Agencies: Abilities and MCP
On WordPress with the Abilities API, Update Doctor registers the category update-doctor and ten abilities. Agencies can use them with their own AI agent through the MCP Adapter plugin. Update Doctor does not bundle the MCP Adapter.
| Ability | Type | What it does |
|---|---|---|
update-doctor/list-updates | Read-only | Pending updates with their policy and risk |
update-doctor/get-update-risk | Read-only | Risk level, score, reasons, requirements and changelog for one item |
update-doctor/check-site | Read-only | The quick health check of the key pages. Page bodies are never returned |
update-doctor/list-runs | Read-only | Update runs |
update-doctor/get-run | Read-only | One run with its findings and diagnosis |
update-doctor/get-report | Read-only | Report data for a date range |
update-doctor/list-proposals | Read-only | Proposed actions and their status |
update-doctor/propose-action | Queues only | Adds a proposal. It is never executed here |
update-doctor/diagnose-run | Spends AI tokens | Diagnoses a finished run again. Changes nothing on the site |
update-doctor/run-safe-update | Changes the site (destructive) | Starts a safe update. Hidden, and refuses to run, unless you turn on Settings > Agents > Allow agents to start safe updates. It respects policies: hold and never are refused, and approve becomes a proposal |
Each ability checks the caller’s WordPress capabilities. Calls that act (propose an action, diagnose a run, start a safe update) are recorded in the audit log as agent actions; read-only calls are not. Agents cannot approve anything.
Was this article helpful?
Tell us what was missing