AcrossAI Abilities Manager

AcrossAI Abilities Manager gives site administrators full visibility and control over every ability registered via the WordPress Abilities API (wp_get_ability()).

Features:

• Browse all abilities — a searchable, sortable, paginated table listing every registered ability with slug, provider, source, and current status.
• Toggle allow/disallow — enable or disable any ability site-wide with a single click. Changes are saved instantly without a page reload.
• Edit ability metadata — override readonly, destructive, idempotent, show_in_rest, show_in_mcp, mcp_type, and mcp_servers fields per ability using a tri-state system (Yes / No / Inherit from registry).
• Reset overrides — restore any ability back to its registry defaults with one click.
• Bulk actions — allow, disallow, or reset up to 50 abilities at once.
• Ability Library — enable or disable add-on ability groups from a dedicated Library page, with All/Specific mode controls per group.
• Add-ons page — browse, install, and manage free and premium add-ons directly from the WordPress admin. Powered by wpb-addons-page.
• MCP server list — view all registered MCP servers when the MCP Adapter plugin is active.

All overrides are stored in a dedicated database table. The WordPress ability registry is never modified — only the fields that differ from registry defaults are persisted.

Security:

• All endpoints require manage_options capability.
• All state-changing requests are protected by WordPress nonce verification.
• All input is sanitized; all output is escaped.

Third-party integrations (optional):

• MCP Adapter plugin — if active, the plugin displays a list of registered MCP servers inside the ability edit panel. No data is sent to any external service. The MCP Adapter plugin communicates only with your own WordPress installation.
• Freemius — the Add-ons page uses Freemius to handle paid add-on purchases, license management, and automatic updates. Data is only sent after explicit user action (see “External Services” below).

No data is sent to any external server automatically by this plugin.

External Services

Freemius (https://freemius.com)

The Add-ons page is powered by wpb-addons-page, which integrates with Freemius to handle paid add-on purchases, license management, and automatic updates for premium add-ons.

When a user chooses to connect their account or purchase a paid add-on, the following data is sent to Freemius servers:

• WordPress admin email address
• Site URL
• WordPress and PHP version

This only happens after explicit user action (clicking Login / Connect or Buy on the Add-ons page). No data is sent automatically on plugin activation or on any other page.

Freemius Terms of Service: https://freemius.com/terms/
Freemius Privacy Policy: https://freemius.com/privacy/

Free add-ons listed on the Add-ons page are hosted on WordPress.org and installed via the standard WordPress plugin installer. No external service is involved for free add-ons.

Privacy Policy

This plugin does not collect or store any user data by itself.

If a user chooses to connect their account via the Add-ons page, data is handled by Freemius in accordance with their privacy policy:
https://freemius.com/privacy/

No data is sent to any external server without explicit user action.