Let AI agents edit your Elementor site — safely.
MCP Toolkit for Elementor gives Claude, Cursor, and Claude Code structured, permissioned access to your WordPress site. 31 abilities to read, validate, edit, snapshot, and recover Elementor pages — no SSH required.
validate ok — 0 issues write ok — 1 section, 3 widgets css_cache cleared edit_mode set read_back round-trip verified
snapshot #a1f9 captured before write version 7d1c… · restore in one call
Most WordPress MCP tools treat Elementor as an opaque blob of post meta. This one doesn't. It writes validated Elementor data the way the editor does — and snapshots the page first, so a bad edit is one call away from being undone.
What your agents can do
31 abilities, grouped into six things an agent can actually accomplish on your site.
Read your site
List pages, posts, and media. Fetch full page content including Elementor data. Search across everything. Resolve URLs to post IDs. Read navigation menus.
Edit Elementor safely
The composite riot/elementor-push writes the data, clears the CSS cache, sets edit mode, and reads back the result to confirm the round-trip — atomically.
Snapshot & restore
Capture a full post snapshot before any risky write. Restore it in one call if something goes wrong. Snapshots auto-prune on a configurable TTL.
Validate before writing
riot/validate-elementor-data catches the common authoring bugs — double-quoted HTML attributes, literal newlines, missing element IDs, blank-page flex settings — before they reach the database.
Diagnose without SSH
Read the debug log, clear caches, inspect WP/PHP config, probe the filesystem, drive WP-Cron, read plugin/theme files — all as safe abilities.
Discover & create
Dump the Elementor widget catalog so agents build well-formed JSON first try. Duplicate posts, create pages, update whitelisted site options.
Built for real client sites.
Every ability is gated on standard WordPress capabilities, and destructive paths are guarded. You stay in control of what an agent can touch.
Capability-gated
Reads need edit_posts; writes need edit_pages + edit_others_pages; diagnostics need manage_options.
Sandboxed file reads
Limited to plugins, themes, mu-plugins, and uploads. wp-config.php and core files are always blocked.
Optimistic concurrency
Writes support expected_version (SHA-1) + idempotency keys, so retries never double-write.
Validate-then-write
elementor-push runs validation by default and rejects bad data before it lands.
Bring your own agent
Any Model Context Protocol client works. Tested with Claude Desktop, Claude Code, and Cursor. The plugin also ships server instructions and three prompt templates that compatible clients expose to users.
build
Compose well-formed Elementor JSON from the widget catalog.
push
Validate, snapshot, write, and verify the round-trip.
fix-blank-page
Diagnose and repair blank-page flex settings.
How it works
Three steps from install to a connected agent.
Install the plugin
Upload the zip, activate, add an MCP wrapper.
Create an Application Password
WP Admin → Users → Profile.
Connect your agent
Point Claude, Cursor, or Claude Code at your site URL + credentials.
All 31 abilities at a glance
The full reference, grouped by what they do. For the skeptic who wants proof.
All 31 abilities at a glance
The full reference, grouped by what they do. For the skeptic who wants proof.
- list-pages
- list-posts
- list-media
- get-page
- get-post-content
- search
- resolve-url
- read-menus
- get-elementor-data
- elementor-push
- update-post
- set-elementor-data
- get-post-meta
- set-post-meta
- delete-post-meta
- clear-css-cache
- read-debug-log
- clear-caches
- inspect-config
- probe-filesystem
- read-plugin-file
- read-theme-file
- run-cron
- snapshot-post
- restore-snapshot
- validate-elementor-data
- elementor-push
- dump-widget-catalog
- duplicate-post
- create-page
- update-site-option
Frequently asked
Does this work without Elementor?
The read, diagnostics, and creation abilities work on any WordPress 6.9+ site. The Elementor-specific abilities — validation, elementor-push, the widget catalog — need Elementor installed. Free Elementor is enough; Pro widgets simply appear in the catalog if you have Pro.
Which MCP clients are supported?
Any Model Context Protocol client. Tested with Claude Desktop, Claude Code, and Cursor. The plugin ships server instructions and three prompt templates (build, push, fix-blank-page) that compatible clients expose to users.
Do I need Elementor Pro?
No. The toolkit works with free Elementor. If you have Pro installed, its widgets are included in the catalog the agent reads — but nothing here requires a Pro license.
Is it safe on production?
It's built for real client sites. Every ability is gated on standard WordPress capabilities, file reads are sandboxed away from wp-config.php and core, writes use optimistic concurrency, and elementor-push validates before it writes. You decide what an agent can touch by scoping the application password's user.
What happens if a write goes wrong?
elementor-push captures a full post snapshot before any risky write. If the result isn't what you wanted, restore-snapshot puts the page back in one call.
What's the snapshot TTL?
Configurable. Snapshots auto-prune after their time-to-live so they don't accumulate — set it to match how long you want a rollback window to stay available.
Free, open source, and ready to install.
Give your AI agents a safe way into WordPress.
GPLv2 · By React IoT · reactiot.com.au