Every tool on your site that AI agents can use is listed on the agent’s Permissions section — AI Agent OS PRO’s own WordPress and site-building tools, WooCommerce’s, and those of other plugins. For each tool you choose whether this agent may not use it, may use it to look, or may use it to change things. A tool you did not grant simply does not exist for the agent.
AI Agent OS → Agents → Configure → Permissions
None, Read and Write
| Level | What it means |
|---|---|
| None | Not allowed. The tool is not even shown to the AI app. |
| Read | May use tools that only look things up. |
| Write | May use tools that change things. Destructive tools also need the agent’s destructive switch (below). |
A read-only tool offers only None and Read. On a tool that changes data, a Read grant is not enough — the call is refused.
The Tools in AI Agent OS PRO
| Group | What agents can do |
|---|---|
| Posts, Pages & Terms | List, read, create, update and duplicate posts and pages; create categories and tags and assign them. |
| Comments | List comments, reply, edit and moderate. |
| Media | List the media library and upload an image from a URL. |
| Navigation Menus | List, read and create menus and add or edit menu items. |
| Custom Post Types | List post types and their taxonomies; read, create and update items and assign their terms. |
| Users | List site users by display name, with ID, email and roles (read only). |
| Site Tools | Site statistics, post and term meta, active plugins, search and replace, and clearing the cache. |
| Site Building | Site title and tagline, homepage, logo and site icon, menu locations, block-theme navigation in the header, templates, and colours and fonts. |
How to Change an Agent’s Permissions
- Open the agent from AI Agent OS → Agents and stay on the Permissions section.
- Find the tool — tools are grouped by plugin. Use Search abilities to find one by name.
- Click None, Read or Write on each row you want to change. Each group also has Grant all, All read and Revoke buttons.
- Click Save permissions. A message confirms how many tools the agent may now use.
The change is live at once. The AI app sees the new list of tools the next time it connects (usually a new chat).
Revoke all (top right of the table) takes every permission away while keeping the agent active and connected — useful when you want to rebuild its permissions from zero.
The Risk Column
Every tool is rated READ, WRITE or DESTRUCTIVE automatically. Most plugins do not say how risky their tools are, so AI Agent OS PRO works it out from the tool’s name and description, and when in doubt it chooses the higher risk. An asterisk (for example WRITE*) means the rating was worked out this way — hover it for the explanation.
Add a Profile’s Permissions
To give an existing agent everything a ready-made profile has, pick the profile in Add a profile’s permissions… at the top of its Permissions section and click Apply. The profile’s permissions are added; nothing the agent already has is taken away, and who it acts for does not change.
Destructive Tools
Tools that delete, cancel or refund cannot easily be undone, so an agent needs two things to use one:
- The agent’s switch — the agent’s Connection section → Access → Allow destructive abilities. It is off for every agent by default.
- A Write grant on that tool in the Permissions table.
While the agent’s switch is off, destructive rows show a lock and the agent cannot run any of them, even ones it is granted. Deleting a post or page only moves it to the trash.
Who May Grant What
You can only give an agent what you could do yourself. An administrator can grant anything. Someone else with AI Agent OS access — for example a Shop Manager — can only grant tools whose WordPress capabilities they hold. Tools marked Capabilities lent automatically need an administrator. Taking a permission away is always allowed.
If you try to grant something you are not allowed to, it is skipped. The tool count after saving shows what was really stored.