REST API and MCP access control: disable REST API routes for guests, limit AI agents and application passwords, see which plugin opened each door.
Alternatives to BotCreds Agent Access
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
Relevant replacements
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
Modern role editor, multiple roles, content control and smart role rules for WordPress.
Store-aware rules for AI agents: hold refunds over an amount, catch large price changes, and stop money before it moves.
BotCreds Agent Memoryv3.0.4
Portable memory store for AI agents. REST API + MCP endpoint. KV mode by default, semantic vector search when OpenAI key is configured.
Audit whether a WordPress site is discoverable, understandable, and safely operable by AI agents, with evidence for every finding.
Mandate App Securityv0.5.1
WordPress Application Passwords carry the full access of their user. Mandate App Security adds per-credential policies to limit what each one may do.
Most lightweight plugin to control which WordPress Abilities AI assistants can access, connect MCP clients, and review a log of ability calls.
Corsen Contextv1.5.18
Owner-controlled AI access to your public content: llms.txt, a read-only MCP endpoint, and opt-in WebMCP tools for agents in the browser.
agentprosev0.1.3
Let AI agents in the browser read, search and cite your posts through WebMCP. Read-only, runs in the visitor's browser, no account needed.
BotCreds Agent Artifactsv1.3.6
Deploy self-contained HTML/CSS/JS apps to WordPress via REST API. One call from any AI agent or CI pipeline — plugin handles the rest.