Connecting AI clients

Your endpoint is always: https://yoursite.com/wp-json/rivopress/v1/mcp

Claude and ChatGPT

Add a custom connector with your endpoint URL. The client starts the OAuth flow: your browser opens your site’s sign-in, then a consent screen listing exactly the scopes being granted. Approve, and the client receives a 1-hour access token and a rotating refresh token. Revoke any time under RivoPress → Connected Apps. RivoPress supports Dynamic Client Registration (RFC 7591) with PKCE S256.

Claude Code, Cursor and local MCP hosts

Create a manual token (Connected Apps → Create token), copy it once — it is shown only once — and configure an HTTP MCP server with the endpoint URL and header: Authorization: Bearer YOUR_TOKEN.

Application Passwords (fallback)

On hosts where the OAuth flow is blocked but Application Passwords are available, RivoPress accepts WordPress Application Passwords via HTTP Basic auth for the matching user. Capabilities still apply in full.

Troubleshooting

Run the Connect Doctor (Status page). Its Authorization-header probe and security-plugin check catch the two most common connection failures and tell you the exact fix for your host.