Here’s the complete overview of all the tools a connected AI assistant (Claude/ChatGPT) can use via HTProtect.
Three ground rules first:
- Reading is always possible with the standard access.
- Writing only with write permission per website. Every write tool supports
dry_run (preview without changes), and "Delete" always moves items to the trash first.
- Level 2 (extensions) is a separate area that must be explicitly and temporarily enabled.
Everything runs through Joomla’s official web services API and respects the rights of the tightly limited service account – the assistant can never do more than this account is allowed.
Account & Fleet (Reading)
whoami - current access: account, whether read-only, applicable limits.list_sites - all websites in the account including AI activation status.fleet_overview - fleet overview: counters by status + sites needing attention.fleet_search_articles - searches a term in articles across all enabled sites.
Security (Reading)
security_status - HTProtect’s security view on a site: traffic light, reason, accessibility.list_updates - pending extension updates (including security/major flags).site_check - checks if a site’s API is reachable and access is valid.
Read content
- Articles:
list_articles (with search/category filter), get_article (single, including content).
- Categories:
list_categories, get_category.
- Tags:
list_tags, get_tag.
- Menus:
list_menus (menu types), list_menu_items, get_menu_item.
- Modules:
list_modules, get_module.
- Others:
list_media (media manager), list_languages (content languages), list_template_styles (template styles, front-end/backend).
Manage content (Writing - write permission needed)
- Articles:
create_article, update_article, delete_article.
- Categories:
create_category, update_category, delete_category.
- Tags:
create_tag, update_tag, delete_tag.
- Menu items:
create_menu_item, update_menu_item, delete_menu_item.
- Modules:
create_module, update_module, delete_module (e.g. mod_custom for custom HTML).
Create/update covers the usual fields (title, text/HTML, status, category or position, access level, language, alias). Delete = trash.
Extensions (Level 2 - must be enabled separately)
list_extensions - installed extensions (components/modules/plugins/templates).set_extension_state - activate/deactivate a plugin (dry_run possible).
Limits (deliberate)
- No access to users, global configuration, or installer; the service account is never a Super-User.
- The entire AI access can be blocked anytime with one click (immediate shutdown).
- Requirement: Joomla 4 or newer.
When logged in, there’s documentation here including example commands: https://htprotect.app/ai/tools
Is something missing, or would another tool be useful? Feel free to drop hints and requests here in the thread – it helps us expand the list meaningfully.