WP Manifestindependent plugin directory
manifest / ai / ai-agent-monitor

AI Agent Monitor

AI observability for WordPress. See what AI agents do inside your site — in real time.

by Iqbal Hossain · github.com/wp-shark/ai-agent-monitor · website

★ 0stars

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/wp-shark/ai-agent-monitor/archive/refs/heads/main.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Readme github.com/wp-shark/ai-agent-monitor ↗

AI observability for WordPress. See what AI agents do inside your site — in real time.

Version 0.1.0 — Phase 1 (observability). See ROADMAP.md for the full task breakdown.

What works today

  • Attribution you can trust. Events are labelled agent only when WordPress can prove it: an Abilities API execution, or an explicit X-Agent-Name / X-MCP-Client header over REST or WP-CLI. Everything else reads Unknown / WordPress.
  • Abilities API collection. Every WP_Ability::execute() is recorded with input, result, duration, and outcome — including permission denials (blocked) and failures that never reached completion.
  • Core write collection. Posts, trash, permanent deletes, media uploads, terms, user creation, role changes, user deletion, watched options, plugin activation.
  • Risk classification. low / medium / high, with critical options (siteurl, home, active_plugins, default_role, …) always high.
  • Control room screen. Live feed with 24-hour counters, search and filters, and a detail pane showing before/after values.
  • REST API under ai-monitor/v1, manage_options required.

Requirements

WordPress 6.7+ (Abilities API collection needs WP 7.1 or the Abilities API plugin), PHP 8.0+.

REST endpoints

Route Purpose
GET /ai-monitor/v1/events Feed. Params: search, source, status, risk_level, action_name, session_id, since_id, per_page, offset
GET /ai-monitor/v1/events/<id> One event with full payloads
GET /ai-monitor/v1/stats 24-hour counters and top agents
GET /ai-monitor/v1/sessions/<id> Every event in one session, oldest first
DELETE /ai-monitor/v1/events Clear the log

Extension points

Hook Type Purpose
aiam_should_record filter Skip events by context
aiam_pre_record_event filter Alter or drop an event before storage (return non-array to drop)
aiam_risk_level filter Override risk classification
aiam_watched_options filter Choose which options are logged
aiam_view_capability filter Capability required to read monitoring data

Data safety

Payload keys matching pass, password, token, secret, api_key, nonce, auth, salt, or private_key are stored as [redacted]. Values are truncated at 500 characters, arrays at 30 entries and 4 levels deep. Events older than the retention window (30 days by default) are deleted daily.