List configured site connections (names, API base URLs, default). Keys are never shown.

Discover the connected site, key scopes/expiry, resources, approved settings and limits. Call first.

Read the deployed AI Site Manager usage guide.

Read native schemas and endpoint arguments before working with a resource.

List/search posts, pages, media, terms, comments or discovered custom resources. Includes pagination headers. Also supports types, taxonomies and statuses.

Read one content, media, term or comment object. Use context=edit for raw fields.

Create a post/page draft, term, comment or another native resource. Posts/pages default to draft. Upload files with aism_media_upload.

Update only supplied fields. Supports posts/pages, media alt text/caption, taxonomy relationships and comment moderation.

Trash an object when supported. force=true permanently deletes it. Media and terms generally require force=true. Only delete objects authorized by the operator.

Read a post/page revision list or one revision. Revision mutation is unavailable.

Upload a local file using multipart. Does not download remote URLs. Host file-type/size rules and media:write apply.

List exact approved option names and schemas; does not return values.

Read one approved option value and its schema.

Replace the ENTIRE value of one approved option. Read it immediately before editing; preserve unrelated object fields. No compare-and-swap exists.

List installed plugins and their identifiers/status.

Install a WordPress.org plugin inactive. Requires plugins:write and native install capability. Installation adds executable code.

Install a new local plugin ZIP inactive without replacing existing plugins. Requires plugins:write plus native install/upload capabilities.

Update an installed plugin. Omit file_path to use the WordPress-advertised update, or supply a local ZIP with the same plugin folder/main file and a newer version (companion 1.2.0+). ZIP replacement preserves activation and requires plugins:write plus update/upload capabilities. AI Site Manager cannot update itself; multisite mutations are unavailable.

Activate/deactivate/update/delete an installed plugin. Deletion requires plugins:delete and an inactive plugin. Updates use the WordPress-advertised package. AI Site Manager cannot manage itself; multisite mutations are unavailable.

Review user accounts: login, email, roles, registration date, active login sessions (time, IP, browser), application password names and quarantine state. Never returns password hashes or tokens. Includes pagination headers. Requires users:read and list_users (companion 1.5.0+).

Read one user account for review (same fields as aism_users_list). Requires users:read.

Lock a suspicious account without deleting it: saves and removes all its roles, signs out every session, deletes its application passwords, sets a random password and blocks all logins and password resets until restored. Refuses the key owner and the last active administrator. Use only on accounts the operator asked to disable. Requires users:write plus promote_users/edit_user (companion 1.5.0+).

Lift a quarantine and restore the account's saved roles. The password stays random and deleted application passwords are not restored. Requires users:write.

List this site's database tables with engine, approximate rows, data/index size and whether they are core tables. Tables marked query_blocked hold credentials (users, user meta, API keys) and cannot be queried. Requires database:read and manage_options (companion 1.6.0+).

Describe one table: columns, types, indexes and exact row count. Requires database:read.

Run ONE read-only SQL query (SELECT, WITH, TABLE, SHOW, DESCRIBE or EXPLAIN) against the site database, for example to count or inspect plugin data. Runs in a read-only transaction with a time limit; comments, write/locking keywords, variables, backslashes and references to the users, usermeta and API key tables are rejected. Use the table prefix from aism_db_tables. Returns columns plus rows as arrays; long values are cut to max_value_bytes and obvious secrets are redacted. Add LIMIT/aggregates for large tables. The SQL is recorded in the site's activity log. Requires database:read and manage_options (companion 1.6.0+).

Site overview for troubleshooting: WordPress/PHP/database versions and limits, debug and cron constants, active theme, plugins and MU plugins with versions, drop-ins, object cache, cron summary and log files. site_health=true also runs the direct Site Health tests (slower). Requires diagnostics:read and manage_options (companion 1.6.0+).

List every scheduled WP-Cron event with next run time, how overdue it is, schedule, arguments and whether any code listens for it. Requires diagnostics:read.

Read the end of the WordPress debug log (source=debug, WP_DEBUG_LOG) or PHP error log (source=php), optionally only lines containing search. Only these configured files can be read. Requires diagnostics:read.

Routine maintenance. run_cron runs one already-scheduled event now inside this request (hook from aism_cron_list; pass key when the hook has several argument sets) — works on hosts without working WP-Cron; recurring events are rescheduled. flush_cache empties the object cache, flush_rewrite_rules regenerates permalinks (soft flush), delete_expired_transients removes expired transients. Requires maintenance:write and manage_options (companion 1.6.0+).

List installed themes with stylesheet identifiers, versions and active/inactive status. Requires themes:read and native theme access.

Install a WordPress.org theme inactive. Core may install a missing parent. Requires themes:write and install_themes. Installation adds executable code.

Install a new local theme ZIP inactive without replacing existing themes. Requires themes:write plus native install/upload capabilities.

Activate/update/delete an installed theme using its stylesheet identifier from aism_themes_list. Activate another theme to deactivate the current one. Deletion requires themes:delete and cannot remove the active theme or its parent. Updates use the WordPress-advertised package. Multisite mutations are unavailable.

Read a site's migration manifest: site UUID, URLs, versions, themes, plugins, content counts per post type/taxonomy, capabilities and what is not migrated. Requires migration:read (companion 1.4.0+).

Read one raw export page from a site (terms, posts of any type including attachments/menus/templates, comments or site settings) for inspection. aism_migration_run and aism_migration_copy do this automatically.

Compare two configured sites before migrating: versions, missing/outdated themes and plugins, post types and taxonomies the target cannot store yet, a previous migration, and recommended steps. Read-only.

Install a plugin or theme from the source on the target, inactive unless activate=true. from=source copies the exact installed files (custom and premium code included); from=wordpress.org installs by slug. Missing parent themes are transferred first. Installed plugins with an older version are updated from the source ZIP. Requires migration:read on the source and plugins:write/themes:write on the target. Adds executable code.

Migrate a whole site in resumable steps: terms, site settings (front page, permalinks, media sizes, widgets, customizer), media (original files), all content types including menus, templates, global styles and patterns, comments, then a finalize pass that remaps IDs and rewrites source URLs to the target. User accounts come first, with their roles, profile and password hashes so people keep their passwords (needs users:read on the source key and users:write on the target key, companion 1.7.0+; otherwise authors are only matched by login/email). Target accounts with the same login or email are mapped, never changed. Returns within max_seconds; call again with the returned cursor until done is true. Re-running updates already migrated objects instead of duplicating them, so it also works as an incremental sync (with modified_after). Overwrites target settings and previously migrated objects, including passwords of accounts an earlier run created (use phases or on_existing=skip to avoid that).

Copy selected posts/pages (any type) from one site to another with their categories/tags, featured images, embedded media and reusable blocks, then remap IDs and URLs. Copying again updates the earlier copies.

Compare source content counts with what has been migrated into the target, and report finalize state. Read-only.

Undo a migration on the target: permanently delete posts, media files, terms, comments and user accounts the migration created (their remaining content goes to the key owner), restore site settings it changed, and forget its ID map. Objects matched to pre-existing target content are kept. Requires migration:delete on the target.