Skip to content

About

WordPress meets the AI era

AI Bridge closes the gap between conversational AI and live WordPress sites — no middleware, no vendor lock-in, no data leaving your server.

Developers collaborating on WordPress and AI integration Self-hosted MCP No lock-in

0

MCP tools built-in

0

Runs on your server

MCP

Protocol native

Developer writing code for WordPress
Live runtime run_php · write_file · manage_posts

What is AI Bridge?

A WordPress plugin that exposes an MCP server from inside your install. Any MCP-compatible client can connect and operate on your site with developer-grade access — as if it were sitting at wp-admin.

MCP-native bridge

Cursor, Claude Desktop, and VS Code connect directly to your WordPress install through Model Context Protocol — no custom adapters per plugin.

Runs on your server

Prompts, credentials, and site data stay on your infrastructure. The optional Console is convenience — not a required cloud proxy.

Real PHP runtime

Tools execute inside WordPress with full API access. WooCommerce, Elementor, CF7, and every other plugin works automatically.

How connection flows

AI Client
Console
AI Bridge
WordPress

AI Bridge Console

The AI Bridge Console

A self-hosted dashboard for managing every WordPress site connected through AI Bridge. Import credentials, verify MCP connectivity, and run agent sessions — without leaving your browser.

Site registry

Encrypted credentials per site with one-click MCP tests.

Agent sessions

Route tool calls while conversation stays in your AI client.

Deploy workflows

Bootstrap Elementor sites with wp-elementor-bootstrap skills.

Optional interface

AI Bridge works standalone — Console is for multi-site teams.

MCP Session active
AI Bridge Console
Agent session Routing tool calls
> Bootstrap marketing site with Elementor widgets
→ write_file wp-content/themes/your-project-slug/style.css
→ run_php YPS_Setup::run_import()
→ run_php YPS_Elementor_Setup::setup_pages()
✓ Home, About, Blog, Contact — Elementor ready
Connected Tools ready Deploying Live

Security

Security model & architecture

A connected AI agent operates with administrator-level power on your WordPress install. AI Bridge adds guardrails — but always maintain backups, use staging first, and review agent actions.

High-level architecture

Your AI agent handles conversation and reasoning. The Console (if used) is only a management interface. All tool execution happens inside WordPress via the AI Bridge plugin.

  • MCP / REST — Agents call /wp-json/ai-bridge/v1/tools/* with Application Password auth over HTTPS.
  • run_php — Executes in the live PHP runtime with full WP API access; sandboxed when writing new files.
  • write_file — Creates or patches theme, plugin, and asset files on disk within allowed paths.

Off by default

Installing AI Bridge does not expose any AI abilities. An administrator must explicitly enable MCP tools and confirm the security implications before agents can connect.

Application Password authentication

Every REST and MCP request requires HTTPS and a WordPress Application Password tied to an administrator account. There is no anonymous or public tool access.

PHP sandbox & crash recovery

New PHP files written by agents are executed inside a sandbox with automatic crash recovery. Fatal errors roll back the sandbox state instead of taking down the whole site.

Protected core paths

Critical WordPress paths (wp-config.php, core files, the AI Bridge plugin itself) cannot be deleted. The plugin refuses to deactivate itself while an agent session is active.

Kill switch

A secret URL, known only to the site owner, instantly disables all AI abilities from any browser — no wp-admin login required.

Console is optional

The AI Bridge Console is a local interface for managing sites. Conversation and reasoning happen in your AI agent (Cursor, Claude, etc.) — the Console only stores credentials and forwards authenticated tool calls.

Recommended practices

  • Use AI Bridge on staging or development installs before production.
  • Rotate Application Passwords regularly and revoke unused credentials.
  • Keep the kill-switch URL private and test it after enabling abilities.
  • Review agent-generated file changes in version control before deploying.

Ready to connect your AI?

Install AI Bridge on your WordPress site and link it to the Console in minutes.