--- title: Agent Pilot (Skills & MCP) for WordPress date: 2026-08-10T13:25:13+00:00 modified: 2026-09-10T14:41:25+00:00 image:: https://wpelevator.com/wp-content/uploads/sites/12/2026/08/agent-pilot-skill-editor-wordpress-plugin.png permalink: https://wpelevator.com/plugins/agent-pilot post_type: page author: name: Kaspars avatar: https://secure.gravatar.com/avatar/92bfcd3a8c3a21a033a6484d32c25a40b113ec6891f674336081513d5c98ef76?s=96&d=robohash&r=g --- # Agent Pilot (Skills & MCP) for WordPress Manage and publish AI agent skills using the [Agent Skills Discovery via Well-Known URIs RFC version v0.2.0 draft](https://github.com/cloudflare/agent-skills-discovery-rfc) and [Agent Plugin](https://agent-plugins.org/) standard packaging. Provides an MCP server (Model Context Protocol) from registered [WordPress Abilities](https://developer.wordpress.org/apis/abilities-api/) and integrates with [OAuth Pilot](https://wpelevator.com/plugins/oauth-pilot) for seamless user authentication and usage with the majority of AI clients. ## Screenshots ![Agent skill list via .well-known/agent-skills/index.json with Agent Pilot for WordPress](https://wpelevator.com/wp-content/uploads/sites/12/2026/08/agent-skills-well-known-wordpress-index-json.png?strip=all&quality=90&resize=1024,768) ![Agent skill editor using WordPress blocks and Agent Pilot plugin](https://wpelevator.com/wp-content/uploads/sites/12/2026/08/agent-pilot-skill-editor-wordpress-plugin.png?strip=all&quality=90&resize=1024,768) ![Agent skills stored as custom posts in WordPress](https://wpelevator.com/wp-content/uploads/sites/12/2026/08/agent-pilot-wordpress-skill-list.png?strip=all&quality=90&resize=1024,768) ![Install agent skills from a WordPress site running the Agent Pilot plugin](https://wpelevator.com/wp-content/uploads/sites/12/2026/08/agent-pilot-skills-npx-wordpress.png?strip=all&quality=90&resize=1024,873) ## Setup ### Use an Agent Skill Install [an agent skill](https://wpelevator.com/agent-skill/setup-agent-pilot/skill.md) (delivered by Agent Pilot of course) using the [skills CLI package](https://github.com/vercel-labs/skills) that will guide you through the setup: ``` npx skills add https://wpelevator.com ``` or [download the skill](https://wpelevator.com/agent-skill/setup-agent-pilot/skill.zip) and extract it to the `skills` directory of your preferred AI harness. Alternatively, you can download and install the plugin as usual: ### Download Plugin Use the link below to download the latest version of the plugin and [install it manually](https://wordpress.org/documentation/article/manage-plugins/#manual-plugin-installation-1) under “Plugins” → “Add New” using the “Upload Plugin” button: [Download Plugin (zip)](https://updates.wpelevator.com/wp-json/update-pilot/v1/download/wpelevator/agent-pilot) After activation, the plugin will prompt you to install and activate the [Update Pilot plugin](https://wpelevator.com/plugins/update-pilot) to enable automatic updates. This ensures that the Agent Pilot plugin is kept up-to-date even when it is disabled or used on a WordPress multisite. ## Changelog ### 0.10.0 (2026-09-10) - Moved admin settings, skill and agent plugin management under one top-level menu. Previously it was one top-level menu for each post type and the plugin settings menu under the default Settings. - MCP tool names now use dashes instead of dots so that they are accepted by all clients. ### 0.9.0 (2026-09-07) - Added read-only abilities for listing and fetching agent skills and agent plugins which are automatically exposed by the MCP integration as tools and resources (for skill and agent files). ### 0.8.0 (2026-09-05) - Added `agent-pilot/rest-call` ability (which maps to an MCP tool) for dispatching any REST endpoint as the authenticated user with `_fields` filtering on REST responses to save on token use. - Introduced MCP Tools setting for disabling specific abilities being exposed as MCP tools. - Agent plugin packages are now valid even if they include skill blocks without a selected agent skill reference. ### 0.7.0 (2026-09-05) - Fix: browser based MCP clients received a plain 403 instead of the OAuth challenge, leaving them no way to discover where to sign in. - Fix: the initial MCP connection asked for read-only access, which made the first tool that writes anything fail. Clients now get a single consent screen covering both the read and write tools. ### 0.6.0 (2026-09-04) - Fix: authenticate every MCP request before it is dispatched, and tell the client when a tool requires broader access than it was granted. ### 0.5.0 (2026-09-04) - Feature: added an MCP server which publishes the site’s [WordPress Abilities](https://developer.wordpress.org/apis/abilities-api/) as MCP tools. Enable it from the plugin settings screen. - Feature: MCP clients are authenticated with [OAuth Pilot](https://wpelevator.com/plugins/oauth-pilot) when it is active, so that a client can connect knowing only the site URL. Signed-in users and Application Passwords are used otherwise. - Feature: read-only abilities are told apart from the ones that make changes, so that a client can be connected with read access only. - Feature: the current and the older MCP protocol revisions are all answered from the same endpoint. - Abilities marked as public are exposed automatically, the same way the official WordPress MCP Adapter resolves them. ### 0.4.0 (2026-08-21) - Add support for [Agent Plugins standard](https://agent-plugins.org/) for bundling the skills and MCP configs. ### 0.3.0 (2026-08-11) - Fix: ensure the skill blocks work well with block themes with dark background. - Feature: added CORS and other headers for improved skill discovery. - Feature: introduce a YAML builder for consistent output. ### 0.2.0 (2026-08-10) - Fix: move the skill files to the .zip archive root (instead of a sub-directory). ### 0.1.1 (2026-08-10) - Fix: make the `skill.md` and `skill.zip` URLs of published skills reachable without signing in. ### 0.1.0 (2026-08-10) - Initial prototype.