An agent can list and audit the site's custom code snippets, detect snippet errors, read WPCode's error log, and search its snippet library, all without the raw snippet code ever being exposed.
5 read
View abilitiesMeta Box abilities, governed through the Bridge
An agent can look up the expected value format for a field type, then read, write, or delete a specific custom field's value on a post, term, user, comment, or settings page.
- Abilities
- 42 read1 write1 destructive
- Active installs
- 500K+
- Rating
- 96% (165 ratings)
- Version
- 5.15.1
- Requires
- WP 6.7+, PHP 7.4+
- Last updated
- 2026-09-17 8:33am GMT
View Meta Box on WordPress.org
What has to be true first
Needs Meta Box active and WordPress 6.9 or later. The permission checked depends on the field's object type: edit_post for post fields, assign_term (read) or edit_term (write) for term fields, edit_user for user fields, manage_options for settings-page fields, and edit_comment (read) or moderate_comments (write) for comment fields.
The 4 Meta Box abilities
Grouped by what each one can change. Every one starts off until you enable it.
Read 2
- Read
Get expected value format for a field
Returns the expected value shape and an example for a Meta Box field type, or for a specific registered field.
- Read
Get a custom field value
Reads the stored value of a Meta Box custom field on a post, term, user, comment, or settings page.
Write 1
- Write
Update (or create) a custom field value
Sets a Meta Box custom field's value, creating it if it does not already exist.
Destructive 1
- Destructive
Delete a custom field value
Removes a Meta Box custom field's stored value.
How to switch these on
Four steps from two active plugins to a governed connection.
Install Meta Box and Agent Abilities for MCP
Both plugins need to be active on the same WordPress site. Meta Box registers its own abilities; this plugin discovers and governs them.
Open the Other plugins screen
In Agent Abilities for MCP, open the Bridge tab (labeled "Other plugins" in the admin). Abilities from every registered plugin appear there, grouped by the plugin that registered them.
Enable one ability at a time
Every ability from Meta Box starts off. Turn on only the ones you want an agent to reach, or enable the whole set in one click.
Connect as a least-privilege user
Approve the connection as a WordPress account scoped to what you actually want the agent to do. Each call still re-checks that account’s capability before it runs.
Read more in how bridging works or the full documentation.
Frequently asked questions
Does Meta Box work with the Bridge?
Yes. All four abilities register unconditionally on the abilities-init hook; permission is checked per call based on the target object type, not by an admin feature toggle.
Do Meta Box's abilities register automatically?
Yes, unconditionally, once Meta Box is active. Nothing else has to be configured for the Bridge to discover them.
Does Meta Box need anything special to work with the Bridge?
Needs Meta Box active and WordPress 6.9 or later. The permission checked depends on the field's object type: edit_post for post fields, assign_term (read) or edit_term (write) for term fields, edit_user for user fields, manage_options for settings-page fields, and edit_comment (read) or moderate_comments (write) for comment fields.
More Developer plugins
An agent can list, read, create, update, duplicate, export, import, trash, and restore SCF field groups, individual fields, custom post types, taxonomies, and options pages, and, once the site turns on AI Access, list and register field groups, post types, and taxonomies under a second acf/* ability set plus create, read, update, and delete records of any post type or taxonomy the site opts in.
18 read31 write5 destructive
View abilitiesAn agent can list every registered WordPress REST route with its supported HTTP methods, and dispatch a test request against a chosen route (with an optional execution trace of hooks, SQL and HTTP calls) to see what it returns.
1 read1 write
View abilitiesVerified from Meta Box's own free wordpress.org code on 28 September 2026, not from its marketing claims. Not every ability listed here has been run end to end against a live site. Plugin authors change their code, so a name, a capability, or a condition can be different in a later release. This site is not affiliated with, or endorsed by, Meta Box or Meta Box. Back to the full directory.
Bridge Meta Box, keep the same control.
Every ability starts off, is scoped to the user you connect, and is written to the same audit log as core. Turn on only what you need.
Off by default. Capability checked on every call.