WordPress REST API vs MCP: Application Passwords, OAuth and When You Need Each

See the same three WordPress tasks done through the REST API with an Application Password and through MCP over OAuth, and what each route leaves on your site.