WP Agent is designed to be safe-by-default for typical WordPress installs.

Core rule

Everything the agent can do is exposed as an ability (Abilities API).

This means:

• Abilities can be enabled/disabled
• Abilities can have permission checks
• Abilities can be filtered/guarded by execution policy

Execution policy tiers

WP Agent supports tiered execution policy. The agent should prefer safer native paths first.

Tiers:

1. wp-native (default)

   • WordPress-native operations only
   • Avoids depending on shell access

2. restricted-shell

   • Allows shell tool usage for admins
   • Shell commands are allowlisted

3. extended-shell

   • Optional, for advanced environments

4. trusted

   • Power-user mode

Filters

wp-native (default)

• WordPress-native operations only
• Avoids depending on shell access

REST API permissions

restricted-shell

• Allows shell tool usage for admins
• Shell commands are allowlisted

Data storage

extended-shell

• Optional, for advanced environments

trusted

Recommendations

• Power-user mode