AcrossAI Abilities Manager
AcrossAI Abilities Manager gives site administrators full visibility and control over every ability registered via the WordPress Abilities API (wp_get_ability()).
Features:
- Browse all abilities — a searchable, sortable, paginated table listing every registered ability with slug, provider, source, and current status.
- Toggle allow/disallow — enable or disable any ability site-wide with a single click. Changes are saved instantly without a page reload.
- Edit ability metadata — override
readonly,destructive,idempotent,show_in_rest,show_in_mcp,mcp_type, andmcp_serversfields per ability using a tri-state system (Yes / No / Inherit from registry). - Reset overrides — restore any ability back to its registry defaults with one click.
- Bulk actions — allow, disallow, or reset up to 50 abilities at once.
- Ability Library — enable or disable add-on ability groups from a dedicated Library page, with All/Specific mode controls per group.
- Add-ons page — browse, install, and manage free and premium add-ons directly from the WordPress admin. Powered by wpb-addons-page.
- MCP server list — view all registered MCP servers when the MCP Adapter plugin is active.
All overrides are stored in a dedicated database table. The WordPress ability registry is never modified — only the fields that differ from registry defaults are persisted.
Security:
- All endpoints require
manage_optionscapability. - All state-changing requests are protected by WordPress nonce verification.
- All input is sanitized; all output is escaped.
Third-party integrations (optional):
- MCP Adapter plugin — if active, the plugin displays a list of registered MCP servers inside the ability edit panel. No data is sent to any external service. The MCP Adapter plugin communicates only with your own WordPress installation.
- Freemius — the Add-ons page uses Freemius to handle paid add-on purchases, license management, and automatic updates. Data is only sent after explicit user action (see « External Services » below).
No data is sent to any external server automatically by this plugin.
External Services
Freemius (https://freemius.com)
The Add-ons page is powered by wpb-addons-page, which integrates with Freemius to handle paid add-on purchases, license management, and automatic updates for premium add-ons.
When a user chooses to connect their account or purchase a paid add-on, the following data is sent to Freemius servers:
- WordPress admin email address
- Site URL
- WordPress and PHP version
This only happens after explicit user action (clicking Login / Connect or Buy on the Add-ons page). No data is sent automatically on plugin activation or on any other page.
Freemius Terms of Service: https://freemius.com/terms/ Freemius Privacy Policy: https://freemius.com/privacy/
Free add-ons listed on the Add-ons page are hosted on WordPress.org and installed via the standard WordPress plugin installer. No external service is involved for free add-ons.
Privacy Policy
This plugin does not collect or store any user data by itself.
If a user chooses to connect their account via the Add-ons page, data is handled by Freemius in accordance with their privacy policy: https://freemius.com/privacy/
No data is sent to any external server without explicit user action.
