An agent can list and inspect WPForms forms and their fields, read (limited, Lite-only) form stats, and create new forms or add and update fields on existing ones.
4 read4 write
View abilitiesQuiz and Survey Master (QSM) abilities, governed through the Bridge
An agent can list a site's quizzes, read a quiz's full settings, list a quiz's questions, and add new questions to a quiz.
- Abilities
- 44 destructive
- Active installs
- 40K+
- Rating
- 94% (1,282 ratings)
- Version
- 11.2.7
- Requires
- WP 5.0+, PHP 5.4+
- Last updated
- 2026-09-24
View Quiz and Survey Master (QSM) on WordPress.org
What has to be true first
Needs at least one quiz created on the site and WordPress 6.9 or later. Every ability is gated by the custom edit_qsm_quizzes capability rather than a core WordPress capability.
The 4 Quiz and Survey Master (QSM) abilities
Grouped by what each one can change. Every one starts off until you enable it.
Destructive 4
- Destructive
List Quizzes
Lists all quizzes and surveys with optional ordering and pagination.
- Destructive
Get Quiz
Returns the full settings and metadata for a single quiz.
- Destructive
List Questions
Returns all active questions belonging to a quiz.
- Destructive
Create Question
Adds a new question, with answer options and settings, to a quiz.
How to switch these on
Four steps from two active plugins to a governed connection.
Install Quiz and Survey Master (QSM) and Agent Abilities for MCP
Both plugins need to be active on the same WordPress site. Quiz and Survey Master (QSM) registers its own abilities; this plugin discovers and governs them.
Open the Other plugins screen
In Agent Abilities for MCP, open the Bridge tab (labeled "Other plugins" in the admin). Abilities from every registered plugin appear there, grouped by the plugin that registered them.
Enable one ability at a time
Every ability from Quiz and Survey Master (QSM) starts off. Turn on only the ones you want an agent to reach, or enable the whole set in one click.
Connect as a least-privilege user
Approve the connection as a WordPress account scoped to what you actually want the agent to do. Each call still re-checks that account’s capability before it runs.
Read more in how bridging works or the full documentation.
Frequently asked questions
Does Quiz and Survey Master (QSM) work with the Bridge?
Yes. All four abilities register unconditionally into the core Abilities API. Each definition sets only an 'idempotent' annotation and never a 'readonly' or 'destructive' key, so under the Bridge's fail-safe rule every one of them, including the two list/get abilities, classifies as destructive.
Do Quiz and Survey Master (QSM)'s abilities register automatically?
Yes, unconditionally, once Quiz and Survey Master (QSM) is active. Nothing else has to be configured for the Bridge to discover them.
Does Quiz and Survey Master (QSM) need anything special to work with the Bridge?
Needs at least one quiz created on the site and WordPress 6.9 or later. Every ability is gated by the custom edit_qsm_quizzes capability rather than a core WordPress capability.
More Forms plugins
Fluent Forms
ConditionalOnce MCP is turned on, an agent can read form schemas, entries, stats, integrations, notifications and styling, create and restyle forms, edit form fields, manage email notifications, and triage or bulk-update submissions including deletion.
12 read8 destructive
View abilitiesAn agent can build a complete form field by field, wire up actions and calculations, embed the form in a page, and read, export, update, or delete its submissions.
27 write5 destructive
View abilitiesVerified from Quiz and Survey Master (QSM)'s own free wordpress.org code on 28 September 2026, not from its marketing claims. Not every ability listed here has been run end to end against a live site. Plugin authors change their code, so a name, a capability, or a condition can be different in a later release. This site is not affiliated with, or endorsed by, ExpressTech Systems or Quiz and Survey Master (QSM). Back to the full directory.
Bridge Quiz and Survey Master (QSM), keep the same control.
Every ability starts off, is scoped to the user you connect, and is written to the same audit log as core. Turn on only what you need.
Off by default. Capability checked on every call.