An agent can list and audit the site's custom code snippets, detect snippet errors, read WPCode's error log, and search its snippet library, all without the raw snippet code ever being exposed.
5 read
View abilitiesAgent Toolbelt abilities, governed through the Bridge
An agent can check site status, read the debug and audit logs, inspect cron, verify file checksums, flush caches and rewrite rules, and with a dry-run/confirm token update or roll back plugins, update themes, toggle a plugin, regenerate thumbnails, or clean up the database.
- Abilities
- 178 read4 write5 destructive
- Active installs
- 20+
- Rating
- 0% (0 ratings)
- Version
- 1.5.1
- Requires
- WP 6.9+, PHP 8.0+
- Last updated
- 2026-09-06 6:34am GMT
View Agent Toolbelt on WordPress.org
What has to be true first
Needs WordPress 6.9 or newer with Agent Toolbelt active and PHP 8.0. Every operation requires manage_options, and four of them (update-plugin, rollback-plugin, toggle-plugin, update-theme) additionally require update_plugins, update_plugins, activate_plugins, or update_themes respectively, so only an administrator-level connected user can run any of these.
- Each operation can be individually disabled through the plugin's own settings (a disabled operation is not registered as an ability at all)
- Registration is skipped entirely when the AGENT_TOOLBELT_DISABLED constant is defined and truthy (the plugin's kill switch)
A note on the count below
The draft undercounted at 16: the plugin registers 17 operations, including update-theme, which has no entry in the admin label_for() map (it falls back to showing the raw slug as its label) but is still a fully registered ability with its own describe(). Each operation's describe() carries an explicit annotations array read directly from its own source file, so risk here is not inferred from names.
The 17 Agent Toolbelt abilities
Grouped by what each one can change. Every one starts off until you enable it.
Read 8
- Read
Site status
Reports WordPress, PHP and database versions, environment type, active theme, plugin counts, pending updates, and which abilities are enabled.
- Read
Check site response
Fetches the home page and REST index anonymously and reports HTTP status, response time, and any fatal-error marker.
- Read
Inspect cron
Lists scheduled WP-Cron events with next-run times and an overdue count.
- Read
List available updates
Lists pending plugin, theme, and core updates, optionally forcing a fresh check against WordPress.org.
- Read
Read audit log
Returns the plugin's own log of past operations: what ran, when, by whom, and the result.
- Read
Read debug log
Returns recent WordPress debug log entries with secrets, paths, emails, and IPs redacted before leaving the site.
- Read
Run Site Health checks
Runs WordPress Site Health direct tests server-side and returns fresh, timestamped results.
- Read
Verify checksums
Verifies WordPress core or plugin files against official wordpress.org checksums and reports modified, missing, or unexpected files.
Write 4
- Write
Flush rewrite rules
Rebuilds the URL rewrite rules to fix permalink 404s after post type, taxonomy, or plugin changes.
- Write
Maintenance mode
Turns the maintenance page on or off for visitors, always auto-expiring so the site cannot stay locked.
- Write
Purge all caches
Clears the page cache, object cache, and expired transients across supported caching plugins.
- Write
Regenerate thumbnails
Finds image attachments missing registered thumbnail sizes and generates only the missing files.
Destructive 5
- Destructive
Clean up database
Deletes database clutter by category, such as revisions, expired transients, and trashed content, in batches.
- Destructive
Toggle plugin
Activates or deactivates one plugin, checks the site still responds, and auto-reverts if it does not.
- Destructive
Update plugin
Updates one plugin with a backup, a post-update site check, and automatic rollback if the site breaks.
- Destructive
Roll back plugin
Rolls one WordPress.org-hosted plugin back to an earlier release, with a backup and a post-rollback site check.
- Destructive
Update theme
Updates one theme with a backup, a post-update site check, and automatic rollback if the site breaks.
No abilities match that search.
How to switch these on
Four steps from two active plugins to a governed connection.
Install Agent Toolbelt and Agent Abilities for MCP
Both plugins need to be active on the same WordPress site. Agent Toolbelt registers its own abilities; this plugin discovers and governs them.
Open the Other plugins screen
In Agent Abilities for MCP, open the Bridge tab (labeled "Other plugins" in the admin). Abilities from every registered plugin appear there, grouped by the plugin that registered them.
Enable one ability at a time
Every ability from Agent Toolbelt starts off. Turn on only the ones you want an agent to reach, or enable the whole set in one click.
Connect as a least-privilege user
Approve the connection as a WordPress account scoped to what you actually want the agent to do. Each call still re-checks that account’s capability before it runs.
Read more in how bridging works or the full documentation.
Frequently asked questions
Does Agent Toolbelt work with the Bridge?
Yes. It registers 17 site-operations abilities in the core Abilities API with no meta.mcp.public requirement, so the Bridge can discover and wrap any enabled one.
What has to be true for Agent Toolbelt's abilities to register?
Each operation can be individually disabled through the plugin's own settings (a disabled operation is not registered as an ability at all). Registration is skipped entirely when the AGENT_TOOLBELT_DISABLED constant is defined and truthy (the plugin's kill switch).
Does Agent Toolbelt need anything special to work with the Bridge?
Needs WordPress 6.9 or newer with Agent Toolbelt active and PHP 8.0. Every operation requires manage_options, and four of them (update-plugin, rollback-plugin, toggle-plugin, update-theme) additionally require update_plugins, update_plugins, activate_plugins, or update_themes respectively, so only an administrator-level connected user can run any of these.
More Developer plugins
An agent can look up the expected value format for a field type, then read, write, or delete a specific custom field's value on a post, term, user, comment, or settings page.
2 read1 write1 destructive
View abilitiesAn agent can list, read, create, update, duplicate, export, import, trash, and restore SCF field groups, individual fields, custom post types, taxonomies, and options pages, and, once the site turns on AI Access, list and register field groups, post types, and taxonomies under a second acf/* ability set plus create, read, update, and delete records of any post type or taxonomy the site opts in.
18 read31 write5 destructive
View abilitiesVerified from Agent Toolbelt's own free wordpress.org code on 28 September 2026, not from its marketing claims. Not every ability listed here has been run end to end against a live site. Plugin authors change their code, so a name, a capability, or a condition can be different in a later release. This site is not affiliated with, or endorsed by, Kostya Tereshchuk or Agent Toolbelt. Back to the full directory.
Bridge Agent Toolbelt, keep the same control.
Every ability starts off, is scoped to the user you connect, and is written to the same audit log as core. Turn on only what you need.
Off by default. Capability checked on every call.