PressBridge

io.github.pressbridgesupport由 GitHub 账号 pressbridgesupport 发布v1.3.1更新于 Nov 6, 2026

Read-only Claude access to WordPress over MCP: secrets hidden, sandboxed, works on broken sites.

概览

AI 生成的概览

只读的 MCP 服务器,让助手查看 WordPress 站点的文件、WP-CLI 数据和 WooCommerce 商品,并屏蔽密钥与站点目录外的路径。

可以做什么
  • 读取、列出并搜索主题与插件文件
  • 执行只读的 WP-CLI 查询:版本、插件与主题列表、校验和、定时任务、用户
  • 查看 WooCommerce 商品、库存、价格、优惠券、运费与税费
  • 获取站点概览(版本与待更新项),并检查站点当前是否可访问
  • 通过内置的 wp-care-report 技能生成可直接交付的健康与安全报告
适用场景
适合调试或审计 WordPress 站点,以及回答“这段文字来自哪里”这类问题,而无需登录服务器 shell。它在 WordPress 之外运行,因此站点出现严重错误时仍可检查。免费版仅支持单个站点,且不能做任何修改。
运行要求
作为本地进程运行在用户机器上,通常通过 SSH 连接到托管站点的服务器启动。服务器需安装 Python 虚拟环境、PHP CLI、MySQL 客户端和 WP-CLI,并有一份列出站点根目录的配置文件;需以能读取站点文件的用户身份运行。未声明任何 API 密钥或环境变量。
安装前请注意
它会读取站点文件与数据库相关数据,返回内容应视为敏感信息,尽管 wp-config.php、.env、SQL 导出、密钥和 .git 已被拒绝规则屏蔽。WooCommerce 订单与客户仅在显式开启时可见,且需配置 wc_user。编辑、更新和远程 HTTPS 服务属于 Pro 版功能,不在此版本中。

安装

在 SourceWeft 中

  1. 打开 控制台中的 PressBridge,将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Desktop only,通过 STDIO。 STDIO 服务会启动本地进程,因此需要 SourceWeft 桌面宿主。

其他 MCP 客户端

参照 仓库 中的启动说明。

README

PressBridge Free

The WordPress MCP that still works when WordPress doesn't. Let Claude look inside your WordPress site safely: read-only, sandboxed, secrets hidden. Runs outside WordPress, so it works even when the site shows a critical error.

Website · Demo video · Get Pro · User guide · Security

you     On mysite, where is the footer phone number set? And show me the DB password.
claude  search "0744" in wp-content/themes  →  footer.php:41        read_file wp-config.php             →  refused: blocked by deny rule 'wp-config*'
        The number is in wp-content/themes/mysite/footer.php, line 41.        I can't read wp-config.php: PressBridge hides it so passwords never reach me.

PressBridge is an MCP server that gives Claude (Claude Code, Claude Desktop, any MCP client) controlled access to a WordPress site. The Free edition is read-only and made for one site: perfect for debugging, audits and "where is this text coming from?".

  • Read, list and search theme and plugin files
  • wp-config.php, .env, SQL dumps, keys and .git are invisible
  • Nothing outside the site folder, symlink tricks included
  • Read-only WP-CLI: versions, plugin and theme lists, checksums, cron, users
  • WooCommerce, read-only: products, stock, prices, coupons, shipping and taxes (set wc_user in the config; orders and customers only if you turn them on)
  • site_overview: version and pending updates in one call
  • check_site_health: is the site up right now? Loads key pages and boots WordPress
  • Includes the wp-care-report skill: a client-ready health and security report

Install (5 minutes, nothing exposed to the internet)

On the server:

bash
sudo apt install python3-venv php-cli php-mysqlcurl -O https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.pharsudo install wp-cli.phar /usr/local/bin/wppython3 -m venv ~/pressbridge-venv~/pressbridge-venv/bin/pip install pressbridgemkdir -p ~/.pressbridgecat > ~/.pressbridge/config.yaml <<EOFdata_dir: $HOME/.pressbridge/datasites:  mysite:    root: /var/www/mysite/public_htmlEOF~/pressbridge-venv/bin/pressbridge check --config ~/.pressbridge/config.yaml

Run it as the user that owns the site files (or one that can read them).

On your computer, Claude Code:

bash
claude mcp add pressbridge -- ssh you@server \  /home/you/pressbridge-venv/bin/pressbridge serve --config /home/you/.pressbridge/config.yaml

Claude Desktop (claude_desktop_config.json, Settings → Developer → Edit Config):

json
{  "mcpServers": {    "pressbridge": {      "command": "ssh",      "args": ["-o", "BatchMode=yes", "you@server",               "/home/you/pressbridge-venv/bin/pressbridge", "serve",               "--config", "/home/you/.pressbridge/config.yaml"]    }  }}

Then ask Claude: "Give me a health overview of mysite" or "Where in the theme is the footer phone number set?"

The full user guide, with every command, config option and tool, is in GUIDE.md (features marked Pro aren't in this edition).

Want Claude to fix things too?

PressBridge Pro adds editing with automatic backups and one-call undo, a check after every change that rolls it back automatically if it broke the site, PHP syntax checks before saving, plugin/theme/core updates, unlimited sites, a remote HTTPS server with Docker and automatic certificates, the audit log, and skills for safe edits and safe updates.

→ https://pressbridgesupport.github.io/pressbridge

License

MIT. See LICENSE.

来源:README.md,提交 07b565a

工具

0
SourceWeft 曾在隔离沙箱中以无凭据方式启动该软件包一次,以列出其工具,但未能完成:服务器未能启动。

版本历史

3
  1. v1.3.1最新Nov 6, 2026
  2. v1.3.0Nov 5, 2026
  3. v1.1.0Nov 3, 2026

评分

已满足适用检查项的 50%

该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。

  • 近 30 天内可连通25 分

    请保持端点能够响应 MCP 握手;SourceWeft 每 30 天探测一次。

  • 已声明认证方式10 分

    请在注册中心条目中声明凭据请求头,或保持端点能够响应探测,以便判定其认证方式。

  • 已列出工具15 分

    请让服务器在无凭据时响应 tools/list,或发布可在沙箱中无凭据启动的软件包。

  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分