Content
Pages, posts and the text on them. Whole-page edits always go through a draft copy, and a single element can be addressed by its own id without touching anything else.
Abilities
Everything your agent can be allowed to do
Each of these is a switch, per site, and every one of them ships off. A fresh install can read nothing and write nothing until you decide otherwise.
64
abilities, in 10 groups, every one off by default
Categories, tags and structure
How content is filed and found. Reading, filing under an existing term, and inventing a new term are three separate switches.
Appearance and page builders
Global styling, page-builder templates, and CSS your agent may write. Elementor kit changes apply site-wide and wait for your approval in the app; scoped CSS is loaded for visitors only, never in wp-admin.
Media
Images, video and files in the media library, including alt text and WebP conversion on upload.
WooCommerce shop
Products, variations, coupons and orders. Every price change is backed up first, a bulk edit is a preview until you say otherwise, and a whole bulk run can be undone in one call.
Theme and plugin files
The widest thing on the page. PHP is refused if it will not parse, and every byte is backed up before it is replaced.
Diagnostics and repair
Answers "what is wrong with this site?". All read-only except clearing caches and rebuilding permalinks, which WordPress regenerates by itself, so nothing in this group can lose any content.
Plugins and themes
Installing, updating, switching on and off. Every write here also waits for your approval in the app, so a switch being on is permission to ask rather than permission to act.
Speed and issues
The issue finder and the optimiser: scan, read findings, apply a fix, verify it held. Images, assets and caching.
Not available to any agent
Three abilities exist in the plugin that the desktop app has no tool for and will not get one: arbitrary PHP, unsanitised CSS, and raw custom fields. Switching them on changes nothing for your agent. They are listed because a permissions screen that hides rows is a permissions screen you cannot trust.
A switch being on is permission to ask, not permission to act. Anything that applies site-wide, such as an Elementor kit change, installing a plugin or switching a theme, still waits for you to approve it in the desktop app.