AI in WordPress 7: a guide for marketing teams
Partner · Web development, SEO and GEO
Since version 7.0 (May 2026), WordPress includes an AI connection built into its core, but nothing switches on by itself. To use it, an administrator connects a provider (OpenAI, Anthropic or Google) with a pay-as-you-go API key, then turns on features of the official "AI" plugin: titles, excerpts, meta descriptions, alt text, translation, images and review notes. That plugin only works in the block editor. The plugins you already use (Yoast, Elementor, WooCommerce) are also opening up to AI agents like Claude or ChatGPT. For a marketing team, the work is mostly about deciding who has access to what.
- WordPress 7 talks to no AI until an administrator installs a connector and enters an API key.
- The official "AI" plugin is free. In October 2026, it was still experimental. You pay for usage at the AI provider, not at WordPress.
- It only works in the block editor: not in Elementor, nor in the classic editor.
- Yoast, Elementor, WooCommerce and others now let an AI agent read or change your site.
- API keys are stored unencrypted in the database unless you protect them. Plugins account for 91% of vulnerabilities in the WordPress ecosystem.
On this page
AI connector
In WordPress 7, an AI connector is a small plugin that links your site to a specific AI provider (OpenAI, Anthropic or Google, for example). It is set up in one place, the Connectors screen in Settings, with the API key from your account at that provider. Once the connector is in place, every plugin that has permission can use AI without each asking for its own key.
What WordPress 7 actually added
WordPress 7.0, nicknamed "Armstrong," came out on May 20, 2026. Version 7.1 followed on August 19, 2026, then its maintenance releases (7.1.3 in October 2026). On the AI side, 7.1 only added improvements for developers, so everything below applies to 7.0 and later versions.
WordPress 7 did not add an assistant that writes for you. It added three pieces of plumbing that plugins then use.
The AI client: a shared outlet
Before, every plugin that wanted to use AI built its own connection, with its own key. The AI client is a shared outlet, built into the WordPress core, that every plugin can go through. It can produce text, images, speech and video, depending on what the connected provider allows.
The Connectors screen: one place for keys
In Settings, a new screen brings together your site's connections. Three connectors are featured: Anthropic (Claude), Google (Gemini) and OpenAI (ChatGPT). Each one installs like a plugin.
Abilities: what the site knows how to do
An ability is a specific task the site can perform, with its own access rules: read orders, change an SEO title, create a draft. Plugins declare their abilities in a shared list. An AI agent can then discover and use them, with the permissions of the account it uses.
Version 7.0 also brought a command palette (the ⌘K or Ctrl+K shortcut) to launch an action from anywhere in the dashboard. It also brought a visual comparison of revisions, handy for seeing what an AI or a colleague changed on a page.
What comes next looks cautious. Published in September 2026, the roadmap for version 7.2 (planned for early December 2026) states that AI features must first show clear adoption and practical value before entering the WordPress core. In the meantime, they mature in the official plugin.
Nothing switches on by itself
This is the first question marketing teams ask. The answer is reassuring. The proposal that brought the AI client into WordPress says it plainly: without explicit configuration and code that calls it, WordPress sends no request and no data to any external service. Updating your site does not connect your content to ChatGPT.
For AI to work, three conditions must be met: a connector installed, a valid API key and a feature turned on by an administrator. If your business wants no AI on its site at all, your developer or host can turn it off completely with a setting in the configuration file (the WP_AI_SUPPORT constant). No plugin can then switch it back on.
Connecting AI in four steps
Here is the process described in the official WordPress documentation. It requires an administrator account: the WordPress code reserves the Connectors screen for users who can manage the site's settings.
Open the Connectors screen
In the Settings menu, choose Connectors. A notice offers to install the official "AI" plugin. One click installs and activates it, then an AI screen appears in Settings.
Install your provider's connector
On the Anthropic, Google or OpenAI card, click Install. Each card links to the provider's site, where you create your key.
Enter the API key
Paste the key into the field. WordPress checks it with the provider when you save and tells you whether the connection works. Careful: a ChatGPT Plus or Claude Pro subscription is not an API key. Key usage is billed separately, in the provider's developer console.
Choose the features to turn on
In the AI screen in Settings, enable AI, then only the features your team needs. They then appear in the editor.
WordPress and the plugin are free. The plugin's FAQ says so: you pay for API usage to your provider. Costs vary by provider and volume.
What the official plugin does for your team
The "AI" plugin is published by WordPress.org. It had more than 60,000 active installs in October 2026 (version 1.4.0). At this stage, it described itself as experimental: each feature is turned on separately and nothing runs without a click. Here are its features, grouped by the work of a marketing team.
| The work | The plugin's features | What it is for |
|---|---|---|
| Writing and publishing | Suggestions for titles, excerpts, meta descriptions and page URLs (slugs), summaries of long text, shortening, expanding or rephrasing a block, type-ahead suggestions | Saving time on the repetitive parts of a post, while keeping the final say |
| Images | Image generation and editing from the editor or the media library, alt text | Illustrating faster and catching up on images without alt text, useful for accessibility and SEO |
| Reviewing | Block-by-block editorial notes (accessibility, readability, grammar, SEO), applying those notes, site-wide editorial guidelines | A first review before a human one, aligned with your writing rules |
| Organizing | Category and tag suggestions, translation of paragraphs and headings | Keeping a blog well organized and preparing a version in another language |
| Comments | Moderation based on tone, reply suggestions | Answering blog comments faster |
| Governance | Connector approvals, request logging, API key encryption | Knowing which plugin uses AI and how often, and protecting the keys |
The plugin also announces upcoming features, including an agent that administers the site in plain language and task automation. They were not yet available in October 2026.
The "AI" plugin requires the WordPress block editor. Its official listing states that the classic editor and other editing experiences are not supported. If your pages are built with Elementor, its features will not appear in the Elementor editor: Elementor's own AI takes over there.
The plugins you may already have
Your site likely uses an SEO plugin, a page builder or a forms tool. Several have added AI. Some now let an outside agent act on your site. Here is where the most widespread ones stood in October 2026, according to their official listings.
| Plugin | What AI does there | What to know |
|---|---|---|
| Yoast SEO | In Premium: five titles and meta descriptions to choose from, keyphrase placement suggestions, summaries, post ideas. Since September and October 2026, abilities let an agent read SEO data, then update titles and descriptions. | No credits to buy. Every suggestion waits for your approval before it is saved. |
| Rank Math | Content AI: more than 40 tools to write and fix SEO, a chat assistant, alt text | Works with credits, in a subscription separate from the plugin |
| All in One SEO | Content and structured data generator, plus an MCP server that lets Claude or Gemini read and update the site's SEO | The connection to agents goes through WordPress abilities |
| Elementor | Since version 4.3 (September 2026), Claude, ChatGPT Codex and Cursor can build and edit Elementor pages. The Angie assistant creates pages and widgets in the dashboard. | What the agent produces is saved as a draft. Angie's "Super Admin" mode gives access to files and the database: keep it for developers. |
| Jetpack | A writing assistant. Since October 2026, a tab to connect ChatGPT, ChatGPT Codex or Claude to the site. | Advanced features are paid |
| WooCommerce | Seven abilities for agents: search products and orders, create, update or delete a product, change an order's status, add a note to it | A deleted product goes to the trash by default. No access to payments or refunds in this set. |
| WPForms | Create and adjust a form by chatting with AI. Settings govern agents. | Check who can change a form connected to your CRM |
An AI plugin deserves the same caution as any other plugin. Patchstack counted 11,334 new vulnerabilities in the WordPress ecosystem in 2025, 91% of them in plugins. AI Engine, a popular AI plugin, is an example: in November 2025, a flaw in versions 3.1.3 and earlier could expose its MCP server's access token when a no-authentication option was turned on. An attacker could then act on the site. The flaw is fixed, but it shows that a plugin that opens the site to agents also opens a door.
Letting an agent work on your site
The second way to use AI does not go through the editor. An agent like Claude or ChatGPT connects to your site from outside and carries out tasks for you: updating the meta descriptions of a category, fixing alt text, preparing drafts. The bridge is called the MCP Adapter (MCP is the protocol that connects an AI to a tool).
- It is an official plugin, separate from the core. It arrived in the plugin directory on October 2, 2026, at version 0.7. WordPress described it at the time as experimental.
- The agent only sees what is open. Abilities are private by default. Only those a plugin makes public are available to the agent.
- The agent acts on behalf of a WordPress account. It connects with an application password, tied to a single user and revocable at any time. The documentation recommends a dedicated user with as few rights as possible.
It is the same logic as a website managed with AI, which we describe in our article on what Claude Code and ChatGPT Codex change in website development: AI executes, but a person decides what it can touch and approves what gets published.
Seven rules for a marketing team
Update a copy of the site first
Make a backup, then test WordPress 7 and the plugin on a staging site, especially if you use a page builder. The plugin itself recommends this test.
Keep connectors in an administrator's hands
One person, or your provider, manages the Connectors screen and the keys. The rest of the team uses the features without seeing the keys.
Give each agent a contributor account
In WordPress, a contributor can write and edit their own drafts but cannot publish. An agent using this role prepares the work, then an editor on your team reviews and publishes it.
Protect the API key like a password
The official documentation says so: a key entered in the Connectors screen is masked on screen but stored unencrypted in the database. Ask your host or developer to place it in the server configuration, or turn on the plugin's key encryption. Plan one key per site and a spending cap at the provider when it allows one: a stolen key can run up a large bill.
Approve each plugin that wants to use AI
Turn on connector approvals: a plugin or theme then needs an administrator's approval before using your site's AI. The request log then shows who uses it and how much.
Review everything AI produces
Google accepts content created with the help of AI. Its guidance, updated on October 1, 2026, still asks you to check facts and review everything AI produces, including titles, meta descriptions, structured data and alt text. Publishing large numbers of pages with no value for the reader can be treated as spam.
Keep personal information away from AI
Comment moderation and reply suggestions send your visitors' text to the AI provider, usually outside Quebec. Under Quebec's Law 25, communicating personal information outside Quebec requires a prior privacy impact assessment. The simplest approach is to keep AI for the business's own content and to mention it in your privacy policy if visitor data goes through it.
Should you move to WordPress 7 now?
Yes, in general, and for a reason that has nothing to do with AI: security fixes target recent versions of WordPress. In October 2026, two out of three WordPress sites already ran version 7. The update turns on no AI. You can update the site now and decide about AI later.
The points to check before updating are the same as for any major version: compatibility of your theme and page builder, a recent backup and a test on a copy. WordPress 7 also requires PHP 7.4 at minimum, something your host can confirm. Our article on website security explains who applies fixes and when.
If you change your site several times a week and plugins keep piling up, the question may also be framed differently. Our article on the WordPress business website covers its costs and maintenance. The pillar article of this series compares WordPress with AI and a code-based site managed with AI.
Six questions to settle as a team
- Do we want AI on our site? For which specific tasks?
- Who is the administrator managing connectors and keys?
- Are our pages built in the block editor or with Elementor?
- What spending cap do we set at the AI provider?
- Who reviews and publishes what AI or an agent prepares?
- Could our visitors' personal information pass through AI?
WordPress 7 installed the outlet. Your team decides what gets plugged into it.
We build and maintain WordPress sites with Gutenberg or Elementor. We can update you to WordPress 7, connect AI and set up roles with your team.
Would you rather have someone handle updates, plugins and keys? Our website maintenance service takes care of it, always with the same contact.
Frequently asked questions about AI in WordPress 7
Does WordPress 7 send my content to ChatGPT?
No, not on its own. Without a connector, an API key and a feature turned on by an administrator, WordPress sends no request and no data to an AI provider. The update alone changes nothing on that front.
How much does AI in WordPress cost?
WordPress and the official "AI" plugin are free. You pay for API usage to the provider you connect (OpenAI, Anthropic or Google), based on volume. Some plugins, like Rank Math or Jetpack, bill their own AI features separately.
Is my ChatGPT Plus or Claude Pro subscription enough?
No. WordPress needs an API key, created in the provider's developer console and billed by usage, separately from the chat assistant subscription.
Does WordPress AI work with Elementor?
Not the official "AI" plugin: it requires the block editor. In Elementor, Elementor's own AI takes over. Since version 4.3, Elementor also lets Claude, ChatGPT Codex or Cursor build pages, saved as drafts.
Can AI publish on my site without approval?
An agent can do anything its WordPress account allows. Give it a contributor account: it can prepare drafts, but an editor on your team will have to review and publish them. Several plugins, like Yoast and Elementor, also wait for your approval before saving.
Does content written with AI hurt my SEO?
Not in itself. Google accepts content created with the help of AI if it is useful and checked. The problem is publishing large numbers of pages with no value for the reader, or facts no one has checked.
How do I turn AI off completely in WordPress?
The simplest way is to connect no connector. For a complete shutdown, your developer or host adds a setting to the site's configuration file (the WP_AI_SUPPORT constant). No plugin can then turn AI back on.
Do I need the official plugin if my SEO plugin already has AI?
Not necessarily. If Yoast or Rank Math covers your needs, the official plugin mainly adds alt text, translation, images and review notes in the block editor. Avoid turning on the same feature twice: you would pay twice for the same result.
- WordPress.org, WordPress 7.0 "Armstrong", May 20, 2026; WordPress 7.1 "Mary Lou", August 19, 2026.
- Make WordPress Core, Proposal for merging WP AI Client into WordPress 7.0, February 3, 2026; Introducing the AI Client in WordPress 7.0, March 24, 2026.
- WordPress Documentation, Settings Connectors screen, accessed in 2026.
- WordPress.org, "AI" plugin listing, version 1.4.0, accessed in 2026.
- Make WordPress AI, The MCP Adapter plugin is now available on WordPress.org, October 7, 2026; WordPress Developer Blog, From abilities to AI agents, February 4, 2026.
- Make WordPress Core, Roadmap to 7.2, September 18, 2026.
- WordPress Documentation, Roles and capabilities and Application passwords, accessed in 2026.
- Official listings for Yoast SEO, Rank Math, All in One SEO, Angie, Jetpack and WPForms, accessed in 2026.
- Elementor, Introducing the Elementor MCP, September 29, 2026.
- WooCommerce Developer Blog, canonical WooCommerce abilities for products and orders, May 12, 2026.
- Patchstack, State of WordPress Security in 2026, 2026.
- NVD, CVE-2025-11749 (AI Engine), November 5, 2025.
- Search Engine Journal, AI API key security in WordPress 7.0, May 22, 2026.
- Google Search Central, Guidance on generative AI content, updated October 1, 2026, accessed in 2026.
- W3Techs, Usage statistics of WordPress, October 2026.
- LégisQuébec, Act respecting the protection of personal information in the private sector, section 17, accessed in 2026.
Geneviève puts the strategy for your engagement into action. She leads all our web development projects: Shopify, WordPress and the new ways of building a site with AI. She manages our team of developers and translates your business needs into technical language. She runs your organic search (SEO), your visibility in AI answers (GEO) and your site's conversion rate optimization (CRO). Her work is at the heart of three goals: Attract customers with SEO and AI, Improve your site's conversion, and Strengthen your visibility in AI answers. With Gabriel, she also builds the landing pages for your advertising campaigns. She writes mainly about SEO, AI visibility and web design.
About Falia →
SEO
Paid advertising
Conversion
AI visibility
Web design