AbilityGuard – Abilities API Monitor
AbilityGuard helps site administrators understand and audit what the WordPress Abilities API exposes on their site. The WordPress Abilities API gives plugins, themes, AI tools, automation workflows, and other integrations a structured way to register and execute site capabilities. That is powerful,
About this tool.
AbilityGuard helps site administrators understand and audit what the WordPress Abilities API exposes on their site.
The WordPress Abilities API gives plugins, themes, AI tools, automation workflows, and other integrations a structured way to register and execute site capabilities. That is powerful, but it also creates a new visibility problem: administrators need to know which abilities are available, how those abilities are described, whether they are exposed through REST, and what executions have happened recently.
AbilityGuard adds that visibility layer. It inventories registered abilities, highlights risk-related annotations, and keeps a rolling execution log so you can review what ran, who triggered it, how it was triggered, and what data was stored.
What problem does AbilityGuard solve?
Without an inventory or audit trail, administrators may not know:
- Which abilities are registered by active plugins or integrations.
- Whether an ability is marked as read-only, destructive, or idempotent.
- Whether an ability is exposed through REST.
- Which abilities executed recently.
- Which user triggered an ability execution.
- Whether input or output payloads were captured for review.
AbilityGuard is designed to answer those questions from the WordPress admin area.
Features
AbilityGuard turns the WordPress Abilities API into a clear, auditable surface for site administrators. Instead of chasing capability registrations manually, you get a focused dashboard for visibility, risk review, and execution monitoring.
Core Visibility
- Ability Inventory: view all registered WordPress abilities in a single, searchable inventory.
- Risk Badges: instantly spot risk indicators derived from ability annotations.
- Annotation Visibility: inspect read-only, destructive, and idempotent metadata at a glance.
- Category & Namespace Details: see the official category, slug, and namespace used by each ability.
- REST Exposure & Schema Visibility: identify abilities exposed through REST and whether input/output schemas are registered.
