wp-rocket-mcp-and-abilities
Installation
SKILL.md
WP Rocket: MCP server and AI Abilities
New in WP Rocket 3.23. WP Rocket ships an AI-integration surface that lets a Model Context Protocol (MCP) client — the bundled/trusted publisher is Claude — read and write WP Rocket settings on a live site in natural language. For a companion plugin / theme developer this skill covers how to scope, extend, or lock down that surface, not how to build an MCP client.
The MCP OAuth server is described in its own source as a proof of concept (inc/Engine/MCP/Auth/ClaudeClientVerifier.php:8). Treat it as experimental: the abilities are stable-ish public hooks, the OAuth transport is newer and off by default.
The two layers (the mental model that prevents 90% of mistakes)
WP Rocket's AI surface is two independent layers with opposite defaults:
| Layer | What it is | Default | Enable/kill filter |
|---|---|---|---|
| Abilities | WP Abilities API entries (wp-rocket/get-options, wp-rocket/set-option) in category wp-rocket-options |
ON (true) |
rocket_enable_abilities |
| MCP OAuth server | OAuth 2.1 + JWT transport at /wp-json/mcp/mcp-oauth-server, /oauth/*, /.well-known/* that lets a remote client authenticate and reach the abilities |
OFF (false) |
rocket_mcp_oauth_server_enabled |
Key consequences: