AICOM connects WordPress to your AI agent through MCP. Create content, edit Elementor pages and work with supported integrations using permissions you control. Connect directly, or use AICOMBase to bring your sites, monitoring and AI activity together.
AICOM speaks JSON-RPC 2.0 over MCP. Your AI agent authenticates with a scoped API key, picks a tool from the live catalog, and executes — with permission checks, safety locks and a full audit log between every request and your database.
session.open with a name and description.wp.posts.create:wp.posts.get, then call session.close.AICOM (AI Commander) is a free WordPress plugin that lets compatible AI agents work with your site through MCP or OpenAPI. Its tool catalog covers content, media, users, backups and supported plugin integrations. Available tools depend on your installed version, enabled modules and API-key permissions. Use tools/list to inspect your catalog, tools/search to find a task, and tools/describe to check exact parameters.
Requirements for release 3.23.1: WordPress 6.0+ and PHP 7.4+. Integrations require their corresponding plugins and enabled permissions. License: GPL-2.0-or-later. Download and release notes on WordPress.org.
Use claude mcp add --transport http with your site endpoint and Authorization header. Check the connection with /mcp. Claude Code setup reference.
Use the connection instructions supplied by your client and the endpoint and key from AICOM.
cURL, Python, custom clients — the protocol is open.
Core tools and optional integrations form a catalog specific to your site. Enable the modules you need and grant only the required permissions. Alongside the modules below, supported integrations include WPML, Yoast SEO, SEOPress, ECS and Clautron. Call server.status to check module state and tools/list to see what your key can use.
Posts, pages, categories, tags, meta, options, site info. Full CRUD with publish/trash/restore.
Upload from URL or base64, manage media meta, set featured images, safe file I/O within uploads.
Create, update, assign roles. Define custom roles with specific capabilities. Notification opt-in.
Products, stock, prices, categories, store settings. Activates only if WooCommerce is present.
Read widget trees, extract every text, update single widgets or bulk-edit. Backup + validate per page.
Language assignment, translation linking, term translations. Activates when Polylang is configured.
Per-post and per-term backups stored in the database. Restore any snapshot, purge by age.
Scoped keys, safety locks and audit records help you control AI work. Open a named session before changes, create backups where supported, and verify the result. Recovery depends on the operation and available snapshots.
Bcrypt-hashed, shown once, rotate or revoke instantly. Optional IP allowlist per key.
Each key grants specific capabilities. Tools are filtered by those permissions, active modules and resource boundaries. Knowing a tool name does not grant permission to run it.
Unlocked · Soft (read-only) · Hard (status only). Enable with one click in an emergency.
Named sessions group related work in the audit log. Back up posts, terms and Elementor pages before editing; restore supported snapshots when needed.
“Write a 600-word post on
“Mark every product with stock_quantity = 0 as out-of-stock. Report the count.”
“Find all posts in EN without a French translation, draft the FR version, link them.”
pll.post.get_translations → wp.posts.create → pll.post.set_language → pll.post.link_translation
“Before touching page #183, back it up. Swap every ‘Book now’ to ‘Reserve a table’. Validate.”
elementor.page.backup → elementor.page.bulk_update_texts → elementor.page.validate
“List every published post missing _yoast_wpseo_metadesc. Read-only, no edits.”
AICOM connects your WordPress site to AI agents through MCP and OpenAPI, with a tool catalog limited by active modules and the permissions you grant.
Use scoped keys, resource boundaries, safety locks and named sessions to control access. Back up supported content before changes and verify afterward. Some operations require explicit confirmation; recovery is available only for supported changes with the required snapshots.
Use an MCP-compatible client, such as Claude Code, with the site endpoint and Bearer token. Other clients can use the supported OpenAPI or JSON-RPC interfaces. Follow the current instructions for your client and check the connection before making changes.
Zapier and Make.com are workflow tools — they trigger predefined actions on events. AICOM is conversational — your AI agent decides what to do, calls the right tool from a live catalog, and executes. Zapier connects WordPress to other services; AICOM lets AI agents operate WordPress directly. Different problem, different tool.
Uncanny Automator is a recipe builder for WordPress events. AI plugins (AI Engine, GetGenie) call OpenAI/Claude APIs to generate text inside WP. AICOM is the inverse: instead of WP calling AI, AI calls WP through a typed protocol with permissions and audit logs. Use AICOM when you want your AI agent to operate the site.
AICOM is a free plugin. Your AI provider may charge for its service. Direct connections exchange requested site data with your chosen client. Connecting AICOMBase adds an external service for connected-site features; review its plans and privacy information separately.
Yes — when WooCommerce is active, AICOM enables a WooCommerce module with tools for products, categories, stock, and store settings. Permission-scoped per API key. The module activates automatically only if WooCommerce is detected; nothing loads on stores without it.
Review the named session and audit log. Restore a supported backup or session snapshot when available. Make a backup before editing posts, terms or Elementor pages; not every operation is reversible.
In WordPress, open Plugins → Add New, search for AICOM, install and activate it. You can also download the ZIP from WordPress.org. Create a scoped key in AICOM and use the endpoint and connection instructions shown there. A Dudaster account is not required to download the plugin.
No. AICOM has WordPress tools of its own. Optional integrations require the corresponding plugins, enabled modules and permissions. Check your actual catalog with tools/list rather than relying on a fixed tool count.
Yes. Generate one API key per agent with separate permissions — e.g. an “Editorial agent” with read.wp + write.wp.posts , a “WooCommerce agent” with manage.woocommerce.products . The audit log shows exactly what each agent did.
Model Context Protocol — an open standard from Anthropic for letting AI agents discover and call tools over JSON-RPC 2.0. AICOM is a fully-spec-compliant MCP server. Any client that implements MCP can connect.
AICOM is the plugin on your WordPress site. AICOMBase is the online dashboard for connected sites, monitoring, site checks and AI activity. Create an account, then open AICOM → AICOMBase in WordPress and choose Connect. See the connection guide. Direct MCP access remains available without AICOMBase.
For public AICOM questions, use the WordPress.org support forum. For direct contact, email assist@dudaster.com. Include your plugin version and a description of the problem, without API keys or private site data.
Create an AICOM key with the permissions you need, then run this in your terminal, replacing the example URL and placeholder token:
claude mcp add --transport http aicom https://example.com/wp-json/aicom/v1/mcp --header "Authorization: Bearer YOUR_AICOM_KEY"Run claude mcp list, then open Claude Code and use /mcp to check the connection. Start with a read-only request such as listing your latest posts. For edits, open a named AICOM session, back up supported content, verify the result and close the session. Use https://example.com/?aicom=1 as the fallback endpoint if the primary route is blocked. See the official Claude Code MCP guide.
If you run ECS, AICOM’s Elementor module can read and write ECS’s own settings — Color Schemes, Font Schemes, Custom Looks, dynamic sources. Tell the agent: “switch the active Color Scheme to Summer Campaign .” It happens.