WordPress 7.0 introduces a client-side JavaScript counterpart to the server-side Abilities API first shipped in 6.9. The API is split into two packages: @wordpress/abilities (pure state management, usable outside WordPress) and @wordpress/core-abilities (WordPress integration layer that auto-fetches server-registered abilities via REST API). Developers can register ability categories and abilities with input/output schema validation, permission callbacks, and behavioral annotations (readonly, destructive, idempotent). Server-side abilities registered via PHP are automatically available on the client in admin pages, while plugins can also register purely client-side abilities without any server dependency. The feature is designed to enable integration with browser agents, extensions, and WebMCP.
Table of contents
Two packagesGetting startedRegistering abilitiesQuerying abilitiesExecuting abilitiesAnnotationsUnregisteringServer-side abilitiesSort: