An agent can check whether a specific comment looks like spam and pull the site's antispam performance statistics.
2 read
View abilitiesOAuth Single Sign On - SSO (OAuth Client) abilities, governed through the Bridge
An AI agent can read OAuth/OpenID provider setup guides, toggle SSO login on the login page or in wp-admin, refresh OAuth endpoints from a discovery URL, apply the plugin's two built-in SSO error fixes, toggle debug logging, and send a support query to miniOrange.
- Abilities
- 81 read7 destructive
- Active installs
- 6K+
- Rating
- 98% (324 ratings)
- Version
- 7.1.3
- Requires
- WP 5.9+, PHP 7.0+
- Last updated
- 2026-09-24 2:42pm GMT
View OAuth Single Sign On - SSO (OAuth Client) on WordPress.org
What has to be true first
Needs the OAuth Single Sign On (SSO) Client plugin active on WordPress 6.9 or later, with its AI/Abilities API toggle turned on in the Troubleshooting tab. Every ability checks manage_options, so only a connected user who can manage the site can use them.
- The mo_oauth_enable_abilities_api option must be set to "true" (AI Setup toggle in the Troubleshooting tab).
The 8 OAuth Single Sign On - SSO (OAuth Client) abilities
Grouped by what each one can change. Every one starts off until you enable it.
Read 1
- Read
Get IdP setup guide links
Returns setup-guide links for identity providers, optionally filtered by name.
Destructive 7
- Destructive
Send support query
Sends a support ticket to miniOrange from inside the plugin.
- Destructive
Toggle login-page SSO button
Turns the SSO button on the WordPress login page on or off.
- Destructive
Toggle Admin SSO login
Turns SSO login on or off for wp-admin users on a given OAuth app.
- Destructive
Fix WPO004 (enable Admin SSO)
Applies the built-in fix for the WPO004 error by enabling Admin SSO on the target app.
- Destructive
Fix WPO005 (auto-map attribute)
Auto-maps the email or username attribute from the last cached Test Configuration response.
- Destructive
Toggle plugin debug logging
Turns the plugin's debug log on or off.
- Destructive
Update OAuth endpoints via discovery
Fetches an OpenID Connect discovery document over HTTPS and updates the app's authorize, token and userinfo endpoints.
No abilities match that search.
How to switch these on
Four steps from two active plugins to a governed connection.
Install OAuth Single Sign On - SSO (OAuth Client) and Agent Abilities for MCP
Both plugins need to be active on the same WordPress site. OAuth Single Sign On - SSO (OAuth Client) registers its own abilities; this plugin discovers and governs them.
Open the Other plugins screen
In Agent Abilities for MCP, open the Bridge tab (labeled "Other plugins" in the admin). Abilities from every registered plugin appear there, grouped by the plugin that registered them.
Enable one ability at a time
Every ability from OAuth Single Sign On - SSO (OAuth Client) starts off. Turn on only the ones you want an agent to reach, or enable the whole set in one click.
Connect as a least-privilege user
Approve the connection as a WordPress account scoped to what you actually want the agent to do. Each call still re-checks that account’s capability before it runs.
Read more in how bridging works or the full documentation.
Frequently asked questions
Does OAuth Single Sign On - SSO (OAuth Client) work with the Bridge?
Conditionally. It registers 8 OAuth configuration, troubleshooting and support abilities on the Abilities API hooks, but only when the mo_oauth_enable_abilities_api option is set to true from the plugin's Troubleshooting tab.
What has to be true for OAuth Single Sign On - SSO (OAuth Client)'s abilities to register?
The mo_oauth_enable_abilities_api option must be set to "true" (AI Setup toggle in the Troubleshooting tab)..
Does OAuth Single Sign On - SSO (OAuth Client) need anything special to work with the Bridge?
Needs the OAuth Single Sign On (SSO) Client plugin active on WordPress 6.9 or later, with its AI/Abilities API toggle turned on in the Troubleshooting tab. Every ability checks manage_options, so only a connected user who can manage the site can use them.
More Security & privacy plugins
An agent can check exactly where comments are currently disabled across the site or a multisite network, turn comments off or on for specific post types, and delete existing comments.
1 read1 write1 destructive
View abilitiesAn agent can search and read the WordPress activity log: recent events, a single event's detail, one user's activity, failed login attempts, and a statistics summary grouped by users, content, media, plugins, core and notes, all without being able to change anything.
6 read
View abilitiesVerified from OAuth Single Sign On - SSO (OAuth Client)'s own free wordpress.org code on 28 September 2026, not from its marketing claims. Not every ability listed here has been run end to end against a live site. Plugin authors change their code, so a name, a capability, or a condition can be different in a later release. This site is not affiliated with, or endorsed by, miniOrange or OAuth Single Sign On - SSO (OAuth Client). Back to the full directory.
Bridge OAuth Single Sign On - SSO (OAuth Client), keep the same control.
Every ability starts off, is scoped to the user you connect, and is written to the same audit log as core. Turn on only what you need.
Off by default. Capability checked on every call.