EnterpriseIntermediate
wp-abilities-api
Capability-based permissions and REST API authentication
Developer Setup
Setup & Installation
bash
npx skills add https://github.com/WordPress/agent-skills --skill wp-abilities-apinpx skills add https://github.com/WordPress/agent-skills --skill wp-abilities-apiOr paste this URL into your assistant to install:
Overview
What This Skill Does
Capability-based permissions and REST API authentication
Application
When to use this Skill
- Integrating wp abilities api into your development workflow.
- Following best practices for capability-based permissions and rest api authentication.
- Automating repetitive tasks with AI-assisted tooling.
- Building production-grade applications with proper standards.
- Debugging and troubleshooting common implementation issues.
Documentation
Show Skills.md file
WP Abilities API
When to use
Use this skill when the task involves:
- registering abilities or ability categories in PHP,
- exposing abilities to clients via REST (
wp-abilities/v1), - consuming abilities in JS (notably
@wordpress/abilities), - diagnosing “ability doesn’t show up” / “client can’t see ability” / “REST returns empty”.
Inputs required
- Repo root (run
wp-project-triagefirst if you haven’t). - Target WordPress version(s) and whether this is WP core or a plugin/theme.
- Where the change should live (plugin vs theme vs mu-plugin).
Procedure
Before deciding what to register, read references/domain-vs-projection.md — abilities live at the domain capability layer; MCP / Command Palette / REST exposure is a projection. Registration shape and exposure shape are different decisions, and conflating them forces re-registration every time a consumer's constraints change.
1) Confirm availability and version constraints
- If this is WP core work, check
signals.isWpCoreCheckoutandversions.wordpress.core. - If the project targets WP < 6.9, you may need the Abilities API plugin/package rather than relying on core.
Lines 1 - 25 of 101
Recommendations