Royal MCP

Security-first MCP server for WordPress. Connect Claude, ChatGPT, and Gemini to your WordPress site with API key + OAuth 2.1 authentication, full activity logging, and capability-gated access. It is available as a remote MCP endpoint.

Teams that want a hosted security endpoint instead of running a local process. The project is written in PHP.

VERIFIED ACTIVE

LAST COMMIT 2026-08-20 · ★ 9 · #131 OF 182 MAINTAINED SECURITY · VERIFIED 2026-08-25

NOASSERTION · PHP · how we verify → /methodology

01 · Install Royal MCP

before you install - you'll need

The README does not document required environment variables for a basic install.

Claude Code

claude mcp add royalplugins-royal-mcp --transport http https://demo.royalplugins.com/wp-json/royal-mcp/v1/mcp

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "royalplugins-royal-mcp": {
      "url": "https://demo.royalplugins.com/wp-json/royal-mcp/v1/mcp"
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

https://demo.royalplugins.com/wp-json/royal-mcp/v1/mcp

transport: streamable-http

endpoint alive - authentication required · probed 2026-08-25

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as remote - your agent's requests go to demo.royalplugins.com

endpoint auth requires authentication - rejected our unauthenticated MCP initialize

license no standard license detected - usage rights unclear; check the repo before commercial use

registry vendor namespace com.royalplugins - domain-verified with the official MCP registry

03 · What Royal MCP can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

v1.4.43 · 2026-08-24

Summary · Divi 4 and Divi 5 page tools in Free - clone a page, swap images, and import a library template, all with 72-hour undo tokens · Elementor library-to-page bridge (elementor_apply_template_to_page) plus tools…

v1.4.42 · 2026-08-20

Summary · Write-verification helper now detects pre-write input mangling for strict-fidelity tools · Tool argument sanitizers preserve %XX escape sequences so URLs, patterns, and templated inputs survive round-trip…

v1.4.41 · 2026-08-15

What's new · Six Divi builder tools for safer AI-driven Divi editing (get page format, outline, validate layout, list local templates, library get, replace text). · wp_publish_and_promote - publishes a draft and…

04 · Who maintains Royal MCP

royal-mcp is maintained by royalplugins. It's the only MCP server we track from this author; the repo dates to Mar 2026.

05 · Facts

repository: github.com/royalplugins/royal-mcp
website: https://royalplugins.com/royal-mcp/
category: security - ranked #131 of 182 actively-maintained security servers as of 2026-08-25.
release cadence: 10+ releases in the last 90 days (latest 2026-08-24)
registry: com.royalplugins/royal-mcp (active, first published 2026-07-10)

06 · Royal MCP FAQ

What is Royal MCP?

Is Royal MCP still maintained?

Yes - as of 2026-08-25, its last commit was 2026-08-20 and it shipped 10+ releases in the last 90 days. We re-verify nightly.

How do I install Royal MCP?

Run `claude mcp add royalplugins-royal-mcp --transport http https://demo.royalplugins.com/wp-json/royal-mcp/v1/mcp`. The README does not document required environment variables for a basic install. You can also paste the ready-made client config above.

Does Royal MCP require authentication?

Yes - when we probed the endpoint on 2026-08-25, it rejected an unauthenticated MCP initialize; you'll need credentials to connect.

07 · Alternatives to Royal MCP

Alternatives to Royal MCP

Maintained security servers if Royal MCP isn't the fit.

Pairs well with

Servers that cover what Royal MCP doesn't - only shown when the pairing reason fits the companion.

More security MCP servers · Hush · Janee · Audit · Code Sentinel