Category
AI
What AI agents actually do when you point them at a real WordPress site with ten years of plugins on it. Measured runs, named sources, and the failure modes nobody screenshots.
- 01 The WordPress REST API as an agent surface: what you can and cannot automate Route by route from core source: which capability each endpoint needs, why core has no plugin update route, and the constant that turns soft deletes hard.
- 02 The Abilities API in WordPress core: what it is and what ships with it Core registers exactly three abilities, all read-only. On 6.9 only two are reachable over REST, and the announcement post's endpoint path returns 404.
- 03 Theme.json: the parts that actually control your output A theme.json with no version key is discarded whole. That, the four-layer merge order and three selector shapes explain most files that will not apply.
- 04 Product Feeds in 2026: Google Merchant Center, and What AI Surfaces Read Content API for Shopping was sunset on 18 August 2026 and started returning 410 on 1 September. Here is the current spec, dated, and what is…
- 05 Building a Gutenberg block in 2026: the current, correct way What create-block generates now, why register_block_type left the bootstrap, and the 7.1 change that makes apiVersion 3 mean something else.
- 06 WooCommerce Performance: The Queries That Actually Cost You Admin product search runs five leading-wildcard LIKEs with no LIMIT. That is why a big catalogue slows wp-admin long before it slows the shop.
- 07 The WooCommerce REST API for Automation: What Is Safe to Script Setting 500 orders to completed sends 500 emails. Real endpoints, real limits, and the four writes that have no undo.
- 08 WooCommerce and AI Shopping Agents: What the Store Actually Exposes One unauthenticated curl returned 1,717 products from WooCommerce's own store. Here is every surface an agent can read, and which agentic claims are built.
- 09 block.json and the asset loading nobody configures WordPress ships a 140,761 byte block stylesheet and, since 6.9, stops sending it by default. Measured both ways, plus why viewScript is not script.
- 10 The Scanner Said Clean. The Site Was Serving Spam to Googlebot. A client site was cloaking spam to search engines while every commercial security plugin reported no threats. Why signature scanners miss this, and the agent I…
Agents in Production