Your whole WordPress site, run from your AI assistant
Connect your site once and ask - “audit my site”, “write a post and save it as a draft”, “add this user”, “what was my profit last month?”, “create a course” - the AI asks what it needs, drafts it, and gives you a link to review.
- One-click connect from wp-admin - works with security plugins
- Every AI action logged in your own wp-admin dashboard
- Drafts and confirmations before changes
woocommerce_get_profit_report3 creditsLast month: 142 orders, revenue 8,940, product cost 4,210, fees 268 - profit 4,312 (48% margin). Best earners:
| Product | Profit |
|---|---|
| Leather wallet | 1,240 |
| Canvas tote | 980 |
| Key holder | 615 |
3 products have no cost price, so they count at 0 - shall I add costs for them?
https://toolkitbackend-j69m.onrender.com/api/v1/wordpress/mcpClick "Open Claude connectors" below - claude.ai opens on Settings → Connectors.
Click "Add custom connector". Name: WordPress. URL: use the Copy button above and paste it.
Click Add, then Connect. Sign in to 500Toolbox and click Allow. Done.
In a chat, open the tools menu (the + / sliders icon) and switch WordPress on.
A connector added on claude.ai also appears in the Claude desktop and mobile apps. On Team and Enterprise plans an owner adds it once under Organization settings → Connectors; members then click Connect.
Why ask your assistant
wp-admin, in plain language
Every plugin, not just a few
The connector maps every installed plugin's API, post types and taxonomies, so the AI can read forms, SEO data, bookings, memberships and more - and explain them from the real data.
WooCommerce & courses built in
Sales, profit, orders, products and stock; LearnDash, Tutor, LifterLMS, LearnPress, Sensei and MasterStudy courses and enrollments.
Draft, review, publish
The AI asks step by step for what it needs, creates posts, courses and products as drafts, and gives you the preview link before anything goes live.
How it works
Set up once in about two minutes
Install the plugin, click Connect
Upload the free 500Toolbox Connector plugin, open wp-admin → 500Toolbox and click Connect - then approve on 500Toolbox. No password to copy.
Add one URL to your AI app
Paste the server URL as a custom connector in Claude, ChatGPT, Cursor or VS Code and click Connect.
Ask in plain language
The assistant picks the right tool, works on your site and shows you the result with links to check it.
Free plugin · recommended
Connect with the 500Toolbox Connector plugin
The easiest and most reliable way to connect: one click in wp-admin, no application password, and it works when security plugins block application passwords or the REST API. It also reaches plugin data that has no API (Tutor LMS quizzes, questions, progress and marks) and gives the site owner a dashboard of everything the AI did - charts, an activity log, read-only mode and per-area permissions.
- Download the plugin zip below (free).
- In wp-admin go to Plugins → Add New → Upload Plugin, choose the zip, then Install Now and Activate.
- Open wp-admin → 500Toolbox and click "Connect to 500Toolbox" - approve on the page that opens. Sites already connected with an application password keep working; connect through the plugin to switch.
Keep it active: the connection runs through the plugin. To stop AI access, click Disconnect in wp-admin → 500Toolbox (or switch the site off here). Deleting the plugin also removes its keys, settings and activity log.
What you can ask
Things it does on your site
“List my WordPress sites and audit the bakery site.”
“Audit my WordPress site and tell me what to fix first.”
“Write a blog post about choosing a laptop for students and save it as a draft.”
“Add a new editor: sara@example.com. Ask me what you need.”
“Which plugins are installed and what data does each one have?”
“How many students are in each of my courses?”
“What was my profit last month, and which products earn the most?”
“Add a product "Leather wallet" for 29.99 with 50 in stock.”
“Show me the latest Contact Form 7 / WPForms entries.”
“Build a Tutor course on Excel basics: 4 topics, 3 lessons each and a 10-question quiz per topic.”
“Which students scored below 50% in my Tutor quizzes, and in which questions?”
55 tools
Everything your assistant can do in WordPress
Site, plugins and any plugin's data; content, media and comments; users; LMS courses; full Tutor LMS management; plugins without an API; and WooCommerce. Tool names start with wordpress_ or woocommerce_.
Site, plugins & any plugin's data
Outdated plugins and themes, Site Health, HTTPS, exposed files, XML-RPC, user enumeration, SEO basics, speed and WooCommerce status - with a score.
wordpress_audit_siteSite, connected user and permissions, WooCommerce, LMS and every plugin API.
wordpress_get_site_infoMaps each installed plugin to its API, post types and taxonomies; lists any plugin's routes.
wordpress_discoverGET any REST route - forms, SEO, bookings, memberships, LMS reports, anything.
wordpress_rest_getPOST/PUT/DELETE on any plugin route, always confirmed first.
wordpress_rest_writeVersions, active or not, and available updates from WordPress.org.
wordpress_list_pluginsTurn a plugin on or off.
wordpress_manage_pluginPosts, pages, media & comments
Creates a draft with categories and tags by name, then gives you the preview link.
wordpress_create_contentChange title, text, status, slug, categories, image or date.
wordpress_update_contentPosts, pages or any custom post type with status and counts.
wordpress_list_contentFull text, SEO title and description of one item.
wordpress_get_contentTrash (restorable) or delete permanently.
wordpress_delete_contentFrom a URL into the media library, with alt text.
wordpress_upload_mediaNo image link? Free step-by-step guide with direct links to your wp-admin.
wordpress_media_upload_guideAny taxonomy with item counts.
wordpress_list_termsPending, approved or spam, with counts.
wordpress_list_commentsApprove, hold, spam, trash or reply.
wordpress_moderate_commentUsers
Users with roles and a count per role.
wordpress_list_usersCreates the account and emails a "set your password" link.
wordpress_create_userRole, email or name. Administrators are protected.
wordpress_update_userReassigns their content. Administrators cannot be deleted.
wordpress_delete_userSends WordPress's own reset email to a user who forgot it.
wordpress_send_password_resetCourses (any LMS)
Courses, lessons, quizzes and enrollments in LearnDash, Tutor, LifterLMS, LearnPress, Sensei or MasterStudy.
wordpress_lms_overviewCurriculum and enrolled students of one course.
wordpress_lms_get_courseCourse plus lessons as a draft, with preview and edit links.
wordpress_lms_create_courseTutor LMS - courses, quizzes, students & marks (companion plugin)
Course, topics, lessons and quizzes with questions in one go - as a draft with preview link.
wordpress_tutor_create_courseExtend an existing course or topic.
wordpress_tutor_add_contentTrue/false, single and multiple choice, open-ended, short answer, fill in the blanks.
wordpress_tutor_add_questionsTopics, lessons and quizzes in order, students and completions.
wordpress_tutor_get_courseSettings, questions with correct answers, average score and pass rate.
wordpress_tutor_get_quizTitle, description, price, level, status.
wordpress_tutor_update_courseTime limit, passing grade, attempts; delete questions.
wordpress_tutor_update_quizWho is enrolled, progress %, lessons done, quiz scores.
wordpress_tutor_course_studentsEvery course and quiz mark of one student.
wordpress_tutor_student_reportAttempts with marks and pass/fail, or one attempt answer by answer.
wordpress_tutor_quiz_resultsGive marks to open and short answers; the score is recalculated.
wordpress_tutor_grade_answerAdd a student to a course or remove them.
wordpress_tutor_enrollmentCourses, students, enrollments, completions and quiz scores.
wordpress_tutor_overviewWooCommerce
Sales, orders by status, best sellers, low and out-of-stock products.
woocommerce_get_store_overviewRevenue, refunds, product cost, fees, profit and margin per product.
woocommerce_get_profit_reportFilter by status, date or customer.
woocommerce_list_ordersItems, totals, addresses, payment and notes.
woocommerce_get_orderChange status and add notes.
woocommerce_update_orderDraft product with price, stock, category, images and cost - plus preview link.
woocommerce_create_productPrice, sale price, stock and status.
woocommerce_update_productTrash or delete permanently.
woocommerce_delete_productPrices, stock and total sales.
woocommerce_list_productsOrders count and total spent.
woocommerce_list_customersPlugins without an API (companion plugin)
Plugin tables and hidden post types of plugins without an API.
wordpress_plugin_data_mapRows with filters, sorting and paging.
wordpress_read_plugin_tableInsert, update or delete - always confirmed first.
wordpress_write_plugin_tableHidden post types with meta, internal comments, user meta.
wordpress_read_plugin_recordsA plugin's saved settings (secrets hidden).
wordpress_read_plugin_settingsAccount
Every linked site with its AI on/off switch and default.
wordpress_list_sitesCredit balance, connection and the price of every tool.
wordpress_get_account_statusGuided workflows
Built-in prompts
Apps that support MCP prompts (Claude shows them in the + menu) get step-by-step workflows: write a post, add a user, create a course, add a product, shop and LMS reports.
Full site audit
Security, updates, SEO, speed and shop health with fixes in order.
Write a blog post
Asks for the topic, writes it, adds a draft and gives you the preview link.
Manage users
Add, edit, reset passwords or remove users - step by step.
Build a Tutor course with quizzes
Plans topics, lessons and quizzes with you, writes everything and adds a draft for review.
Student progress & marks
Progress, quiz scores, stuck students and answers waiting for grading.
Create a course
Plans the outline with you and adds course and lessons as a draft.
LMS report
Courses, enrollments and what to improve.
Shop report
Sales, profit, best sellers, stock problems and next steps.
Add a product
Asks for details, writes the description, adds a draft for review.
Security & privacy
Full control, with guard rails
Your permissions, no more
The AI acts as the admin who clicked Connect, and WordPress checks every call. Limit it further with read-only mode or blocked areas in wp-admin → 500Toolbox.
Admins protected
Administrators and the connected account cannot be deleted or demoted through the connector.
Signed, encrypted, HTTPS only
Each connection has its own key, stored encrypted (AES-256-GCM). Every call is signed, works once, and is never sent to the AI app.
See everything, switch it off
wp-admin → 500Toolbox shows every AI action with charts and an activity log; read-only mode, blocked areas and Disconnect are one click away.
Pricing
Pay per call, from 1 credit
Free credits every month, plus a welcome grant when you sign up. Failed calls are refunded automatically, and purchased credits never expire.
FAQ
Questions people ask
How do I connect WordPress?
Install the free 500Toolbox Connector plugin (Plugins → Add New → Upload Plugin), open wp-admin → 500Toolbox and click "Connect to 500Toolbox". You approve the site on 500Toolbox in one click - no password to copy. An application password still works as a fallback if you cannot install plugins.
I sign in with Google - how does the AI get into my WordPress site?
Google only signs you in to 500Toolbox. Each WordPress site connects separately through the 500Toolbox Connector plugin: click Connect in wp-admin → 500Toolbox and approve. The plugin creates a key just for this connection; your WordPress password is never used, and the site owner can disconnect it at any time.
Can I manage several sites, including my clients' sites?
Yes - link up to 50 sites to one account. On a client's site, the client (or you, with an admin login they gave you) installs the plugin and, in wp-admin → 500Toolbox → Connections, clicks "Show a code"; you paste the site address and code on the setup page. On the dashboard each site has an on/off switch: AI apps only work on sites that are switched on, and in the chat you just name the site ("on the bakery site...").
Does it work with every plugin?
Yes, as far as the plugin has an API. wordpress_discover maps every installed plugin to its REST routes, custom post types and taxonomies, and the AI reads and acts on them with wordpress_rest_get / wordpress_rest_write. Dedicated tools cover WooCommerce and the major LMS plugins. A plugin that keeps its data without any API cannot be read remotely.
What can the AI change?
Exactly what the connected WordPress user can do. Creating posts, courses and products defaults to drafts with a preview link for you to review. Every change tool is flagged so your AI app asks before it runs. Administrators and the connected account cannot be deleted or demoted.
Why does the connection go through a plugin?
Many security plugins (Wordfence, Solid Security, WP Cerber, All-In-One Security...) switch off application passwords or block the REST API, and some hosts strip the Authorization header. The plugin avoids all three: every AI call is one signed request (HMAC-SHA256 with timestamp and one-time nonce) that the plugin checks and runs inside WordPress as the admin who connected. It also opens plugin data that has no API (e.g. Tutor LMS quizzes and marks) and shows the owner a dashboard of everything the AI did. Keep it active while you use the connector.
Which LMS plugins are supported?
LearnDash, Tutor LMS, LifterLMS, LearnPress, Sensei LMS and MasterStudy - courses, lessons, quizzes, enrollments where the LMS shares them, and course creation. Anything else the LMS exposes (progress, certificates, groups) is reachable through discovery.
How is profit calculated?
From the actual orders: line totals after discounts minus refunds, product cost and payment fees. Product cost comes from WooCommerce's cost of goods field or popular COGS plugins; products without a cost are listed so you can add one.
Is it safe?
The plugin connection uses a random key per connection, stored encrypted on our side (AES-256-GCM) and never sent to your AI app. Each request is signed and can be used only once, and only over HTTPS. On the site, the owner can switch on read-only mode, block areas such as users or plugins, see a log of every call, and disconnect any connection in wp-admin → 500Toolbox.
It says the request was blocked.
With the plugin connection this is rare: it does not need the REST API, application passwords or the Authorization header, and it automatically tries a second address on your site. If it still happens, a firewall in front of WordPress (Cloudflare, Sucuri, the host) dropped the request - allow the user agent "500Toolbox-WordPress-Connector". Sites connected with an application password should switch to the plugin.
Your WordPress site, one question away
Connect it once - every chat after that can use it.