Free · host plugin
Govern every AI ability on your WordPress
Abilities Manager is the central registry for WordPress abilities — typed, permissioned actions AI agents can call. Review every ability, and set allow, ask, or deny from one screen, with a full audit trail.
Runs on your server · Works with MCP Manager · No lock-in
ContentCreate PostCreate a post, page or any custom post-type record.
content/create-postMediaUpload MediaSideload an attachment from a URL, path or base64.
media/upload-mediaDatabaseRun SELECT QueryRead-only SELECT, SHOW, DESCRIBE or EXPLAIN.
database/run-db-select-queryBlocksCreate Block TemplateWrite a template to the database, child theme or plugin.
blocks/create-block-templatePluginsInstall PluginInstall from the WordPress.org directory by name or slug.
plugins/install-pluginContentCreate PostCreate a post, page or any custom post-type record.
content/create-postMediaUpload MediaSideload an attachment from a URL, path or base64.
media/upload-mediaDatabaseRun SELECT QueryRead-only SELECT, SHOW, DESCRIBE or EXPLAIN.
database/run-db-select-queryBlocksCreate Block TemplateWrite a template to the database, child theme or plugin.
blocks/create-block-templatePluginsInstall PluginInstall from the WordPress.org directory by name or slug.
plugins/install-pluginContentCreate PostCreate a post, page or any custom post-type record.
content/create-postMediaUpload MediaSideload an attachment from a URL, path or base64.
media/upload-mediaDatabaseRun SELECT QueryRead-only SELECT, SHOW, DESCRIBE or EXPLAIN.
database/run-db-select-queryBlocksCreate Block TemplateWrite a template to the database, child theme or plugin.
blocks/create-block-templatePluginsInstall PluginInstall from the WordPress.org directory by name or slug.
plugins/install-pluginContentCreate PostCreate a post, page or any custom post-type record.
content/create-postMediaUpload MediaSideload an attachment from a URL, path or base64.
media/upload-mediaDatabaseRun SELECT QueryRead-only SELECT, SHOW, DESCRIBE or EXPLAIN.
database/run-db-select-queryBlocksCreate Block TemplateWrite a template to the database, child theme or plugin.
blocks/create-block-templatePluginsInstall PluginInstall from the WordPress.org directory by name or slug.
plugins/install-pluginContentCreate PostCreate a post, page or any custom post-type record.
content/create-postMediaUpload MediaSideload an attachment from a URL, path or base64.
media/upload-mediaDatabaseRun SELECT QueryRead-only SELECT, SHOW, DESCRIBE or EXPLAIN.
database/run-db-select-queryBlocksCreate Block TemplateWrite a template to the database, child theme or plugin.
blocks/create-block-templatePluginsInstall PluginInstall from the WordPress.org directory by name or slug.
plugins/install-pluginBlocksUpdate BlockFind one block in a post’s tree and replace its markup.
blocks/update-post-blockMediaList MediaSearch title, caption, description and alt text.
media/list-mediaDatabaseSearch ReplaceSerialization-safe replace across every table.
database/search-replaceBlocksUpdate theme.jsonDeep-merges by default; refuses the parent theme.
blocks/update-theme-jsonSite HealthSite Health StatusGood, recommended and critical test counts.
site-health/get-site-health-statusBlocksUpdate BlockFind one block in a post’s tree and replace its markup.
blocks/update-post-blockMediaList MediaSearch title, caption, description and alt text.
media/list-mediaDatabaseSearch ReplaceSerialization-safe replace across every table.
database/search-replaceBlocksUpdate theme.jsonDeep-merges by default; refuses the parent theme.
blocks/update-theme-jsonSite HealthSite Health StatusGood, recommended and critical test counts.
site-health/get-site-health-statusBlocksUpdate BlockFind one block in a post’s tree and replace its markup.
blocks/update-post-blockMediaList MediaSearch title, caption, description and alt text.
media/list-mediaDatabaseSearch ReplaceSerialization-safe replace across every table.
database/search-replaceBlocksUpdate theme.jsonDeep-merges by default; refuses the parent theme.
blocks/update-theme-jsonSite HealthSite Health StatusGood, recommended and critical test counts.
site-health/get-site-health-statusBlocksUpdate BlockFind one block in a post’s tree and replace its markup.
blocks/update-post-blockMediaList MediaSearch title, caption, description and alt text.
media/list-mediaDatabaseSearch ReplaceSerialization-safe replace across every table.
database/search-replaceBlocksUpdate theme.jsonDeep-merges by default; refuses the parent theme.
blocks/update-theme-jsonSite HealthSite Health StatusGood, recommended and critical test counts.
site-health/get-site-health-statusBlocksUpdate BlockFind one block in a post’s tree and replace its markup.
blocks/update-post-blockMediaList MediaSearch title, caption, description and alt text.
media/list-mediaDatabaseSearch ReplaceSerialization-safe replace across every table.
database/search-replaceBlocksUpdate theme.jsonDeep-merges by default; refuses the parent theme.
blocks/update-theme-jsonSite HealthSite Health StatusGood, recommended and critical test counts.
site-health/get-site-health-statusBlocksMove BlockAtomically move a block to a new parent and index.
blocks/move-blockMediaRename Media FileRenames on disk; updates meta, GUID and sizes.
media/rename-media-fileDatabaseDatabase StatsVersion, table count, size, charset and collation.
database/get-db-statsBlocksList Block PatternsAcross the database, themes and plugins.
blocks/list-block-patternsCronList Cron JobsEvery event with hook, schedule, interval and args.
cron/list-cron-jobsBlocksMove BlockAtomically move a block to a new parent and index.
blocks/move-blockMediaRename Media FileRenames on disk; updates meta, GUID and sizes.
media/rename-media-fileDatabaseDatabase StatsVersion, table count, size, charset and collation.
database/get-db-statsBlocksList Block PatternsAcross the database, themes and plugins.
blocks/list-block-patternsCronList Cron JobsEvery event with hook, schedule, interval and args.
cron/list-cron-jobsBlocksMove BlockAtomically move a block to a new parent and index.
blocks/move-blockMediaRename Media FileRenames on disk; updates meta, GUID and sizes.
media/rename-media-fileDatabaseDatabase StatsVersion, table count, size, charset and collation.
database/get-db-statsBlocksList Block PatternsAcross the database, themes and plugins.
blocks/list-block-patternsCronList Cron JobsEvery event with hook, schedule, interval and args.
cron/list-cron-jobsBlocksMove BlockAtomically move a block to a new parent and index.
blocks/move-blockMediaRename Media FileRenames on disk; updates meta, GUID and sizes.
media/rename-media-fileDatabaseDatabase StatsVersion, table count, size, charset and collation.
database/get-db-statsBlocksList Block PatternsAcross the database, themes and plugins.
blocks/list-block-patternsCronList Cron JobsEvery event with hook, schedule, interval and args.
cron/list-cron-jobsBlocksMove BlockAtomically move a block to a new parent and index.
blocks/move-blockMediaRename Media FileRenames on disk; updates meta, GUID and sizes.
media/rename-media-fileDatabaseDatabase StatsVersion, table count, size, charset and collation.
database/get-db-statsBlocksList Block PatternsAcross the database, themes and plugins.
blocks/list-block-patternsCronList Cron JobsEvery event with hook, schedule, interval and args.
cron/list-cron-jobsBlocksGet Post BlocksA post’s block tree, each block annotated with its path.
blocks/get-post-blocksMediaList Image SizesRegistered sizes with width, height and crop mode.
media/list-image-sizesFile ManagerCreate Zip BackupZip a plugin, theme or uploads folder; URL and SHA-256.
file-manager/create-zip-backupThemesActivate ThemeBy name, stylesheet or partial match.
themes/activate-themeRank MathAudit Site SEOSite-wide audit with per-test fix hints.
rank-math/audit-site-seoBlocksGet Post BlocksA post’s block tree, each block annotated with its path.
blocks/get-post-blocksMediaList Image SizesRegistered sizes with width, height and crop mode.
media/list-image-sizesFile ManagerCreate Zip BackupZip a plugin, theme or uploads folder; URL and SHA-256.
file-manager/create-zip-backupThemesActivate ThemeBy name, stylesheet or partial match.
themes/activate-themeRank MathAudit Site SEOSite-wide audit with per-test fix hints.
rank-math/audit-site-seoBlocksGet Post BlocksA post’s block tree, each block annotated with its path.
blocks/get-post-blocksMediaList Image SizesRegistered sizes with width, height and crop mode.
media/list-image-sizesFile ManagerCreate Zip BackupZip a plugin, theme or uploads folder; URL and SHA-256.
file-manager/create-zip-backupThemesActivate ThemeBy name, stylesheet or partial match.
themes/activate-themeRank MathAudit Site SEOSite-wide audit with per-test fix hints.
rank-math/audit-site-seoBlocksGet Post BlocksA post’s block tree, each block annotated with its path.
blocks/get-post-blocksMediaList Image SizesRegistered sizes with width, height and crop mode.
media/list-image-sizesFile ManagerCreate Zip BackupZip a plugin, theme or uploads folder; URL and SHA-256.
file-manager/create-zip-backupThemesActivate ThemeBy name, stylesheet or partial match.
themes/activate-themeRank MathAudit Site SEOSite-wide audit with per-test fix hints.
rank-math/audit-site-seoBlocksGet Post BlocksA post’s block tree, each block annotated with its path.
blocks/get-post-blocksMediaList Image SizesRegistered sizes with width, height and crop mode.
media/list-image-sizesFile ManagerCreate Zip BackupZip a plugin, theme or uploads folder; URL and SHA-256.
file-manager/create-zip-backupThemesActivate ThemeBy name, stylesheet or partial match.
themes/activate-themeRank MathAudit Site SEOSite-wide audit with per-test fix hints.
rank-math/audit-site-seoBlocksInsert PatternResolve a pattern by slug and insert its blocks.
blocks/insert-patternTaxonomiesSet Term ImageAttach or clear a term image via _thumbnail_id.
taxonomies/set-term-imageFile ManagerRead Debug LogAll of debug.log, or just the last N lines.
file-manager/read-debug-logThemesRead Theme CodeAny file inside a theme directory.
themes/read-theme-codeFluentCRMList ContactsFilter contacts with tags and lists inline.
fluent-crm/list-contactsBlocksInsert PatternResolve a pattern by slug and insert its blocks.
blocks/insert-patternTaxonomiesSet Term ImageAttach or clear a term image via _thumbnail_id.
taxonomies/set-term-imageFile ManagerRead Debug LogAll of debug.log, or just the last N lines.
file-manager/read-debug-logThemesRead Theme CodeAny file inside a theme directory.
themes/read-theme-codeFluentCRMList ContactsFilter contacts with tags and lists inline.
fluent-crm/list-contactsBlocksInsert PatternResolve a pattern by slug and insert its blocks.
blocks/insert-patternTaxonomiesSet Term ImageAttach or clear a term image via _thumbnail_id.
taxonomies/set-term-imageFile ManagerRead Debug LogAll of debug.log, or just the last N lines.
file-manager/read-debug-logThemesRead Theme CodeAny file inside a theme directory.
themes/read-theme-codeFluentCRMList ContactsFilter contacts with tags and lists inline.
fluent-crm/list-contactsBlocksInsert PatternResolve a pattern by slug and insert its blocks.
blocks/insert-patternTaxonomiesSet Term ImageAttach or clear a term image via _thumbnail_id.
taxonomies/set-term-imageFile ManagerRead Debug LogAll of debug.log, or just the last N lines.
file-manager/read-debug-logThemesRead Theme CodeAny file inside a theme directory.
themes/read-theme-codeFluentCRMList ContactsFilter contacts with tags and lists inline.
fluent-crm/list-contactsBlocksInsert PatternResolve a pattern by slug and insert its blocks.
blocks/insert-patternTaxonomiesSet Term ImageAttach or clear a term image via _thumbnail_id.
taxonomies/set-term-imageFile ManagerRead Debug LogAll of debug.log, or just the last N lines.
file-manager/read-debug-logThemesRead Theme CodeAny file inside a theme directory.
themes/read-theme-codeFluentCRMList ContactsFilter contacts with tags and lists inline.
fluent-crm/list-contactsContentUpdate PostOnly the supplied fields are changed.
content/update-postUsersList UsersRole, search, meta and date filters with pagination.
users/list-usersOptionsPatch Option ValueChange one key inside a serialized-array option.
options/patch-option-valueCommentsBulk Update CommentsApprove, hold, spam or trash up to 100 at once.
comments/bulk-update-commentsACFRegister Field GroupCreate the field structure that appears on content.
acf/register-field-groupContentUpdate PostOnly the supplied fields are changed.
content/update-postUsersList UsersRole, search, meta and date filters with pagination.
users/list-usersOptionsPatch Option ValueChange one key inside a serialized-array option.
options/patch-option-valueCommentsBulk Update CommentsApprove, hold, spam or trash up to 100 at once.
comments/bulk-update-commentsACFRegister Field GroupCreate the field structure that appears on content.
acf/register-field-groupContentUpdate PostOnly the supplied fields are changed.
content/update-postUsersList UsersRole, search, meta and date filters with pagination.
users/list-usersOptionsPatch Option ValueChange one key inside a serialized-array option.
options/patch-option-valueCommentsBulk Update CommentsApprove, hold, spam or trash up to 100 at once.
comments/bulk-update-commentsACFRegister Field GroupCreate the field structure that appears on content.
acf/register-field-groupContentUpdate PostOnly the supplied fields are changed.
content/update-postUsersList UsersRole, search, meta and date filters with pagination.
users/list-usersOptionsPatch Option ValueChange one key inside a serialized-array option.
options/patch-option-valueCommentsBulk Update CommentsApprove, hold, spam or trash up to 100 at once.
comments/bulk-update-commentsACFRegister Field GroupCreate the field structure that appears on content.
acf/register-field-groupContentUpdate PostOnly the supplied fields are changed.
content/update-postUsersList UsersRole, search, meta and date filters with pagination.
users/list-usersOptionsPatch Option ValueChange one key inside a serialized-array option.
options/patch-option-valueCommentsBulk Update CommentsApprove, hold, spam or trash up to 100 at once.
comments/bulk-update-commentsACFRegister Field GroupCreate the field structure that appears on content.
acf/register-field-groupMenusCreate Menu ItemAdd an item to a nav menu by object or URL.
menus/create-menu-itemRecoveryList Paused PluginsPlugins WP paused after a fatal, with the error.
recovery/list-paused-pluginsFontsCreate Font FamilyMatches the theme.json font family preset shape.
fonts/create-font-familySettingsSet Permalink StructurePreset or custom; rewrite rules flush automatically.
settings/set-permalink-structureContent SearchAudit Internal LinksFind same-site links that resolve to nothing.
content-search/audit-internal-linksMenusCreate Menu ItemAdd an item to a nav menu by object or URL.
menus/create-menu-itemRecoveryList Paused PluginsPlugins WP paused after a fatal, with the error.
recovery/list-paused-pluginsFontsCreate Font FamilyMatches the theme.json font family preset shape.
fonts/create-font-familySettingsSet Permalink StructurePreset or custom; rewrite rules flush automatically.
settings/set-permalink-structureContent SearchAudit Internal LinksFind same-site links that resolve to nothing.
content-search/audit-internal-linksMenusCreate Menu ItemAdd an item to a nav menu by object or URL.
menus/create-menu-itemRecoveryList Paused PluginsPlugins WP paused after a fatal, with the error.
recovery/list-paused-pluginsFontsCreate Font FamilyMatches the theme.json font family preset shape.
fonts/create-font-familySettingsSet Permalink StructurePreset or custom; rewrite rules flush automatically.
settings/set-permalink-structureContent SearchAudit Internal LinksFind same-site links that resolve to nothing.
content-search/audit-internal-linksMenusCreate Menu ItemAdd an item to a nav menu by object or URL.
menus/create-menu-itemRecoveryList Paused PluginsPlugins WP paused after a fatal, with the error.
recovery/list-paused-pluginsFontsCreate Font FamilyMatches the theme.json font family preset shape.
fonts/create-font-familySettingsSet Permalink StructurePreset or custom; rewrite rules flush automatically.
settings/set-permalink-structureContent SearchAudit Internal LinksFind same-site links that resolve to nothing.
content-search/audit-internal-linksMenusCreate Menu ItemAdd an item to a nav menu by object or URL.
menus/create-menu-itemRecoveryList Paused PluginsPlugins WP paused after a fatal, with the error.
recovery/list-paused-pluginsFontsCreate Font FamilyMatches the theme.json font family preset shape.
fonts/create-font-familySettingsSet Permalink StructurePreset or custom; rewrite rules flush automatically.
settings/set-permalink-structureContent SearchAudit Internal LinksFind same-site links that resolve to nothing.
content-search/audit-internal-linksContentCreate PageSupports parent and menu_order for hierarchies.
content/create-pageTaxonomiesCreate TermAdd a term to any registered taxonomy.
taxonomies/create-termCacheFlush TransientsExpired only, or every transient regardless of expiry.
cache/flush-transientsPluginsVerify ChecksumsOn-disk files against the WordPress.org manifest.
plugins/verify-plugin-checksumsBlocksList BlocksEvery registered block with category and keywords.
blocks/list-blocksContentCreate PageSupports parent and menu_order for hierarchies.
content/create-pageTaxonomiesCreate TermAdd a term to any registered taxonomy.
taxonomies/create-termCacheFlush TransientsExpired only, or every transient regardless of expiry.
cache/flush-transientsPluginsVerify ChecksumsOn-disk files against the WordPress.org manifest.
plugins/verify-plugin-checksumsBlocksList BlocksEvery registered block with category and keywords.
blocks/list-blocksContentCreate PageSupports parent and menu_order for hierarchies.
content/create-pageTaxonomiesCreate TermAdd a term to any registered taxonomy.
taxonomies/create-termCacheFlush TransientsExpired only, or every transient regardless of expiry.
cache/flush-transientsPluginsVerify ChecksumsOn-disk files against the WordPress.org manifest.
plugins/verify-plugin-checksumsBlocksList BlocksEvery registered block with category and keywords.
blocks/list-blocksContentCreate PageSupports parent and menu_order for hierarchies.
content/create-pageTaxonomiesCreate TermAdd a term to any registered taxonomy.
taxonomies/create-termCacheFlush TransientsExpired only, or every transient regardless of expiry.
cache/flush-transientsPluginsVerify ChecksumsOn-disk files against the WordPress.org manifest.
plugins/verify-plugin-checksumsBlocksList BlocksEvery registered block with category and keywords.
blocks/list-blocksContentCreate PageSupports parent and menu_order for hierarchies.
content/create-pageTaxonomiesCreate TermAdd a term to any registered taxonomy.
taxonomies/create-termCacheFlush TransientsExpired only, or every transient regardless of expiry.
cache/flush-transientsPluginsVerify ChecksumsOn-disk files against the WordPress.org manifest.
plugins/verify-plugin-checksumsBlocksList BlocksEvery registered block with category and keywords.
blocks/list-blocks350+Abilities registered
3Access modes: allow / ask / deny
100%Runs on your server
0Vendor lock-in
One screen, full control
What you control per ability
Identity
Slug, label, category and description — how the ability is looked up across REST routes and MCP manifests.
Site permission
Force Block, Inherit, or Force Allow site-wide — Inherit respects the plugin’s own setting.
MCP exposure
Show or hide from MCP clients and set the MCP type — tool, resource, or prompt.
Annotation overrides
Force readonly, destructive, idempotent and show-in-REST hints — or defer to the plugin.
User access
Decide exactly which roles and users may invoke the ability.
Callback & schema
Choose how it resolves at runtime and define JSON input/output schema for validation.
Set up in three steps
1
Install & activate
Add Abilities Manager from WordPress.org. Every registered ability appears in one searchable table.
2
Review each ability
Open any ability to see its slug, schema and annotations — exactly what an AI agent sees on discovery.
3
Override & save
Set permission, MCP exposure and access. Overrides persist across plugin updates — the plugin’s own definition is untouched.
Every ability, one table
Filter by source and status, search, and open any ability to override it.
Safe by default
Guardrails, not guesswork
- Allow / ask / deny. Every ability is individually gated — nothing runs unapproved.
- Force Block or Force Allow. Override site-wide, or Inherit the plugin’s own setting.
- Capability-aware. Restrict who can invoke each ability by role and user.
- Append-only audit log. Every sensitive call is recorded — who, what, and when.
- Overrides persist. Your settings survive plugin updates; the plugin definition is never modified.
- Your data stays home. Everything runs inside your own WordPress install.
Frequently asked questions
What is a WordPress “ability”?
An ability is a typed, permissioned action a plugin exposes for AI agents — like “approve a comment” or “create a post.” Abilities Manager is the registry where you review and govern all of them.
Does it change what my plugins declare?
No. Your overrides are stored separately and persist across updates — the plugin’s own definition is never modified.
How does it relate to MCP Manager?
Abilities Manager governs the abilities; MCP Manager exposes the approved ones to MCP clients like Claude, ChatGPT and Cursor. Use them together.
Is it really free?
Yes — Abilities Manager is a free host plugin on WordPress.org and works standalone. Optional paid add-ons extend it.