spec/examples/wordpress-default.json at main · agent-policy-protocol/spec · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
{
  "$schema": "https://agentpolicy.org/schema/v1/agent-policy.schema.json",
  "version": "1.0",
  "defaultPolicy": {
    "allow": true,
    "actions": ["read", "index", "summarize"],
    "disallow": ["extract", "form_submit", "automated_purchase", "tool_invoke"],
    "rateLimit": {
      "requests": 120,
      "window": "hour"
    },
    "requireVerification": false
  },
  "pathPolicies": [
    {
      "path": "/wp-content/uploads/**",
      "allow": true,
      "actions": ["read", "index"],
      "requireVerification": false
    },
    {
      "path": "/wp-admin/**",
      "allow": false
    },
    {
      "path": "/wp-login.php",
      "allow": false
    },
    {
      "path": "/wp-json/wp/v2/**",
      "allow": true,
      "actions": ["api_call", "read"],
      "requireVerification": false,
      "rateLimit": {
        "requests": 300,
        "window": "hour"
      }
    },
    {
      "path": "/wp-json/wc/v3/**",
      "allow": true,
      "actions": ["api_call"],
      "requireVerification": true,
      "rateLimit": {
        "requests": 100,
        "window": "hour"
      }
    },
    {
      "path": "/xmlrpc.php",
      "allow": false
    },
    {
      "path": "/feed/*",
      "allow": true,
      "actions": ["read", "index"],
      "requireVerification": false
    }
  ],
  "contact": {
    "email": "[email protected]"
  },
  "metadata": {
    "description": "Sensible WordPress defaults: allow reading and indexing public content, block admin/login paths, allow REST API with rate limits, block XML-RPC. Drop-in template for WordPress sites.",
    "owner": "WordPress Site Owner",
    "lastModified": "2026-02-14T00:00:00Z",
    "license": "Apache-2.0"
  }
}