Use a separate WordPress account
Do not reuse a human administrator account. A dedicated profile makes the assistant’s access easier to understand and remove.
A safer starting point
Do not give an AI assistant your everyday administrator account.
Agent Control helps you create a separate WordPress identity for the work. That reduces unnecessary exposure, but it does not replace good backups, careful instructions, review, or tested security controls.
Keep credentials out of this website
This site never asks for an Application Password, token, cookie, or secret. Connection details are handled separately.
Choose the most limited access that fits
Start from the job instead of granting broad authority by default. Exact permission results will be published after package-level testing.
Review what happened
Do not assume that every action or field is recorded. Logging and diagnostic coverage still require release-specific proof.
Keep a real recovery path
A snapshot can cover only the state it was designed to capture. External backups remain essential for many failures.
End access when the work is done
Plan the end of access before connecting. Exact states after revocation or license expiry still require factual testing.