mcp server
For chat assistants
Add SandyWP to any MCP-capable client. Create sites, issue logins, deploy code, manage files and inspect logs.
https://app.sandywp.com/mcp Agent connect recipeYour agent's own WordPress
Connect once, then paste one prompt into your agent. It can hand you back a live WordPress site.
You
“Look at sandywp.com/llms.txt and create a disposable WordPress sandbox for
me using SandyWP.” Agent
Done your sandbox is live:
https://coral-cove.sandywp.dev typically ready in secondsTrusted by
However your agent works, there's a door in
MCP for connected assistants. A CLI for anything with a shell. Docs written for machines.
cli
For anything with a shell
On paid plans, shell-capable agents can create, deploy, SSH, mount and delete through the CLI.
npx @sandywp/cli Explore the CLIThe agent closes the whole loop
1
Paste one prompt
Your assistant fetches sandywp.com/agents (and llms.txt) and uses the product MCP, not the docs search MCP.
2
It connects, you approve
Remote MCP uses scoped OAuth. The paid-plan CLI opens a one-time browser approval and stores a revocable personal token.
3
A real site appears
Your agent gets a live WordPress URL and can request a wp-admin login link. Public and shareable not localhost.
4
It keeps working
Deploy a plugin, run WP-CLI over SSH, inspect debug.log, fix the code and reset the sandbox when needed.
…and if the experiment goes sideways, reset and try again ↻
Before you let an agent in
Which assistants work with this?
Any coding agent that can run shell commands can use the SandyWP CLI. MCP-capable clients can connect directly to the remote MCP server.
What can an agent actually do?
It can create and delete sandboxes, deploy plugin ZIPs, install premium and private plugins from your Library by name, manage files, change PHP settings, read debug.log, work over SSH, and use templates and imports. wp-admin login links are gated behind the separate sites:login scope. Use sandywp_magic_login, or approve that scope at connect time. Library license keys are gated the same way, behind licenses:read, and every read is logged. sites:read alone only lists and inspects sandboxes.
Can the MCP server deploy a ZIP from my computer?
A remote MCP server cannot read local files. When a plugin ZIP is on your machine, let the agent run the SandyWP CLI in your shell instead.
Is my account safe with an agent connected?
MCP access is scoped to your SandyWP account and can be revoked. Sandboxes are isolated and disposable, but you should still review destructive tool confirmations and keep wp-admin login URLs private: anyone with one can log in until it expires.
Give your agent a playground.
Create an account, connect your agent once, then paste the prompt whenever you need a site.