WPForms abilities, governed through the Bridge

An agent can list and inspect WPForms forms and their fields, read (limited, Lite-only) form stats, and create new forms or add and update fields on existing ones.

Abilities
84 read4 write
Active installs
5M+
Rating
96% (14,378 ratings)
Version
2.0.2.1
Requires
WP 5.5+, PHP 7.2+
Last updated
2026-09-23

What has to be true first

WPForms (Lite or Pro) must be installed and active on WordPress 6.9 or later for the abilities to register. Reading forms checks the wpforms_current_user_can 'view_forms' or 'view_form_single' capability, and creating or editing forms and fields checks 'create_forms' or 'edit_form_single'.

  • The four write abilities (create-form, update-form-settings, add-field, update-field) register regardless, but their permission callback returns a 403 unless the 'ai-mcp-write-enabled' key in the wpforms_settings option is turned on from WPForms' AI MCP settings tab.

The 8 WPForms abilities

Grouped by what each one can change. Every one starts off until you enable it.

Read 4

  • Read

    List forms

    Lists all WPForms forms with their metadata.

    Permission
    Custom checkwpforms_current_user_can(view_forms)
    MCP tool
    aafm-bridge-wpforms-list-forms
  • Read

    Get form

    Reads one WPForms form's configuration.

    Permission
    Custom checkwpforms_current_user_can(view_form_single)
    MCP tool
    aafm-bridge-wpforms-get-form
  • Read

    Get form stats

    Reads basic submission stats for one form; the Lite version returns a placeholder message instead of real entry data.

    Permission
    Custom checkwpforms_current_user_can(view_form_single)
    MCP tool
    aafm-bridge-wpforms-get-form-stats
  • Read

    Describe editing schema

    Returns the schema an agent needs to build valid create/update-form payloads.

    Permission
    Custom checkwpforms_current_user_can(view_forms)
    MCP tool
    aafm-bridge-wpforms-describe-editing-schema

Write 4

  • Write

    Create form

    Creates a new WPForms form.

    Permission
    Custom checkwpforms_current_user_can(create_forms)
    MCP tool
    aafm-bridge-wpforms-create-form
  • Write

    Update form settings

    Updates an existing form's settings.

    Permission
    Custom checkwpforms_current_user_can(edit_form_single)
    MCP tool
    aafm-bridge-wpforms-update-form-settings
  • Write

    Add field

    Adds a field to an existing form.

    Permission
    Custom checkwpforms_current_user_can(edit_form_single)
    MCP tool
    aafm-bridge-wpforms-add-field
  • Write

    Update field

    Updates an existing field on a form.

    Permission
    Custom checkwpforms_current_user_can(edit_form_single)
    MCP tool
    aafm-bridge-wpforms-update-field

How to switch these on

Four steps from two active plugins to a governed connection.

  1. Install WPForms and Agent Abilities for MCP

    Both plugins need to be active on the same WordPress site. WPForms registers its own abilities; this plugin discovers and governs them.

  2. Open the Other plugins screen

    In Agent Abilities for MCP, open the Bridge tab (labeled "Other plugins" in the admin). Abilities from every registered plugin appear there, grouped by the plugin that registered them.

  3. Enable one ability at a time

    Every ability from WPForms starts off. Turn on only the ones you want an agent to reach, or enable the whole set in one click.

  4. Connect as a least-privilege user

    Approve the connection as a WordPress account scoped to what you actually want the agent to do. Each call still re-checks that account’s capability before it runs.

Read more in how bridging works or the full documentation.

Frequently asked questions

Does WPForms work with the Bridge?

Yes. All eight abilities register unconditionally once WPForms is active on WordPress 6.9+; the four write abilities register too but refuse to execute until the plugin's own write-access setting is turned on.

What has to be true for WPForms's abilities to register?

The four write abilities (create-form, update-form-settings, add-field, update-field) register regardless, but their permission callback returns a 403 unless the 'ai-mcp-write-enabled' key in the wpforms_settings option is turned on from WPForms' AI MCP settings tab..

Does WPForms need anything special to work with the Bridge?

WPForms (Lite or Pro) must be installed and active on WordPress 6.9 or later for the abilities to register. Reading forms checks the wpforms_current_user_can 'view_forms' or 'view_form_single' capability, and creating or editing forms and fields checks 'create_forms' or 'edit_form_single'.

More Forms plugins

Fluent Forms

Conditional

Once MCP is turned on, an agent can read form schemas, entries, stats, integrations, notifications and styling, create and restyle forms, edit form fields, manage email notifications, and triage or bulk-update submissions including deletion.

Forms700K+ active installs
12 read8 destructive
View abilities

An agent can build a complete form field by field, wire up actions and calculations, embed the form in a page, and read, export, update, or delete its submissions.

Forms600K+ active installs
27 write5 destructive
View abilities

SureForms

Conditional

Once enabled, an agent can build and manage SureForms forms end to end: create, update, duplicate, or delete a form, read its shortcode and analytics, and list, read, or moderate its submitted entries.

Forms500K+ active installs
9 read2 write5 destructive
View abilities

Verified from WPForms's own free wordpress.org code on 28 September 2026, not from its marketing claims. Not every ability listed here has been run end to end against a live site. Plugin authors change their code, so a name, a capability, or a condition can be different in a later release. This site is not affiliated with, or endorsed by, Syed Balkhi or WPForms. Back to the full directory.

Back to the plugin directory

Bridge WPForms, keep the same control.

Every ability starts off, is scoped to the user you connect, and is written to the same audit log as core. Turn on only what you need.

Off by default. Capability checked on every call.