Help and support
How to use WPCore, and how it keeps your WordPress sites safe.
Getting started
You connect your WordPress sites to WPCore.com. You make collections of the plugins you want, and you assign collections to each site on WPCore.com. The WPCore plugin on each site lists the plugins of its collections, ready to install.
- In your WordPress admin, go to Plugins > Add New, search for WPCore, then install and activate it. The plugin is free on WordPress.org.
- Connect the site as described under Sites.
- Make a collection as described under Collections.
- On the site page on WPCore.com, open the Collections tab and assign the collection.
- Open the WPCore screen on the site. Click Install and activate missing, or select the plugins you want and click Install.
Sites
Sites shows all your WordPress sites in one place on WPCore.com. For each site you see its WordPress and PHP versions, its plugins and themes, which of them have updates waiting, and the collections assigned to it.
Connecting a site
- On WPCore.com, open Sites, click Add a site and enter the site's name and address.
- Click Copy key on the site page.
- In the site's WordPress admin, open the WPCore screen. The Site connection box is on the right.
- Paste the key and click Connect.
The site page on WPCore.com fills in within a few seconds. The site needs WPCore plugin 2.1.0 or later.
Keeping the details up to date
The WPCore plugin sends WPCore.com an update when you install, update, activate or remove a plugin or theme. WPCore.com also checks each site every 6 hours. Click the refresh button on the site page to check a site right away.
Site statuses
| Status | Meaning |
|---|---|
| Connected | WPCore.com has the site's latest details. |
| Last report failed | WPCore.com could not get the site's details. The site page shows the reason and how to fix it. |
| Paused | Your account has more sites than your plan allows. A paused site gets no collections. Upgrade your plan or delete a site. |
| Disconnected | The site was disconnected in the WPCore plugin. Paste the key again to reconnect it. |
Disconnecting a site
On the site's WPCore screen, click Disconnect in the Site connection box. The site stops sending details to WPCore.com straight away. To remove the site and its details from WPCore.com, click Delete this site on the site page.
Collections
A collection is a list of the plugins you want on your WordPress sites. You assign collections to your connected sites on WPCore.com. One collection can go on many sites, and one site can have many collections.
Making a collection
- Click New collection and give it a name.
- Click Add plugin and type the name of a plugin from WordPress.org.
On a Pro plan you can also add custom plugins. A custom plugin is a premium plugin or a plugin you wrote, uploaded as a ZIP file.
To start a collection from the plugins on a site, open the Plugins tab on the site page, select the plugins and click Add to collection.
Assigning a collection to a site
Open the Collections tab on the site page. Select one of your collections and click Assign. The tab shows how many plugins of each collection are installed on the site. The WPCore screen on the site lists the plugins of every assigned collection. A plugin listed in more than one collection installs once. Plugins that are already installed are skipped.
Removing a collection from a site does not remove the plugins that are already installed.
Sharing and copying collections
A public collection is listed in the collection directory for other people to find. A private collection is listed only for you. You can assign only your own collections. To use someone else's collection, click the clone button on its page. You then get your own copy to assign to your sites.
Collection keys will be retired soon
Sites that are not connected still get collections from the collection keys saved on their WPCore screen. A later version of the WPCore plugin will remove collection keys. Please connect your sites and assign your collections on WPCore.com instead. Connecting a site switches it from its saved keys to the collections assigned on WPCore.com. Until then, only add keys from people you trust.
AI apps
On a Pro plan you can connect Claude, Claude Code, ChatGPT, Grok Bot or Muse to your WPCore account. You then ask the app for what you need in a chat. The app can search for plugins, make collections and add plugins to them, add sites, assign collections to sites, and answer questions across all your sites, such as which sites have plugin updates waiting or which production sites show debug output.
Connecting an app
| App | Steps |
|---|---|
| Claude on claude.ai or Claude Desktop | Open Settings > Connectors, add a custom connector with the address https://wpcore.com/mcp, and click Connect. |
| Claude Code | Run claude mcp add --transport http wpcore https://wpcore.com/mcp, then run /mcp in Claude Code and select wpcore. |
| ChatGPT | Create a custom connector in ChatGPT's settings with the address https://wpcore.com/mcp and OAuth authentication, and connect it. If ChatGPT has no option to create a connector, turn on developer mode in its settings first. |
| Grok Bot and Muse | Copy the install prompt from the Connected apps page in your account settings and paste it into a chat. |
The app opens WPCore.com. Log in and click Connect.
What the app can change
The app works only with your own collections, custom plugins and sites, within your plan's limits. It cannot change your account, your plan or your payment details. WPCore tells the app to ask you before it deletes anything or resets a key.
Disconnecting an app
Open Connected apps in your account settings and click Disconnect. The app loses access straight away.
Your site's safety
WPCore.com cannot change your site
Sites reads a list of what is installed on your site, and tells the WPCore plugin which collections you assigned. WPCore.com has no way to install, update, remove or change anything on your WordPress site. Plugins are installed only when you click Install yourself, in your own WordPress admin.
No passwords
WPCore.com never asks for your WordPress username or password. The connection key cannot be used to log in to your site.
What WPCore.com sees
The plugin sends the versions of WordPress, PHP and your database, the site's address, and the names and versions of your plugins and themes. It never sends your posts, pages, users, customers, orders or passwords.
Only your key works
The WPCore plugin answers only requests that prove they have your site's connection key. Every other request gets nothing. Keep the key private. If someone else gets it, click Reset key on the site page and connect the site again with the new key.
You stay in control
The plugin sends no details about your site until you paste a connection key. You can disconnect a site at any time, and you can delete a site and its details from WPCore.com at any time.
Collections from other people
A collection's owner decides which plugins it lists. A connected site gets only collections that you own. To use someone else's public collection, clone it, check its plugins, and assign your copy.
Plans
| Free | Pro | |
|---|---|---|
| Sites | 2 | 20 |
| Collections | 2 | 200 |
| Plugins in each collection | 18 | 100 |
| Custom plugins | No | Yes |
| Plugin update emails | No | Yes |
| AI apps | No | Yes |
Create a free account to get started.
Need more help?
Send us a question, a bug report or feedback.
