Named tools, not a back door
Each tool does one job with its own checks. No tool runs arbitrary code or any route it likes, and every write is journaled so it can be undone.
The approach
Mitos gives ChatGPT and Claude named tools, never a back door. Work starts as a draft, you see a preview, and nothing reaches visitors until a person approves it.
The same path for a blog post, a price change or a new theme.
New posts, products and designs start as drafts. Nothing a visitor sees changes.
wordpress_create_draftwordpress_woo_create_productwordpress_create_draft_themeA private preview link, a screenshot or a visual check shows how it will look.
wordpress_get_preview_linksar_visual_checksar_screenshot_pageAnything that would go live waits for a person to approve it, in the chat where your AI assistant supports it, otherwise in Mitos. Site-wide changes also need an extra check that it's really you, with a 6-digit code.
sar_show_approvalsar_get_approval_statusOnly the change that was approved runs, exactly as it was shown.
wordpress_publish_postwordpress_woo_publish_productwordpress_publish_draft_themeEvery WordPress change is logged, and you can undo it for 30 days.
wordpress_list_changeswordpress_undo_changeA request to refresh an old post, as the AI assistant calls the tools.
wordpress_get_postread the post as it iswordpress_create_draftwrite the new version as a draftwordpress_get_preview_linka private link for one hoursar_visual_checkcheck the draft looks rightwordpress_publish_postwaits for your approval, in the chat where your AI assistant supports it, otherwise in Mitoswordpress_undo_changethere for 30 days if you change your mindEvery tool belongs to one class, and the class decides what a person has to do.
Nothing changes.
wordpress_get_site_statuswordpress_list_postswordpress_woo_list_ordersgsc_get_search_analyticsga4_run_reportA draft, an image or a category. Visitors see nothing new, so no approval.
wordpress_create_draftwordpress_add_media_from_urlwordpress_create_termChanges a draft at once; once the page is live, it waits for approval.
wordpress_update_postwordpress_update_builder_textswordpress_update_seoAnything visitors see or buy: a person approves that exact change in the chat where your AI assistant supports it, otherwise in Mitos.
wordpress_publish_postwordpress_woo_bulk_update_productswordpress_woo_set_order_statusAnything that could take the whole site down: approved with a 6-digit code as an extra check that it's really you.
wordpress_update_pluginwordpress_switch_themewordpress_search_replaceThe rules every tool, site and plan follows.
Each tool does one job with its own checks. No tool runs arbitrary code or any route it likes, and every write is journaled so it can be undone.
Drafts and previews are free; publishing, prices, orders and site-wide changes wait for someone in your organization to say yes.
Mitos reads only the sources and properties you chose, masks customer details on your site, does not record your questions or the answers, and trains no model.
In the chat where your AI assistant supports it, otherwise in Mitos. The Mitos approval panel opens right in ChatGPT (in Claude it is coming soon; until then Claude gives you a link), and Claude Code and Cursor ask with their own Allow prompt. If your organization turns approval in the chat off, your AI assistant gives you a link to Mitos instead. Either way you see what will happen and approve or decline. Site-wide changes need an extra check that it's really you: in the chat you type a 6-digit code from your authenticator app or sent to your email; in the Mitos dashboard you confirm with your Mitos account password, never your website's. That way a person, not the AI, confirms every risky change.
Drafts, images, categories and edits to a draft need no approval once changes are allowed for the site. Anything that would go live always waits for a person.
Plugin, theme and WordPress updates, deleted spam and emails already sent. Mitos says so before you approve them, and asks for a backup first where it matters.
No. ChatGPT or Claude writes them from what the tools return. They can be wrong, so check important figures before you act on them.
Start with read-only access, ask a few questions, and allow changes when you are ready.