Can ChatGPT Log In to WordPress? What Works in 2026 (and What's Safe)

ChatGPT can work on a WordPress site, but it should never get your password in a chat. There are two safe routes:

• An MCP connector. You install an MCP server plugin on the site and add it to ChatGPT as a custom connector. ChatGPT then calls the site’s tools directly, for posts, pages, media and settings, acting as a WordPress user you approved.
• The agent’s browser. ChatGPT’s agent opens wp-admin in its own cloud browser, and when it reaches the login screen you type the username and password yourself. OpenAI says the model can’t see them.

The connector is faster and more precise; the browser needs no plugin.

MCP, the Model Context Protocol, is the open standard ChatGPT uses to call tools in other systems. An MCP plugin turns your WordPress site into an MCP server, and ChatGPT connects to it as a custom connector. Several plugins do this, among them AI Engine by Meow Apps (90,000+ active installs on WordPress.org) and Easy MCP AI by Themeisle (30,000+); our comparison of WordPress MCP plugins covers the rest. The steps below follow AI Engine’s documented OAuth setup, which needs no token or config file.

1. Install AI Engine from Plugins → Add New. MCP is on by default in current versions; on an older install, turn it on under AI Engine → Modules.
2. Choose what to expose. Under MCP Features, the WordPress tools are on by default, and Plugins, Themes and WooCommerce are separate groups. Leave off the ones the job doesn’t need.
3. Turn on developer mode in ChatGPT, then open Settings → Apps & Connectors and choose Create.
4. Add your site. Name the connector, paste your MCP URL as the MCP Server URL, for example https://your-site.com/wp-json/mcp/v1/http, choose OAuth and click Create.
5. Sign in and approve. ChatGPT sends you to your site’s normal WordPress login. After you sign in, an approval screen shows which app is asking and which user and role it will act as. Click Approve.
6. Test with a read-only request, such as “List my five most recent posts”, before you ask for changes.

ChatGPT now acts as the WordPress user who approved it, with that user’s role, so approve as a dedicated user rather than your own administrator account, as described below. AI Engine lists every connected app with its user and when it was last used, and one click revokes access.

If ChatGPT can’t reach the server, the usual causes are a site that is only reachable locally, a firewall or security plugin blocking /.well-known/ requests, or a two-factor login plugin interrupting the approval. Meow Apps keeps a setup and troubleshooting guide.

Which ChatGPT plans can do this?

Custom connectors live in ChatGPT’s developer mode, a beta on paid plans, and the rules for write actions, which create or change content rather than only reading it, have changed more than once. At the time of writing, OpenAI documents full read-and-write MCP for Business, Enterprise and Edu workspaces, with narrower options on personal plans. Check OpenAI’s current help article for your plan before you rely on it. ChatGPT also asks you to confirm write actions by default, unless a tool is marked read-only.

ChatGPT’s agent can now finish tasks on sites that need a login. In its 25 August 2026 release notes, OpenAI said the browser in ChatGPT Work, its agent for longer, multi-step tasks, can take over a task on a login-gated site. When the agent reaches a login screen, ChatGPT shows it to you; you type the username and password, or a security code, and the agent carries on. OpenAI says the model can’t see your credentials, that they aren’t stored, and that password managers work for that step (Decrypt’s report has the details).

Two things to know before you point it at wp-admin:

• The session can stay signed in for later tasks, so the agent keeps the access you gave it until you clear it. Sessions can be cleared site by site under Settings → Cloud browser.
• It works the way a person does, clicking through screens, so it is slower than a connector and has to work out each screen as it goes, which is hardest on complex screens such as page builders.

It suits one-off jobs on a site where you can’t install a plugin, such as checking a setting on a client’s site. Sign in as a limited user rather than an administrator, and watch the first few runs.

• Don’t paste your WordPress password into a chat. A chat message isn’t a password field: it is kept in your history like any other message. Use a connector’s approval screen, an application password or the agent’s login screen instead.
• Don’t connect as your main administrator. Whatever the agent does, it does with that account’s permissions.
• Don’t switch on every tool group. If the job is writing posts, leave plugin, theme and user tools off.
• Don’t start on a live site. Try new kinds of task on a staging copy, and keep a backup you have actually restored from.

Give ChatGPT its own WordPress user, so you can limit and revoke its access without touching yours.

1. Go to Users → Add New User and create a user such as chatgpt-agent with its own email address.
2. Pick the lowest role that does the job: Author to write and publish its own posts, Editor to edit any post or page, and Administrator only for settings, plugins or themes.
3. If your MCP plugin uses application passwords rather than OAuth, open that user’s profile, find Application Passwords, enter a name such as ChatGPT and click Add New Application Password. WordPress shows it once. Application passwords work for API access only, not for logging in to wp-admin, and each one can be revoked from the same screen.
4. Approve the connector, or sign in through the agent’s browser, as this user.

When the project ends, revoke the connection and delete or demote the user.

Through a connector, ChatGPT can do whatever the plugin’s tools allow, as the user you approved. Typical requests, depending on the plugin:

• “List posts that haven’t been updated since 2024, with their categories.”
• “Draft a post from these notes, put it in the News category and save it as a draft.”
• “Find pages that have no featured image.”
• “Write alt text for the last 20 images I uploaded.”

Two limits are worth knowing. General-purpose MCP tools edit standard WordPress content, so pages built in a page builder such as Elementor, which keeps its layout data separately, may not change the way you expect. And WordPress keeps revisions for posts and pages but not for settings, plugins or themes, so take a backup before anything structural.

If you look after sites for clients, signing in and wiring up a connector for every site gets old fast. WPOS installs as a plugin on sites you already manage, on any host, and puts an AI agent inside wp-admin, so there is no password to hand over and no connector to set up per chat. It builds natively in Gutenberg, Elementor and Divi, works on stores through WooCommerce’s own APIs, and checks its own render with a browser screenshot before it reports a job done. A request looks like this:

“Update the opening hours on the Contact page to 9am to 5pm, Monday to Friday, then check the page on mobile.”

If you’d rather bring your own agent, WPOS speaks MCP, so Claude Code, Cursor, Codex or an agent you wrote can drive the same tools without spending WPOS credits. WPOS is our product, so weigh this section accordingly. You can try it free for 30 days with 5,000 credits, a live site plus a staging sandbox, and no card.