Skip to content
WP Visibility

Review and control

Stop the Assistant Now

One button pauses every assistant tool call. Guard mode decides whether writes wait for you at all, the hourly write limit bounds how many get through, and revoking the password ends the connection.

Updated September 21, 2026

Docs

Click Pause agent on the Review queue status bar, or turn on Pause all agent access in the settings. From that moment every assistant tool call is refused with agent_paused, reads included, until you resume. If you want the connection gone rather than paused, revoke the assistant’s Application Password as well.

The four controls

Pause. The kill switch. It stops ability execution for every connected client at once. Resume from the same settings toggle, or with:

wp visibility agent resume

Pausing does not revoke anything. A connected administrator credential can reach the plugin’s separate resume route, so for an assistant you no longer trust, revoke its password too.

Guard mode. In the Autopilot section, Assistant changes has two values. Hold for my review, the default, queues the supported write abilities as proposals: post SEO fields, bulk SEO updates, settings, creating and deleting redirects, llms.txt and the AI crawler policy. Apply immediately lets those same abilities write without the queue. Check which one is selected before you connect a client or start a batch.

The write limit. Assistant write limit (per hour) caps write ability requests per WordPress user and client label. The counter expires after an hour without an accepted write, rather than resetting on the hour. Requests over the limit get a 429 and nothing is written. Zero turns the limit off. It bounds request volume; it does not limit direct WordPress routes.

The approval ability. The ability that lets an assistant approve proposals ships disabled. Leave it that way unless you have a specific reason: an assistant that can approve its own proposals has no reviewer.

What pausing covers

The pause applies to the ability surface: everything an assistant reaches through the plugin’s MCP endpoint and the WordPress Abilities API. It does not turn an administrator’s Application Password into a restricted credential; core WordPress routes stay open to whatever that user may do. The user’s role is the outer boundary, and the pause is the inner one.

A sensible order when something goes wrong

  1. Pause. Nothing more can run.
  2. Read the activity log to see what happened and when.
  3. Revert the applied proposals you do not want.
  4. Revoke the password if the client should not come back, then resume for the others.