描述
Codiecool Action Guard for AI Agents is the governance layer for AI on WordPress.
MCP connectors and AI agents can edit your site. This plugin does not replace them — it sits beside them and makes sure publish, delete, settings, and role changes go through a human first when you want them to.
Features
- Intercept publish, trash/delete, media delete, watched options, and role changes
- Detect Application Password / Basic-auth REST traffic and watched roles (including
cagai_ai_agent) - Per-action modes: Allow / Ask first / Block
- Pending queue with human-readable before/after summary
- Soft-held deletes (redirect + notice — no scary error page)
- Audit log with one-click undo
- First-run setup checklist (plugins screen / plugin pages only)
- Configurable retention (up to 365 days)
- REST API for queue review workflows
Works alongside any MCP or AI plugin. The filter cagai_is_agent_request lets connectors mark requests as agent-driven.
屏幕截图
安装
- Upload the
codiecool-action-guard-ai-agentsfolder to/wp-content/plugins/ - Activate Codiecool Action Guard for AI Agents through the Plugins menu
- Follow the welcome checklist (AI Agent user + Application Password)
- Open Codiecool Action Guard Settings and confirm Publish/Delete are set to Ask first
常见问题
-
Does this include an MCP server?
-
No. This plugin is the approval and audit layer only. Use the official WordPress MCP Adapter or any third-party MCP/AI plugin for connectivity.
-
Will it block my normal editing?
-
By default, only watched roles and Application Password requests are governed. Draft updates default to Allow. Turn on Paranoid mode only if you want every user watched.
-
Who can approve queued actions?
-
Administrators (users with
manage_options).
评价
此插件暂无评价。
贡献者及开发者
更新日志
1.0.3
- Fix fatal error on Pending Queue when multiple items were listed (kind mapper variable clash)
1.0.2
- Unique 5-character prefix (cagai / CAGAI) for defines, options, hooks, caps, tables, and assets
- Namespace moved to Codiecool\ActionGuardAiAgents to avoid collisions
1.0.1
- Distinctive plugin name and slug for WordPress.org guidelines
- Limit admin notices to dashboard / plugin screens (Guideline 11)
- Text domain and admin menu slugs aligned with the new permalink
1.0.0
- Initial release
- Approval queue for publish, delete, media, settings, and role changes
- Human-readable before/after summaries
- Soft-held deletes with redirect notices
- Audit log with undo
- Allow / Ask first / Block modes
- Application Password and watched-role detection
- Modern admin UI with confirm dialogs and snackbars