AgentGate

<p>Agentgate for WebMCP is a zero-configuration plugin that makes your published content available to AI agents through the WebMCP browser standard. Activate it on any HTTPS-enabled WordPress 6.9 site and three read-only tools become available instantly.</p>
<h4>What agents can do</h4>
<p>Agents visiting your site in a supported browser can:</p>
<ul>
<li>Search your published posts by keyword and receive titles, excerpts, and links.</li>
<li>Look up a single post by its ID or slug to get the full text, categories, and tags.</li>
<li>Retrieve a complete list of your site’s categories with descriptions and post counts.</li>
</ul>
<p>No content is modified. Agents see the same public information as any visitor.</p>
<h4>Under the hood</h4>
<p>A small deferred script checks whether the browser supports <code>navigator.modelContext</code>. If it does, the plugin fetches the available tool definitions from a local REST endpoint and registers them. Each tool invocation is processed server-side, sanitized, and returned as structured JSON. Results are cached in the browser for 24 hours to keep requests low.</p>
<p>Unsupported browsers simply ignore the script — nothing breaks, nothing logs.</p>


Agentgate for WebMCP

Give AI agents in Chrome 146+ read-only access to your posts and categories via WebMCP.

Dhanendran Rajagopal

<p>Readministrator adds a “Read Only Administrator” role. Assign it to a user and they can browse the entire wp-admin like an administrator — Settings, Users, Plugins, Themes, content, comments and more — but they cannot change anything. Every write is blocked at the capability layer.</p>
<p>What read-only administrators <strong>can</strong> do:</p>
<ul>
<li>View every admin screen an administrator can see.</li>
<li>Browse Settings, Tools, Users, Plugins, Themes and content lists.</li>
<li>Run a read-only export.</li>
</ul>
<p>What they <strong>cannot</strong> do:</p>
<ul>
<li>Save any Settings page (core or plugin Settings API).</li>
<li>Create, edit, publish, trash or delete posts, pages or media.</li>
<li>Add, edit, delete or promote users (including editing their own profile).</li>
<li>Activate, deactivate, install, update, delete or edit plugins.</li>
<li>Switch, install, update, delete or edit themes.</li>
<li>Edit menus, widgets or the Customizer.</li>
<li>Moderate or edit comments.</li>
<li>Make changes through the REST API (the block editor included).</li>
</ul>
<h4>Known limitations</h4>
<p>Enforcement covers core write paths plus the REST API. A small residual surface remains: some third-party plugins that perform writes through their own custom <code>admin-ajax</code>/<code>admin-post</code> handlers, and Network Admin (multisite) screens, are not yet covered. These are on the roadmap.</p>


Readministrator (Read Only Administrator)

A read-only administrator role — users can view the entire wp-admin like an admin but cannot change anything.

Agentgate for WebMCP vs Readministrator (Read Only Administrator)