OAuth and PKCE
Avoid sharing administrator passwords and separate authorization from normal dashboard access.
Birlo
How to connect ChatGPT to WordPress securely
WordPress + AI
How to connect ChatGPT to WordPress securely
A useful connection does not have to mean unrestricted access. With MCP, you can expose specific tools, limit permissions and keep control over sensitive operations.
The key idea: explicit tools, not unrestricted access
Birlo Bridge exposes specific WordPress capabilities through MCP. The connection can use OAuth, scopes, approvals and auditing to control what an authorized client can read or modify.
What you need
- A WordPress site available over HTTPS.
- Birlo Bridge installed and active.
- An MCP-compatible client.
- Administrator permissions to authorize the connection.
Recommended flow
- Install Birlo Bridge.
- Check the site's MCP endpoint.
- Authorize the client through OAuth with PKCE.
- Review the requested scopes.
- Keep approvals for sensitive operations.
- Revoke connections you no longer use.
Security controls worth keeping
Scopes
Limit which tools can read or write according to the purpose of the connection.
Approvals
Reserve manual confirmation for sensitive or critical changes.
Auditing
Keep traceability of tools executed through the bridge.