The Connect panel is where NIBWP and your AI client shake hands. This is the first thing you will use and the thing you will return to whenever you add a new agent or a new team member. This guide walks through it end to end: generating a token with the right scope, copying the connection config for your client, and verifying the link — plus how to manage, rotate and revoke tokens as your setup grows.
In the Connect panel you generate a scoped application-password token and copy a ready-made connection snippet for Claude Code, Cursor or Claude Desktop. Each client gets its own token so you can revoke one without the others. Verify by asking the agent to list recent posts.
Open the Connect panel
In your WordPress admin, find NIBWP › Connect. This panel has three jobs: create tokens, show connection snippets for each client, and let you manage existing tokens. Think of it as the front door — every agent comes through here.
Step 1 — Generate a token
A token is an application password with a scope attached. Click to create one, give it a recognizable name (“Claude Code – staging”), and choose its scope. For a first connection, choose read:
| Scope | Grants | Use for |
|---|---|---|
read | Search and fetch content | First connections, research, audits |
write | Create and update drafts | Content and data workflows |
publish | Change post status to live | Trusted, reviewed automations |
admin | Settings and users | Avoid unless truly necessary |
Step 2 — Copy the connection config
The panel generates a ready snippet for each client. Pick yours:
claude mcp add --transport http nibwp \
https://yoursite.com/wp-json/nibwp/v1/mcp \
--header "Authorization: Bearer YOUR_TOKEN"{
"mcpServers": {
"nibwp": {
"url": "https://yoursite.com/wp-json/nibwp/v1/mcp",
"headers": { "Authorization": "Bearer YOUR_TOKEN" }
}
}
}{
"mcpServers": {
"nibwp": { "command": "npx", "args": ["mcp-remote", "https://yoursite.com/wp-json/nibwp/v1/mcp"] }
}
}Step 3 — Verify the connection
Restart or reconnect your client, then ask the agent to do something read-only. If it returns structured results, you are connected:
You: List my 5 most recent posts.\nnibwp/wp-list-posts { limit: 5 }\n5 posts returned - connection verified
Managing tokens over time
As your setup grows, the Connect panel is also where you maintain it:
- One token per client — so you can revoke or rescope one without disturbing the others.
- Rotate on change — reissue a token when a team member leaves or a client offboards.
- Revoke instantly — if a token is exposed, delete it here and the agent loses access immediately.
- Scope up deliberately — start read, move to write when ready, and reserve publish and admin for trusted automations.