Set up the ProductReview MCP server

Let Claude (or any MCP client) manage your boxes safely, under your rules.

Updated July 21, 2026

ProductReview ships a native Model Context Protocol (MCP) server. Connect an AI client like Claude and it can read and manage your affiliate boxes, products and analytics — under tight, user-controlled guardrails.

Safe by design: the MCP is off by default, authenticates with a bearer token (stored only as a hash), runs in read-only mode until you allow writing, and has no delete or publish tools. Every call is bound to one WordPress user’s capabilities and rate-limited, with an audit log.

1. Enable it

Go to Product Review → MCP.
Flip the master switch to Enabled.
Choose a mode: Read-only (safe default) or Read + write.
Optionally restrict the allow-list to just the tools you want callable.

2. Create a token

Click Generate token. The token is shown once — copy it now. It’s stored only as a SHA-256 hash and is bound to the selected WordPress user (write tools require that user to hold edit_pages).

3. Connect your client

The endpoint is:

POST https://your-site.com/wp-json/productreview/v1/mcp

It speaks MCP Streamable-HTTP (JSON-RPC 2.0). In your MCP client, add a remote server with that URL and an Authorization: Bearer <token> header.

4. Verify

Ask the client to call get_status — it reports the authoritative connection state and exactly which tools and mode are granted, so the assistant never has to guess. See MCP examples for prompts.