Features
53 abilities across eight families. Each write is grouped under an operation_id, each snapshot counts toward a capped budget.
Eight ability families
Content
Pages, posts, Gutenberg blocks. Create, update, delete with snapshot and rollback.
wpab/create-post, wpab/update-post, wpab/delete-post, wpab/update-block
Taxonomies
Categories, tags, menus. Create, update, assign.
wpab/create-term, wpab/update-term, wpab/assign-terms, wpab/create-menu
Media
List, read, delete with file backup copy.
wpab/list-media, wpab/upload-media, wpab/update-media, wpab/delete-media
Options
Allow-list of 37 authorized options. User preferences.
wpab/get-option, wpab/update-option, wpab/preferences-get, wpab/preferences-set
SEO
Technical audit, per-page audit, meta/OG/JSON-LD fixes, hreflang.
wpab/seo-audit, wpab/seo-posts, wpab/apply-seo-fixes, wpab/write-llms
Diagnostics
Mode, ping, security audit, site info, stats.
wpab/mode-status, wpab/ping, wpab/security-audit, wpab/get-site-info
Snapshots / rollback
List operations, list snapshots, rollback by operation_id.
wpab/list-operations, wpab/list-snapshots, wpab/rollback-operation
GEO / AEO
Audit for generative engines (ChatGPT, Perplexity, Google AI Overviews).
wpab/geo-audit, wpab/write-llms
Grouping and ceiling
Text equivalent: Each write operation generates one or more snapshots. Operations are grouped under an operation_id. The recommended ceiling is 700 accumulated snapshots. An alert is issued at 500 snapshots. Beyond 1000 snapshots, a known defect (fix planned in 1.9.1) may cause partial restoration without warning.
Design principles
Systematic dry-run
Every write ability accepts dry_run=true. The dry-run returns a diff and a confirmation_token. No write occurs until dry_run=false with the token.
Loopback verification
After each write, the plugin verifies the site responds with HTTP 200. If the site is broken, the operation is rolled back and the snapshot restored.
Options allow-list
Only 37 WordPress options are editable. Sensitive options (API keys, passwords, SSL config) are excluded.
File sandbox
File reading is limited to wp-content/themes/, wp-content/plugins/, wp-content/mu-plugins/ and wp-content/uploads/. Sensitive files are excluded.