.

List navigation menus.

Get a menu with its items.

Create a navigation menu.

Add an item to a menu (custom link, page or post).

Remove an item from a menu.

List the theme's registered sidebars (widget areas) with their widget counts.

List widgets and their settings, optionally filtered to one sidebar.

Update the settings of an existing widget instance (merges the given fields).

Add a widget of a given type to a sidebar and return its new id.

Remove a widget instance from its sidebar and delete its settings.

Read a single option value by name.

List option names (optionally by prefix). Values omitted for safety.

Get common site settings (title, tagline, url, admin email, timezone, language, posts per page).

Create or update an option value.

Delete an option.

Update common site settings (title, tagline, admin email, timezone, start of week, posts per page).

List installed plugins with active state and version.

Activate a plugin by its file path (e.g. akismet/akismet.php).

Deactivate a plugin by its file path.

List installed themes.

List files inside a theme (defaults to the active theme).

Read the contents of a theme file.

Write (overwrite or create) a theme file. Content is raw by default; set "encoding":"base64" to write binary/base64 data. Blocked when DISALLOW_FILE_MODS is set.

Delete a file inside a theme. Blocked when DISALLOW_FILE_MODS is set.

List database tables with row counts.

Describe the columns of a table.

Run a read-only SQL query (SELECT/SHOW/DESCRIBE/EXPLAIN). Returns rows.

Run a writing SQL statement (INSERT/UPDATE/DELETE). Destructive DDL (DROP/TRUNCATE/ALTER) is always blocked.

Environment overview: WordPress/PHP/MySQL versions, active theme, plugin counts, URLs, multisite, memory, HTTPS.

List registered post types.

List registered taxonomies.

List scheduled cron events.

Return the tail of the WordPress debug.log if enabled.

Flush the WordPress object cache (and OPcache if available).

Flush permalink / rewrite rules (fixes 404s after structural changes).

Full-text search across content (title + body) for any post type.

Search and replace a string in post content across the site. Runs as a dry-run by default; set apply=true to write.

Change the status of many posts at once by id list.

Check for available core, plugin and theme updates (read-only).

Install a plugin from the WordPress.org directory by slug, optionally activating it.

Install a plugin from an uploaded ZIP (base64 "content", a "url" or a committed upload "session"), optionally activating it.

Install a theme from an uploaded ZIP (base64 "content", a "url" or a committed upload "session"), optionally activating it.

Update an installed plugin to the latest version.

Delete an installed plugin (deactivates it first if active).

Install a theme from the WordPress.org directory by slug.

Update an installed theme to the latest version.

Delete an installed theme (cannot delete the active theme).

Update WordPress core to the latest available version. High impact — use with care.

WooCommerce: list orders, filterable by status. Requires WooCommerce.

WooCommerce: get one order with items, totals and customer. Requires WooCommerce.

WooCommerce: change an order status (e.g. mark as completed/shipped). Requires WooCommerce.

WooCommerce: list products with search and status filters. Requires WooCommerce.

WooCommerce: get one product (price, stock, sku, status). Requires WooCommerce.

WooCommerce: update a product price, stock quantity or status. Requires WooCommerce.

WooCommerce: list coupons. Requires WooCommerce.

WooCommerce: create a coupon. Requires WooCommerce.

WooCommerce: list customers with order counts. Requires WooCommerce.

Detect the active SEO plugin (Yoast, Rank Math, AIOSEO or none).

Get the SEO title, meta description and focus keyword for a post.

Set the SEO title, meta description and/or focus keyword for a post (Yoast or Rank Math).

Get user meta: one key, or all public meta for a user.

Get term meta: one key, or all public meta for a term.

List a user's application passwords (names, created/last-used, never the secret).

Set a user meta value (privilege/auth keys are blocked).

Set a term meta value.

Create an application password for a user. The secret is returned once.

Revoke a user's application password by its UUID.

Read a transient (cache) value by name.

Site health summary: PHP/WordPress versions, HTTPS, debug, memory, object cache, and pending updates.

Content at a glance: posts by type/status, users by role, comments and media counts.

Schedule a cron event: a one-off at a timestamp, or recurring (hourly/twicedaily/daily/weekly).

Clear all scheduled events for a hook.

Set a transient value with an optional expiration (seconds).

Delete a transient by name.

Run OPTIMIZE TABLE on this site's database tables.

Delete expired transients to tidy the options table.

List files inside an installed plugin folder.

Read a file inside a plugin folder.

Write (overwrite or create) a file inside a plugin folder. Content is raw by default; set "encoding":"base64" to write binary/base64 data. Blocked when DISALLOW_FILE_MODS is set.

Delete a file inside a plugin folder. Blocked when DISALLOW_FILE_MODS is set.

List files in the uploads directory (optionally a subfolder).

Read a file from the uploads directory.

Write a text/asset file to the uploads directory. Content is raw by default; set "encoding":"base64" to write binary/base64 data. Executable extensions (php, js, cgi …) are blocked.

Delete a file from the uploads directory.

Start a chunked upload session for a large file. Returns a session id; send the file with wp_upload_append and finish with wp_upload_commit.

Append one base64 chunk (recommended 1–4 MB of raw data per call) to an upload session, in order.

Finish an upload session. Optionally verifies a sha256 checksum. The committed file can then be used via the "session" argument of the install and deploy tools.

Abort an upload session and delete its data.

Check the Site-Deploy connection: configuration, same-server verification and a live directory listing of the deploy root.

List a directory in the deploy area (path is relative to the deploy root).

Read a file from the deploy area (max 2 MB per call). Binary content is returned base64-encoded.

Write one file into the deploy area. Content sources: "content" (with optional "encoding":"base64") or a committed upload "session". Missing directories are created.

Upload and unpack a ZIP archive into the deploy area — deploys a whole site or folder in one step. Source: a committed upload "session" (recommended for large archives) or base64 "content". Existing files are overwritten.

Delete a file — or, with "recursive":true, a whole directory — in the deploy area.

Export content as a WordPress WXR file, saved to the uploads folder; returns a download URL.

Multisite: list the sites in the network. Requires multisite.

Multisite: create a new site in the network. Requires multisite.

Multisite: network-activate a plugin across all sites. Requires multisite.