WP Manifestindependent plugin directory
manifest / ai / wp-agents

WP Agents WP Registry grade B. Medium-severity findings · 1 findingWP RegistryMedium-severity findings · 1 findingOpen the reportB

Build autonomous, hook-driven agents for WordPress — automate tasks and add LLM intelligence with clean, developer-first architecture.

★ 3stars
v0.4.0latest · 12mo ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/santerref/wp-agents/archive/refs/heads/main.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

WP Agents – AI Agent Framework for WordPress

Build autonomous, hook-driven agents for WordPress — automate tasks and add LLM intelligence with clean, developer-first architecture.

📣 The project is open to contributions. Developers are invited to test, improve, and expand the framework as it evolves.

Key Features

  • Providers: Define and manage LLM providers (e.g., OpenAI, Anthropic) through a unified API for completions and structured outputs.
  • Tools: Register callable functions that agents can dynamically execute during reasoning or task completion.
  • REST API: Provides endpoints that allow external applications to interact with agents and send or receive chat messages programmatically.
  • Memory: Supports persistent conversation history, enabling agents to retain context across sessions and handle long-running or multi-turn interactions.
  • Agents: Create modular agents that interact with WordPress using a consistent architecture.
  • Tests: Basic Pest testing structure in place — full coverage and assertions to be implemented.

Quick Start

cd wp-content/plugins

# Clone the plugin into your plugins folder
git clone git@github.com:santerref/wp-agents.git wp-agents

# Install PHP packages
cd wp-agents && composer install

# Install the plugin with WP-CLI or via the administration
wp plugin activate wp-agents

REST API

Each agent can be accessed programmatically through the WordPress REST API.

This allows external systems or front-end applications to send a message to any registered agent and receive the model’s response in JSON format.

Endpoint

POST /wp-json/wp-agents/v1/chat

Example

curl --location 'https://example.com/wp-json/wp-agents/v1/chat' \
--header 'Content-Type: application/json' \
--data '{
    "agent": "taxonomy_agent",
    "message": "Hello"
}'

Example response

{
    "agent": "taxonomy_agent",
    "message": "Hello",
    "response": {
        "role": "assistant",
        "content": "Hello! How can I assist you today?"
    }
}

Demo

We now provide an admin UI that lists all registered agents. From there, you can activate the built-in Post Taxonomy Agent to see a working example in action.

Screenshot 2025-11-07 at 8 34 29 PM

Roadmap

  • Workflows: Introduce workflows to connect and orchestrate multiple agents for complex, multi-step tasks.
  • Tests: Expand and complete Pest test coverage for agents, tools, and provider logic.
  • Providers: Add more LLM providers and improve compatibility with third-party APIs.
  • RAG: Integrate Retrieval-Augmented Generation to allow agents to query custom datasets, documents, or WordPress content for more context-aware responses.

Releases

4 releases.

Tag
Published
v0.4.0 latest
Nov 8, 2025 12mo ago
Oct 28, 2025 1 year ago
Oct 24, 2025 1 year ago
Oct 22, 2025 1 year ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

B grade

Security

WP Agents 0.3.1 · audited by WP Registry

Medium-severity findings.

1 medium
Audited release
0.3.1
Findings
1
Worst severity
medium
Content hash
3d54cc17039319a4a2c6bfbd…

Findings

  • medium Public GET /agents enumerates agent definitions

    information_disclosure

    GET /wp-agents/v1/agents uses __return_true and returns to_array() for all registered agents, aiding reconnaissance of available agents/tools before abuse of chat/activate.

    lib/system/class-rest.php:16-24

    Recommendation

    Require the same capability as the admin UI before listing agents.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.