Compatible with every major AI agent and IDE
What is the WordPress Media Uploader MCP Server?
We refused to build a bloated WordPress integration that gives an AI agent terrifying access to delete your pages, read your entire database, or install plugins. Instead, this MCP server provides a surgical, zero-trust bridge: just uploading images to your Media Library.
Your AI agent gains the immediate ability to act as a complete content production agency. It can generate an article, use a tool like DALL-E or Midjourney to generate a cover image, and then use this tool to seamlessly upload that image directly into your WordPress site.
The Superpowers
- Zero-Friction Asset Management: End the 'download-upload' nightmare. The AI fetches the image from a URL and drops it into your CMS automatically.
- Zero-Bloat Integration: No custom plugins required. It uses the native WordPress REST API
/wp-json/wp/v2/media. You only need an Application Password (a native WordPress feature). - Absolute Containment: Because this is strictly a "Push-only" creation tool scoped only to Media, the agent is physically incapable of publishing text content, deleting plugins, or reading customer data. It is a completely secure, one-way funnel.
Built-in capabilities (1)
Provide the public sourceUrl, a descriptive filename (like "seo-cover-image.jpg"), and an optional alt text for SEO. Downloads an image from a public URL and uploads it to the WordPress Media Library
Why Mastra AI?
Mastra's agent abstraction provides a clean separation between LLM logic and WordPress Media Uploader tool infrastructure. Connect 1 tools through Vinkius and use Mastra's built-in workflow engine to chain tool calls with conditional logic, retries, and parallel execution. deployable to any Node.js host in one command.
- —
Mastra's agent abstraction provides a clean separation between LLM logic and tool infrastructure. add WordPress Media Uploader without touching business code
- —
Built-in workflow engine chains MCP tool calls with conditional logic, retries, and parallel execution for complex automation
- —
TypeScript-native: full type inference for every WordPress Media Uploader tool response with IDE autocomplete and compile-time checks
- —
One-command deployment to any Node.js host. Vercel, Railway, Fly.io, or your own infrastructure
WordPress Media Uploader in Mastra AI
WordPress Media Uploader and 4,000+ other MCP servers. One platform. One governance layer.
Teams that connect WordPress Media Uploader to Mastra AI through Vinkius don't need to source, host, or maintain individual MCP servers. Every tool call runs inside a hardened runtime with credential isolation, DLP, and a signed audit chain.
Raw MCP | Vinkius | |
|---|---|---|
| Server catalog | Find and host yourself | 4,000+ managed |
| Infrastructure | Self-hosted | Sandboxed V8 isolates |
| Credential handling | Plaintext in config | Vault + runtime injection |
| Data loss prevention | None | Configurable DLP policies |
| Kill switch | None | Global instant shutdown |
| Financial circuit breakers | None | Per-server limits + alerts |
| Audit trail | None | Ed25519 signed logs |
| SIEM log streaming | None | Splunk, Datadog, Webhook |
| Honeytokens | None | Canary alerts on leak |
| Custom domains | Not applicable | DNS challenge verified |
| GDPR compliance | Manual effort | Automated purge + export |
Why teams choose Vinkius for WordPress Media Uploader in Mastra AI
The WordPress Media Uploader MCP Server runs on Vinkius-managed infrastructure inside AWS — a purpose-built runtime with per-request V8 isolates, Ed25519 signed audit chains, and sub-40ms cold starts. All 1 tools execute in hardened sandboxes optimized for native MCP execution.
Your AI agents in Mastra AI only access the data you authorize, with DLP that blocks sensitive information from ever reaching the model, kill switch for instant shutdown, and up to 60% token savings. Enterprise-grade infrastructure, zero maintenance.

* Every MCP server runs on Vinkius-managed infrastructure inside AWS - a purpose-built runtime with per-request V8 isolates, Ed25519 signed audit chains, and sub-40ms cold starts optimized for native MCP execution. See our infrastructure
How Vinkius secures
WordPress Media Uploader for Mastra AI
Every tool call from Mastra AI to the WordPress Media Uploader MCP Server is protected by DLP redaction, cryptographic audit chains, V8 sandbox isolation, kill switch, and financial circuit breakers.
Frequently asked questions
Can the AI delete my existing images?
No! This MCP strictly uses the POST method to create new media. It is completely blind to your existing media library and cannot delete or modify older files.
Do I need to install a plugin on my WordPress?
No. We use the official, native WordPress REST API. You only need to generate an Application Password, which is a built-in feature in WordPress since version 5.6.
How does Mastra AI connect to MCP servers?
Create an MCPClient with the server URL and pass it to your agent. Mastra discovers all tools and makes them available with full TypeScript types.
Can Mastra agents use tools from multiple servers?
Yes. Pass multiple MCP clients to the agent constructor. Mastra merges all tool schemas and the agent can call any tool from any server.
Does Mastra support workflow orchestration?
Yes. Mastra has a built-in workflow engine that lets you chain MCP tool calls with branching logic, error handling, and parallel execution.
createMCPClient not exported
Install: npm install @mastra/mcp
Explore More MCP Servers
View all →
eSignly Electronic Signature
10 toolsEquip your AI agent to manage e-signature documents, track templates, and monitor audit trails via the eSignly API.

Bleez
8 toolsPower your Brazilian e-commerce with a platform that integrates payments, inventory, and logistics for the local market.

ChatBot.com
8 toolsManage conversational AI and bot workflows via ChatBot — track stories, interactions, and user data directly from any AI agent.

Spotio
12 toolsManage leads, pipelines, and field sales activities on Spotio with AI agents.
