Umbrella-skill is a Claude Code plugin that lets agencies and freelancers run WP Umbrella from natural language and slash commands, on the same safe-automation infrastructure 5,000+ agencies already use.
Run /plugin marketplace add wp-umbrella/umbrella-skill inside Claude Code, then /plugin install umbrella@wp-umbrella to add it.
Drop your WP Umbrella Public API token into your OS keychain, or a chmod-600 file at ~/.umbrella/token.
Say "show me every site with a pending update," or run /umbrella:sites updates for the same answer in deterministic form.
Reads stream back instantly; writes pause for a two-layer confirmation before anything touches a client site.
Ask one question, get every site that needs you.
Open Claude Code, type /umbrella:sites down, and the answer comes back as a sorted list instead of a dashboard you have to scan. Swap down for updates to see every pending plugin, theme, and core update across your portfolio, or vulns to pull a fleet-wide CVE review sorted by severity without leaving the conversation.
Need a per-site read on uptime, performance, or PHP errors? /umbrella:health example.com returns it inline. The plugin ships with 14 capabilities covering fleet reads, updates, vulnerabilities, backups, and the data behind /umbrella:health.
The WP Umbrella safe-update workflow, now reachable from chat.
Tell Claude "update Yoast on the three sites where it's outdated," and the plugin runs the safe-update workflow the same way the dashboard does: pre-update backup, plugin update, post-update health check, automatic rollback on failure. Mutations always pass through a two-layer confirmation gate, so a typo in a chat window can't push a breaking change live.
Read-only operations like site status, vulnerability lists, and health snapshots run without per-call prompting; anything that writes to a client site is gated, every time. Behind every update sits an encrypted backup you can restore in one click.
A zero-dependency Claude Code plugin, available on GitHub.
Install it with /plugin marketplace add wp-umbrella/umbrella-skill and /plugin install umbrella@wp-umbrella inside Claude Code, then run /plugin update umbrella@wp-umbrella whenever a new release ships. There's no Node toolchain, no Python venv, no MCP server to babysit; the plugin is markdown plus a declarative OpenAPI spec, called via curl with no runtime to maintain.
Chat with it in natural language ("which sites are running PHP 7.4?") or drive it with slash commands when you want determinism, and tune Claude Code's approval prompts to keep the workflow tight on read-heavy sessions. The repo, with the full OpenAPI spec and plugin manifest, is available on GitHub, and it talks to the same Public API any tool you build can use.
Local-first by design. No middle layer between Claude and your sites.
Your Public API token stays on your local machine; Claude Code calls public-api.wp-umbrella.com directly with curl — nothing routes through WP Umbrella's servers and nothing routes through Anthropic's. The plugin reads your token from your OS keychain on macOS, Windows, or Linux, with a chmod-600 file at ~/.umbrella/token (or a WP_UMBRELLA_TOKEN env var for CI) as a fallback.
Using umbrella-skill requires a WP Umbrella account with Public API access, plus Claude Code on macOS, Windows, or Linux. Every API call leaves your machine and goes straight to wp-umbrella.com. There is no relay, no proxy, no telemetry hop. The trust boundary is your laptop, and it stays that way.
Umbrella-skill works best when combined with:
The fleet you already manage is the fleet you'll run from chat.
Join thousands of agencies and freelancers who trust WP Umbrella
I used ManageWP for years, but I felt like it just got outdated. I had issues with their support which made me lose hope and that's when I moved to WP Umbrella.
Jeffrey · Founder @ Lytbox
When a Cloudways customer asks us what the best WordPress management tool is, we are happy to recommend WP Umbrella.
Muhammad · Product Marketing @ Digital Ocean
After trying virtually every management tool out there, I've fully moved my agency to WP Umbrella, and I'm convinced I won't need to look further.
Kyle · Founder @ The Admin Bar
Most teams start by installing the plugin and running a few read-only commands to get a feel for it, then gradually open up mutating actions across their fleet as confidence grows.
No. Umbrella-skill is a Claude Code plugin available on GitHub at no extra cost; the only requirement on the WP Umbrella side is an account with Public API access, which is the same Public API documented for any integration you build. There's no upgrade tier to unlock it and no per-seat charge for adding teammates to your WP Umbrella account.
Every mutating call routes through the safe-update workflow: pre-update backup, the change itself, a post-update health check, and an automatic rollback if the health check trips. If a plugin update breaks a site, the site is restored from the backup taken seconds earlier and Claude reports the failure inline, so you see the rollback in the same chat thread that initiated the change. Reads stream back without that gating because they can't damage a site.
Umbrella-skill is built around Claude Code, which is the interactive surface most agencies will use day to day. For non-interactive contexts, the plugin reads a WP_UMBRELLA_TOKEN environment variable as a fallback, so a CI runner or scripted Claude Code invocation can authenticate without a keychain. The two-layer confirmation gate still applies to mutating calls, so scheduled write operations need to be designed with that in mind.
Umbrella-skill targets Claude Code; it ships as a Claude Code plugin and uses Claude Code's slash-command and marketplace conventions. The repo on GitHub includes the OpenAPI spec and plugin manifest, which is the same surface any other agent or script can call against the WP Umbrella Public API directly. If you want an agent on a different runtime to talk to your fleet today, that path is the Public API.
No. Claude Code calls public-api.wp-umbrella.com only when you ask it to, on the command you ran, from the machine you're sitting at. There is no background daemon, no scheduled poll, and no telemetry hop; the plugin is dormant between your prompts. Mutating calls add a two-layer confirmation before anything touches a client site.
Yes. The token is a Public API token issued from your WP Umbrella account, and you can rotate or revoke it from the same place you generated it; the next call from Claude will fail until you store the new value. Because the token lives in your OS keychain, env var, or a chmod-600 file on your machine, there's no separate plugin-side credential to clear. Rotating the token is the cleanest way to offboard a laptop or a teammate.
Trusted by 70,000+ sites (as of May 2026)
WP Umbrella is designed to grow with your care business, from your first maintenance clients to a mature, multi-site operation.
