CostaTech Connect for Claude – AI Assistant & MCP Connector
| 开发者 | costatech |
|---|---|
| 更新时间 | 2026年11月12日 13:54 |
| PHP版本: | 8.0 及以上 |
| WordPress版本: | 7.1 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
Manage your WordPress site by talking to Claude. CostaTech Connect for Claude connects your Claude account to your site through the Model Context Protocol (MCP). You then update the site by asking Claude in plain language, for example "create a draft post about our summer sale", "add a Size attribute with Small, Medium and Large" or "which customers order repeatedly?", instead of clicking through wp-admin.
Not affiliated with, endorsed by or sponsored by Anthropic. Claude is a trademark of Anthropic, PBC.
How it works
- Install and activate the plugin.
- Go to Settings -> Connect Claude. The Connect tab shows your connection address.
- In Claude, open Settings -> Connectors -> Add custom connector, paste the address, and click Allow on the approval page of your site.
- On the Permissions tab, choose what Claude may do (safe choices are already on).
- Ask Claude to work on your site.
- Out of the box Claude can look things up and create drafts. Editing, publishing, trashing and everything that changes live content is off until you tick it, and a confirmation window appears before you switch those on.
- Claude always acts as a real WordPress user and every action is checked against that user's capabilities. It can never do more than that user could do in wp-admin.
- Tools that expose private data (customer orders, coupon codes, payment details) are off by default and carry a warning.
- Every tool call is written to an activity log (time, user, tool, short summary, result). Passwords, secrets and the text of your content are never logged.
- A rate limit (60 calls per minute by default, adjustable) protects against a runaway loop or a leaked secret.
- Disconnect everything with one click, or revoke a single connected app.
- Images downloaded from a link are checked against private and internal network addresses, limited in size and type, and the connection is pinned to the checked address.
- Posts and pages: list, read, create drafts, edit, publish, move to the trash.
- Media: add an image from a public link, set a featured image.
- Categories and tags: list and create.
- Site information.
- Undo for changes to posts and pages.
- Products: create a complete product in one request, including a variable product with all its variations, attributes, categories, tags, images, stock, weight, dimensions and shipping class; edit products and variations.
- Categories, tags, attributes and attribute values.
- Orders: look up orders, change an order status, add an order note, resend a customer email.
- Coupons: list, create and edit coupons (new coupons are saved as drafts).
- Customers: find repeat customers.
- Payment: read the offline payment details (such as the bank account for a bank transfer). Gateway secrets are never exposed.
- There are no tools to install, activate, update or delete plugins or themes, to create, change or log in users or roles, to change site settings, or to edit or run code or files.
- The tools only work with content and store data: posts, pages, media, categories and tags, and, if WooCommerce is active, products, orders and coupons.
- Every call runs as the WordPress user who approved the connection, is checked against that user's capabilities, and is written to the activity log. You can switch each tool off, choose how much Claude may do, and cut off all access with one click.
- Sign in (recommended): Claude opens an approval page on your site and you click Allow. Needs HTTPS and permalinks other than "Plain".
- Secret key: copy a header into Claude. Use this if signing in does not work. If your host removes the Authorization header, the settings page offers an X-API-Key header instead. A "Test connection" button checks what your host allows.
安装:
- Upload the
costatech-connect-claudefolder to/wp-content/plugins/, or install it from the Plugins screen. - Activate the plugin through the Plugins screen.
- Go to Settings -> Connect Claude. Copy the address on the Connect tab and add it in Claude, then choose what Claude can do on the Permissions tab.
- To sign in, your site needs HTTPS and pretty permalinks (Settings -> Permalinks, anything except "Plain"). Otherwise connect with a secret key (Troubleshoot tab).
屏幕截图:
常见问题:
Can Claude do things I am not allowed to do on my own site?
No. Every action runs as a real WordPress user and is checked against that user's normal capabilities.
Is publishing and deleting enabled by default?
No. Only look-ups and draft creation are on by default. You switch everything else on yourself, per tool, on the settings page.
I changed the tools but Claude does not see them.
Claude keeps its own copy of the tool list. In Claude open Settings -> Connectors, remove the connector and add it again.
Claude says it can connect but shows no tools.
Open Settings -> Connect Claude -> Troubleshoot and click "Test connection". The most common causes are a security plugin that blocks the REST API, a host that removes the Authorization header (use the X-API-Key header shown on the Troubleshoot tab), or another plugin that prints text into the response (the Setup tab then shows a notice).
How do I disconnect Claude?
Settings -> Connect Claude -> "Disconnect everything" cuts off every app and the secret key. You can also revoke a single app under "Connected apps".
Does it work with other AI apps?
The secret-key connection works with any client that supports MCP over HTTP and custom headers. Signing in is built for Claude.
Can Claude add an image I attach in the chat?
Not reliably. Give Claude a public link to the image instead. A tool for very small images (about 10 KB or less) exists but is off by default.
Can I undo something Claude did?
For posts and pages, yes. Open Settings -> Connect Claude -> Activity and click Undo next to the change. A new post or page is moved to the trash, an edit is reversed, a published item goes back to a draft, a trashed item is restored, and a changed main picture is put back. If someone changed the item again after Claude did, you are warned before anything is overwritten. History is kept for 30 days. Changes made outside this plugin are not tracked.
Where is my data stored?
On your site only: settings, the activity log (kept for 30 days) and the sign-in records. Uninstalling the plugin removes them.
更新日志:
0.13.12
- Readme: added a plain statement of what Claude can and cannot do.
- Approval page styles moved into a stylesheet file. Clearer "External services" section. Author and plugin links now point to costatechnolab.com.
- Fixes for the WordPress.org automated checks: text domain now matches the plugin slug, and "Tested up to" is declared only in this readme.
- Plugin name shortened to follow WordPress.org naming rules.
- New plugin name, short description and tags so the plugin is easier to find. Added a note that it is not affiliated with Anthropic.
- Code quality: removed the unneeded manual translation loading (WordPress.org does it automatically) and documented the remaining Plugin Check notices. No change in behaviour.
- Code quality: fixed all errors reported by the WordPress.org Plugin Check (translator comments, Yoda conditions, documented exceptions) and tidied code formatting. No change in behaviour.
- Wording: the settings page and the connection test no longer use the old "Option A / Option B" names.
- Permissions tab: the list of individual tools is open by default.
- Permissions tab: all five choices, including Full access, sit in one row.
- Permissions tab: Full access sits on its own full-width row under the other choices.
- Permissions tab: new "Full access" choice that switches on every tool, including customers' private details and deleting. It is marked in red and shows an extra warning.
- New: Undo. When Claude creates, edits, publishes or trashes a post or page, or changes its main picture, the Activity tab shows an Undo button that puts it back (kept for 30 days). If the item was changed again since, you get an extra warning first.
- Fixed: the tool search on the Permissions tab did not hide tools that do not match.
- Permissions tab: radio-button circles on the choices, and the Recommended label sits on the top edge of its card.
- Permissions tab: the four choices now look clickable ("Choose this" button, "Selected" state, hover effect) and the current setting is shown above them.
- Permissions tab: simpler layout (four choices in one row) and plain-English titles and descriptions for every tool.
- Permissions tab redesigned: pick a ready-made level (Look only, Look and draft, Content editor, Store manager), fine-tune individual tools with search and counts, and a save bar that shows unsaved changes. A reminder tells you to re-add the connector in Claude after you change permissions.
- Settings page reorganised into four tabs: Connect, Permissions, Activity and Troubleshoot. Everything technical (secret key, headers, connection test, disconnect) moved to Troubleshoot.
- "Upload image from chat" now says clearly that it is for tiny images only; the sign-in error message also names the X-API-Key header.
- Stray text printed by other plugins no longer corrupts Claude's responses; the Connect tab tells you when it happens.
- Image downloads connect to the address that was checked (protection against DNS rebinding).
- New "Test connection" button, and an X-API-Key header alternative for hosts that remove the Authorization header.
- New tool "Upload image from chat" (off by default, 1 MB limit) for apps that can read the image file themselves.
- Answers the optional resources and prompts lists with empty lists.
- WooCommerce: resend a customer order email (processing, completed, on-hold, invoice).
- WooCommerce: list, create and edit coupons; find repeat customers.
- WooCommerce: read offline payment details (never gateway secrets).
- WooCommerce: create and edit complete products, including variable products and their variations.
- Claude is told which tools are switched off, and a one-click button switches on everything needed for product work.
- WooCommerce: categories, tags, attributes, images, weight, dimensions and shipping class.
- WooCommerce section on the settings page, shown only when WooCommerce is active.
- Sign in with Claude (OAuth 2.1): approval page, connected apps list and per-app revoke.
- Guided Setup tab with steps.
- Activity log of every tool call, with filtering, pagination, Clear log, and automatic removal of entries older than 30 days.
- Per-connection rate limit (default 60 tool calls per minute, adjustable).
- MCP endpoint with secret / Application Password sign-in, mapped to a real WordPress user.
- Post, page, media and category/tag tools with per-tool on/off switches.
- Confirmation window before turning on tools that can change live content.
- Initial development release.