SureForms Abilities – Connect AI Clients to Your Forms

Introduction

SureForms Abilities is a powerful feature (available from version 2.5.2+) that allows AI clients like Claude, ChatGPT, and other MCP-compatible tools to interact directly with your forms.

Instead of navigating through the WordPress dashboard, you can simply ask your AI assistant to:

• List forms
• Create new forms
• View submissions
• Update settings
• Analyze data

This feature is built using the WordPress Abilities API and the Model Context Protocol (MCP).

That means SureForms works smoothly with AI clients without needing custom integrations.

Requirements

Before getting started, make sure you have:

• WordPress 6.9 or later
• SureForms 2.5.2 or later
• You need to install and activate the MCP Adapter plugin from GitHub: Get MCP Adapter.
• Administrator access (required permission: manage_options)
• Node.js 18+ installed (for MCP connection)
• An MCP-compatible AI client such as:
  • Claude Desktop
  • Claude Code
  • Cursor
  • Windsurf

Enabling Abilities

Go to: SureForms → Settings → MCP

You will see the Abilities settings page.

Step 1: Enable the Master Toggle

By default, all abilities are disabled.

Turn ON Enable Abilities to register SureForms abilities.

Once enabled, you will see:

• Edit Abilities
• Delete Abilities
• MCP Server

Step 2: Choose Your Permission Level

SureForms uses a progressive permission system:

Step 3: Enable the MCP Server

Turn ON Enable MCP Server.

This creates an endpoint: /wp-json/sureforms/v1/mcp

When all toggles are enabled:

Setting Up the MCP Server

After enabling the MCP Server, you will see the setup instructions.

Step 1: Create an Application Password

Go to: Users → Profile → Application Passwords

• Enter a name (e.g., “Claude MCP”)
• Click Add New Application Password
• Copy the password

⚠️ You will not be able to see it again.

Step 2: Copy the JSON Configuration

Copy the config shown in the MCP settings page.

Paste it into your AI client:

• Claude Code → .mcp.json
• Claude Desktop → claude_desktop_config.json
• Others → Follow their docs

Step 3: Replace the Password

Update this part in the config:

“WP_API_PASSWORD”: “your-application-password”

Example:

{
  "mcpServers": {
    "sureforms": {
      "command": "npx",
      "args": ["-y", "@automattic/mcp-wordpress-remote@latest"],
      "env": {
        "WP_API_URL": "https://your-site.com/wp-json/sureforms/v1/mcp",
        "WP_API_USERNAME": "your-username",
        "WP_API_PASSWORD": "xxxx xxxx xxxx xxxx xxxx xxxx"
      }
    }
  }
}

{
  "mcpServers": {
    "sureforms": {
      "command": "npx",
      "args": ["-y", "@automattic/mcp-wordpress-remote@latest"],
      "env": {
        "WP_API_URL": "https://your-site.com/wp-json/sureforms/v1/mcp",
        "WP_API_USERNAME": "your-username",
        "WP_API_PASSWORD": "xxxx xxxx xxxx xxxx xxxx xxxx"
      }
    }
  }
}

Available Abilities

SureForms includes 16 abilities grouped into modules.

Forms (8 Abilities)

Entries (5 Abilities)

Settings (2 Abilities)

Analytics (1 Ability)

Pro Field Types

With SureForms Pro, additional fields are supported:

• Hidden
• Rating
• File Upload
• Date Picker
• Time Picker
• Number Slider
• Signature
• Page Break

These are automatically available when:

• SureForms Pro is active
• Edit Abilities is enabled

Recommended Configurations

Read-Only (Safest)

Enable:

• Abilities
• MCP Server

Best for:

• Viewing data only

Safe Editing (Recommended)

Enable:

• Abilities
• Edit Abilities
• MCP Server

Best for:

• Daily use

Full Access

Enable all toggles.

⚠️ Use carefully — data deletion is permanent.

Security Notes

• Only admins can use abilities
• Uses secure Application Passwords
• Permissions can be controlled anytime
• Delete actions are permanent
• MCP endpoint is protected (no public access)
• Works per site (multisite supported)

Example Prompts

You can ask your AI:

• “Show all my forms.”
• “How many unread entries do I have?”
• “Create a feedback form with rating.”
• “Update form title”
• “Mark all entries as read.”
• “Delete old entries.”

Troubleshooting

AI cannot connect

• Check MCP Server is enabled
• Verify site URL
• Check password
• Ensure Node.js 18+ is installed

Abilities not showing

• Check WordPress version (6.9+)
• Enable Abilities toggle
• Enable Edit/Delete toggles if needed

Permission errors

• Only Administrator accounts work
• Check the user role linked to the Application Password

Final Notes

SureForms Abilities turns your forms into an AI-powered system, allowing automation, faster workflows, and better data handling, all securely within WordPress.