Title: Npcink Abilities Toolkit Author: Npcink Published: 05.06.2026 Last modified: 22.06.2026 --- Шукати плагіни ![](https://ps.w.org/npcink-abilities-toolkit/assets/banner-772x250.png?rev=3563029) ![](https://ps.w.org/npcink-abilities-toolkit/assets/icon-256x256.png?rev=3581135) # Npcink Abilities Toolkit Від автора [Npcink](https://profiles.wordpress.org/muze233/) [Завантажити](https://downloads.wordpress.org/plugin/npcink-abilities-toolkit.0.5.2.zip) * [Деталі](https://uk.wordpress.org/plugins/npcink-abilities-toolkit/#description) * [Відгуки](https://uk.wordpress.org/plugins/npcink-abilities-toolkit/#reviews) * [Розробка](https://uk.wordpress.org/plugins/npcink-abilities-toolkit/#developers) [Підтримка](https://wordpress.org/support/plugin/npcink-abilities-toolkit/) ## Опис Npcink Abilities Toolkit helps a WordPress site expose, review, and safely inspect Abilities API capabilities for AI hosts and clients. The admin page is built for site operators first. It shows whether the site’s ability package is working, which abilities are available, which abilities are read-only, and which write-like abilities require host approval. For developers and host runtimes, the plugin also provides ability registration helpers, category helpers, schema normalization, annotation normalization, REST discovery values, and optional canonical projection for Npcink AI when Npcink AI is installed. It can be used by any WordPress plugin or client that consumes the WordPress Abilities API. Npcink AI is one optional consumer, not the owner of this plugin. It does not run AI models, execute workflows, route prompts, contact model providers, manage billing or quotas, own MCP governance, or approve final WordPress writes. Read-only host composition recipe metadata may document how hosts can compose abilities, but those records do not run queues, schedule jobs, execute workflows, or create a second registry. Host composition recipe metadata is available through read-only helpers and Abilities API discovery abilities for hosts that need catalog discovery without execution ownership. ### External Services and Remote Requests This plugin does not automatically contact Npcink AI, model providers, analytics services, tracking services, or cloud services. Some abilities can prepare request payloads for a separate host or cloud add-on, but this plugin does not send those payloads to an external service by itself. The `npcink-abilities-toolkit/upload-media-from-url` ability can download a media file from a URL provided by an authenticated caller when an approved host runtime commits that ability. In that case WordPress sends an HTTP request to the caller- provided URL in order to fetch the media file for the local media library. The remote endpoint is chosen by the caller, not by this plugin. ### Requirements * WordPress 7.0 or later. This release intentionally targets the WordPress Abilities API baseline available in WordPress 7.0+. * PHP 8.0 or later. * The WordPress Abilities API REST routes must be available before third-party provider plugins or external clients can discover and run abilities. ### Public API * `npcink_abilities_toolkit_register_category( $category_id, $args )` * `npcink_abilities_toolkit_register_readonly( $ability_id, $definition )` * `npcink_abilities_toolkit_register_write_proposal( $ability_id, $definition )` * `npcink_abilities_toolkit_normalize_schema( $schema, $default_type )` * `npcink_abilities_toolkit_normalize_annotations( $annotations, $risk_level )` * `npcink_abilities_toolkit_get_registered()` * `npcink_abilities_toolkit_get_workflow_definitions()` * `npcink_abilities_toolkit_get_workflow_definition( $recipe_id )` ### Third-Party Integration Quickstart Provider plugins should wait until `plugins_loaded`, check that the public helper exists, and then register their abilities through the helper functions: ``` if ( function_exists( 'npcink_abilities_toolkit_register_readonly' ) ) { npcink_abilities_toolkit_register_readonly( 'acme/site-summary', $definition ); } ``` Do not include files from this plugin’s `includes/` directory or instantiate classes in the `Npcink_Abilities_Toolkit` namespace. Those are implementation details. Use `npcink_abilities_toolkit_register_readonly()` for read-only context and diagnostic abilities. Use `npcink_abilities_toolkit_register_write_proposal()` only when the callback returns a proposal, preview, diff, or handoff payload. Third-party provider callbacks should not perform final host-governed commits. Approval, audit, quota, and final write authorization belong to the consuming host runtime. REST clients should first discover the catalog through: * `/wp-json/wp-abilities/v1/categories` * `/wp-json/wp-abilities/v1/abilities` * `/wp-json/wp-abilities/v1/abilities/{namespace}/{name}/run` * `/wp-json/npcink-abilities-toolkit/v1/contract` The contract endpoint is a compatibility and boundary discovery endpoint for authenticated host runtimes. It does not replace the WordPress Abilities API catalog and does not run abilities. Full provider examples and REST client notes are maintained in the public repository: ``` https://github.com/muze-page/npcink-abilities-toolkit ``` If the `wp-abilities/v1` REST routes are missing, enable the WordPress Abilities API baseline or compatibility plugin before connecting third-party providers or clients. ### Admin Page After activation with a Npcink AI host plugin, open Npcink AI -> AI Abilities in wp-admin. When this standalone package is installed without a Npcink AI host menu, open Tools -> Site AI Abilities instead. The page is designed for site operators first: it shows site ability status, groups available abilities with plain labels and risk posture, and can run two official read-only checks: site info and bounded redacted diagnostics summary. The Checks tab explains what each check proves and what it does not prove before it runs. Check results are shown as a plain summary table, with raw JSON kept behind a support disclosure. Developer Access keeps copyable REST endpoint values, raw discovery fetches, and ability ID export available for host/client setup. It does not run showcase workflows, model calls, write abilities, approval flows, or demo abilities. ### Built-In Abilities The plugin includes migrated low-risk WordPress read abilities, deterministic comment helpers, and host-governed WordPress write/destructive abilities using canonical` npcink-abilities-toolkit/*` ids. It also includes `npcink-abilities-toolkit/wp-diagnostics-summary`, a redacted WordPress- only diagnostics summary for Abilities API clients. This summary intentionally omits Npcink AI settings, MCP settings, API keys, database names, table prefixes, filesystem paths, error logs, and external HTTP probes. It also includes `npcink-abilities-toolkit/search-posts` and `npcink-abilities-toolkit/ search-post-meta`, bounded local WordPress search helpers for keyword and explicit post-meta discovery. These are read-only helpers and do not call external search indexes or mutate content. It also includes `npcink-abilities-toolkit/list-workflow-recipes` and `npcink-abilities- toolkit/get-workflow-recipe`, read-only host composition recipe metadata discovery abilities. These expose metadata only and do not execute workflow runtime behavior. Core governance handoff docs include a catalog snapshot, permission matrix, and schema boundary audit for hosts that consume this plugin through `npcink-ai-core`. ### Developer Verification For the default local source gate, run: ``` composer test:all ``` When the plugin is installed in a local WordPress site, run: ``` WP_PATH=/path/to/wordpress composer smoke:wp ``` For isolated bounded-chain performance validation, run: ``` composer perf:smoke ``` ## Скріншоти [⌊Site ability status overview with available ability count, write safeguards, host detection, and next actions.⌉⌊Site ability status overview with available ability count, write safeguards, host detection, and next actions.⌉[ Site ability status overview with available ability count, write safeguards, host detection, and next actions. [⌊Available Abilities catalog with filters, risk grouping, availability, and technical details for support.⌉⌊Available Abilities catalog with filters, risk grouping, availability, and technical details for support.⌉[ Available Abilities catalog with filters, risk grouping, availability, and technical details for support. [⌊Safe Checks tab explaining what each check proves before showing summary results and raw response support details.⌉⌊Safe Checks tab explaining what each check proves before showing summary results and raw response support details.⌉[ Safe Checks tab explaining what each check proves before showing summary results and raw response support details. [⌊Developer Access tab with copyable REST endpoint values, raw discovery fetches, and ability ID export.⌉⌊Developer Access tab with copyable REST endpoint values, raw discovery fetches, and ability ID export.⌉[ Developer Access tab with copyable REST endpoint values, raw discovery fetches, and ability ID export. ## Часті питання ### Does this plugin run AI models? No. Npcink Abilities Toolkit exposes WordPress abilities and support information through the WordPress Abilities API. Model routing, prompt selection, hosted runtime execution, and workflow execution belong to a separate host product or client. ### Will this plugin change my posts, media, terms, comments, or settings by itself? No. The admin page checks are read-only. Some built-in abilities describe write- like or destructive operations, but final commits require a host runtime with its own approval, authorization, and audit layer. ### Do I need Npcink AI to use this plugin? No. Npcink AI is an optional consumer. The plugin can also be used by other plugins or clients that consume the WordPress Abilities API. ### What do the Safe Checks prove? Site Info proves that an authorized ability client can read basic WordPress site information. Redacted Diagnostics proves that the site can return a support-friendly environment summary with sensitive fields omitted. These checks do not call models, generate content, contact external services, or fix configuration automatically. ### Does Redacted Diagnostics expose secrets? No. The diagnostics summary intentionally omits Npcink AI settings, MCP settings, API keys, database names, table prefixes, filesystem paths, error logs, and external HTTP probes. ### What should I do if abilities are not visible to a host product or AI client? Open Tools -> Site AI Abilities, or Npcink AI -> AI Abilities when a Npcink AI host menu is present. Use the Checks tab to confirm safe read-only responses, then use Available Abilities to review what the site exposes. Developers and host products can use Developer Access for REST endpoint values and raw discovery responses. ### What if the wp-abilities/v1 REST routes are missing? The WordPress Abilities API routes must be available before clients can discover and run abilities. Enable the WordPress Abilities API baseline or compatibility plugin for the target site. ## Відгуки Для цього плагіна немає відгуків. ## Учасники та розробники “Npcink Abilities Toolkit” — проект з відкритим вихідним кодом. В розвиток плагіну внесли свій вклад наступні учасники: Учасники * [ Npcink ](https://profiles.wordpress.org/muze233/) [Перекладіть “Npcink Abilities Toolkit” на вашу мову.](https://translate.wordpress.org/projects/wp-plugins/npcink-abilities-toolkit) ### Цікавитесь розробкою? [Перегляньте код](https://plugins.trac.wordpress.org/browser/npcink-abilities-toolkit/), перегляньте [сховище SVN](https://plugins.svn.wordpress.org/npcink-abilities-toolkit/) або підпишіться на [журнал розробки](https://plugins.trac.wordpress.org/log/npcink-abilities-toolkit/) за допомогою [RSS](https://plugins.trac.wordpress.org/log/npcink-abilities-toolkit/?limit=100&mode=stop_on_copy&format=rss). ## Журнал змін #### 0.5.2 * Added read-only review artifacts for image candidates, internal link candidates, taxonomy suggestions, and comment reply suggestions. * Kept candidate review helpers suggestion-only and host-governed; they do not create proposals, approve work, execute writes, or contact external providers. * Expanded acceptance contracts and first-party pack documentation for the new handoff artifacts. #### 0.5.1 * Added Composer dependency advisory audit to the default local and CI source gate. * Aligned CI and PHPStan with the package PHP 8.0 runtime floor. * Published the canonical public GitHub repository and documented the post-publication gate baseline. * Upgraded GitHub Actions checkout to the Node 24-compatible `actions/checkout@v5`. #### 0.5.0 * Improved the admin page as a connection and discovery surface with clearer package status, catalog navigation, copyable REST endpoints, and two bounded read-only checks. * Added bundled translation templates and eight starter locale packs for the admin connection/discovery surface, API ability labels/descriptions, and common runtime error messages. * Removed development demo ability controls from the admin page and kept showcase, model-call, write, and workflow execution outside this package surface. * Renamed nonproduction cleanup abilities and media cleanup inputs to avoid public` test` terminology in released ability ids and schema fields. * Added taxonomy assignment proposal support and strengthened Core consumer handoff checks for harvested workflow surfaces. * Hardened media replacement and Cloud derivative adoption previews so approved replacements can repair exact post-content media URLs, including old intermediate- size URLs. * Documented the foundation-layer testing strategy and default local source gate. #### 0.4.0 * Added read-only host composition recipe metadata discovery abilities and public PHP helpers. * Added Core governance handoff documentation, a catalog snapshot fixture, a permission matrix, and a schema boundary audit. * Hardened write-like contracts with `requires_approval`, explicit dry-run and commit defaults, and bounded idempotency keys. * Expanded REST verification coverage for governance metadata and schemas. * Added a consumer example for preparing Core proposal payloads from discovered ability contracts. #### 0.3.0 * Added package and sub-pack filters so hosts can keep a full catalog by default or opt into a light `core_wordpress_read` profile. * Kept public third-party helpers read-only/write-proposal oriented and documented that final commit authorization belongs to the host runtime. * Made Npcink AI catalog projection thin by default and added a projection-row filter for host-owned policy expansion. * Established `npcink-abilities-toolkit/*` as the canonical id namespace for abilities owned by this plugin. * Added explicit read/comment sub-pack maps as the split point for future source- file extraction. * Verified Npcink AI catalog compatibility against a WordPress site. #### 0.2.0 * Stabilized the public helper contract and ability metadata rules. * Documented host-governed write/destructive semantics and the Npcink AI integration boundary. * Added first-party ability pack grouping and 0.2 candidate verification evidence. * Strengthened lightweight tests for schema controls, Npcink catalog projection, provider defaults, and invalid ability ids. * Verified WordPress REST coverage and Npcink AI consumer split-boundary checks. #### 0.1.0 * Initial standalone release. * Added migrated WordPress read abilities, deterministic comment helpers, host- governed write/destructive abilities, and standalone redacted WordPress diagnostics. ## Мета * Версія **0.5.2** * Останнє оновлення **2 дні тому** * Активних встановлень **Менше 10** * Версія WordPress ** 7.0 або вище ** * Tested up to **7.0** * Версія PHP ** 8.0 або вище ** * Мова * [English (US)](https://wordpress.org/plugins/npcink-abilities-toolkit/) * Позначки * [abilities-api](https://uk.wordpress.org/plugins/tags/abilities-api/)[Agents](https://uk.wordpress.org/plugins/tags/agents/) [AI](https://uk.wordpress.org/plugins/tags/ai/)[automation](https://uk.wordpress.org/plugins/tags/automation/) * [Розширений перегляд](https://uk.wordpress.org/plugins/npcink-abilities-toolkit/advanced/) ## Оцінки No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/npcink-abilities-toolkit/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/npcink-abilities-toolkit/reviews/) ## Учасники * [ Npcink ](https://profiles.wordpress.org/muze233/) ## Підтримка Є що сказати? Потрібна допомога? [Перейти в форум підтримки](https://wordpress.org/support/plugin/npcink-abilities-toolkit/)