Let an AI app work on your live store, with a way back.
Can AI break your WordPress site? It can make a mistake, like anyone who edits a site. So changes are recorded and can be rolled back, risky ones are tested and reverted, a crashed site still has a way in, and you decide what each AI app may touch. Below: the seven layers, and the few things that can’t be rolled back.
Example change log on a demo store
What stands between an AI app and your store.
No single guard is perfect, so PowerWP stacks them.
You decide what each app may touch
Each AI app gets its own connection, with only the permissions you give it.
Details
Pick one of four levels (Read-only diagnostics, Content manager, Developer or Full access) or choose from 9 separate permissions; compare the levels. A connection can expire by itself (90 days by default) and be locked to your IP addresses, and requests must use HTTPS. By default each key is limited to 240 requests a minute, and 10 failed attempts lock an IP address out for 15 minutes. Keys are shown once and stored only as hashes. Passwords and API keys stay masked unless a connection has the Secrets permission. Your plan sets how many connections a site can have.
You see it before it’s saved
Your AI app can show what a change would do before it makes it, and recipes show you the exact new texts and wait for your yes.
Details
Content, option, file and database tools can run as a dry run, and search and replace and database clean-ups start as one by default. Put a rule like “Ask before changing prices” in the site memory, and every AI app you connect is told to ask first. Using a dry run is your AI app’s choice, so ask for one when a change matters.
Changes are recorded, so you can roll them back
Before something changes, PowerWP saves how it was. Roll back one change, a WooCommerce batch, everything after a checkpoint or a whole work session.
Details
This covers pages, products, orders, settings, files, plugins, themes and database rows. A WooCommerce batch of up to 100 items rolls back in one step. If the same thing was edited again since, the rollback stops and tells you instead of overwriting that work. A rollback is recorded too, so it can be rolled back. Snapshots are kept for 30 days by default, and you can keep them for up to 365 days in Settings. If a snapshot can’t be stored, the change isn’t made: a very large file is left alone, and a very large table changes only when your AI app confirms there will be no snapshot.
Risky changes are tested, and reverted if they break the site
After a plugin, theme or code change, PowerWP reloads your site and reverts the change if it shows an error.
Details
The check runs after a plugin or theme is installed, updated or switched on or off, after a code file is written, or after a key setting changes. PowerWP loads your home page and the admin again; if one of them now shows a fatal error or a server error, the change is reverted on the spot. Your AI app is told, for example: “The change broke the site (home: PHP Fatal error …), so it was AUTOMATICALLY REVERTED. Site after revert: healthy.” This works when the site was healthy before and the server can load its own pages. It sees fatal errors and server errors, not a broken layout or a checkout that stopped working, so check the pages that matter after an update. PHP files are syntax-checked before they are written, and PHP can’t be written into the uploads folder.
Rescue mode when WordPress crashes
If a plugin or theme crashes WordPress, your AI app can still get in, find the cause and fix it with your OK.
Details
When a plugin or theme takes the site down with a fatal error, requests from your AI app switch to a safe mode for 30 minutes. It loads PowerWP without your other plugins and theme, so your app can read the error, switch off the cause or roll it back, and check that the site works again. Visitors still see the error until it is fixed. Rescue mode works for apps that connect with a key and for apps that signed in, such as Claude and ChatGPT, and the dashboard shows Standby when it is ready.
Backups on your own computer
Backups go to your computer, not just your server.
Details
Full, database-only or files-only backups are built on the server and downloaded to your computer with checksums. The server copy is removed once the checksums match, or after 48 hours. To restore, pick the files you downloaded. A backup includes wp-config.php, so keep it as carefully as a password.
A full activity log
Every request is logged: which app, which tool, what it touched and whether it worked.
Details
Passwords and keys are hidden in the log, and no AI tool can delete log entries.
One switch stops every AI app
Turn all AI access off at once, or let apps look but not change with read-only mode. No AI app can change PowerWP’s own settings or connections, or switch the plugin off.
Details
The AI access switch is in the header of every PowerWP AI screen and refuses every AI app at once. Read-only mode limits every connection to reading, whatever permissions it has. Only an administrator in wp-admin can change PowerWP’s own settings or connections. Locked out of wp-admin? One line in wp-config.php turns AI access off.
Example settings
What can’t be rolled back.
Changes are recorded, so you can roll them back. A few actions can’t be rolled back by their nature, and PowerWP marks them Irreversible in the log so you always know which is which.
Cleared caches, restored backups, and anything that already left your site, like an e-mail.
Details
The full list: clearing caches, creating or restoring a backup, running abilities that other plugins provide, running cron jobs, scheduled actions and WooCommerce tools, sending a password-reset e-mail, switching maintenance mode, database clean-ups and statements that couldn’t be snapshotted, and REST calls PowerWP can’t snapshot, such as WooCommerce batches of more than 100 items. Anything that already left your site, like an e-mail or a call to a payment provider, can’t be called back either. Rolling back a plugin update restores its files, not the database changes the new version already made, so back up before updates. The complete list
A database change that can’t be snapshotted only runs when your AI app confirms it on purpose. Make a backup first.
PowerWP would rather say no than change something it can’t restore. If a snapshot can’t be stored, the change isn’t made.
Try big jobs, like a theme switch, on a copy first. A paid plan also covers one copy on your own computer (localhost or a .test address).
Details
You can mark each site as production, staging or development, and AI apps are told to take extra care on production.
Six habits of careful owners.
The habits PowerWP is built around.
Start every new connection read-only
See what the AI finds before you let it change anything.
One connection per person and app
The log then shows exactly who did what.
Ask for a checkpoint before bulk work
One step rolls back everything recorded after it.
Ask for a plan first, then say go
Read what the AI proposes before it saves anything.
Write your rules down once
Put “Ask before changing prices” in the site memory. Every AI app you connect is told to follow it.
Keep a fresh backup on your computer
Download one before any big job.
Who sees what.
Three parties are involved: your site, your AI app and us. Here is exactly what each one sees.
Keeps everything
Snapshots, the change log and the activity log stay on your server. Backups go to your computer.
Sees what it reads
Whatever the AI reads from your site goes to your AI provider under their terms. Order checks keep customer names, addresses and e-mail masked by default, and passwords and keys stay hidden unless you allow them. Prefer it all stays local? Run a model on your computer with LM Studio.
Sees no content
Our update check sends technical details, like your site address and software versions. Never content, customers, orders or AI activity.
Updates install only if they carry our signature. Exactly what we receive
Start read‑only. Upgrade when you trust it.
The Free plan gives one AI app read-only access to one site, with no end date. When you want it to make changes, upgrade in My account. Every permission can be widened or narrowed at any time.
Comparing tools? Ask these ten questions of any plugin, ours included.