System abilities: site info, session, and licensing

System abilities are the foundation of every Maxi AI session. They handle session bootstrapping, site information, licensing, playbook management, ability rules, and — on the Pro plan — direct file system access and email delivery. Most system abilities are available on the Lite plan; file access, email sending, and data masking require Pro.

All system abilities

Ability	Description	Capability	Plan
`maxi/bootstrap-session`	Session bootstrap — call this before any other ability. Returns the operational playbook, active operator-notes, knowledge-note headers, and available reference docs.	`is_user_logged_in`	Lite
`maxi/get-site-info`	Site name, URL, language, timezone, WordPress version, Maxi AI version, and full license status including entitlements.	`read`	Lite
`maxi/activate-license`	Activate a Maxi AI license key on this site (Lite or Pro).	`manage_options`	Lite
`maxi/deactivate-license`	Deactivate the current license. Only session bootstrap and licensing abilities remain callable until you activate again.	`manage_options`	Lite
`maxi/get-current-user`	Current authenticated WordPress user details and roles.	`read`	Lite
`maxi/get-post-types`	List all registered post types with their supported features and associated taxonomies.	`read`	Lite
`maxi/get-taxonomies`	List all registered taxonomies with their associated post types.	`read`	Lite
`maxi/get-ability-rule`	Fetch the site rule for a Maxi AI ability and mark it acknowledged for the current MCP session.	`edit_posts`	Lite
`maxi/rules-sync`	Install or refresh baseline ability rules shipped with the plugin. Call when an ability returns `rules_not_installed`.	`edit_posts`	Lite
`maxi/get-playbook`	Fetch an on-demand reference playbook by slug. Required playbooks must be fetched via `maxi/bootstrap-session`.	`edit_posts`	Lite
`maxi/manage-ability-rules`	Read-only inspector for site-level ability rules. Actions: `list` (filter by source) and `get` (by ability ID). Operator-only — not exposed in MCP.	`manage_options`	Lite
`maxi/manage-playbooks`	Operator CRUD for site-level playbooks. Actions: `list`, `get`, `upsert`, `delete`. Required playbooks cannot be deleted. Operator-only — not exposed in MCP.	`manage_options`	Lite
`maxi/list-files`	[PRO] List files and subdirectories inside `wp-content/`. Returns names, sizes, modification dates. Supports glob patterns and sorting by name or date.	`manage_options`	Pro
`maxi/read-file`	[PRO] Read any file inside `wp-content/`, including PHP source. Sensitive configuration files and executable/data-dump extensions are blocked. Max 500 KB.	`manage_options`	Pro
`maxi/send-email`	[PRO] Send an email via `wp_mail()`. Disabled by default — must be enabled via the `maxi_ai_email_security` option or `MAXI_AI_EMAIL_SECURITY` constant. Every send is audit-logged.	`is_user_logged_in`	Pro
`maxi/manage-mask-fields`	[PRO] Add, remove, or list field names in the GDPR data masking list. Matching response keys are partially redacted before reaching the agent.	`manage_options`	Pro

Key ability examples

maxi/bootstrap-session

You must call maxi/bootstrap-session before any other ability in every session. This requirement is server-enforced — all other abilities are blocked until bootstrap completes successfully.

{
  "success": true,
  "data": {
    "agent_identity": "agent-1@example.com",
    "playbook": {
      "slug": "operational",
      "version": 1,
      "content": "..."
    },
    "operator_notes": [
      {
        "id": 1,
        "title": "Site priorities",
        "content": "...",
        "topic": "general",
        "priority": "normal",
        "created_at": "2025-05-01 10:00:00",
        "updated_at": "2025-05-01 10:00:00"
      }
    ],
    "operator_notes_revision": 3,
    "knowledge_notes": [
      {
        "id": 2,
        "title": "How to handle returns",
        "topic": "woocommerce",
        "priority": "normal"
      }
    ],
    "knowledge_notes_revision": 5,
    "available_docs": [
      { "slug": "architecture", "title": "Architecture Reference" }
    ],
    "bootstrap_ack": "a1b2c3d4..."
  }
}

Bootstrap returns four things your agent should read before starting any task:

Operational playbook — behavioral rules and workflows for this site.
Active operator-notes — live operator instructions. Read and follow them.
Knowledge-note headers — titles and topics of approved agent knowledge. Scan these against your current task and fetch any that match with maxi/get-note.
Available reference docs — on-demand playbooks you can fetch with maxi/get-playbook.

Bootstrap also returns data.operator_notes_revision and data.knowledge_notes_revision. Record these values. If a later ability response returns a higher revision number in its _meta envelope, refresh those note lists before your next tool call.

maxi/get-site-info

Check your site’s name, URL, WordPress version, Maxi AI version, and full license status in a single call. Example response:

{
  "success": true,
  "data": {
    "name": "My WordPress Site",
    "description": "Just another WordPress site",
    "url": "https://example.com",
    "admin_url": "https://example.com/wp-admin/",
    "language": "en_US",
    "timezone": "Europe/Zagreb",
    "wp_version": "6.8",
    "multisite": false,
    "maxi_ai_version": "3.6.0",
    "maxi_ai_license": {
      "tier": "pro",
      "status": "active",
      "entitlements": ["ai_generation", "woocommerce_orders", "analytics"]
    }
  }
}

Use maxi_ai_license.entitlements to check which feature groups are available before calling a gated ability.

maxi/activate-license

Activate a Maxi AI license key on this site. Pass the key exactly as provided when you purchased.

{ "license_key": "YOUR-LICENSE-KEY" }

After activation, abilities for your plan’s feature groups become available immediately. You can also activate through Settings → Maxi AI → License in the WordPress admin.

maxi/deactivate-license

Deactivate the current license. After deactivating, only maxi/bootstrap-session and maxi/activate-license remain callable — all other abilities are gated until you activate a key again.

{
  "success": true,
  "data": {
    "status": "deactivated",
    "message": "License deactivated. Site is now on the free tier."
  }
}

Deactivating your license gates all non-bootstrap abilities on this site immediately. Make sure you have your license key available before deactivating so you can re-activate when needed.

maxi/list-files

Pro plan required. List files and subdirectories inside your site’s wp-content/ directory. Supports glob patterns to filter by file name.

{
  "path": "uploads/2025",
  "pattern": "*.jpg"
}

path is relative to wp-content/. Omit it to list the root of wp-content/. Use pattern to filter by name or extension.

maxi/read-file

Pro plan required. Read the contents of any file inside wp-content/. Useful for debugging plugin output, reading log files, or inspecting configuration files.

{
  "path": "uploads/2025/report.csv",
  "tail_lines": 100
}

Use tail_lines to read only the last N lines of large log files rather than fetching the whole file.

Sensitive configuration files and executable/data-dump extensions are blocked. These blocks are enforced in PHP and cannot be bypassed.

maxi/send-email

Pro plan required. Send an email through your site’s wp_mail() function. This ability is disabled by default and must be explicitly enabled before use.

{
  "to": "customer@example.com",
  "subject": "Order Confirmed",
  "body": "Your order has been processed.",
  "format": "html"
}

To enable this ability, set the maxi_ai_email_security WordPress option to admin (agents with administrator capability only) or open (any authenticated agent). You can also define the MAXI_AI_EMAIL_SECURITY constant in wp-config.php. Every send is recorded in the audit log.

Licensing

Maxi AI Core requires an active Lite or Pro license. There is no free tier. Only maxi/bootstrap-session and maxi/activate-license work without a license — enough to authenticate and activate a key.

Grace period

When a license expires, all previously available abilities continue to work for 7 days with a warning appended to each successful response. Renew before the grace window closes to avoid interruption.

Gated ability errors

When you call an ability your plan doesn’t include, the response contains a reason field:

plan_insufficient — your license is valid but your plan doesn’t include the required feature group. Upgrade at maxicore.ai. The new plan takes effect within 12 hours, or immediately via Settings → Maxi AI → License.
license_required — no active license found. Purchase at maxicore.ai, then activate with maxi/activate-license or through the WordPress admin.

Offline resilience

If the Maxi AI license server is unreachable, your cached license status is extended by 24 hours. You won’t be locked out due to a transient network issue.

Overview

Content & Media

AI Generation

WooCommerce

System & Dev

System abilities: site info, session, and licensing

All system abilities

Key ability examples

maxi/bootstrap-session

maxi/get-site-info

maxi/activate-license

maxi/deactivate-license

maxi/list-files

maxi/read-file

maxi/send-email

Licensing

​All system abilities

​Key ability examples

​maxi/bootstrap-session

​maxi/get-site-info

​maxi/activate-license

​maxi/deactivate-license

​maxi/list-files

​maxi/read-file

​maxi/send-email

​Licensing

All system abilities

Key ability examples

maxi/bootstrap-session

maxi/get-site-info

maxi/activate-license

maxi/deactivate-license

maxi/list-files

maxi/read-file

maxi/send-email

Licensing