Which changes ask you to confirm
You say what you want once, and Opal handles the rest. A few kinds of change still stop for a confirmation. This page lists them, and who gives it.
Who confirms
In the wp-admin chat, you do. The confirmation shows on your screen, and you give it with a click or a reply.
With a connected AI agent (Claude, ChatGPT, Grok or another), the agent gives the confirmation itself as it works, except for publishing, setup and the sensitive actions below. You see what it did through your MemberPress.ai account afterwards: in Settings, open the AI assistants tab, find the agent under Connected AI assistants, and click its Activity. A business profile change can usually be undone there; a draft it added can be deleted in your editor.
To hold an agent’s content for you, click Change access on the same row and choose Ask me first. Posts and pages it writes then wait for you in Proposals, and courses and lessons are refused. That setting covers content only, not site setup or business profile changes.
How a change is guarded depends on what it touches
On your site’s own connection — memberships, rules, members, and the rest of the tools there — every change runs as a dry run first. It shows exactly what would change — which membership, which rule, which price — and nothing is saved until that change is carried out.
Generated content always lands as an unpublished draft first, whether it’s written from the app or by a connected AI agent, without a dry run first. Deleting it removes it. One exception: for a pricing page it also fills your MemberPress pricing page’s title and subheadline if they are empty, and deleting the draft doesn’t undo that.
Publishing a draft is a separate, explicit act rather than a preview, and it is yours. A connected AI agent can only add drafts. From the app, one confirmation states plainly that the page will become publicly visible before you agree; a Proposal you accept can publish too.
Setup is the one exception, and it works two ways.
Setting up a site you already have happens in a conversation. Setup first adds the membership levels and MemberPress’s own Join, Checkout, Account and Login pages as drafts, where you can check them. The starting point’s own content pages aren’t created. One setup confirmation, your Looks right, make it live button in the chat, makes those drafts live. A connected AI agent building your site is told to send that confirmation after it asks you.
On a site MemberPress.ai builds for you, one approval, given up front, publishes starter pages that are ready, so you won’t see them before they go live. Pages with unfinished copy stay drafts, and pages handed back to you are skipped. If you decline, pages are saved as drafts and nothing is published.
A second confirmation for sensitive actions
Some actions carry more weight, so they ask twice. Anything that can’t be undone requires a second, human confirmation on top of the dry run: refunds, subscription changes, deleting a member or a webhook, resetting a student’s course progress, removing a sub-account, updating a post or a membership group, and publishing a post, page or group straight to your live site. None of these actions completes on the first call.
Reading is safe
Exploring your site never changes it. MemberPress.ai can read your memberships, members, transactions, and reports freely — you cannot break a site by letting it explore. Only a change that is carried out touches your site.
Your password stays on your site
Your WordPress password never leaves your site. The plugin sends its connection token, limited to its allowed operations, to MemberPress.ai, along with an Unsplash access key if you add one in the optional Unsplash setting. MemberPress.ai stores both encrypted, and you can revoke the connection. If you authorize automatic plugin installation, the service temporarily receives a separate installer credential. Authorization happens on your own WordPress login and is revocable there.
To connect an agent, see Using your own AI client. For the bigger picture, see What is MemberPress.ai?.
FAQ
Can MemberPress.ai change my site without asking?
After setup, generated content lands as a draft, which visitors don't see. A pricing-page draft can also fill empty live MemberPress pricing-page titles and subheadlines; deleting the draft doesn't undo that. Publishing content is yours: the app's publish confirmation, or a Proposal you accept. Anything that can't be undone, such as refunds, subscription changes or deleting a member, takes a second, human confirmation. Other changes take a confirmation: yours in the chat, or your connected AI agent's when it acts for you. Setup on a site MemberPress.ai builds for you works differently: one approval up front publishes starter pages that are ready, so you won't see them before they go live. Pages with unfinished copy stay drafts, and pages handed back to you are skipped. If you decline, nothing is published.
Can I break my site by letting it explore?
No. Reading and exploring your site never changes anything. Only a change that is carried out touches your site, and generated content lands as an unpublished draft.