WordPress Connector.

Protuno reaches each site through a plugin and an application password that you can revoke from your own wp-admin.

SiteDocumented by ProtunoLive
  • Plugin on your site
  • Reaches one site

No install needed for the audit. We suggest connecting a staging copy of your site first, before your live site.

Protuno connects to WordPress. It reaches one site. 4 reads, 3 writes.
4 on its own · 3 ask first

Permissions.

Reads can run on their own. Writes ask you first by default.

Reads

4 reads

Inventory, users, scheduled jobs and the database.

  • Read the plugin, theme and core inventory
  • Read users and roles
  • Read scheduled jobs
  • Read the database
Writes

3 writes

Apply an update, turn a plugin on or off, and write a setting. Every write needs the site set to Execute and asks first.

  • Apply an update
  • Turn a plugin on or off
  • Write a setting
All 7 capabilities

Showing 7 of 7 capabilities

Read

  • Read the plugin, theme and core inventorywordpress.inventory.read

    Reads which plugins, themes and which WordPress version are installed and active, with their version numbers.

    Needs: Agent Connector for WP or Universal Abilities

    On its own
  • Read users and roleswordpress.users.read

    Reads user accounts and roles, used for checks like who holds admin access.

    Needs: Administrator application password

    On its own
  • Read scheduled jobswordpress.cron.read

    Reads the site's scheduled jobs and when each one is due.

    Needs: Connector plugin on the site

    On its own
  • Read the databasewordpress.database.read

    Reads from the site's database, for checks the other reads do not cover.

    Needs: Connector plugin on the site

    On its own

Write

  • Apply an updatewordpress.updates.apply

    Runs a plugin, theme or core update on a site set to Execute.

    Undo: Plugin Safe Update restores the previous plugin folder if the site stops working.

    Needs: Site mode: Execute, and a verified backup first

    Ask first
  • Turn a plugin on or offwordpress.plugins.toggle

    Activates or deactivates a plugin on a site set to Execute.

    Undo: Turn the plugin back on or off.

    Needs: Site mode: Execute

    Ask first
  • Write a settingwordpress.settings.write

    Changes a site setting on a site set to Execute.

    Undo: Not reversible by Protuno. Take a backup first if you want a way back.

    Needs: Site mode: Execute

    Ask first
What It Does

What The Connector Lets An Agent Do.

The Protuno plugin creates the password but grants nothing itself. What an agent can do comes from the connector plugin on your site: Agent Connector for WP by default, or Angie or Novamira if you already run one. The rows below are what Protuno uses.

Inventory

Reads what is installed and active, and each version, through the WordPress Abilities API the connector registers.

Reads

Users

Reads user and role data for checks like admin provenance.

Reads

Scheduled jobs

Reads the site's scheduled jobs and when each one is due.

Reads

Database

Reads from the site's database, for checks the other reads do not cover.

Reads

Updates

Applies WordPress core, plugin and theme updates. Plugin Safe Update saves each plugin folder before updating and restores it if the site breaks.

Ask first

Plugins on or off

Turns a plugin on or off when the site is set to Execute.

Ask first

Settings

Changes a site setting when the site is set to Execute.

Ask first

Playbooks 18 read it

18 playbooks read the WordPress connector today. The Connectors screen in your workspace lists which 18.

Set Up · 6 steps

You See The Full List Before Anything Is Granted.

How it connects: the Protuno plugin and a connector plugin on your site, plus a WordPress application password. You connect each site on its own.

  1. Step 1

    Download the plugin

    Download the Protuno plugin zip from the Protuno dashboard, not WordPress.org.

    You need WordPress 6.9 or later, PHP 7.4 or later, HTTPS, an administrator account and application passwords switched on. If your site has no connector plugin yet, Agent Connector for WP needs WordPress 7.0 and PHP 8.1.

    you see: The plugin zip download in your Protuno dashboard.

  2. Step 2

    Install and activate

    In wp-admin, go to Plugins, Add New, Upload Plugin.

    Choose the zip, press Install Now, then Activate.

    you see: The Protuno setup screen opens by itself after activation, with three steps across the top: Welcome, Abilities, Connect.

  3. Step 3

    Turn on the connector

    The Abilities screen checks for an MCP connector.

    If none exists, press Install & Enable MCP to install Agent Connector for WP and its Universal Abilities companion pack. If one exists but is off, press Enable The Abilities. If one is already running, press Continue.

    you see: A card naming the connector and what it exposes, with a plain statement that Universal Abilities reaches WP-CLI, PHP and files. It shows before you press anything.

  4. Step 4

    Copy your credentials

    The Connect screen shows a Username and a one-time application password named 'Protuno - AI Super Agent'.

    Copy both. You will not see the password again.

    you see: Two values with Copy buttons. Pressing Add Site to Protuno opens your dashboard with the site filled in.

  5. Step 5

    Pick the site and set its mode

    Pick one
    Paste the username and password into Protuno.

    Choose whether this site is live, which starts Read only, or staging, which starts Execute.

    you see: The site listed as Waiting until Protuno's first read, then Live, with its mode and connector shown.

    Staging We suggest connecting a staging copy of your site first, before your live site.

  6. Step 6

    Check both sides agree

    Confirm
    Protuno shows which connector is serving and whether Universal Abilities is on.

    This matches what the wp-admin screen already told you.

    you see: Protuno Is Connected on the WordPress side. On the Protuno side, the site's connector, mode and last-read time.

Before You Connect It

Questions.

Do I need a paid Protuno plan to connect a site?

Connecting a site is part of onboarding on any plan. WordPress connects per site, not per workspace. It is the one connector that playbooks actually read today: 18 of them, as of the 13 October 2026 product check.

Are there rate limits?

Protuno does not publish one for its own MCP calls. The underlying WordPress REST API and Abilities API have no documented global rate limit. Your host's own server limits apply, as they would to any REST traffic.

What can't Protuno do on a WordPress site?

It cannot force delete a post, delete a WordPress user, or drop or empty a database table. Those are refused before they reach your site, on every plan. Its application password also works only with the MCP server you chose on the Abilities screen.

What if two connectors are installed, and how do I see when Protuno last read the site?

A site can run more than one MCP server, but Protuno uses exactly one, chosen on the Abilities screen. Its password is refused on every other MCP route on the site. The connection screen shows Live, Waiting or Disconnected, and the time Protuno last read the site.

A run fails or the site shows an unrecognised server. What do I check?

If the status stays on Waiting after you paste the credentials, see Protuno's Stuck on Waiting troubleshooting. If the heading says An MCP Server Is Already Running, that server is not one of the three Protuno supports: Agent Connector for WP, Angie and Novamira. Switch to a supported one, or turn the unknown server off.

How do I revoke access?

There are three ways. Press Disconnect on the Protuno screen in wp-admin, press Disconnect in the Protuno dashboard, or revoke 'Protuno - AI Super Agent' under Users, Profile, Application Passwords in wp-admin (no Protuno login needed). Deleting the plugin does not revoke the password, so disconnect first.

Capability names and default settings (on its own or ask first) are Protuno's own, and they can change as the product develops. Playbook plan, schedule and date come from Protuno's agent pages. Protuno last confirmed this connector's build status on 13 Oct 2026. Vendor limits and permissions on this page follow the vendor's public documentation as reviewed on 13 Oct 2026. The vendor's own page is the final word.

Free Site Audit

Do You Use WordPress?

The free audit looks at the site from the outside. Connect tools afterwards, one capability at a time.

We suggest connecting a staging copy of your site first, before your live site.

85 Site ChecksNo Credit Card100% Free