WordPress Code Review MCP Server v2.0

A lightweight, configurable MCP (Model Context Protocol) server for development teams. Fetches coding guidelines, security rules, and validation patterns from external sources or URL where you have hosted your custom guidelines.

🚀 Key Features

• ✅ No hardcoded rules - Fetch guidelines from any URL
• ✅ Dynamic configuration - Specify source via environment variables
• ✅ Custom validation - Add your own coding standards and security rules
• ✅ Lightweight - External guidelines, minimal codebase

📋 Available Tools

• get_guidelines - Fetch development guidelines by category
• validate_code - Validate code against configured standards
• security_check - Security vulnerability scanning

📋 Prerequisites

• Node.js installed (v18+)

🛠 Installation & Setup

Step 1: Clone Repository

git clone https://github.com/miniOrangeDev/wp-code-review-mcp-server.git
cd wp-code-review-mcp

Step 2: Install Dependencies & Build

npm install
npm run build

Step 3: Host Your Guidelines

Host the files from sample-guidelines/html/ on your web server and configure your base URL, for example: https://yourdomain.com/guidelines/

The MCP server will fetch:

• https://yourdomain.com/guidelines/guidelines.md
• https://yourdomain.com/guidelines/validation-rules.md
• https://yourdomain.com/guidelines/security-rules.md

Step 4: Configure Cursor

Add to your Cursor settings (Ctrl+Shift+P → “Preferences: Open User Settings (JSON)”):

{
  "mcpServers": {
    "wp-code-review-mcp": {
      "command": "node",
      "args": ["/path/to/wp-code-review-mcp-server/build/index.js"],
      "env": {
        "GUIDELINES_URL": "https://yourdomain.com/guidelines"
      }
    }
  }
}

Replace /path/to/wp-code-review-mcp-server with your actual path (e.g., /home/wp-code-review-mcp-server)

Why the path? Unlike published npm packages, this is a local MCP server. The path tells Cursor exactly where to find your built server file.

If you don’t see MCP server connected, restart Cursor and the MCP server will be available.

Guidelines Format

Your guidelines server should serve these files:

• /guidelines.md - Main development guidelines
• /validation-rules.md - Code validation rules
• /security-rules.md - Security scanning rules

Step 5: Test in Cursor

1. Open any PHP file in Cursor
2. Ask the AI: “Check this code for security issues: class mo_Test {}”
3. The AI should detect the short prefix violation!

🔧 Troubleshooting

Having configuration issues? See the Configuration Troubleshooting Guide for common mistakes and solutions.

📝 Customizing Guidelines

Edit the files in sample-guidelines/html/ to add your own:

• Coding standards
• Validation rules
• Security patterns
• Company-specific guidelines