| 开发者 | GeekStreetWP |
|---|---|
| 更新时间 | 2026年4月10日 22:48 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 6.9 |
| 版权: | GPLv2 |
| 版权网址: | 版权信息 |
query-all-the-post-types folder to /wp-content/plugins/It uses the WordPress core function get_post_types() to retrieve all registered post types at runtime. Nothing is hardcoded. Any post type registered by any plugin, theme, or WordPress core will appear automatically.
Go to Tools > Query Post Types in your WordPress admin dashboard.
In version 2.0, the plugin moved from its own top-level admin menu to the Tools menu. Look for Tools > Query Post Types.
These buttons only appear for post types that have show_ui set to true. Internal post types without an admin interface won't have these action buttons.
Look for the WooCommerce tab. All WooCommerce-related post types (products, orders, coupons, subscriptions, etc.) are grouped there for easy access. The tab only appears when WooCommerce is active.
Yes. The plugin is read-only and does not modify any data. It only displays information about registered post types.
Yes. Each site in a multisite network will display its own registered post types.
The Abilities API is a feature introduced in WordPress 6.9 that lets plugins register machine-readable declarations about what a site can do. QATP uses it to expose your post type architecture to AI tools, MCP clients, and authenticated admin dashboards without any additional configuration.
Yes. The Abilities API integration requires WordPress 6.9 or later. On earlier versions, everything else in QATP works normally. The Abilities API registration is silently skipped.
No. The endpoint requires administrator-level authentication (manage_options). Anyone who requests the URL without being logged in as an admin will receive a 401 error. This is by design. Post type data can reveal details about your site's plugin stack.
The API Explorer is a built-in interface added in version 2.2 that lets you browse, run, and copy commands for any WordPress Ability registered by QATP, directly from your WordPress admin. No code required. See the API Explorer section above for full details.
Yes. When you are in the Explorer with abilities selected, the URL updates to reflect your current state. Paste that URL in Slack or send it to a teammate and they will open the same view with the same selections already loaded.
WordPress uses nonces to verify that REST API requests made from a browser are intentional and authenticated. The nonce is tied to your current login session. The REST URL links in the Command Reference include a nonce automatically so they work when you click them in the browser. For curl and other external clients, use Application Passwords instead.
Generate an Application Password from your WordPress profile under Users > Your Profile > Application Passwords. Use the generated password in place of application_password. Your WordPress username is already pre-filled in the command.
When you are in the Explorer, the URL in your browser updates automatically using a hash fragment to encode your current mode and selected abilities. No data is sent to any server. The hash is parsed locally in your browser when the page loads, restoring your exact view. Anyone with admin access on the same WordPress site can open the URL and land in the same state.
/run endpoint, including slug, labels, boolean flags, REST base, supports, and taxonomies._wpnonce query parameter so the link works immediately when clicked.wp --user= with the current logged-in administrator's user ID. You do not need to know your user ID or modify the command before running it.-u "username:application_password"). Your WordPress username is pre-filled. An inline link below the curl block points directly to your profile's Application Passwords section and to the WordPress developer documentation.X-WP-Nonce header to Application Password (-u) format. The nonce approach requires a browser session cookie and fails when run from a standalone terminal. Application Passwords work from any HTTP client on any machine.history.replaceState. No new history entries are created on every card toggle.#mode=explorer&abilities=qatp/product,qatp/course. Copy the URL from your browser address bar to share your exact view.get_grouped_post_types().npm run lint now runs ESLint, Stylelint, PHPCS, and PHPStan in sequence. All four must pass with zero violations before any commit.--memory-limit=512M flag added to the PHPStan script to prevent out-of-memory failures on large codebases.