WooCommerce 52 abilities
Guarded write products, orders, customers (touches real personal data, gated behind a clear notice)
Host-plugin integrations
5 plugin integrations, 70 governed abilities.
When a supported plugin is active, its abilities join the catalog. When it is not, they simply are not there. Either way they are off until you enable them, gated on every call, and written to the same audit log as everything else.
One card per host plugin.
The counts below sum to the 70 integration abilities. Each set is detected automatically and governed exactly like WordPress core.
Advanced Custom Fields 7 abilities
Guarded write read and write ACF field data
Rank Math SEO 5 abilities
Guarded write read and manage Rank Math data
Yoast SEO 3 abilities
Guarded write read and manage Yoast data
All in One SEO 3 abilities
Guarded write read and manage AIOSEO data
Off until you enable it, personal data flagged first
Activate a supported plugin and its abilities appear, governed the same way as core. Deactivate it and they are gone. Every set stays off until you switch it on. WooCommerce and Advanced Custom Fields can reach real customer records and field data, so they sit behind a clear admin notice before you enable them, and run only for the capabilities of the user you connected.
Extend the catalog without loosening control.
Activate a supported plugin and its abilities show up, governed the same way. Deactivate it and they are gone. You stay in charge of every switch.
Activate a plugin, the rules do not change. Off by default, gated, logged.