Stream abilities, governed through the Bridge

An agent can search and read the activity log, alerts, connectors, exclusion rules, and settings, and can create alerts and exclusion rules, update settings, delete an alert, or purge log records once a human has enabled write access.

Abilities
116 read5 destructive
Active installs
70K+
Rating
86% (76 ratings)
Version
4.4.0
Requires
WP 4.6+, PHP +
Last updated
2026-08-31 1:44pm GMT

What has to be true first

Stream must be installed, active, and have its own Enable Abilities API setting turned on, on WordPress 6.9 or newer. The six read abilities are gated by the view_stream capability (normally editors and admins), while the five write and delete abilities require Stream's settings capability, which defaults to manage_options and additionally needs manage_network_options on a network-activated multisite.

  • Stream's own 'Enable Abilities API' toggle, in the plugin's Advanced settings, must be turned on; abilities are not registered while it is off.
  • Stream also checks for the WP_Ability class before registering anything, so it will not register on a site below WordPress 6.9 even though the readme lists a lower minimum.

A note on the count below

Matches easymcpai's listed count of 11; verified directly from Abilities::get_ability_slugs().

The 11 Stream abilities

Grouped by what each one can change. Every one starts off until you enable it.

Read 6

  • Read

    List activity log records

    Returns a filtered, paginated list of Stream activity log entries.

    Permission
    view_stream
    MCP tool
    aafm-bridge-stream-get-records
  • Read

    Get an activity log record

    Returns full details for one Stream activity log entry.

    Permission
    view_stream
    MCP tool
    aafm-bridge-stream-get-record
  • Read

    Get Stream settings

    Returns the current Stream plugin configuration.

    Permission
    view_stream
    MCP tool
    aafm-bridge-stream-get-settings
  • Read

    List alerts

    Returns the configured Stream alert rules, with destination credentials redacted.

    Permission
    view_stream
    MCP tool
    aafm-bridge-stream-get-alerts
  • Read

    List connectors

    Returns the available Stream connectors and their context/action labels.

    Permission
    view_stream
    MCP tool
    aafm-bridge-stream-get-connectors
  • Read

    List exclusion rules

    Returns the rules that keep matching events out of the activity log.

    Permission
    view_stream
    MCP tool
    aafm-bridge-stream-get-exclusion-rules

Destructive 5

  • Destructive

    Create an alert

    Creates a new Stream alert rule with a destination and trigger conditions.

    Permission
    manage_optionsAdministrators
    MCP tool
    aafm-bridge-stream-create-alert
  • Destructive

    Update Stream settings

    Updates Stream's plugin configuration, including network-wide settings on multisite.

    Permission
    manage_options (plus manage_network_options when network-activated)
    MCP tool
    aafm-bridge-stream-update-settings
  • Destructive

    Create an exclusion rule

    Adds a rule that stops matching events from being logged going forward.

    Permission
    manage_optionsAdministrators
    MCP tool
    aafm-bridge-stream-create-exclusion-rule
  • Destructive

    Purge activity log records

    Permanently deletes activity log records matching the given criteria; requires an explicit confirm flag.

    Permission
    manage_optionsAdministrators
    MCP tool
    aafm-bridge-stream-purge-records
  • Destructive

    Delete an alert

    Permanently deletes a Stream alert rule.

    Permission
    manage_optionsAdministrators
    MCP tool
    aafm-bridge-stream-delete-alert

How to switch these on

Four steps from two active plugins to a governed connection.

  1. Install Stream and Agent Abilities for MCP

    Both plugins need to be active on the same WordPress site. Stream registers its own abilities; this plugin discovers and governs them.

  2. Open the Other plugins screen

    In Agent Abilities for MCP, open the Bridge tab (labeled "Other plugins" in the admin). Abilities from every registered plugin appear there, grouped by the plugin that registered them.

  3. Enable one ability at a time

    Every ability from Stream starts off. Turn on only the ones you want an agent to reach, or enable the whole set in one click.

  4. Connect as a least-privilege user

    Approve the connection as a WordPress account scoped to what you actually want the agent to do. Each call still re-checks that account’s capability before it runs.

Read more in how bridging works or the full documentation.

Frequently asked questions

Does Stream work with the Bridge?

Yes. Stream registers 11 real abilities behind its own WordPress 6.9 check and capability gates, so the Bridge can wrap and expose them once an operator enables both Stream's own toggle and the individual bridge switch.

What has to be true for Stream's abilities to register?

Stream's own 'Enable Abilities API' toggle, in the plugin's Advanced settings, must be turned on; abilities are not registered while it is off.. Stream also checks for the WP_Ability class before registering anything, so it will not register on a site below WordPress 6.9 even though the readme lists a lower minimum..

Does Stream need anything special to work with the Bridge?

Stream must be installed, active, and have its own Enable Abilities API setting turned on, on WordPress 6.9 or newer. The six read abilities are gated by the view_stream capability (normally editors and admins), while the five write and delete abilities require Stream's settings capability, which defaults to manage_options and additionally needs manage_network_options on a network-activated multisite.

More Analytics plugins

An agent can read Burst's analytics dashboard: live visitors, live traffic, a daily summary, page and referrer datatables, onboarding tasks, tracking health, and, with Burst Pro, ecommerce sales and subscription figures, all without writing anything back.

Analytics200K+ active installs
9 read
View abilities

An agent can read the plugin's tracking status, debug info, and full settings schema for Google Ads, GA4, Meta and TikTok pixels, and update those settings or configure a specific pixel in one call.

Analytics40K+ active installs
6 read2 write
View abilities

Verified from Stream's own free wordpress.org code on 28 September 2026, not from its marketing claims. Not every ability listed here has been run end to end against a live site. Plugin authors change their code, so a name, a capability, or a condition can be different in a later release. This site is not affiliated with, or endorsed by, XWP or Stream. Back to the full directory.

Back to the plugin directory

Bridge Stream, keep the same control.

Every ability starts off, is scoped to the user you connect, and is written to the same audit log as core. Turn on only what you need.

Off by default. Capability checked on every call.