An agent can look up the expected value format for a field type, then read, write, or delete a specific custom field's value on a post, term, user, comment, or settings page.
2 read1 write1 destructive
View abilitiesWPCode abilities, governed through the Bridge
An agent can list and audit the site's custom code snippets, detect snippet errors, read WPCode's error log, and search its snippet library, all without the raw snippet code ever being exposed.
- Abilities
- 55 read
- Active installs
- 3M+
- Rating
- 98% (1,895 ratings)
- Version
- 2.3.9
- Requires
- WP 5.0+, PHP 7.0+
- Last updated
- 2026-08-27
What has to be true first
WPCode must be installed and active on WordPress 6.9 or later. Listing, checking, and searching snippets checks the plugin's own 'wpcode_edit_snippets' capability, while reading error logs or settings checks 'manage_options'.
The 5 WPCode abilities
Grouped by what each one can change. Every one starts off until you enable it.
Read 5
- Read
List code snippets
Lists the site's custom code snippets without exposing their raw code.
- Read
Detect snippet errors
Checks the site's snippets for detectable errors.
- Read
Get error logs
Reads WPCode's error log for snippet execution failures.
- Read
Search WPCode library
Searches WPCode's library of ready-made snippets.
- Read
Get WPCode settings
Reads WPCode's plugin settings.
How to switch these on
Four steps from two active plugins to a governed connection.
Install WPCode and Agent Abilities for MCP
Both plugins need to be active on the same WordPress site. WPCode registers its own abilities; this plugin discovers and governs them.
Open the Other plugins screen
In Agent Abilities for MCP, open the Bridge tab (labeled "Other plugins" in the admin). Abilities from every registered plugin appear there, grouped by the plugin that registered them.
Enable one ability at a time
Every ability from WPCode starts off. Turn on only the ones you want an agent to reach, or enable the whole set in one click.
Connect as a least-privilege user
Approve the connection as a WordPress account scoped to what you actually want the agent to do. Each call still re-checks that account’s capability before it runs.
Read more in how bridging works or the full documentation.
Frequently asked questions
Does WPCode work with the Bridge?
Yes. All five abilities are read-only and register unconditionally once WPCode is active, so the Bridge can discover and enable all of them.
Do WPCode's abilities register automatically?
Yes, unconditionally, once WPCode is active. Nothing else has to be configured for the Bridge to discover them.
Does WPCode need anything special to work with the Bridge?
WPCode must be installed and active on WordPress 6.9 or later. Listing, checking, and searching snippets checks the plugin's own 'wpcode_edit_snippets' capability, while reading error logs or settings checks 'manage_options'.
More Developer plugins
An agent can list, read, create, update, duplicate, export, import, trash, and restore SCF field groups, individual fields, custom post types, taxonomies, and options pages, and, once the site turns on AI Access, list and register field groups, post types, and taxonomies under a second acf/* ability set plus create, read, update, and delete records of any post type or taxonomy the site opts in.
18 read31 write5 destructive
View abilitiesAn agent can list every registered WordPress REST route with its supported HTTP methods, and dispatch a test request against a chosen route (with an optional execution trace of hooks, SQL and HTTP calls) to see what it returns.
1 read1 write
View abilitiesVerified from WPCode's own free wordpress.org code on 28 September 2026, not from its marketing claims. Not every ability listed here has been run end to end against a live site. Plugin authors change their code, so a name, a capability, or a condition can be different in a later release. This site is not affiliated with, or endorsed by, Syed Balkhi or WPCode. Back to the full directory.
Bridge WPCode, keep the same control.
Every ability starts off, is scoped to the user you connect, and is written to the same audit log as core. Turn on only what you need.
Off by default. Capability checked on every call.