Docs · getting-started

Authentication with Application Passwords

How NIBWP authenticates AI clients, what Application Passwords are, and why we never use cookie auth.

This guide walks you through Authentication with Application Passwords step by step. NIBWP runs entirely on your own WordPress install, so everything here happens on your server, under your control.

Overview

NIBWP turns your site into a Model Context Protocol server. Every action is a typed tool an agent can discover and call, with your permissions and a full audit trail.

Steps

Open the NIBWP admin, enable AI Abilities, and mint a least-privilege application password. Set scopes so agents only touch what you allow.

Security note: with AI Abilities on, agents can execute PHP and filesystem operations. Use staging and keep backups.

Verify

Ask your agent to list recent posts. NIBWP routes it to nibwp/wp-list-posts and returns structured JSON. You are live.

  • Typed, schema-backed tools
  • Least-privilege permissions
  • A full audit log of every call

Next, head to the docs index or request a demo.

Connect your first agent.

Follow the quickstart, or book a demo and we'll walk you through it.