The Site Editor for AI agents.

Theme and content

Keep the theme and the saved content in step.

A template customised in the Site Editor lives in the database. One tool writes it into the theme’s files as a change set, so the theme you ship matches the site you built.

Two more tools find a CSS class or a piece of text in saved posts, pages and templates, and replace it.

• A dry run previews every match and writes nothing
• The real run changes exactly the posts the dry run listed
• A revision is saved before each post is written
• Class mode renames a class in HTML and in block attributes together

btm.content-replace{
  "mode": "class",
  "replacements": [
    {
      "from": "hero-title",
      "to": "site-hero__title"
    }
  ],
  "dryRun": true
}

Ways in

Three ways to connect.

Each way to connect is a separate switch. The same group switches and capability checks apply to all three.

• OAuth. Claude Code, claude.ai and ChatGPT sign in through a consent screen on your own site. There is no password to create or paste. It needs HTTPS.
• Application Password. Any MCP client that speaks Streamable HTTP and can send a header signs in with a WordPress Application Password.
• WebMCP. A browser agent finds the tools in your browser tab. On admin screens this is on from activation. On the front end it is off.

The endpointhttps://example.com/wp-json/btm/v1/mcp

Safety

Built to be switched on carefully.

The remote ways in start off. So do the theme, template, global styles, pattern, content, file, HTTP request and PHP groups. Browse, Abilities and Site administration start on, as do the tools a browser agent finds on admin screens.

• Only a logged-in user with the manage_options capability can use the tools, and every request is checked again on the server
• A connected agent works with the permissions of the account it signed in as
• The theme tools do not edit PHP files
• Running PHP and writing files in wp-content are separate groups. Each needs a constant in wp-config.php as well as its switch: BTMCP_ALLOW_PHP and BTMCP_ALLOW_FILE_WRITE
• The consent screen shows which application is asking, where you will be sent and which tool groups it would reach. Nothing is granted until you approve
• In the browser, a tool flagged destructive asks before it runs. Remote clients ask in the client