Agency Lite · Agency X

The customer gets Claude. Never wp-admin.

Agency plans add Client MCP. You invite an inbox. They sign in, get a key locked to one site, and still connect at wpadapter.com/mcp.

Who this is for

• Agency Lite — €299 / year, 300 sites, course included, client keys.
• Agency X — €999 / year, 9,999 sites, course + client keys.

Pro and Pro Max do not mint client keys. Staff seats on the org are for people who should see the roster. Clients are locked to one WordPress.

Invite

1. Pair the customer’s WordPress: they install the editor zip, click Connect this site, or you add the URL under Sites.
2. Account → Clients: email, site, role Client (one site).
3. They open the invite. If they have no password yet, they set one there, then land on Connect.
4. They add https://wpadapter.com/mcp in Claude. Their key cannot see your other properties.

Role Staff (org) is for your people — not the end customer.

What the client can do

Whatever you left on in Policy and Tools on that origin. Allow publish is on by default (Pro); tick Draft-only on that origin if the client must not go live. They cannot open wp-admin unless you separately created a WordPress user — and you should not. The whole point is they never get one.

You are responsible for who you invite. Revoke by rotating keys on Account → Keys and by ticking Draft-only on a site you do not trust.

You still hit publish

Tick Draft-only if the client must only draft. You (or a trusted editor) then open WordPress and publish. If you leave Allow publish on, they can go live — that is a choice.