# mcp_install_theme Install a theme from WordPress.org by slug Agent View of the PolicyLayer registry record for `mcp_install_theme`. HTML page: https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/mcp-install-theme ## Facts - Tool: `mcp_install_theme` - Server: Wordpress (`@cavort-it-systems/wordpress-mcp`) — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp.md - Install: `npx -y @cavort-it-systems/wordpress-mcp` - Homepage: https://github.com/cvrt-jh/wordpress-mcp - Risk category: Write (Medium risk) - Registry record: grade F, identity unverified - Server rate-limited: no - Parameters: 0 - Recommended policy verdict: Rate-limited ## Example call (MCP tools/call, JSON-RPC 2.0) ```json { "jsonrpc": "2.0", "id": 1, "method": "tools/call", "params": { "name": "mcp_install_theme", "arguments": {} } } ``` ## Why mcp_install_theme is rated Medium This tool installs (creates) a new theme in the WordPress environment. While installation is technically reversible (themes can be uninstalled), it modifies the site's state, adds executable code to the system, and could introduce vulnerabilities or alter site behavior. This is a Write operation rather than Execute because the tool itself doesn't run arbitrary code—it fetches and installs a pre-packaged theme. From the tool's own definition: "Tool name 'mcp_install_theme' and description 'Install a theme from WordPress.org by slug' indicate creation/installation of a new theme resource in WordPress." ## Use case AI agents use mcp_install_theme to create or update resources in Wordpress, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Wordpress environment. ## Recommended policy (PolicyLayer) Verdict: **Rate-limited**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Wordpress: ```json { "version": "1", "default": "deny", "tools": { "mcp_install_theme": { "limits": [ { "counter": "mcp_install_theme_rate", "window": "minute", "max": 30, "scope": "grant" } ] } } } ``` ## Other tools on Wordpress (313) - `acf_delete_field_group` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/acf-delete-field-group.md - `fields_delete_definition` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/fields-delete-definition.md - `fort_cache_purge` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/fort-cache-purge.md - `legal_delete_section` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/legal-delete-section.md - `legal_put_document` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/legal-put-document.md - `legal_reset_accessibility_report` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/legal-reset-accessibility-report.md - `legal_restore_generator` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/legal-restore-generator.md - `mcp_bulk_delete_media` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/mcp-bulk-delete-media.md - `mcp_clean_comments` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/mcp-clean-comments.md - `mcp_clean_revisions` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/mcp-clean-revisions.md - `mcp_delete_cpt_post` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/mcp-delete-cpt-post.md - `mcp_delete_media` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/mcp-delete-media.md - `mcp_delete_menu` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/mcp-delete-menu.md - `mcp_delete_menu_item` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/mcp-delete-menu-item.md - `mcp_delete_option` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/mcp-delete-option.md - `mcp_delete_term` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/mcp-delete-term.md - `mcp_delete_theme` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/mcp-delete-theme.md - `mcp_delete_user` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/mcp-delete-user.md - `mcp_delete_widget` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/mcp-delete-widget.md - `mcp_flush_cache` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/mcp-flush-cache.md - `seo_clear_monitor_log` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/seo-clear-monitor-log.md - `seo_delete_post_seo` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/seo-delete-post-seo.md - `seo_delete_redirect` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/seo-delete-redirect.md - `seo_delete_term_seo` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/seo-delete-term-seo.md - `stripe_recreate_webhook` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/stripe-recreate-webhook.md - `woo_delete_category` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/woo-delete-category.md - `woo_delete_coupon` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/woo-delete-coupon.md - `woo_delete_product` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/woo-delete-product.md - `woo_delete_variation` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/woo-delete-variation.md - `woo_helper_create_invoice` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/woo-helper-create-invoice.md - …and 283 more: https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp.md ## For agents This record is a snapshot. Live verdicts and the full registry: - Check every server in your MCP config at once: `npx -y policylayer stack` - Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md) - Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events` --- Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=io-github-cvrt-jh-wordpress-mcp · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/io-github-cvrt-jh-wordpress-mcp