Use AI Assistants with Redirection for Contact Form 7

Redirection for Contact Form 7 makes tools available to compatible AI assistants through the WordPress Abilities API, an interface that lets connected software discover and use specific site capabilities.

In this article

• Requirements and connection
• Available abilities
• Permissions
• Safely update an action
• Saved-entry privacy

Requirements and connection

To use these tools, you need:

• Redirection for Contact Form 7 installed and active.
• The WordPress Abilities API available on your site. WordPress core or a compatible adapter can provide it.
• An AI or MCP connector that supports the Abilities API and is connected to your WordPress site.
• A WordPress user with permission to edit the relevant Contact Form 7 form. To read saved entries, the user also needs permission to access them.

Connect your WordPress site in the connector so it can discover abilities exposed through the Abilities API. Then enable the Redirection for Contact Form 7 abilities you want to use. Some connectors leave newly discovered abilities disabled until you explicitly allow them.

Available abilities

Ability	What it does	Main inputs
cf7-actions/list-actions	Lists a form’s configured actions, their settings, and the action types currently available on the site.	form_id
cf7-actions/upsert-action	Creates or updates an action, including its title, status, settings, or position.	form_id; optionally action_id, type, title, status, config, position, and dry_run
cf7-actions/list-leads	Lists entries saved by the Save Entry action or retrieves one entry in full.	Optionally id, form_id, date_from, date_to, page, and per_page

Only action types installed and available on your site can be created or updated. Premium action types are available only when their add-ons are installed and their licenses are active.

Permissions

The action abilities use the same WordPress permissions as editing Contact Form 7 forms. For saved entries, WordPress checks the permission used to access CF7 Redirection > Entries. The connector can perform only the actions allowed for the WordPress user it connects as.

Safely update an action

1. Ask the assistant to call cf7-actions/list-actions with the form’s ID. This lets it inspect the form’s actions and the action types available on your site.
2. Ask it to call cf7-actions/upsert-action with dry_run set to true. A dry run checks the proposed change without saving it.
3. Review the proposed change and any validation errors returned by the ability.
4. If the change is correct, approve a second call with dry_run set to false to save it.

Updating an action changes its configuration; it does not submit the form or run the action.

Stored credentials are not returned by cf7-actions/list-actions; configured secrets appear as [redacted]. To keep an existing secret when updating an action, omit that field from the update. Do not send [redacted] as a new credential value.

Saved-entry privacy

cf7-actions/list-leads can return personal data collected through your forms. Give the ability only to trusted users and AI connections, request only the entries needed for the task, and handle returned data according to your site’s privacy policy and retention requirements.

Example prompts:

• “List the actions configured for form 123.”
• “Validate a redirect to /thank-you/ for form 123 without saving it.”
• “Summarize entries saved for form 123 during the last 30 days.”