Albert – Connect AI Assistants to WordPress
The easiest, safest way to connect Claude, ChatGPT and other AI assistants to WordPress, built on WordPress’s own MCP Adapter. Let your AI assistant actually run your WordPress site You already ask ChatGPT or Claude to plan posts, rewrite copy and answer questions about your business. Then you paste the result into WordPress by hand, and fix the formatting. Albert removes that step. Connect your AI assistant to your site once, and it writes, edits and files your content directly, in real WordPress blocks, inside limits you set. No copy and paste, no plugin-specific chat window, no code. The easiest and safest way to use the WordPress MCP Adapter. The MCP Adapter is WordPress’s own way for AI assistants to reach a site, and on its own it leaves setup, sign-in and permissions to you. Albert adds them: a guided setup, a proper sign-in, a list of who may connect, and nothing destructive without your approval. Nothing destructive without you. Safe mode is on from the start. Deleting content, changing someone’s role or rewriting a key setting waits for your approval, and the assistant cannot approve its own request. Needs WordPress 7.1. Signed in, never handed a password. Assistants connect with OAuth: short-lived tokens you can revoke, and no password or API key ever given to an AI company. No middleman. Your assistant talks to your site directly. Albert has no servers of its own in between. No tracking. Albert sends nothing about your site or your usage anywhere. Personal data hidden by default. Names, email addresses, phone numbers and postal addresses are masked before an assistant sees them. New sites start on Strict. Connect in three steps Copy your site’s connection URL, paste it into your assistant, approve the request. That is the whole setup, and it is the same for every assistant. Not sure where to paste it? Click Connect an assistant, tell Albert where your site runs and which app you use, and it shows that app’s exact steps. It tells you the moment the connection works, and what to ask first. Sites that only run on your computer work too, and Claude Desktop gets a one-file install. Albert speaks block editor Most AI plugins hand WordPress a wall of HTML and leave you to clean it up. Albert does not. Real blocks, not raw HTML. Headings, lists, quotes, images, buttons, columns and groups come back as proper blocks you can edit like anything else. One block at a time. Change, add, move or remove a single paragraph without your assistant rewriting the whole page. No “this block contains unexpected content”. Albert checks blocks as they are written and corrects the assistant before the content reaches your post. Classic editor too. On a classic site, content is read and saved as HTML instead. Both work. Your assistant knows your site An assistant that does not know your site invents things: brand colours you never chose, a tone that is not yours, categories that do not exist. Write your instructions once. Your tone, your vocabulary, anything it must never touch. Albert sends them with every conversation. Your site describes itself. Language, timezone, theme colours and fonts, post types, taxonomies and shop settings go along too, but only when your theme genuinely declares them. See exactly what is sent, and switch off any part an assistant does not need. Your text is information, never orders. Content from your site can shape subject matter and tone. It can never change what an assistant is allowed to do. You decide what it may do Not every guest needs a key to every room. Every action listed and labelled Read, Write or Delete, with its own switch. Changes save instantly. Write and delete start switched off. You turn on exactly what you want, and nothing else. Your WordPress roles still apply. An assistant can never do more than the person who approved it. New actions arrive switched off, so a plugin update never quietly widens what an assistant can reach. You choose who may connect. Only the people on your list can approve an assistant. Each gets their own Connect page, and Send setup link emails them a link to the steps. Revoke any connection at any time. Nothing destructive happens without you Switched on by default. When your assistant asks to delete a post, change someone’s role, or rewrite a foundational setting, the action does not run. It waits for you. Held, not logged after the fact. The request is stopped before it happens, not reported once it has. You see what it would actually change, resolved as it is now: “Delete the post ‘Pricing’ (published)”, not a line of code. If the page changed since the request, you are told before you approve. Approve what you could do yourself. Editors approve their own requests; administrators approve anyone’s. Nobody gains reach they did not already have. The assistant cannot approve its own work, cannot switch safe mode off, and cannot touch the settings that control it. Requests expire if nobody decides, so an old intent cannot be approved against today’s site. Needs WordPress 7.1. On older versions Albert tells you plainly that it cannot hold anything, rather than letting the switch imply otherwise. Personal data stays private Albert hides your visitors’ and customers’ details, names, email addresses, phone numbers and postal addresses, before anything reaches an assistant. Choose Strict, Balanced or Off. New sites start on Strict. Reveal the real details only when you ask, and only if your own account is allowed to see them. See everything that happened Every call is recorded: which action, which assistant, which user, how long it took. Blocked is not Failed. A request your own rules refused reads differently from one that broke. Needs your attention surfaces standing problems on the dashboard, and stays quiet when there are none. Works with the assistant you already use Claude Desktop, claude.ai, Claude Code, ChatGPT, Cursor, VS Code, or anything else that speaks the Model Context Protocol. Albert serves your site to them through WordPress’s own MCP Adapter, so the same connection URL works everywhere and you are never locked to one vendor. Connections use OAuth 2.0 with short-lived, self-refreshing tokens. No password is ever shared with an AI company. What your assistant can do Posts and pages: find, view, create, update and delete, block by block. Media: browse the library, set featured images, and receive files your assistant sends you directly. Users and taxonomies: find and manage users, categories, tags and custom terms. Block patterns: find and reuse the patterns from your theme, plugins and library, and save new ones. WooCommerce: look up products, orders and customers when WooCommerce is active. Anything you build: register your own actions with the WordPress Abilities API. Works with the plugins you already use Albert is not limited to its own abilities. Plugins that offer abilities to AI assistants through the WordPress Abilities API show up on Albert’s Abilities screen, where you choose which ones your assistant may use over the same connection. Many popular plugins already do: SEO: Yoast SEO, Rank Math, All in One SEO, SEOPress, SiteSEO, SureRank. Forms: Gravity Forms, WPForms, Fluent Forms, Formidable Forms. Page builders: Elementor, Ultimate Addons for Elementor, Premium Addons for Elementor, SiteOrigin Page Builder. Custom fields: Advanced Custom Fields (ACF), Secure Custom Fields, Meta Box. E-commerce: WooCommerce, plus Albert for WooCommerce for orders, products, coupons and reports. Search and analytics: Search & Filter Pro, Koko Analytics Pro, PixelYourSite. Performance and media: Imagify, ShortPixel, SpeedyCache. Security, backups and activity: Jetpack, Akismet (once you enable its MCP access), BackWPup, Simple History. What each plugin lets your assistant do is up to that plugin. You decide which of its abilities are switched on, and the assistant only ever acts with the permissions of the person who approved the connection. Go further with Albert Premium Albert Premium adds per-role and per-user permission rules, your own custom post types, and a full activity log with filters and retention. Every well-run site deserves a proper butler. Albert checks credentials at the door, and shows the guest only the rooms you opened. Privacy Policy Albert runs entirely on your own site. It has no servers of its own and sends no data about your site or your usage anywhere. The only request it makes is Site Health checking your site’s own sign-in address. What reaches your assistant. Only the site context you choose to send, and the results of the actions you have switched on, for the person who approved the connection, within their WordPress permissions. Before a result leaves your site, Albert masks visitors’ and customers’ personal details according to your privacy mode: Strict, Balanced or Off. New sites start on Strict. What your assistant’s provider then does with that text is covered by their own privacy policy. What Albert keeps, in your own database: Connections: the apps you approved and their tokens. Access tokens last an hour and refresh tokens 30 days; expired tokens are deleted daily, and apps that never finish connecting are removed after a week. Revoke any connection at any time. Activity: for each action, the two most recent results of each kind, with who ran it and any error message. No inputs or outputs are stored. Albert Premium keeps a fuller log, including what was sent and returned, for 90 days by default. Safe mode requests: a held request, with the input the assistant sent, until you decide or it expires (after an hour by default). Decided requests are deleted after 30 days. Your settings and instructions: what you choose on Albert’s screens. Uninstalling Albert removes its tables and settings. On a multisite network this currently covers the main site only. Credits Developed by Mark Jansen, Your Mark Media Website: https://yourmark.nl Plugin URL: https://wordpress.org/plugins/albert/ Built with: * league/oauth2-server for OAuth 2.0 implementation * Model Context Protocol (MCP) for AI assistant connectivity * WordPress Coding Standards
