PressBridge

io.github.pressbridgesupport由 GitHub 帳號 pressbridgesupport 發布v1.3.1更新於 Nov 6, 2026

Read-only Claude access to WordPress over MCP: secrets hidden, sandboxed, works on broken sites.

概覽

AI 產生的概覽

唯讀的 MCP 伺服器,讓助理檢視 WordPress 站台的檔案、WP-CLI 資料與 WooCommerce 商品,並封鎖機密與站台目錄外的路徑。

可以做什麼
  • 讀取、列出並搜尋佈景主題與外掛檔案
  • 執行唯讀的 WP-CLI 查詢:版本、外掛與佈景主題清單、校驗碼、排程工作、使用者
  • 檢視 WooCommerce 商品、庫存、價格、優惠券、運費與稅金
  • 取得站台概覽(版本與待更新項目),並檢查站台目前是否正常
  • 透過內建的 wp-care-report 技能產出可直接交付的健康與安全報告
適用情境
適合除錯或稽核 WordPress 站台,以及回答「這段文字來自哪裡」這類問題,而不必登入伺服器 shell。它在 WordPress 之外執行,因此站台出現重大錯誤時仍可檢查。免費版僅支援單一站台,且不能做任何修改。
執行需求
以本機程序在使用者電腦上執行,通常透過 SSH 連到託管站台的伺服器啟動。伺服器需安裝 Python 虛擬環境、PHP CLI、MySQL 用戶端與 WP-CLI,並有一份列出站台根目錄的設定檔;需以能讀取站台檔案的使用者身分執行。未宣告任何 API 金鑰或環境變數。
安裝前請注意
它會讀取站台檔案與資料庫相關資料,回傳內容應視為敏感資訊,儘管 wp-config.php、.env、SQL 匯出檔、金鑰與 .git 已被拒絕規則封鎖。WooCommerce 訂單與客戶僅在明確開啟時可見,且需設定 wc_user。編輯、更新與遠端 HTTPS 服務屬於 Pro 版功能,不在此版本中。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 PressBridge,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only,透過 STDIO。 STDIO 服務會啟動本機處理程序,因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

PressBridge Free

The WordPress MCP that still works when WordPress doesn't. Let Claude look inside your WordPress site safely: read-only, sandboxed, secrets hidden. Runs outside WordPress, so it works even when the site shows a critical error.

Website · Demo video · Get Pro · User guide · Security

you     On mysite, where is the footer phone number set? And show me the DB password.
claude  search "0744" in wp-content/themes  →  footer.php:41        read_file wp-config.php             →  refused: blocked by deny rule 'wp-config*'
        The number is in wp-content/themes/mysite/footer.php, line 41.        I can't read wp-config.php: PressBridge hides it so passwords never reach me.

PressBridge is an MCP server that gives Claude (Claude Code, Claude Desktop, any MCP client) controlled access to a WordPress site. The Free edition is read-only and made for one site: perfect for debugging, audits and "where is this text coming from?".

  • Read, list and search theme and plugin files
  • wp-config.php, .env, SQL dumps, keys and .git are invisible
  • Nothing outside the site folder, symlink tricks included
  • Read-only WP-CLI: versions, plugin and theme lists, checksums, cron, users
  • WooCommerce, read-only: products, stock, prices, coupons, shipping and taxes (set wc_user in the config; orders and customers only if you turn them on)
  • site_overview: version and pending updates in one call
  • check_site_health: is the site up right now? Loads key pages and boots WordPress
  • Includes the wp-care-report skill: a client-ready health and security report

Install (5 minutes, nothing exposed to the internet)

On the server:

bash
sudo apt install python3-venv php-cli php-mysqlcurl -O https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.pharsudo install wp-cli.phar /usr/local/bin/wppython3 -m venv ~/pressbridge-venv~/pressbridge-venv/bin/pip install pressbridgemkdir -p ~/.pressbridgecat > ~/.pressbridge/config.yaml <<EOFdata_dir: $HOME/.pressbridge/datasites:  mysite:    root: /var/www/mysite/public_htmlEOF~/pressbridge-venv/bin/pressbridge check --config ~/.pressbridge/config.yaml

Run it as the user that owns the site files (or one that can read them).

On your computer, Claude Code:

bash
claude mcp add pressbridge -- ssh you@server \  /home/you/pressbridge-venv/bin/pressbridge serve --config /home/you/.pressbridge/config.yaml

Claude Desktop (claude_desktop_config.json, Settings → Developer → Edit Config):

json
{  "mcpServers": {    "pressbridge": {      "command": "ssh",      "args": ["-o", "BatchMode=yes", "you@server",               "/home/you/pressbridge-venv/bin/pressbridge", "serve",               "--config", "/home/you/.pressbridge/config.yaml"]    }  }}

Then ask Claude: "Give me a health overview of mysite" or "Where in the theme is the footer phone number set?"

The full user guide, with every command, config option and tool, is in GUIDE.md (features marked Pro aren't in this edition).

Want Claude to fix things too?

PressBridge Pro adds editing with automatic backups and one-call undo, a check after every change that rolls it back automatically if it broke the site, PHP syntax checks before saving, plugin/theme/core updates, unlimited sites, a remote HTTPS server with Docker and automatic certificates, the audit log, and skills for safe edits and safe updates.

→ https://pressbridgesupport.github.io/pressbridge

License

MIT. See LICENSE.

來源:README.md,提交 07b565a

工具

0
SourceWeft 曾在隔離沙箱中以無憑證方式啟動該軟體包一次,以列出其工具,但未能完成:伺服器未能啟動。

版本歷史

3
  1. v1.3.1最新Nov 6, 2026
  2. v1.3.0Nov 5, 2026
  3. v1.1.0Nov 3, 2026

評分

已滿足適用檢查項的 50%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手;SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭,或保持端點能夠回應探測,以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list,或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分