– AI should run the site through permission-checked contracts, not just act as a chatbot. – The Abilities API and MCP give one permission model inside wp-admin and in Claude Desktop alike. – Rollout is gradual, starting with the SEO Helper, on a shared architecture instead of “AI patches” in every plugin.

– The MCP Adapter only exposes abilities explicitly registered with `meta.mcp.public=true`. – Security: admin-only permissions and Application Passwords for HTTP. – Five steps: adapter, ability provider, client, server check, running the tools.