What it does
Disable REST API. It is one of the abilities the XO Security plugin exposes, so an AI agent connected to your site can run it for you.
Input schema
| Field | Type | Required | Description |
|---|---|---|---|
| input | string | Required | What you want this ability to do, in plain language. |
Output schema
| Field | Type | Description |
|---|---|---|
| result | string | The result produced by the ability. |
Permissions
The agent's WordPress user needs these capabilities. Grant only what's listed here, never a full admin account.
🔒 edit_posts
How an agent calls it
Agents call this ability by name and pass the inputs it needs. A call looks roughly like this:
{
"ability": "xo-security.disable-rest-api",
"args": { "input": ... }
}The agent runs the ability, then hands the result back for you to review before anything is published.