AI agents that operate websites: what they can do, where they fail, and how to prepare your hosting for them.
An AI agent doesn't just answer questions or draft text. It acts: publishing content, changing settings, updating plugins and tidying data on a real website, often faster than a human could review each step. Since WordPress 7.0 shipped the Abilities API and MCP Adapter, agents have an official, permission-controlled way into the platform that runs over 40% of the web.
These articles cover what agents can actually do today, the incidents where autonomous changes went badly wrong, and the practical safety net that makes experimenting with them cheap: restore points, staging, activity logs and least-privilege access. We test the AI features on our own hosting platform before we write about them, so the advice comes from hands-on runs rather than press releases.
WordPress is turning from software humans drive into software AI agents can inspect and operate. Giving an agent access without backups, permissions, logs and easy rollback is like giving a very enthusiastic apprentice the server password and going to lunch. Here is what changed in WordPress 7.0, what goes wrong, and what AI-ready WordPress hosting actually needs to include.
