pinch-to-post

What This Skill Does

Pinch-to-post is a powerful integration layer between OpenClaw and the WordPress ecosystem, powered by the WP Pinch MCP server. Rather than relying on clunky manual interfaces, this skill grants your OpenClaw agent deep, permission-aware control over your WordPress site. With 54 unique MCP tools, it covers everything from content creation and media management to complex WooCommerce order processing and system-wide governance scans. It treats your WordPress site as an extensible, AI-driven workspace where you can offload repetitive administrative tasks and content lifecycle management.

Installation

1. Install the WP Pinch plugin on your WordPress installation (available via wp-pinch.com or GitHub).
2. Set the WP_SITE_URL environment variable in your OpenClaw configuration to point to your site.
3. Configure your local MCP server to connect to {WP_SITE_URL}/wp-json/wp-pinch/v1/mcp using a secure WordPress Application Password.
4. Execute the installation command: clawhub install openclaw/skills/skills/nickhamze/pinch-to-post.
5. Once installed, verify the connection by asking your agent to list recent posts.

Use Cases

• Content Repurposing (Molt): Turn a single long-form blog post into social media snippets, email marketing copy, FAQs, and meta descriptions automatically.
• Editorial Workflow: Utilize the 'Ghost Writer' feature to analyze your historical writing style and finish abandoned drafts without needing to rewrite them yourself.
• Site Governance: Automate security scans, broken link detection, and 'Draft Necromancer' tasks to keep your site fresh and secure without manual oversight.
• Quick Capture: Use 'PinchDrop' to send unstructured notes from chat directly into your WordPress dashboard as organized draft content.

Example Prompts

• "List my five most recent drafts and tell me which ones are candidates for the Ghost Writer feature."
• "Use Molt to repurpose my latest post into a Twitter thread, an email marketing snippet, and three CTA variants."
• "Run a full governance scan on my site and summarize any security issues or broken links found in the latest Tide Report."

Tips & Limitations

• Security First: The plugin handles all permission checks server-side. It cannot be used to bypass your WordPress user roles; it strictly adheres to the capabilities assigned to your Application Password.
• Avoid Sensitive Data: While the plugin includes PII redaction, ensure you are not granting your WordPress user administrative access that you would not want an AI agent to exercise. Use dedicated, scoped Application Passwords rather than your primary admin account.
• Guardrails: Familiarize yourself with the built-in deny-list, which prevents accidental modification of critical system files, active plugins, or authentication keys.