# wp_create_post Create a new WordPress post Agent View of the PolicyLayer registry record for `wp_create_post`. HTML page: https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/wp-create-post ## Facts - Tool: `wp_create_post` - Server: Wordpress (`@cavort-it-systems/wordpress-mcp`) — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp.md - Install: `npx -y @cavort-it-systems/wordpress-mcp` - Homepage: https://github.com/cvrt-jh/wordpress-mcp - Risk category: Write (Medium risk) - Registry record: grade F, identity unverified - Server rate-limited: no - Parameters: 0 - Recommended policy verdict: Rate-limited ## Example call (MCP tools/call, JSON-RPC 2.0) ```json { "jsonrpc": "2.0", "id": 1, "method": "tools/call", "params": { "name": "wp_create_post", "arguments": {} } } ``` ## Why wp_create_post is rated Medium Creating a post is a Write operation: it adds new data to the system in a way that can be modified or deleted later. The severity is medium because an AI agent could create spam, misleading content, or posts that damage site reputation, but the action remains reversible. This is less severe than Destructive (which cannot be undone) or Financial (no money involved), but more severe than Read operations. From the tool's own definition: "Tool name is 'wp_create_post' and description states 'Create a new WordPress post' — explicitly creates new content in a reversible manner." ## Use case AI agents use wp_create_post to create or update resources in Wordpress, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Wordpress environment. ## Recommended policy (PolicyLayer) Verdict: **Rate-limited**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Wordpress: ```json { "version": "1", "default": "deny", "tools": { "wp_create_post": { "limits": [ { "counter": "wp_create_post_rate", "window": "minute", "max": 30, "scope": "grant" } ] } } } ``` ## Other tools on Wordpress (313) - `acf_delete_field_group` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/acf-delete-field-group.md - `fields_delete_definition` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/fields-delete-definition.md - `fort_cache_purge` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/fort-cache-purge.md - `legal_delete_section` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/legal-delete-section.md - `legal_put_document` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/legal-put-document.md - `legal_reset_accessibility_report` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/legal-reset-accessibility-report.md - `legal_restore_generator` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/legal-restore-generator.md - `mcp_bulk_delete_media` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/mcp-bulk-delete-media.md - `mcp_clean_comments` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/mcp-clean-comments.md - `mcp_clean_revisions` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/mcp-clean-revisions.md - `mcp_delete_cpt_post` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/mcp-delete-cpt-post.md - `mcp_delete_media` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/mcp-delete-media.md - `mcp_delete_menu` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/mcp-delete-menu.md - `mcp_delete_menu_item` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/mcp-delete-menu-item.md - `mcp_delete_option` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/mcp-delete-option.md - `mcp_delete_term` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/mcp-delete-term.md - `mcp_delete_theme` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/mcp-delete-theme.md - `mcp_delete_user` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/mcp-delete-user.md - `mcp_delete_widget` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/mcp-delete-widget.md - `mcp_flush_cache` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/mcp-flush-cache.md - `seo_clear_monitor_log` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/seo-clear-monitor-log.md - `seo_delete_post_seo` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/seo-delete-post-seo.md - `seo_delete_redirect` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/seo-delete-redirect.md - `seo_delete_term_seo` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/seo-delete-term-seo.md - `stripe_recreate_webhook` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/stripe-recreate-webhook.md - `woo_delete_category` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/woo-delete-category.md - `woo_delete_coupon` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/woo-delete-coupon.md - `woo_delete_product` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/woo-delete-product.md - `woo_delete_variation` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/woo-delete-variation.md - `woo_helper_create_invoice` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/woo-helper-create-invoice.md - …and 283 more: https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp.md ## For agents This record is a snapshot. Live verdicts and the full registry: - Check every server in your MCP config at once: `npx -y policylayer stack` - Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md) - Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events` --- Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=io-github-cvrt-jh-wordpress-mcp · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/io-github-cvrt-jh-wordpress-mcp