Open Source WordPress MCP Plugin

Give your AI agent the keys to every WordPress door.

Built for WordPress agencies who want AI to actually work. SproutOS connects any AI agent directly to your site via MCP. Run PHP, access the database, manage files, call any plugin API. Deep access that wasn't possible before.

Free forever
GPL licensed
WordPress 6.9+
PHP 8.0+
Works with Claude, Cursor, VS Code and more
Made by Team worked with WordPress VIP Agencies
Free forever
GPL licensed
WordPress 6.9+
PHP 8.0+
Works with Claude, Cursor, VS Code and more
Made by Team worked with WordPress VIP Agencies
Capabilities

What your AI can do right now

Not code suggestions. Real actions, grounded in your actual WordPress stack.

Run a full Lighthouse audit and trace the exact cause

Your AI analyzes performance scores, inspects the live DOM, cross-references active plugins, and identifies exactly what is dragging your score down.

Back up before plugin updates

One ask. Full backup. Safe rollback if anything breaks.

Find CSS & JS conflicts, then fix them

Trace script errors, style conflicts, and plugin clashes across your themes and plugins. Then fix them automatically.

Clean abandoned database rows safely

Find and remove orphaned records, expired transients, and table bloat. Every deletion is logged.

Export WooCommerce orders with custom filters

Ask for any report in plain English. Orders, customers, products, coupons exported instantly.

Create and deploy custom PHP snippets

Describe behavior. Your AI writes, sandboxes, previews, and deploys the snippet with rollback ready.

Infinite Possibilities
Download Free
Core Capabilities

Everything your AI needs to work inside WordPress

Not a fixed set of buttons. A full language. Your AI learns your stack and gets things done on its own.

Execute PHP

Run PHP directly inside your live WordPress environment. Access hooks, use any plugin or theme API, and execute real code against your actual site.

Read & Write Files

Read, edit, write, and delete files anywhere across your WordPress filesystem. Themes, plugins, templates full access.

Database Access

Inspect, query, and update your WordPress database. The AI understands your data structure before it touches anything. Clean data, fix issues, migrate content.

3 tools or 175. Choose your profile.

Four Capability Profiles let you control how much of the toolkit your AI sees upfront. Start minimal for fast sessions, open up fully when you need the depth.

Safe Mode

Enable Safe Mode to audit and explore a site without making changes. The AI can read everything, but cannot execute, write, or modify anything.

Sandbox Execution

All AI-generated code runs in a secure sandbox first, isolated from your live WordPress install with rollback support and crash protection.

Sandboxed AI-generated WordPress code illustration

Full sandbox isolation for every AI-generated file. Crash protection included.

Every AI-generated snippet runs in a managed sandbox, crash-guarded and isolated from your core installation. Safe Mode locks the AI to read-only. The Ability Manager gives you full control over every permission. You stay in control of exactly what runs.

Safe Mode
Ability Manager
Sandbox Execution
Crash Guard
Rollback Support
AI Memory

Agents that actually know your site.

SproutOS sets up four memory cards the moment you install. Fill them in yourself or ask the agent to fill them for you. Every agent reads them before it does anything. No briefing. No repeating yourself.

Four memories. Set up automatically.

Context

What you are working on. Fill this in to give every agent immediate context.

Rules

How you want the AI to work. Add team conventions, design rules, and hard constraints here.

Profile

Who this site is for. Audience, brand, business goals, and personal preferences for how the AI works with you.

Reference

Pointers to your brand guide, content style guide, and any external systems.

The agent learns. You stay in control.

The agent saves what it learns

As agents work on your site, they suggest new memories. You approve before anything goes live.

Edit any memory, any time

Every memory is editable from your dashboard. Change a rule or update your brand voice in seconds.

Your rules follow every session

Mark any memory as Always applied and the agent reads it before every conversation starts.

Every memory has a status

You always know what the agent is working from and what needs your attention.

Set up on install, ready in minutes
Agent saves. You approve.
No re-explaining between sessions
Total Abilities

AI Can Work with Every Corner of WordPress

All included. All free. Grows with every plugin that adds AI abilities.

WordPress Core

WordPress

00

Posts, pages, users, media, menus, options, settings, CPTs, taxonomies

WooCommerce

WooCommerce

00

Products, orders, coupons, inventory, categories, reports. Loads automatically when WooCommerce is active.

Elementor

Elementor

00

Page editing, widget access, global styles, template management, section structure

Bricks Builder

Bricks Builder

00

Elements, templates, styles, query loops, design system, nestable layout tools

Gutenberg

Gutenberg

00

Block editing, Full Site Editing, patterns, templates, block theme support

Filesystem

00

Builder Tools

0

Total abilities

000+

175+ total abilities

All included. All free. Grows with every WordPress 7.0 plugin that adds AI abilities.

Browse the full ability list
See every ability in the docs
Setup

Three steps to full WordPress AI access

Install once. Connect once. Then talk to your site like a senior developer is always on call.

Step - 1

Install the plugin

Download from GitHub and install on any WordPress site. Enable AI Abilities in Settings → SproutOS. A visual indicator appears in your admin bar so you always know when AI is active.

Step - 2

Connect your AI client

SproutOS generates a ready-to-paste config snippet from your dashboard. Add it to Claude, Cursor, VS Code, or any MCP client and you are connected. Secure authentication is handled automatically.

Step - 3

Start building

Your AI scans your full WordPress stack, learns what is installed, and gets to work. It adapts to your site automatically. Zero extra configuration. Zero plugin-specific setup.

Watch Demo
Use Cases

Tasks you'll never do manually again

Every task below used to eat hours. Now it takes one prompt.

UpdraftPlus + AI

Backup before every plugin update

Tell your AI to check for plugin updates each morning, take a full UpdraftPlus backup first, then apply updates one by one and verify the site after each one.

Database

Deep database cleanup and repair

Find abandoned post revisions, orphaned metadata, expired transients, and spam comments. AI audits, reports, and cleans in one run with a full diff before applying.

Automation

On-demand site health report

Run a complete site health check on demand. Uptime status, pending updates, database size, broken links, and disk usage, delivered as a clear summary.

Media

Find posts missing featured images

Query all posts and pages without a featured image, get a full list by post type, and optionally assign placeholders or flag them for review.

Compatibility

Works with your entire stack. No setup per plugin.

SproutOS works at the PHP level. If a plugin is active in WordPress, your AI can already use it. No integrations, no extra setup.

Astra
WordPress
UpdraftPlus
Elementor
Gutenberg
Beaver Builder
Astra Pro
Plugin
Cursor
Bricks Builder
WPForms
Fluent Forms
Plugin
ACF
JetEngine
WPML
Plugin
Plugin
Windsurf
Astra
WordPress
UpdraftPlus
Elementor
Gutenberg
Beaver Builder
Astra Pro
Plugin
Cursor
Bricks Builder
WPForms
Fluent Forms
Plugin
ACF
JetEngine
WPML
Plugin
Plugin
Windsurf
Compatible
Security

Powerful by design. Safe by default.

AI only does the wrong thing when you write the wrong prompt. Write clear, intentional prompts and SproutOS gives you more control than any manual workflow ever did.

Step 1 - First time

Start on staging

Install on a staging or dev environment first. Learn how prompts work, test your workflows, and build confidence. Enable Safe Mode so the AI reads everything but writes nothing until you are ready.

Step 2 - Getting comfortable

Test, refine, repeat

Run your real workflows on staging. Audit results, fix edge cases, refine your prompts. Use the Ability Manager to enable only what each task needs. Once a workflow is solid, you are ready.

Step 3 - When you're ready

Go live with confidence

Many agencies are already using SproutOS on live client sites. With tested prompts, proper access control, and a backup in place, there's nothing stopping you. The tool is ready. You just need to be.

Safe Mode - read only, zero writes

Not doing any edits? Turn on Safe Mode. The AI can read everything, files, database, analytics, but cannot write, edit, or execute anything. Perfect for audits and exploration on any site, including live ones.

Keep a backup when in doubt

If you are running a new automated workflow or still refining your prompts, take a backup first. Once your workflows are proven, SproutOS can trigger it automatically for you.

Approve before every tool call

Configure your MCP client to ask for approval before the AI runs anything. You see exactly what it is about to do, then allow or block. Full human oversight at every step.

Sandboxed code execution

All AI-generated code runs in an isolated sandbox before touching your site. Crash-guarded, rollbackable, and completely separate from your core WordPress installation.

Granular Ability Manager

Enable only what each task needs. Disable file writes, database access, or PHP execution independently. You control every permission, every time.

Off by default

AI Abilities are disabled on install. Nothing is exposed until you deliberately turn it on.

Application Passwords over HTTPS only

Authentication requires a WordPress Application Password. Admin-level access only. No unauthenticated connections.

Visual "AI Active" indicator

A persistent indicator in the admin bar is always visible when AI abilities are on. You always know what is active.

Audit log for every action

Every tool call is recorded with the ability name, user, risk level, and execution time. You always have a full history of what the AI did and when.

I’m Sagar Patel, founder of SproutOS.

For over 12 years, we have been building in the website creation ecosystem. We spent our first five years as a WordPress agency before creating five products that now power over 500,000 websites worldwide.

We felt the friction between client briefs, scattered tools, and production deadlines firsthand.

SproutOS was built to close that gap, combining structured systems with intelligent AI, so agencies can move from brief to launch-ready websites with clarity, control, and confidence.

Sagar Patel signature

“From brief to launch-ready, without chaos, guesswork, or scattered tools. AI moves fast. Systems make it sustainable. SproutOS brings both together.”

Sagar Patel

Sagar Patel

Founder, SproutOS

Frequently asked questions

Questions are a good sign. Here are the answers agencies ask most.

MCP is the Model Context Protocol - the standard that lets AI clients talk to tools securely. With SproutOS you don't need to understand it. Install the plugin, point your AI client at the snippet from your dashboard, and start prompting.

Yes - though we recommend starting on staging. SproutOS includes Safe Mode, a granular Ability Manager, sandboxed execution, and one-click rollback. Many agencies are already running it on production sites.

Generic AI writes code in a vacuum. SproutOS gives the AI direct, sandboxed access to your live WordPress stack - plugins, theme, database, files. It can read context, test, deploy, and rollback against a real environment instead of guessing.

No. Most workflows are plain-English prompts. Coding knowledge helps if you want to extend the toolkit, but for everyday agency work you just describe what you want done.

Anything that speaks MCP - Claude Desktop, Cursor, VS Code, Windsurf, and any other MCP-compatible client. Setup is a copy-paste snippet from your dashboard, no extra integration work.

Yes. SproutOS works at the PHP level, so anything active in WordPress is available - Elementor, Bricks, Gutenberg, WooCommerce, ACF, and 175+ built-in abilities for the most popular plugins.

Every change runs in a sandbox first with crash protection. You get one-click rollback, full audit trails, and Safe Mode if you want zero writes. The Ability Manager lets you turn off any permission instantly.

Yes - the WordPress plugin is GPL open source and will stay free forever.

Create and Manage Every Client Site with AI.

Create launch-ready WordPress sites from a client brief, then connect and manage every site you run, all in one place.

Get StartedSee Pricing