Before an AI agent can publish from your WordPress site, it has to pass four switches:
â‘ Code: the plugin offers the ability, and can close it with public => false. â‘¡ Admin: you turn it on in 4WP MCP Connector. Nothing is allowed until you do. â‘¢ Endpoint: only administrators reach the MCP endpoint. â‘£ Rights: permission_callback checks this exact action on this exact post.
Next: what happens when they’re on.
Go deeper
- Abilities API series: 4wp.dev/Abilities-API