Wordfence Security Integration Guide
Audit security scan results, inspect blocked IP addresses, and monitor site health using Wordfence MCP tools.
Overview
Security monitoring is often neglected until an incident occurs. With the Wordfence integration (wf_*), More MCP gives your AI agent visibility into site integrity, scan issues, and firewall events without giving it credentials to alter your core firewall rules.
Available Tools
More MCP provides 5 Wordfence security tools:
wf_get_scan_status: Checks whether a security scan is currently running, scheduled, or complete.wf_get_issues: Retrieves a categorized list of unresolved security findings (core file modifications, vulnerable plugins, malware signatures).wf_start_scan: Triggers a background Wordfence security scan on demand.wf_get_blocked_ips: Lists recently blocked IP addresses and the firewall rules triggered.wf_get_firewall_status: Reports whether the Wordfence Web Application Firewall (WAF) is in Learning Mode or Enabled status.
Practical Security Prompts
Try these security triage prompts:
Run a Wordfence security audit. Tell me if there are any high-severity issues, core file modifications, or outdated plugins.Check the latest blocked IPs from Wordfence and tell me the most common attack vectors seen today.Security Design
All Wordfence tools require the manage_options capability. Destructive actions such as deleting infected files or permanently banning IP ranges require explicit interactive approval from the site owner.