A merge proposal for WordPress 7.1 introduces three new read-only Core Abilities: core/read-settings, core/read-content, and core/read-users. Building on the Abilities API shipped in WordPress 6.9, these additions make WordPress meaningfully agent-readable, allowing AI clients and agentic workflows to query site settings, content, and users through a standardized, permission-checked interface. The proposal explains why these belong in Core rather than being re-implemented by the ecosystem, outlines the security model (opt-in via show_in_abilities flag, full permission checks, sensitive field omission), and previews future manage-abilities and additional entity coverage for 7.2 and beyond.
Table of contents
Purpose and goalsAbility shapeProposed 7.1 scopeWhy this belongs in CoreSecurity and privacyGoals for 7.2 and beyondFeedback2K Impressions