A read-only administrator role — users can view the entire wp-admin like an admin but cannot change anything.

AgentGate

Agentgate for WebMCP

Give AI agents in Chrome 146+ read-only access to your posts and categories via WebMCP.

telchar

Read Only Mode – Telchar HiveLock

Put your WordPress site in read-only mode — block persistent changes while keeping the site browsable until an administrator disables the freeze.

Dhanendran Rajagopal

Readministrator adds a “Read Only Administrator” role. Assign it to a user and they can browse the entire wp-admin like an administrator — Settings, Users, Plugins, Themes, content, comments and more — but they cannot change anything. Every write is blocked at the capability layer.
What read-only administrators can do:
<ul>
<li>View every admin screen an administrator can see.</li>
<li>Browse Settings, Tools, Users, Plugins, Themes and content lists.</li>
<li>Run a read-only export.</li>
</ul>
What they cannot do:
<ul>
<li>Save any Settings page (core or plugin Settings API).</li>
<li>Create, edit, publish, trash or delete posts, pages or media.</li>
<li>Add, edit, delete or promote users (including editing their own profile).</li>
<li>Activate, deactivate, install, update, delete or edit plugins.</li>
<li>Switch, install, update, delete or edit themes.</li>
<li>Edit menus, widgets or the Customizer.</li>
<li>Moderate or edit comments.</li>
<li>Make changes through the REST API (the block editor included).</li>
</ul>
<h4>Known limitations</h4>
Enforcement covers core write paths plus the REST API. A small residual surface remains: some third-party plugins that perform writes through their own custom <code>admin-ajax</code>/<code>admin-post</code> handlers, and Network Admin (multisite) screens, are not yet covered. These are on the roadmap.

Alternatives to Readministrator (Read Only Administrator)

Top alternatives