This page walks through connecting an MCP client to KanbanWP. You will need a site served over HTTPS and an agent or client that supports HTTP MCP servers.
1. Enable MCP and find your token
- Go to KanbanWP > Settings and open the MCP tab.
- Make sure Enable MCP server is ticked (the checkbox reads “Allow AI agents to access boards via MCP”). Save if you changed it.
- Copy the value in MCP token. Click the field to select it.
A token is created automatically when the plugin is activated. To replace it, click Regenerate token. The old token stops working at once, so update every client afterward.
If MCP is turned off or no token exists, the endpoint returns an error that tells you to fix it in Settings.
2. Use the endpoint URL
The endpoint is your site address plus the REST path:
https://your-site.example/wp-json/kanbanwp/v1/mcpRequests must be POST with a JSON body and these headers:
Content-Type: application/json
Authorization: Bearer YOUR_MCP_TOKENSome browser-based connectors cannot set headers. For those, put the token in the request body as params.auth, and the server will accept it there instead.
3. Configure your client
Most clients accept a URL and headers. This example uses placeholders only. Replace the URL and token with your own.
{
"mcpServers": {
"kanbanwp": {
"url": "https://your-site.example/wp-json/kanbanwp/v1/mcp",
"headers": {
"Authorization": "Bearer YOUR_MCP_TOKEN",
"X-KanbanWP-Agent": "Claude"
}
}
}
}The X-KanbanWP-Agent header is optional. It sets the name shown in the activity log, so use a different name for each agent. Cursor accepts the same structure. For Codex the top-level key is mcp_servers instead of mcpServers. The exact place to paste the configuration depends on the client, so check its documentation.
4. Test with curl
List the available tools:
curl -s -X POST https://your-site.example/wp-json/kanbanwp/v1/mcp \
-H 'Content-Type: application/json' \
-H 'Authorization: Bearer YOUR_MCP_TOKEN' \
-H 'X-KanbanWP-Agent: curl-test' \
-d '{"jsonrpc":"2.0","id":1,"method":"tools/list","params":{}}'Create a task:
curl -s -X POST https://your-site.example/wp-json/kanbanwp/v1/mcp \
-H 'Content-Type: application/json' \
-H 'Authorization: Bearer YOUR_MCP_TOKEN' \
-d '{"jsonrpc":"2.0","id":2,"method":"tools/call","params":{"name":"create_task","arguments":{"board_id":1,"title":"Draft launch post","priority":"high"}}}'Tool results come back as a JSON string in result.content[0].text.
Troubleshooting
| You see | Likely cause |
|---|---|
| 401 with “Unauthorized” | The token is missing, wrong or was regenerated. |
| 403 saying MCP is disabled | The Enable MCP server box is off. |
| 405 Method Not Allowed | You sent GET. Use POST. |
| Parse error | The body is not valid JSON. |
Security notes
- The token gives full read and write access to every board. Treat it like an administrator password.
- Always use HTTPS so the token is not sent in clear text.
- Store the token in your client’s secret storage, not in a shared repository or a screenshot.
- Regenerate the token when someone leaves the team or if it may have leaked.
- Review the activity log to see what each named agent did.
- If you are not using MCP, turn the server off.