Human-approval queue, audit log, and undo for AI/MCP agent writes on WordPress.
Codiecool Action Guard for AI Agents is the governance layer for AI on WordPress.
MCP connectors and AI agents can edit your site. This plugin does not replace them — it sits beside them and makes sure publish, delete, settings, and role changes go through a human first when you want them to.
Features
- Intercept publish, trash/delete, media delete, watched options, and role changes
- Detect Application Password / Basic-auth REST traffic and watched roles (including
cagai_ai_agent) - Per-action modes: Allow / Ask first / Block
- Pending queue with human-readable before/after summary
- Soft-held deletes (redirect + notice — no scary error page)
- Audit log with one-click undo
- First-run setup checklist (plugins screen / plugin pages only)
- Configurable retention (up to 365 days)
- REST API for queue review workflows
Works alongside any MCP or AI plugin. The filter cagai_is_agent_request lets connectors mark requests as agent-driven.
