Connect WordPress sites by URL and Application Password and read their posts, pages, media, and health.
Every capability exposed by WP Site Connector, metered per action and guarded by the two-step safety protocol.
connect_sitewriteConnect a WordPress site by URL, username, and Application Password.
connect_site_sshwriteConnect a WordPress site over SSH ONLY, without a WordPress Application Password. Requires SSH access and WP-CLI on the server. Publishing/reading content for this site will then run entirely through WP-CLI over SSH instead of the REST API.
forget_sitedestructiveDisconnect a WordPress site and delete its stored credential.
add_sshwriteAdd SSH access to a connected WordPress site to enable WP-CLI features: PHP version, plugin/theme/core update counts, cron jobs, database size.
remove_sshwriteRemove SSH access from a connected WordPress site.
list_sitesreadList the WordPress sites the user has connected.
list_postsreadList recent posts on a connected WordPress site.
list_pagesreadList pages on a connected WordPress site.
list_mediareadList media library items on a connected WordPress site.
get_site_healthreadReport read-only health for a connected WordPress site.
refresh_sitewriteRe-check connectivity and auth for a connected WordPress site and update its stored status.
refresh_all_siteswriteRe-check connectivity for all connected WordPress sites at once.
list_commentsreadList comments on a connected WordPress site. Use status='hold' to see comments pending moderation, 'approved' for published, 'spam' for spam.
list_scheduledreadList posts scheduled for future publication on a connected WordPress site.
list_usersreadList recently registered users on a connected WordPress site.
list_ordersreadList WooCommerce orders on a connected WordPress site. Returns an error if WooCommerce is not installed.
list_pluginsreadList installed plugins on a connected WordPress site - name, active/inactive status, version, and whether an update is available. Requires SSH access (add_ssh) since WordPress core doesn't expose plugin management over REST.
list_custom_postsreadList items of a custom post type on a connected WordPress site. Use post_type= with the REST base slug (e.g. 'products', 'events', 'portfolio'). Check the site's panel to see available post types.
get_server_infowriteGet server information for a WordPress site via SSH + WP-CLI: PHP version, WordPress version, available plugin/theme/core updates, cron job count, database size. SSH must be configured first with add_ssh.
create_postwriteCreate a new post on a connected WordPress site. Defaults to status='draft' - pass status='publish' to publish immediately, or status='future' with a date to schedule.
update_postwriteUpdate an existing post on a connected WordPress site - title, content, status, excerpt, or scheduled date. Only fields you pass are changed.
upload_mediawriteUpload an image to a connected WordPress site's Media Library. Returns a media_id (use as featured_media_id on create_post/update_post for the cover image) and a url (embed as <img src="..."> inside a post's content to place it anywhere in the text).
manage_plugindestructiveActivate, deactivate, or update a plugin on a connected WordPress site. The plugin slug is validated against the site's live plugin list (call list_plugins first) - never guess a slug. 'deactivate' can break site functionality that depends on the plugin, so it requires an explicit confirm=true on a second call; the first call only previews the action.
purge_cachewritePurge the site's page cache. Auto-detects an active cache plugin (currently LiteSpeed Cache via its litespeed-purge WP-CLI namespace) from the site's real, live plugin list - if none is found, reports that clearly instead of silently doing nothing.
run_wp_cliwriteRun a WP-CLI command in a namespace not covered by the dedicated tools (manage_plugin, purge_cache) - e.g. WooCommerce (wc), a theme, transients, cron. namespace must be on the server-side allowlist; dangerous namespaces (eval, db, config, shell) are always rejected. Destructive subcommands (delete/remove/set-role/etc.) require an explicit confirm=true on a second call - the first call only previews what would run.
manage_pluginsdestructiveActivate, deactivate, or update SEVERAL plugins at once on a connected WordPress site - the batch version of manage_plugin, for bulk updates. Every slug is validated against the site's live plugin list (call list_plugins first) - never guess a slug. 'deactivate' can break site functionality, so it requires an explicit confirm=true on a second call; the first call only previews the action.
More extensions in Productivity ready to enable in one click.
Enable WP Site Connector in your Imperal workspace in one click - 10,000 free starter credits included.