Your site is a website.
An agent wants an interface.
RankReady serves a Model Context Protocol manifest at /.well-known/mcp.json describing what an agent can ask your site for, in typed named calls. It is off until you switch it on, it exposes nothing that writes, and setup takes about five minutes from the dashboard.
v1.3.1 · 300 active installs · Tested to WordPress 7.1 · Runs alongside Yoast, Rank Math, AIOSEO and SEOPress
Sixteen read only abilities,
and headers that let
a desktop agent fetch them.
Named calls such as get-site-info, search-posts, get-post-by-url, get-post-summary, get-post-faq, get-author, get-sitemap and get-fresh-content, plus eight more. Served with a correct JSON content type, nosniff, noindex and a permissive CORS header, because a manifest a desktop agent cannot fetch is not a manifest.
Typed calls instead of guessing
An agent scraping your HTML reconstructs your structure and gets some of it wrong. A named call returns a shaped answer.
It stands on its own
No MCP adapter and no other plugin needed. That was a deliberate design choice, and it is the reason the feature works today.
Nothing leaves your server
The manifest is generated from your own database on request. No account, no API key, no callback.
The defaults were chosen
by asking what leaks.
Every resource has its own switch. Turn one off and the abilities that depend on it disappear from the manifest, rather than staying listed and failing when called.
On by default, because it is already public
Posts, pages, authors, taxonomies, the sitemap, your llms.txt, your generated summaries and FAQs, and the freshness list.
Comments and users are off
Both carry names and email addresses. You have to go and turn each one on deliberately.
Media is off
Non-attached uploads are a different privacy question from published posts.
Installed plugins and themes are off
That list is your attack surface, and it is nobody's business by default.
Settings are off
Settings rows leak secrets. There is no configuration in which exposing them is the safe default.
No write abilities at all
Every ability filters to published, public status content. An agent that finds this manifest can read your blog faster and more accurately. That is the entire claim.
Publishing a manifest
does not make agents come.
MCP discovery is not automated the way search crawling is. Anyone selling you this as an inbound traffic channel is ahead of the evidence.
The realistic path is a person pasting your URL
Into Claude Desktop, Cursor or VS Code, because they already care about your site. That is a real use, and it is a smaller one than the category implies.
The core Abilities API bridge is pending, not shipped
RankReady also tries to register with WordPress core's Abilities API. Testing against core, that registration is not taking effect, and the working surface is the standalone manifest.
Custom post types are not included
The manifest covers posts and pages today.
On nginx the path may be blocked before WordPress runs
Many configurations carry a blanket deny for dotfile paths and /.well-known/ matches it. RankReady detects the 403 and shows you the config block rather than letting you assume the feature works.
The honest answers,
before you have to ask.
Q. What is WebMCP in plain terms?
Model Context Protocol is a convention for describing what an AI agent may ask a system for. WebMCP applies it to a website: instead of scraping your HTML, an agent reads a manifest naming the calls available and what each returns.
Q. Is any of this a security risk?
Everything exposed by default is already publicly readable on your site. The resources that would be a risk are off until you turn them on, and no ability writes.
Q. Do I need the Abilities API plugin or an MCP adapter?
No. The manifest is served directly by RankReady and works on its own, which given the state of the core bridge is the point that matters.
Q. My manifest returns 403. Is the plugin broken?
Almost certainly not. Your server is denying /.well-known/ before WordPress runs. The fix is one nginx location block, not a setting, and the plugin tells you so.
Q. Will this get my site into ChatGPT answers?
No, and nobody should tell you it will. This makes your content cheaper and more accurate for an agent that already has your URL.
Q. Does it clash with my SEO plugin?
None of Yoast, Rank Math, AIOSEO or SEOPress serves an MCP manifest, so there is nothing to collide with. Setup takes about five minutes.
Make your site readable
to the things reading it.
RankReady is a WordPress AI SEO plugin. It runs alongside Yoast, Rank Math, AIOSEO and SEOPress rather than replacing any of them, and setup takes about five minutes from your dashboard.
Free, no account, no credit card · GPL-2.0 · About five minutes from your dashboard