Named tools, not a back door
Each tool does one job with its own checks. No tool runs arbitrary code or any route it likes, and every write is journaled so it can be undone.
The approach
Your AI prepares. You decide.
SAR gives ChatGPT and Claude named tools, never a back door. Work starts as a draft, you see a preview, and nothing reaches visitors until a person approves it.
From request to live, in five steps
The same path for a blog post, a price change or a new theme.
Draft
New posts, products and designs start as drafts. Nothing a visitor sees changes.
wordpress_create_draftwordpress_woo_create_productwordpress_create_draft_theme
Preview
A private preview link, a screenshot or a visual check shows how it will look.
wordpress_get_preview_linksar_visual_checksar_screenshot_page
Approval
Anything that would go live waits in SAR for a person. Site-wide changes also ask for a password.
sar_show_approvalsar_get_approval_status
Live
Only the change that was approved runs, exactly as it was shown.
wordpress_publish_postwordpress_woo_publish_productwordpress_publish_draft_theme
Undo
Every WordPress change is logged, and you can undo it for 30 days.
wordpress_list_changeswordpress_undo_change
What it looks like from the inside
A request to refresh an old post, as the AI app calls the tools.
wordpress_get_postread the post as it iswordpress_create_draftwrite the new version as a draftwordpress_get_preview_linka private link for one hoursar_visual_checkcheck the draft looks rightwordpress_publish_postwaits for your approval in SARwordpress_undo_changethere for 30 days if you change your mind
Tools, by what they are allowed to do
Every tool belongs to one class, and the class decides what a person has to do.
Read
Nothing changes.
wordpress_get_site_statuswordpress_list_postswordpress_woo_list_ordersgsc_get_search_analyticsga4_run_report
Draft
A draft, an image or a category. Visitors see nothing new, so no approval.
wordpress_create_draftwordpress_add_media_from_urlwordpress_create_term
Edit
Changes a draft at once; once the page is live, it waits for approval.
wordpress_update_postwordpress_update_builder_textswordpress_update_seo
Approve
Anything visitors see or buy: a person approves that exact change in SAR.
wordpress_publish_postwordpress_woo_bulk_update_productswordpress_woo_set_order_status
Confirm
Anything that could take the whole site down: approved in SAR with your password.
wordpress_update_pluginwordpress_switch_themewordpress_search_replace
Three things that do not change
The rules every tool, site and plan follows.
A person decides what goes live
Drafts and previews are free; publishing, prices, orders and site-wide changes wait for someone in your organization to say yes.
Your data stays yours
SAR reads only the sources and properties you chose, masks customer details on your site, does not record your questions or the answers, and trains no model.
Questions about the approach
Where do I approve a change?
In SAR. The AI app shows a link or a small panel with the change; you open it, see what will happen and approve or decline. Site-wide changes ask for your password there too.
Can I let some changes through without approval?
Drafts, images, categories and edits to a draft need no approval once changes are allowed for the site. Anything that would go live always waits for a person.
What cannot be undone?
Plugin, theme and WordPress updates, deleted spam and emails already sent. SAR says so before you approve them, and asks for a backup first where it matters.
Does SAR write the answers?
No. ChatGPT or Claude writes them from what the tools return. They can be wrong, so check important figures before you act on them.
See it on your own site
Start with read-only access, ask a few questions, and allow changes when you are ready.