See where a self-hosted vs hosted WordPress MCP server runs, which credential each stores, what each logs and how removal works, so you can choose on evidence. Post navigation WordPress.org blog: WordPress Credits Welcomes More Than 50 Institutions WordPress REST API vs MCP: Application Passwords, OAuth and When You Need Each
