Download
WordPress plugin · MCP server · Desktop app

Say it once. Every site does it.

Xaflo connects Claude and ChatGPT to your WordPress sites through 84 typed MCP tools. Scoped tokens, a two-step confirmation before anything irreversible, and an audit log of every call.

Download Xaflo Desktop Get the WordPress plugin

Plugin free · MIT · Desktop v2.0.2 for Windows & Linux

84MCP tools your assistant can call
94REST routes in the plugin, all behind scoped tokens
v1.7.0WordPress plugin, released Nov 11, 2026
v2.0.2Xaflo Desktop, released Nov 11, 2026
0Telemetry sent to Xaflo
One real conversation

You describe the outcome. It shows its work.

The assistant reads first, proposes the change, and writes only after you agree. Every call it makes is a named tool you can look up.

  • Reads before it writes. Analytics and SEO data come in through read-only tools.
  • Backup on request. You asked for one, so wp_backup_create runs before the first title changes.
  • Logged. Each wp_set_seo call lands in the site’s audit log.
claude · studio-nord.example84 tools
You

Rewrite the title tags of our worst-performing pages for better CTR. Don’t touch anything ranking in the top 3.

Claude

I’ll pull analytics, filter by position, and draft new titles before changing anything.

wp_analytics_top_posts90 days, by CTR
wp_audit_seo_bulk32 pages checked
wp_get_seo8 current titles

8 pages sit between positions 12 and 28 with CTR under 1.4%. Here are the first three:

SEO titlebefore → after
/blog/wordpress-backup-guide/pos 14WordPress Backup GuideHow to back up WordPress in 5 minutes (and restore it in 1)
/services/maintenance/pos 19Maintenance – Studio NordWordPress maintenance plans with monthly reports | Studio Nord
/blog/core-web-vitals/pos 23Core Web VitalsCore Web Vitals on WordPress: 7 fixes that move LCP
You

Looks good. Apply all 8, back up first.

Claude
wp_backup_createscope db
wp_set_seo× 8
8 titles written · backup taken · logged
  • wp_backup_create
  • wp_set_seo
  • wp_publish_post
  • wp_optimize_image
  • wp_analytics_top_posts
  • wp_find_broken_links
  • wp_audit_seo_bulk
  • wp_create_page
  • wp_set_media_meta
  • wp_backup_restore
  • wp_analytics_compare_period
  • wp_link_post_translation
  • wp_fs_write
  • wp_fs_search
  • wp_db_query
  • wp_performance_check
What you get

Built for real changes on real sites.

The plugin turns WordPress into a set of typed tools. The guardrails are part of the plugin, not a promise in a prompt.

Scoped JWT tokens

Issue a token per site and per job with only the scopes it needs, out of 24. Full file control and the wp-admin sign-in are separate permissions, never on by default. Revoke a token in one click; no application passwords.

Backups in one call

Take a full backup with wp_backup_create and restore it with wp_backup_restore. Theme, plugin and file writes keep a copy of each file they change; post edits keep revisions.

Audit log

Every tool call is stored in WordPress: who, which tool, when, and the payload.

Built-in analytics

Top posts, pages with no traffic, referrers and period comparisons, from the analytics plugin you already run.

Files, for you and Claude

Browse, search, upload, rename and download server files from Xaflo Desktop; Claude gets the same 9 file tools. A normal token changes only the uploads folder. Full file control is a separate permission you grant on purpose, and with it every overwrite, rename and delete asks first.

Multi-site fleet

Connect every site you run and see them in one place. Desktop Lite connects one site; WP Xaflo Pro removes the limit and runs the same operation across many sites in parallel. With a token that allows it, Desktop also opens wp-admin already signed in: a one-time link, valid for 60 seconds, never shown or stored.

See Xaflo Desktop
Bring your own assistant

Claude or ChatGPT. Or both, on the same sites.

Xaflo speaks MCP over stdio, the open protocol both assistants support. Use the one you already pay for.

Claude Code & Claude Desktop

Anthropic · MCP native
  • All 84 tools in Claude Code, file tools included, with one claude mcp add
  • Claude Desktop through claude_desktop_config.json
  • Good for long, multi-step work: audits, migrations, refactors

ChatGPT Desktop

OpenAI · MCP over stdio
  • The same 84 typed tools
  • Same scoped tokens, backups and audit log
  • Switch assistants without touching WordPress
Claude Code · terminal
claude mcp add my-wp claude-wp-mcp --site https://example.com --token <your-token>

Xaflo Desktop writes this setup for you: pick a site, click “Setup instructions”, paste.

Setup

Three steps, about five minutes.

The plugin lives on WordPress. The MCP server runs on your machine. Xaflo Desktop keeps your sites and tokens organised.

  1. Install the plugin

    Add Xaflo WP Connect to your site and issue a token with exactly the scopes you trust.

    Get the plugin

  2. Connect Xaflo Desktop

    Paste the site URL and the token. Desktop carries the MCP server and wires it into Claude or ChatGPT; nothing else to install.

    Download Desktop

  3. Ask

    “Audit my SEO.” “Find broken links.” “Translate this post to Italian.” The assistant picks the tools; you approve the writes.

    Read the docs
Prompts that work today

Copy one. Paste it into your assistant.

Each card lists the tools the assistant will call, so you know what it will read and what it will change.

Find every page with no internal links pointing to it and suggest three topic clusters to connect them.

Calls
wp_list_pageswp_db_querywp_search

Compress every image over 200 KB on the homepage. Keep the alt text and switch to WebP.

Calls
wp_list_mediawp_optimize_imagewp_set_media_meta

Compare the last 30 days with the previous 30. Which category dropped the most?

Calls
wp_analytics_compare_periodwp_analytics_trend_by_category

Restore the homepage from the backup taken 10 minutes ago.

Calls
wp_backup_listwp_backup_restore

Check every post for broken links and list them by page, worst first.

Calls
wp_find_broken_links

Which pages had no visits this quarter? Draft a meta description for each and show me before saving.

Calls
wp_analytics_no_traffic_pageswp_analyze_seowp_set_seo
Pricing

Free to start. Pay when you run a fleet.

Compare editions
WordPress plugin
Free MIT licensed

The bridge itself. The code is identical in every edition.

  • 94 REST routes
  • Scoped tokens, backups, audit log
  • Works with any MCP client
Get the plugin
Desktop Lite
€0 forever

Everything you need to run one site with an assistant.

  • 1 connected site
  • All 84 tools, nothing gated
  • File explorer, maintenance mode, debug console
  • One-click setup for Claude and ChatGPT
Download Lite
WP Xaflo Pro
€199 per year

For people who manage many sites.

  • Unlimited connected sites
  • Bulk operations across sites, in parallel
  • Cross-site search and reports
  • Priority email support, 14-day refund
Get WP Xaflo Pro
Ready when you are

Your sites, one sentence away.

Install the free plugin, connect Desktop, and ask for the first change. No SaaS in between: requests go from your machine to your sites.

Download Xaflo Desktop Read the docs