Abilities API: Plugin Settings: General

[n7studios]

Summary

Registers get and update abilities (MCP tools) for the Plugin's General Settings (Settings > Kit > General), so an MCP client can fetch and update settings.

Secret credentials, such as API Keys and OAuth Tokens, cannot be read or updated.

Ability	Description	Required input	Output
kit/settings-general-get	Returns the current values of the Kit General settings group. Secret values (API keys, OAuth tokens, reCAPTCHA secret) are never returned.	none	{ non_inline_form, non_inline_form_honor_none_setting, non_inline_form_limit_per_session, recaptcha_site_key, recaptcha_minimum_score, debug, no_scripts, no_css, no_add_new_button, usage_tracking }
kit/settings-general-update	Updates one or more values in the Kit General settings group. Only keys declared in the input schema can be updated; secret values cannot be set via this ability. Unknown keys are rejected.	partial object of any subset of: non_inline_form, non_inline_form_honor_none_setting, non_inline_form_limit_per_session, recaptcha_site_key, recaptcha_minimum_score, debug, no_scripts, no_css, no_add_new_button, usage_tracking	same shape as kit/settings-general-get (post-save state)

Testing

• MCPSettingsGeneralTest: Tests that MCP tools are registered, permissions are honored and get/update tools work for the Plugin's general settings.

Checklist

• I have written a test and included it in this PR
• I have run all tests and they pass
• The code passes when running the PHP CodeSniffer
• Code meets WordPress Coding Standards for PHP, HTML, CSS and JS
• Security and Sanitization requirements have been followed
• I have assigned a reviewer or two to review this PR (if you're not sure who to assign, we can do this step for you)

[github-actions]

WordPress Playground

🚀 Your PR has been built and is ready for testing in WordPress Playground!

Click here to test your changes in WordPress Playground

[n7studios]

@ciccio-kit I accidentally closed the last PR for this, so to answer your questions:

I might be misreading the flow here, but aren't these settings abilities now getting registered through two paths? This filter seems to call register_abilities() on the base section (keyed kit/general-), and ConvertKit_MCP::register_settings_abilities() also adds them (keyed kit/settings-general-). Since both instances return the same get_name(), I think wp_register_ability() could end up being called twice with the same name, but I'm not 100% sure how the dedup works. Could you double-check whether that is the case?

Correct and resolved.

is float a valid type or should this be number instead?

Changed to number which is valid.