About Cowboy MCP

By Andrew Ivanov · Last updated

Cowboy MCP is a free, open-source WordPress plugin that turns your self-hosted WordPress site into an MCP (Model Context Protocol) server, so AI agents like Claude, ChatGPT, Gemini, Cursor, and Codex can manage the site in plain English — with per-change undo and database checkpoints.

Instead of clicking through wp-admin, you describe the work in plain English — publish a post, update products, run a security scan, fix a broken page — and your agent carries it out directly on your site. It's built for people who run real WordPress sites — store owners, agencies, and developers — who'd rather delegate site work than do it by hand. Everything runs on your own server, with no accounts, no proxy, and no telemetry.

What is Cowboy MCP?

Cowboy MCP is a WordPress plugin that acts as an MCP server — a standard endpoint that AI agents connect to. Once installed on your self-hosted site, it exposes 137 tools an agent can call to manage content, run WooCommerce, administer the site, and fix problems. It's free, GPL-licensed, and runs entirely inside your own WordPress install.

Property Value
Category WordPress plugin · MCP server
Version 1.6.0
Tools 137
License GPL-2.0
Price Free — no paid tier
Requirements WordPress 6.2+ · PHP 8.0+
Distribution WordPress.org (opens in new tab)

Who makes it?

Cowboy MCP is built by Andrew Ivanov, a WordPress developer who builds WordPress and MCP tooling. They authored the plugin and publish it on the WordPress.org plugin directory under the contributor handle februality. You can browse the project source and other projects from the WordPress.org profile (opens in new tab) or GitHub (opens in new tab) account.

How is it built?

Cowboy MCP runs entirely inside WordPress as a native REST endpoint — there's no Node proxy, no hosted relay, and no telemetry. Your AI client connects straight to your server, and nothing about your site leaves it. Safety is layered in: safe mode confirms destructive actions, any change previews as a dry run, an audit log records every call, and a per-change undo journal plus database checkpoints roll changes back.

See the full security and safety model for how each safeguard works.

Where else can you find it?

Cowboy MCP lives on the WordPress.org plugin directory, which handles installation and updates. The source code is on GitHub, and the server is listed in the Glama MCP directory. These are the canonical places to install it, read the code, file an issue, or verify what it does — all linked below.

Press facts

Writing about Cowboy MCP? Here are the essentials, ready to copy.