- Article
- Advanced
- 2 minutes read
- Reviewed August 4, 2026
- Advanced WordPress and integrations
The WordPress Abilities API provides a standardized way to register, discover and execute distinct units of WordPress functionality.
The server-side API was introduced in WordPress 6.9. WordPress 7.0 added the corresponding client-side direction and continued the API's development.
What Is an Ability?
An ability represents a named operation.
It can describe:
- Human-readable label and description.
- category.
- input schema.
- output schema.
- permission callback.
- execution callback.
- annotations about behavior.
This makes functionality discoverable by administration tools, automation systems and AI-oriented adapters.
Registration
Abilities are registered through the Abilities API during the expected lifecycle.
Names use a namespace and ability identifier, such as my-plugin/rebuild-index.
Input and output schemas use supported JSON Schema concepts to define and validate data.
Permission and Execution
Every ability that changes or exposes protected data needs an appropriate permission callback.
Discoverability is not authorization. The execution path must still enforce capabilities, object ownership and business rules.
Callbacks should return controlled values or WP_Error.
REST and WP-CLI
The API provides REST endpoints through which authenticated external systems can discover and execute abilities.
WP-CLI includes commands for inspecting registered abilities and categories.
Automation and AI
Abilities can create a common contract between WordPress functionality and automation clients.
This can support agent tools, administrative workflows and external orchestration without giving a client arbitrary PHP execution.
The surrounding authentication, permissions, confirmation, logging and human-approval model remains essential.
Current Maturity
The API is new and evolving.
Confirm the minimum WordPress version, current schemas and available core abilities before making it a hard dependency. Provide graceful compatibility behavior for older sites.
Frequently Asked Questions
Is an ability the same as a user capability?
No. A capability authorizes a user action. An ability describes an executable unit of functionality and has its own permission callback.
Does the Abilities API execute AI models?
No. It exposes WordPress operations that automation or AI systems can discover and call.
Continue Learning
Previous: Modern Block Editor APIs