Skip to main content

PressBridge Free

Let Claude look inside your WordPress site safely: read-only, sandboxed, secrets hidden.

Website · Demo video · Get Pro · User guide · Security

you     On mysite, where is the footer phone number set? And show me the DB password.

claude  search "0744" in wp-content/themes  →  footer.php:41
        read_file wp-config.php             →  refused: blocked by deny rule 'wp-config*'

        The number is in wp-content/themes/mysite/footer.php, line 41.
        I can't read wp-config.php: PressBridge hides it so passwords never reach me.

PressBridge is an MCP server that gives Claude (Claude Code, Claude Desktop, any MCP client) controlled access to a WordPress site. The Free edition is read-only and made for one site: perfect for debugging, audits and "where is this text coming from?".

  • Read, list and search theme and plugin files
  • wp-config.php, .env, SQL dumps, keys and .git are invisible
  • Nothing outside the site folder, symlink tricks included
  • Read-only WP-CLI: versions, plugin and theme lists, checksums, cron, users
  • site_overview: version and pending updates in one call
  • Includes the wp-care-report skill: a client-ready health and security report

Install (5 minutes, nothing exposed to the internet)

On the server:

sudo apt install python3-venv php-cli php-mysql
curl -O https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar
sudo install wp-cli.phar /usr/local/bin/wp
python3 -m venv ~/pressbridge-venv
~/pressbridge-venv/bin/pip install ./pressbridge
mkdir -p ~/.pressbridge
cat > ~/.pressbridge/config.yaml <<EOF
data_dir: $HOME/.pressbridge/data
sites:
  mysite:
    root: /var/www/mysite/public_html
EOF
~/pressbridge-venv/bin/pressbridge check --config ~/.pressbridge/config.yaml

Run it as the user that owns the site files (or one that can read them).

On your computer, Claude Code:

claude mcp add pressbridge -- ssh you@server \
  /home/you/pressbridge-venv/bin/pressbridge serve --config /home/you/.pressbridge/config.yaml

Claude Desktop (claude_desktop_config.json, Settings → Developer → Edit Config):

{
  "mcpServers": {
    "pressbridge": {
      "command": "ssh",
      "args": ["-o", "BatchMode=yes", "you@server",
               "/home/you/pressbridge-venv/bin/pressbridge", "serve",
               "--config", "/home/you/.pressbridge/config.yaml"]
    }
  }
}

Then ask Claude: "Give me a health overview of mysite" or "Where in the theme is the footer phone number set?"

The full user guide, with every command, config option and tool, is in GUIDE.md (features marked Pro aren't in this edition).

Want Claude to fix things too?

PressBridge Pro adds editing with automatic backups and one-call undo, PHP syntax checks before saving, plugin/theme/core updates, unlimited sites, a remote HTTPS server with Docker and automatic certificates, the audit log, and skills for safe edits and safe updates.

→ https://pressbridgesupport.github.io/pressbridge

License

MIT. See LICENSE.

Metadata

Release files for pressbridge 1.1.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for pressbridge 1.1.0
File Size Uploaded Provenance Actions
pressbridge-1.1.0.tar.gz 20.9 kB With provenance Details for pressbridge-1.1.0.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for pressbridge 1.1.0
File Interpreter ABI Platform Actions
pressbridge-1.1.0-py3-none-any.whl Python 3 none any Details for pressbridge-1.1.0-py3-none-any.whl

Total release size: 43.7 kB

Release files / pressbridge-1.1.0.tar.gz

Download URL pressbridge-1.1.0.tar.gz
Size 20.9 kB
Tags Source
SHA-256 checksum
How to use checksums
8d3ebfa36ab347bf6e98ebaf2b8eb56fba726dfda232584f4a8c6eb2f2e3b4b7
BLAKE2b-256 checksum
How to use checksums
520c4486dd87608440b8818cafa51c9d7d38ea74dc22d3ec24ba9d0b0503b7df
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.16

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Nov 3, 2026.

Transparency log

Release files / pressbridge-1.1.0-py3-none-any.whl

Download URL pressbridge-1.1.0-py3-none-any.whl
Size 22.8 kB
Tags Python 3
SHA-256 checksum
How to use checksums
cb3d8c548f87ebb849e9b5d3bc9e15be28add9dda6a3309b1fb8cf73e168fe0c
BLAKE2b-256 checksum
How to use checksums
f0a82f1547d27250c95f8fed7627753df65ec63372d58f30d4c9ab1bedb19942
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.16

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Nov 3, 2026.

Transparency log

Security for pressbridge 1.1.0

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Full provenance

All 2 files in this release have been uploaded with provenance metadata.

Select from 2 files

Attestation for pressbridge-1.1.0.tar.gz

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Nov 3, 2026.

Transparency log

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Release history Release notifications | RSS feed

This release

1.1.0 This release

2 release files Full provenance

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page