AI agents that connect to WordPress act as a user and inherit every capability that user has. Agent Warden gives each agent its own identity and token, with a policy that says exactly what it may do. It also:

records every action in plain language;
holds risky actions for your approval;
lets you undo what an agent changed.

Agent Warden is not an agent. It makes no AI calls, and the free plugin makes no external requests.

Where to start#

Install the plugin and run the setup wizard.
Create an agent from a template.
Connect your client: Claude Desktop, Claude Code, ChatGPT, Cursor, any MCP client, the REST API, or WP-CLI.
Watch Agent Warden → Activity, decide approvals, and undo anything you don't want.

Plans#

Plan	For
Free	Two agents, policies, approvals in wp-admin, a 7-day log, and undo for posts
Pro	Unlimited agents, notifications, dry-run, resource scopes, full undo, policy packs, and exports
Agency	The Agent Warden hub for many client sites
Enterprise	Tamper-evident log, SIEM push, lockdown, retention and legal hold, and signed compliance reports (details)

Building a plugin with abilities? See Make your plugin Agent Warden-aware.