WordPress Integration

Audit and Draft Across Your Whole Site, Not One Post at a Time

Buda agents reach your WordPress.com sites through Automattic’s official MCP server, with every write tool off until you switch it on. An agent handles the reading and drafting: searching, auditing, comparing, and preparing changes.

Official WordPress.com MCP Server OAuth 2.1 With PKCE Write Tools Off by Default Per-Site Admin Override

Content problems are rarely about one post. They are about the forty posts that reference a product you renamed, or the category that quietly collected half your archive.

This integration lets agents work across the whole site: through Automattic’s official MCP server they search content, read posts and settings, and prepare changes you approve. An agent handles the reading and drafting: searching, auditing, comparing, and preparing changes.

What the Buda WordPress Integration Actually Does

Your content never leaves WordPress.com; what Buda adds is somewhere to audit it and stage corrections.

A chatbot can rewrite the post you paste. A WordPress-connected agent can find every post that needs the same change — searching content, reading the actual published text, checking categories and tags, and preparing the edits as a set rather than one at a time.

Instead of hunting through the admin for everything affected by a rename, you can ask:

Find every published post that still refers to the old product name, read each one, and prepare updated drafts that keep the surrounding sentence natural.

The agent searches the site, reads the content, and prepares the changes for you to review before anything is published.

Your content stays on WordPress.com. Buda is the workspace where site context meets your other systems and becomes reviewed work.

What Buda Agents Can Reach in WordPress.com

WordPress.com’s MCP server groups tools by area, with read tools enabled by default and write tools disabled until you turn them on.

Read Your Site

Buda agents can retrieve supported information including:

  • Media library items
  • Sites you have access to
  • Comments, categories, and tags
  • Domain availability and pricing
  • Posts, pages, and content search
  • Site statistics and activity logs
  • Your profile, notifications, and inbox
  • Block patterns and registered block types
  • Site settings, installed plugins, and themes
  • Theme presets, active stylesheets, and design tokens

Create and Update Supported Content

Where you enable the corresponding write tools, agents can perform supported actions including:

  • Switch themes
  • Update site settings
  • Generate checkout URLs
  • Upload and manage media
  • Manage supported Jetpack modules
  • Manage DNS records and nameservers
  • Manage comments, categories, and tags
  • Create, update, and delete posts and pages
  • Update profile and notification preferences

Two boundaries matter. All read-only tools are enabled by default and write tools are disabled; you turn individual tools on in your account settings. A site-level control can block all MCP tools for all users on that site, overriding account settings. MCP access is available on WordPress.com paid plans. This integration covers WordPress.com — self-hosted WordPress.org sites are outside its scope.

Content Work That Only Makes Sense at Scale

Editing one post is not the problem. The problem is the work that requires reading everything you have published and holding it in view at once.

Audit Content Against Reality

Published content drifts away from the product it describes.

  • Read the actual published text
  • Prepare a correction list for review
  • Compare against current product truth
  • Rank findings by traffic and prominence
  • Search posts and pages for the claim in question

Find and Fix a Rename Everywhere

Renames leave a long tail nobody finishes.

  • Read each occurrence in context
  • Search all content for the old term
  • Prepare the updates as reviewable drafts
  • Flag occurrences where the meaning changes
  • Draft replacements that keep sentences natural

Clean Up Taxonomy

Categories and tags accumulate faster than they are pruned.

Example workflow
  1. List categories and tags with post counts.
  2. Identify near-duplicates and single-use tags.
  3. Read a sample of posts in each ambiguous category.
  4. Propose merges and removals with reasoning.
  5. Note posts that would need recategorizing.
  6. Prepare the plan for the content owner.

Check Internal Linking

Internal links decay as content is republished and restructured.

  • Read published posts and their links
  • Suggest links between related pieces
  • Draft the linking changes for review
  • Identify links pointing at missing content
  • Find high-value posts with few inbound links

Review Comment Backlog

Comment moderation is repetitive and easy to postpone.

  • Prepare the queue for a moderator
  • Group by post and by likely intent
  • Separate genuine questions from noise
  • Draft replies to substantive questions
  • Retrieve pending comments across the site

Report on Site Health

Site state is spread across settings, plugins, and stats.

  • Draft a site report for the owner
  • Check activity logs for notable changes
  • Pull statistics for the reporting period
  • Read site settings, themes, and installed plugins
  • Compare traffic patterns against content published

WordPress Workflow Examples

Four patterns, each ending with a person publishing rather than an agent.

Quarterly Content Audit

Trigger: Run at the start of each quarter.

Buda agent workflow
  1. List published posts and pages by last update.
  2. Read content untouched for two quarters or more.
  3. Compare claims against current product facts.
  4. Pull statistics to identify which still draw traffic.
  5. Rank by traffic multiplied by staleness.
  6. Prepare the refresh backlog for the content lead.

Terminology Sweep

Trigger: A product or brand term changes.

Buda agent workflow
  1. Search all content for the retired term.
  2. Read each occurrence in its surrounding context.
  3. Draft replacements preserving meaning and tone.
  4. Flag places where the change alters meaning.
  5. Group edits by post for efficient review.
  6. Submit the drafts for editorial approval.

Publishing Preparation

Trigger: A draft is ready for review.

Buda agent workflow
  1. Read the draft and its intended category.
  2. Search existing content for overlap.
  3. Suggest internal links to related posts.
  4. Check terminology against the style in use.
  5. Propose tags consistent with the taxonomy.
  6. Return the annotated draft to the author.

Comment Triage

Trigger: Run daily.

Buda agent workflow
  1. Retrieve pending comments across sites.
  2. Group by post and by type of message.
  3. Identify genuine questions needing an answer.
  4. Search published content for the answer.
  5. Draft replies citing the relevant post.
  6. Send the queue to a moderator for approval.

Example Prompts for the WordPress Integration

Hand any of these to a connected Buda agent, changing the terms and sites to fit your archive.

Content Audit

Find published posts that still describe our old pricing model. Read each one and tell me which are getting the most traffic.

Terminology Fix

Search all content for the old product name and prepare updated drafts. Do not publish anything — show me the changes first.

Taxonomy Review

List our categories and tags with post counts, flag near-duplicates and single-use tags, and propose a merge plan.

Link Building

Find published posts with almost no internal links pointing to them, and suggest which existing posts should link to each.

Refresh Candidates

Show me posts not updated in over a year that still get meaningful traffic, ranked by how out of date the content looks.

Comment Backlog

Read pending comments, separate real questions from noise, and draft replies to the questions using our published content.

When an Agent Beats a WordPress Plugin

Plugins are the right tool when the behavior is fixed and should run on every request.

For example:

Automatically generate a sitemap and ping search engines when a post is published.

An MCP-connected agent earns its place when the task requires reading content and judging what it means.

Read our published posts about the integrations feature and tell me which ones now contradict how the feature actually works.
CapabilityWordPress PluginsBuda WordPress MCP Integration
Deterministic site behaviorStrongNot the target use
Natural-language instructionsNot applicableYes
Reading published content for meaningNot designed for itAgent reads and reasons over text
Comparing content against external truthNot availableAgent can combine other sources
Bulk edits requiring judgment per caseFind-and-replace onlyAgent drafts each change in context
Cross-tool contextRequires separate integrationsCombines with other Buda tools
Explaining why a post was flaggedNot availableYes, quoting the passage
Draft-first outputDepends on the pluginNatural agent pattern
Write tools off by defaultNot applicableEnabled per tool by you

For example:

Use plugins for site behavior. Use a Buda agent for the editorial work that requires reading what you published.

Publishing Is the Last Step of a Longer Process

A published post is the end of work that happened in other systems.

The research is in a docs tool, the campaign is tracked in a project tool, the discussion happened in chat, and the performance shows up in analytics. An agent reading across them keeps the published record aligned with what is now true.

WordPress and Notion

Compare published content against the source research and messaging documents.

WordPress and Asana

Connect the content calendar to what has actually been published.

WordPress and Slack

Turn editorial feedback in a channel into tracked, drafted changes.

WordPress and Amplitude

Check whether content changes moved the behavior they were meant to move.

WordPress and Canva

Line up the assets used in a post against the current brand versions.

Checking the archive against those systems is how published claims stay accurate over time.

Write Tools Are Off Until You Turn Them On

Access runs through Automattic’s own server, with a permission model that starts closed rather than open.

Authentication uses OAuth 2.1, which WordPress.com documents as including PKCE, dynamic client registration, token rotation, and no client secrets. The flow is explicit that your WordPress.com credentials are never stored locally or shared with the AI client; only expiring access tokens are used.

The permission model is unusually conservative and worth using as designed. All read-only tools are enabled by default and write tools are disabled. You enable individual tools in your account settings. Separately, disabling access for a specific site blocks all MCP tools for all users on that site and overrides account-level settings — a genuine kill switch rather than a preference.

Safer deployment pattern
  1. Connect with read tools only, which is the default.
  2. Confirm which sites the connection can see.
  3. Enable content write tools before configuration ones.
  4. Keep publishing behind human review.
  5. Leave DNS, theme, and plugin tools disabled unless needed.
  6. Use the site-level control to exclude sites entirely.

Publishing Is a Public Act

Anything an agent publishes is immediately visible to customers and search engines. A wrong edit is not an internal mistake.

Buda is arranged around it: content an agent can read, drafts a person approves, and nothing public without a human in between.

Agents can search, read, audit, compare, and draft.

People should keep approving anything involving:

  • Public replies to comments
  • DNS records and nameservers
  • Redirects and URL structure
  • Purchases or checkout links
  • Deleting content of any kind
  • Site settings and theme changes
  • Pricing, legal, or policy pages
  • Plugin and Jetpack module changes
  • Anything affecting site availability
  • Publishing or updating live posts and pages

Who Gets the Most From This Integration

The teams that gain most are the ones whose published archive has grown past what anyone can review by hand.

Content Marketers

Audit the archive against current product truth instead of spot-checking.

Editors and Content Managers

Prepare terminology and consistency passes as reviewable drafts.

SEO Specialists

Find internal linking gaps and refresh candidates using real traffic data.

WordPress Developers

Inspect settings, themes, plugins, and activity across sites from one place.

Agency Account Managers

Run the same audit across multiple client sites without repeating the work.

Site Administrators

Keep configuration visible and changes reviewable, with write tools scoped tightly.

Frequently Asked Questions

What is a WordPress integration?

It is a connection that lets another application work with a WordPress site — reading content and settings, and changing them where the relevant tools have been switched on.

How does Buda integrate with WordPress?

Through Automattic’s official WordPress.com MCP server. Agents authenticate over OAuth 2.1 and call only the tools you have switched on in your account settings.

Does this work with self-hosted WordPress.org sites?

No. This integration covers WordPress.com. WordPress.com’s MCP server does not support self-hosted WordPress.org installations, so a self-hosted site cannot be managed this way.

What is a WordPress MCP integration?

It is the arrangement that lets an agent turn an editorial task into the right WordPress.com content calls, rather than raw REST requests.

What can a Buda agent do with WordPress?

A Buda agent can search and read posts, pages, comments, media, categories, tags, block patterns, theme data, site settings, plugins, statistics, and activity logs, and — where you enable write tools — create and update content, manage media and taxonomy, and change supported settings.

Can agents publish without my approval?

Only if you enable the relevant write tools. Write tools are disabled by default, you enable them individually, and Buda’s recommended pattern keeps publishing behind human review regardless.

Is the Buda WordPress integration secure?

The connection uses OAuth 2.1 with PKCE, token rotation, and no client secrets. WordPress.com documents that your credentials are never stored on your machine or shared with the AI client; only expiring access tokens are used.

Can I block a specific site?

Yes. Disabling access for a site blocks all MCP tools for all users on that site and overrides account-level tool settings.

Are there plan requirements?

MCP access is available on WordPress.com paid plans. Free-plan sites are not covered.

Does Buda replace WordPress?

No. Buda sits alongside it, using your published archive for audits, drafts, and corrections you approve.

Is Buda the same as the WordPress AI Assistant?

No. The WordPress AI Assistant works inside WordPress.com on your site’s content. Buda sits outside WordPress, using your published archive for audits, drafts, and corrections that you approve before they go live.

Should an agent manage DNS or plugins?

Almost never. Those tools exist, but they affect site availability rather than content. Leave them disabled unless you have a specific reason and a person driving each change.

Fix the Archive, Not Just the Next Post

Most content teams know their older posts have drifted out of date. What stops them is that checking means reading everything.

Connect WordPress.com to Buda and let agents read the archive, find what no longer holds, and prepare the corrections as drafts — with write tools staying off until you decide otherwise.