Forms
Which forms the site holds, what each one asks, its embed shortcode, and its most recent entries. Nothing here writes. That is a design decision, not a gap.
Anyone who wants an agent to summarise what people are submitting, without giving it the ability to change the form.
Each of these is carried by named operations that exist in the release you can download today. The ids under every answer are the calls involved — nothing here is a plan.
Fields, types and the embed shortcode, from Gravity Forms, WPForms, Contact Form 7, Fluent Forms or Formidable.
SiteHelm
form-list needs edit_posts form-get needs edit_posts Entries are listed under manage_options rather than edit_posts, because they carry whatever a visitor typed into them.
form-entries-list needs manage_options Read only: which forms the site holds, each form’s fields and embed shortcode, and its most recent entries.
Needs: Gravity Forms, WPForms, Contact Form 7, Fluent Forms, or Formidable Forms. Where it is absent the operation refuses by name, rather than failing obscurely.
3 operations that only report. A read still asks WordPress for a capability against the object.
0 that change something — each one previewed as a diff, snapshotted, verified by reading the site back, and reversible from wp-admin.
Free, permanently. Nothing in this area moves into a paid tier later.
Forms are read, never written. A plugin that stores no entries says so plainly, rather than returning an empty list that reads like a quiet week.
Forms are read, never written. An agent can tell you what a form asks and what people answered; it cannot change the form or the entries.
form-entries-list asks for manage_options where the other two ask for edit_posts, because entries carry whatever a visitor typed into them.
A plugin that stores no entries says so plainly, rather than returning an empty list that reads like a quiet week.
Get the free plugin How a write is guarded
The roster, and a single write: replacing a user’s roles with one role the site has actually registered. Role changes ask for promote_users and are declared high risk, because this is the operation that can change who else may act.
2 opsEvery area of the catalogue, by what it lets you do.
indexEvery operation on the site in one list, with capability, risk and rollback.
reference