Agent Abilities
GitHubGet it free
Product
FeaturesSecurityAll abilitiesIntegrationsBridge overviewBridge plugin directory196

Guides

WordPress MCP serverAbilities API guideElementor MCP

WordPress core abilities

Browse all abilitiesContentTaxonomies & TermsCommentsUsersMediaSite settingsPluginsThemes & stylesBlocksMenusSearch

Integrations

All integrationsWooCommerce52Advanced Custom Fields7Rank Math SEO5Yoast SEO3All in One SEO3Slim SEO2The Events Calendar13Event Tickets3Avada2GeoDirectory4

Bridge, most installed

Elementor Website BuilderYoast SEOWooCommerceAkismet Anti-spamWPFormsRank Math SEOWP Mail SMTPWPCode
Connect
All clientsChatGPTClaude.aiClaude DesktopManusClaude CodeCursorVS CodeWindsurfGemini CLIGetting startedHow connecting works
Resources
Prompt LibraryPlaybooksBlogComparisonsChangelogSupport
DocsGitHubGet it free

Governed ability

List playbooks

aafm/list-playbooksRead only

List playbooks is a governed ability in Agent Abilities for MCP, a free WordPress plugin that runs an MCP server on your site.

List the step-by-step playbooks the site owner wrote for agents, with each one's slug, title and description. Call this before starting a task on this site, and load a matching playbook with get-playbook.

How it is governed

The same model as every ability in the plugin, stated for this one.

  • Off until you enable it

    Like every ability, List playbooks ships switched off. You turn it on one at a time, and an update never switches on a tool it serves.

  • Reads only

    It reads data and returns it to your client. Nothing on your site is created, changed, or removed.

  • Capability gated

    A connection only sees List playbooks if the user you connected can run it, and the plugin checks that capability again before it executes.

  • Every call audited

    The call is written to the log in your own database, denials included, with the argument keys and the identifiers it touched, never free-text content.

List playbooks is one of the 8 governed Site settings abilities. Browse the other Site settings abilities in the catalog.

See it in action

An illustrative run. Your real calls and data stay on your own site.

agent-abilities · auditGoverned
YouList playbooks on this site.
RunRunning aafm/list-playbooks
GateAllowedread capability confirmed
Auditaafm/list-playbooks · principal: editor · args: keys
ResultReturns the data the agent asked for. Nothing on the site changes.

Try it with a prompt

Example requests you could paste to your agent.

  1. Before you start, check whether this site has a playbook for checking drafts.
  2. Which playbooks has the site owner written for agents?
  3. List the Active playbooks and tell me what each one is for.

These are illustrative example prompts. The agent runs them as the user you connected, checked against that user's capabilities and written to your audit log.

Frequently asked

Short answers for List playbooks.

What does it return?

List playbooks returns the site owner's Active playbooks: each one's slug, title and description, the abilities it uses, and which of those this connection cannot use. Playbooks that are switched Off are not listed.

Can an agent change a playbook?

No. Playbooks are written on the Playbooks tab in wp-admin, and no ability can create, edit or delete one. List playbooks and Get playbook only read them, and both stay off until you enable them.

Related abilities

More in Site settings.

Get playbook

Read only

Load one of the site owner's playbooks by slug: the steps to follow, the abilities it uses and which of those you cannot use on this connection. The steps name tools by label; the abilities list gives the tool to call for each.

View ability

Get activity log

Read only

Reads this plugin's own audit log: each row's ability name, status (started, success, error, denied), acting user id and login, whether the caller is flagged as an agent identity, the argument keys passed, the timestamp, and a short identifier-only detail (an object id or slug, a WP_Error code, or a crashed call's exception class and throw site; a code returned by another plugin's bridged ability is prefixed with foreign:). Most recent first. Response includes total (the count for the status filter). Never free-text argument content or network addresses. Requires the manage-options capability.

View ability

Get site settings

Read only

Read a small allowlist of site settings: name, tagline, timezone, date and time formats, week start, and posts per page. Requires the manage-options capability. Never the site URL or admin email.

View ability

Update site settings

Guarded write

Write a small allowlist of site settings, passed as a settings object whose keys are the setting names and values the new values. Accepted keys: blogname (site name), blogdescription (tagline), timezone_string, date_format, time_format, start_of_week (0-6), posts_per_page (1-100). String values are sanitized; the two integer settings are clamped into their legal ranges. Any unrecognized key rejects the entire call with nothing written. It can never change the site URL, admin email, default role, or open registration. Requires manage-options. Off by default.

View ability

Get taxonomies

Read only

List public taxonomies registered on the site.

View ability

Get post types

Read only

List public post types registered on the site. Each type includes two flags: writable (agents may create items of that type) and updatable (agents may also update or delete existing items; false for types that opt out of WordPress capability mapping, which are create-only through these abilities).

View ability

Back to all abilities

Governed by default, from the first call.

List playbooks is off until you enable it, scoped to the user you connect, and logged like everything else. Turn on only what you need.

Get it on WordPress.orgRead the docs

Every ability off until you enable it, capability-gated on every call.