0.4.0

Breaking: every core ability name is now prefixed with og- (e.g. plugins/list-plugins → og-plugins/list-plugins), and the Core categories are namespaced og-core-*. This frees the unprefixed names for official WordPress and third-party abilities. Pre-1.0, so there is no alias shim — consumers that stored ability names, including the MCP exposure allow-list, must re-select abilities under their new names.

New: multisite support. A policy decorator injects an optional blog_id into site-scoped abilities on multisite so a network admin can target a specific site, a new og-users/list-my-sites ability discovers the sites a user can act on, and non-site abilities declare their scope so the decorator leaves them alone. The catalog is now 231 abilities.

Changed:

• The MCP knowledge tool now reads file-based OKF bundles (markdown with YAML frontmatter) under includes/knowledge/ instead of bundled PHP recipe classes. The add-on filter is now abilities_catalog_mcp_knowledge, carrying scanned KnowledgeBundle objects.
• Better blind search in the MCP search server — tokens are stemmed and weighted by IDF, content abilities carry search keywords, and search is oriented with category examples plus a no-match map. Unknown-ability errors name the domain's owned prefixes to steer recovery.
• The Settings → MCP Server exposure page groups abilities by category with an improved UX, and the observability handler is now filterable.

Fixes: og-content/get-post exposes featured_media; search-server list results are wrapped consistently.

Shipped knowledge concepts are English-only (the files are not translated).

v0.3.1

Exposes the Network, Cron, and Widgets abilities through the curated MCP domain tools. These 28 abilities shipped in 0.3.0 but were reachable through no domain tool until now. No change to the catalog, and no change to behavior when the MCP server is off.

New

• The optional MCP server now exposes the Network abilities as their own multisite-only domain tool, and folds the Cron abilities into Tools and the Widgets abilities into Appearance — 28 abilities (Network 15, Widgets 8, Cron 5) that were registered but previously owned by no domain tool. The tools and appearance tool descriptions were refreshed and a network description added.

Full changelog: v0.3.0...v0.3.1

v0.3.0

Expands the catalog to 230 abilities across 21 wp-admin domains and adds a scalable, search-based MCP server. The catalog stays consumer-agnostic and works standalone; the optional MCP server remains off by default.

New

• Scalable, search-based MCP server (overview / search / describe / execute) for navigating large catalogs. The bundled adapter default server now publishes the curated ability subset instead of being suppressed.
• Six task-recipe skills spanning the domain tools, plus discovery guidance that points agents at list / describe (and at the exact schema on invalid input) instead of guessing ability names or inputs.
• Register an add-on domain tool through the abilities_catalog_mcp_domains filter, so add-ons extend the MCP server without editing this plugin.

Catalog

• Expanded to 230 abilities across 21 domains (160 → 230). Adds the Cron, Network, and Widgets domains; adds meta read/write, transient and object-cache, cron scheduling, multisite network read/write, roles & capabilities lookups, template parts, rewrite rules, sitemaps, taxonomy, theme mods, and user sessions.

Changed

• License switched from GPL-2.0-or-later to MIT.

Fixes

• Gate multisite network transient/cache operations on manage_network_options.
• Avoid a Plugin Check plugin_updater_detected false positive.

Docs

• Guide for building catalog add-ons, and how to connect an MCP client.

Full changelog: v0.2.0...v0.3.0

v0.2.0

Highlights

• Optional built-in MCP server (off by default). Exposes the catalog as curated domain tools (list / describe / execute) plus a cross-cutting skills tool, built on wordpress/mcp-adapter.
• Per-ability exposure gate + settings page. A deny-by-default gate managed at Settings → MCP Server (with its exposure REST API). A disabled ability can be listed and described but not executed; the capability check stays the hard guard on every call.
• Extensibility filters for the domain map, skills, tools, and tool permissions — extend the server without editing the plugin.
• Catalog expanded to 160 abilities across 18 wp-admin domains (adds the Search domain and broader coverage across Content, Terms, Menus, Templates, Settings, Users, and Fonts).
• Correctness sweep across abilities: multi-value post meta stored as separate rows, reads no longer mutate state, REST responses no longer leak core download headers, hardened input schemas, and raw serialized block markup returned from navigation reads.
• Internal: renamed the hook/identifier prefix to abilities_catalog_ and removed consumer-specific wording — the catalog is fully consumer-agnostic.

Install

Download abilities-catalog.zip (attached below once the build finishes) and install via Plugins → Add New → Upload Plugin. The zip bundles the MCP server's dependencies, so the server works out of the box once enabled.

Requires WordPress 7.0+ and PHP 8.1+.

Upgrade notes

No action required for existing consumers; the catalog behaves the same when the MCP server is off.

Full changelog: v0.1.0...v0.2.0

v0.1.0

Initial release.

Registers 135 abilities across 17 wp-admin domains (read, write, destructive, and dangerous tiers) on top of the WordPress 7.0 Abilities API. Includes a server-side safety pipeline for the dangerous tier.

The installable plugin zip (abilities-catalog.zip) is attached below once the release workflow finishes building it.