AI-powered chat assistant for WordPress administration.
WP Agent adds an interactive AI chat to the WordPress admin at Tools > AI Chat. It helps administrators manage content, debug issues, inspect code, and diagnose problems through a conversational interface with 30+ agent tools.
The plugin has a modular extension system that auto-detects installed plugins (Yoast SEO, ACF, TranslatePress, Solid Security) and loads additional tools and AI instructions only when they are active.
- PHP 7.4+
- WordPress 6.9+
- Infomaniak AI Toolkit plugin (required dependency, enforced via
Requires Pluginsheader) - At least one AI provider configured (Infomaniak, Anthropic, or OpenAI)
- Install and activate the Infomaniak AI Toolkit plugin
- Configure an AI provider via Settings > Connectors
- Upload this plugin to
wp-content/plugins/wp-agent/ - Activate via Plugins
- Open Tools > AI Chat
Always available with any WordPress installation.
| Domain | Tools | Examples |
|---|---|---|
| Content | 9 | Search, create, update, delete posts; manage metadata |
| Media | 3 | List media, get post images, update attachments |
| Plugins | 2 | Search wordpress.org, install plugins |
| Diagnostics | 7 | Plugins, themes, cron, options, users, environment, site info |
| Debug | 4 | Debug log, debug status, PHP info, error analysis |
| Filesystem | 3 | Read files, list directories, search code (read-only) |
| Web | 2 | Web search, fetch URL content |
Extensions auto-detect installed plugins and add specialized tools. No configuration needed -- activate the plugin and the tools appear in the chat.
| Extension | Plugin | Tools | Capabilities |
|---|---|---|---|
| Yoast SEO | wordpress-seo | 3 | SEO analysis, bulk audit, update all Yoast fields (keyphrase, OG, Twitter, robots, schema, cornerstone) |
| ACF Pro | advanced-custom-fields-pro | 4 | Read/write custom fields, inspect field groups, manage repeater rows |
| TranslatePress | translatepress-multilingual | 4 | List languages, check translation status, translate content and static strings via AI |
| Solid Security | better-wp-security | 3 | Security status overview, security logs, active lockouts monitoring |
Create a class implementing ExtensionInterface in src/Extensions/YourPlugin/:
namespace WpAgent\Extensions\YourPlugin; use WpAgent\Extensions\ExtensionInterface; class YourPluginExtension implements ExtensionInterface { public function id(): string { return 'your-plugin'; } public function name(): string { return 'Your Plugin'; } public function isActive(): bool { return function_exists('your_plugin_function'); } public function tools(): array { return [ /* Tool instances */ ]; } public function systemPrompt(): string { return '### Your Plugin\nInstructions...'; } }
Register it in ExtensionLoader::$extensions or via ExtensionLoader::register().
Type / in the chat to see available commands. Commands are auto-discovered from ai-commands/ directories.
Content: /create-post, /draft-post, /bulk-drafts, /update-post, /delete-post, /create-page, /summarize, /blog-outline, /write-excerpt
SEO: /seo-meta, /seo-images, /seo-audit, /seo-fix
Translation: /translate, /translate-all
Other: /install-plugin, /explain-error
- Read-only filesystem -- no file editing or deletion
- Two-step confirmation -- all write operations require preview + explicit approval
- Path validation -- realpath + ABSPATH boundary check, traversal blocked
- Sensitive files blocked -- .env, .htpasswd, certificates, database dumps
- Credentials masked -- DB_PASSWORD, auth keys in wp-config.php replaced with
*** - Admin only -- requires
manage_optionscapability - Web search confirmation -- user must approve before searching
Responses stream in real-time (token by token) when using Infomaniak models. Other providers (Anthropic, OpenAI) use synchronous responses.
src/
├── Tools/ # Core WordPress tools (always loaded)
│ ├── Content/ # Posts, pages, metadata
│ ├── Media/ # Attachments, images
│ ├── Debug/ # Debug log, PHP info
│ ├── Diagnostics/ # Plugins, themes, cron, options
│ ├── Filesystem/ # Read files, search code
│ ├── Plugins/ # Search & install from wp.org
│ └── Concerns/ # Shared traits
├── Extensions/ # Plugin integrations (loaded conditionally)
│ ├── Yoast/
│ ├── Acf/
│ ├── TranslatePress/
│ └── SolidSecurity/
├── Presets/ # ChatPreset (agent configuration)
├── Chat/ # Slash handler, conversation repo, debug
└── Admin/ # Chat page, views, Vite assets
npm install npm run dev # Vite dev server npm run build # Production build
Frontend: Alpine.js + marked + highlight.js + DOMPurify + pretext.
GPL-2.0-or-later