If you’ve opened Rank Math’s Help & Support panel recently and noticed that the Support Agent is unavailable, here’s what happened and what we’re doing about it.
What the Support Agent Was Doing
With version 1.0.277, we introduced the Support Agent inside the Rank Math SEO plugin. This was our first step toward a broader vision for Agentic SEO, giving AI the ability to take meaningful actions on your site, within the permissions you allow it. The Support Agent was just the starting point, with more capabilities planned over time.
To answer support questions directly from within the plugin, and to lay the groundwork for future agent capabilities, the Support Agent needed a way to access your site’s settings.
When a user opened the Help & Support panel, the plugin created a WordPress Application Password (a standard WordPress feature for granting revocable, per-application access) and used it to let the agent read information and assist with support requests.
What Changed With Version 1.0.278
We’ve released version 1.0.278, which removes the Support Agent. If you’re running 1.0.278 or later, the agent is no longer present in the plugin, and no new credentials are being created.
The concern we heard from some users was that the plugin was not explaining clearly enough that credentials were generated for the AI agents.
To be perfectly clear:
- The credentials were encrypted.
- The credentials were not stored or persisted on our side and were only active while an agent session was running.
- The agent did not have unrestricted access to your site: it embodies the current user’s role and does not elevate beyond it.
- The support agent was a read-only agent and could not make any changes to your WordPress website.
When an AI agent is being given permission to create an application password, you should be told clearly and directly what is happening and what you’re allowing.
That feedback is fair, and we take responsibility for making this clearer. That’s why we’ve temporarily paused the Support Agent while we rebuild the access-request flow.
What’s Coming Next
Our Support Agent will be back once the experience is improved.
When it returns, the agent will clearly and explicitly ask for the required access before any credentials are created or access is granted. The request will be presented in plain language.
The underlying protections are already in place. What will be improved is making sure you’re clearly told what’s happening and asked to confirm it, every time.
If you have any questions or feedback about the Support Agent, please reach out to our support team. We’re happy to help.