WordPress core is proposing three new “abilities” for WordPress 7.1 that let AI agents read a site’s settings, content, and users directly, without a developer building a custom connection first.

What’s actually being added

The proposal adds three read-only abilities: core/read-settings, core/read-content, and core/read-users. They build on the Abilities API, a system that shipped in WordPress 6.9 for registering permission-checked actions with defined inputs and outputs. Until now, that API only exposed basic details like the site name and the current logged-in user. This expansion lets an AI agent pull real data: your site configuration, your published posts and pages, and information about your users.

Why this matters if you use AI tools

The goal is to make a standard WordPress site “agent-readable,” so tools like Claude or ChatGPT can act on real information instead of guessing. The proposal gives a concrete example: an agent could be asked to draft a post titled “June 2026 Summary” that links back to everything you actually published that month, because it can read your content directly. This is the same direction as Vibe AI, the free MCP plugin covered here yesterday that lets Claude or ChatGPT edit your site by chat. Abilities like these give plugins such as Vibe AI, and WordPress’s own built-in AI Client added in version 7.0, a standard way to fetch real data instead of each one building its own workaround.

Your existing permissions still apply

Nothing here bypasses your site’s access controls. Each ability checks the same roles and capabilities WordPress already enforces. Reading settings requires manage_options, the same permission an administrator needs today, and sensitive fields stay hidden from anyone who could not already see them through the dashboard or REST API. Plugin developers also have to explicitly opt content types and settings into this system, so nothing becomes agent-readable automatically just because you update to 7.1.

What to do now

There is nothing to install or configure yet. This is a merge proposal, not a shipped feature, and it targets WordPress 7.1. If you already use an AI plugin that connects to your site, this is worth knowing about because it signals where WordPress is heading: toward AI agents as a first-class way to manage a site, using the same permission checks you rely on today.

End of article