Codiecool Action Guard for AI Agents is the governance layer for AI on WordPress.
MCP connectors and AI agents can edit your site. This plugin does not replace them — it sits beside them and makes sure publish, delete, settings, and role changes go through a human first when you want them to.
Features
- Intercept publish, trash/delete, media delete, watched options, and role changes
- Detect Application Password / Basic-auth REST traffic and watched roles (including
cagai_ai_agent) - Per-action modes: Allow / Ask first / Block
- Pending queue with human-readable before/after summary
- Soft-held deletes (redirect + notice — no scary error page)
- Audit log with one-click undo
- First-run setup checklist (plugins screen / plugin pages only)
- Configurable retention (up to 365 days)
- REST API for queue review workflows
Works alongside any MCP or AI plugin. The filter cagai_is_agent_request lets connectors mark requests as agent-driven.