Abilities Inspector banner
WP-Autoplugin WP-Autoplugin

Abilities Inspector

AI community

Description

Check what abilities your site exposes to AI agents and workflows through the Abilities API introduced in WordPress 6.9.

Installation

This entry records only its repository, not the path inside it, so there is no exact command to give. Open the source below and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

README

WordPress Abilities API Inspector

Abilities Inspector is a WordPress admin plugin that lets you browse every registered Ability on your site and quickly disable or re-enable them. It is built for the WordPress Abilities API introduced in WP 6.9, and provides a fast, filterable list table with bulk actions plus a details panel for deeper inspection.

Key Features

  • Browse all abilities registered by WordPress core and plugins.
  • Enable/disable abilities from a single screen.
  • Count of usage showing how many times each ability is used across the site.
  • Bulk actions for enabling or disabling multiple abilities at once.
  • Filters & search by status, category, provider, and free text.
  • Details panel with metadata like description, category label, REST visibility, annotations, and input/output schemas (when available).

Requirements

  • WordPress 6.9+ (or the Abilities API feature plugin).
  • PHP 7.4+.
  • Admin capability: manage_options.

Installation

  1. Upload the plugin folder to wp-content/plugins/ or install the ZIP via Plugins → Add New → Upload Plugin.
  2. Activate Abilities Inspector.
  3. Go to Tools → Abilities Inspector.

Usage

  1. Open Tools → Abilities Inspector in wp-admin.
  2. Use the status tabs (All / Enabled / Disabled) and the category filter to narrow results.
  3. Search by ability name, label, description, or category.
  4. Click Disable or Enable to toggle a single ability.
  5. Use the bulk action dropdown to enable/disable multiple abilities at once.
  6. Click Details to inspect an ability’s metadata.

How Disabling Works

When an ability is disabled, the plugin intercepts its registration and:

  • Sets show_in_rest to false (so it won’t be discoverable or executable via REST).
  • Replaces the execute_callback with a 403 response.

Disabled abilities are stored in a WordPress option and applied on every registration, so the behavior persists across requests and admin sess