Governed ability

Trash post

aafm/trash-postGuarded write

Trash post is a governed ability in Agent Abilities for MCP, a free WordPress plugin that runs an MCP server on your site.

Move a post to trash (recoverable, never permanently deleted).

How it is governed

The same model as every ability in the plugin, stated for this one.

  • Off until you enable it

    Like every ability, Trash post ships switched off. You turn it on one at a time, and an update never widens access on its own.

  • Guarded write

    Writes stay conservative, and the plugin re-checks the capability before the call runs.

  • Capability gated

    A connection only sees Trash post if the user you connected can run it, and the plugin checks that capability again before it executes.

  • Every call audited

    The call is written to the log in your own database, denials included, with the argument keys and the identifiers it touched, never free-text content.

  • It can delete

    This ability can delete. Where WordPress supports it, items go to Trash and can be restored, and the last administrator can never be removed.

Trash post is one of the 26 governed Content abilities. Browse the other Content abilities in the catalog.

See it in action

An illustrative run. Your real calls and data stay on your own site.

agent-abilities · auditGoverned
YouTrash post on this site.
RunRunning aafm/trash-post
GateAllowedcapability re-checked before running
Auditaafm/trash-post · principal: editor · args: post_id
ResultRemoves the item where allowed, to Trash where WordPress supports it, then logs the call.

Try it with a prompt

Example requests you could paste to your agent.

  1. Move post 142 to the Trash.
  2. Trash that outdated announcement post.
  3. Send post 88 to the Trash so it can be restored later.

These are illustrative example prompts. The agent runs them as the user you connected, checked against that user's capabilities and written to your audit log.

Frequently asked

Short answers for Trash post.

Is the post gone for good?

No, Trash post moves the post to the Trash where WordPress lets you restore it. It is never a permanent delete.

What controls it?

Trash post is off by default, requires delete access, and is written to the audit log.

Back to all abilities

Governed by default, from the first call.

Trash post is off until you enable it, scoped to the user you connect, and logged like everything else. Turn on only what you need.

Every ability off until you enable it, capability-gated on every call.