Documentation
Run an AI agent on WordPress without handing over the keys
Install the plugin, connect your AI client, and understand the governance model that keeps an agent inside the boundary you set. Off by default, least privilege, every call audited.
- 153governed abilities83 core, 70 integration
- 0on by defaultnothing is exposed until you enable it
- 9AI clients connect todayhosted apps and local tools
- 0outbound callsno telemetry, no AI provider contacted
Start here
From install to first call
The short path: turn on one ability, copy your endpoint, connect a client, watch the audit log record it.
Getting started
Four steps from install to first call: enable an ability, copy your endpoint, connect a client, check the connection.
Read the guideInstallation
Requirements and the full install walkthrough, from upload to the Abilities tab.
Read the guideConnecting a client
The two ways to connect: OAuth in the browser, or an Application Password on a dedicated user.
Read the guideUnderstand it
How you keep control
Governance is what the plugin actually sells you. These three pages cover how it works and where its limits are.
Governance concepts
The six ideas the plugin is built on: least privilege, off by default, capability gating, audit, bounded writes, zero outbound.
Read the guideAbilities from other plugins
How WordPress lets your other plugins register abilities, and how those come in off by default under the same governance.
Read the guideSafety controls
Optional guards you can switch on: rate limit, IP allowlist, force-to-draft, title-length cap, block-markup validation. All off until set.
Read the guideGet unstuck
When something will not connect
Most connection problems come down to a handful of causes. Work down these three in order, from the known fixes to asking a person.
Troubleshooting
Fixes for the snags people hit most: OAuth discovery, Windows clients, local and staging sites.
Read the guideFAQ
Short answers on clients, pricing, privacy, and what the plugin does and does not do.
Read the guideSupport forum
Still stuck? Ask on the plugin support forum on WordPress.org. Every thread is public, so the answer helps the next person too.
Open the forumBeyond the docs
What else is on the site
The docs explain how it works. These four show you what it can do and what has changed.
Abilities catalog
Browse all 153 abilities and see exactly what each one can reach.
Prompt Library
Copy-paste recipes for real WordPress jobs, each naming the abilities it uses.
AI clients
A setup guide per client, from ChatGPT and Claude.ai to Cursor and Gemini CLI.
Changelog
Every release and what it changed. Currently on 1.7.0.
Good to know
What connects today
ChatGPT, Claude.ai, Claude Desktop, Manus, Claude Code, Cursor, VS Code, Windsurf and Gemini CLI all connect today, some directly and some through the open-sourcemcp-remote bridge that runs on your own machine. The hosted apps connect by adding your endpoint as a custom connector and approving it once over OAuth, which is in beta on both ChatGPT and Claude.ai, and needs a paid plan on ChatGPT. The Gemini app is not supported: it wants a streamable HTTP connector the adapter does not serve natively yet.
Integrations you already run
The plugin detects 5 integrations automatically and every one of them stays off until you switch it on: WooCommerce (52), Advanced Custom Fields (7), Rank Math SEO (5), Yoast SEO (3), All in One SEO (3). Each only appears while its host plugin is active. WooCommerce and Advanced Custom Fields can reach real personal data, so they sit behind a clear notice before you enable them.
See what each one addsFree, with nothing phoning home
Agent Abilities for MCP is free on WordPress.org, with no paid tier, no API key to buy, and no usage limits added by the plugin. It contacts no AI provider and makes no outbound requests of its own. It is built on the WordPress 6.9 Abilities API and the official MCP Adapter, so there is no custom server or transport to trust. Requires WordPress 6.9+ and PHP 7.4+.
Get it on WordPress.org