Disallowed WP-CLI commands

Though the CLI commands listed below are disallowed, some of the processes they perform can be achieved by writing a custom WP-CLI command. For example, though several db WP-CLI commands are disallowed, a custom WP-CLI command could run a function that leverages $wpdb->query().

• admin: *
• cache: flush-group
• cli: alias, cache, check-update, cmd-dump, completions, has-command, info, param-dump, update
• comment: generate
• config: *
• core: check-update, download, install, is-installed, multisite-convert, multisite-install, update, update-db, verify-checksums
• cron-control: *
• db: check, clean, cli, create, drop, export, import, optimize, repair, reset, search, tables
  • wp db query is allowed, but defaults to read-only. For write operations, wp db query must be passed with --read-write. Queries that include DROP, TRUNCATE or CREATE cannot be executed.
• dist-archive: *
• eval: *
• eval-file: *
• find: *
• i18n: *
• import: *
• jetpack:
  • authorize-user: *
  • block: *
  • call_api: *
  • options: delete, update
  • partner-provision: *
  • partner-cancel: *
  • protect: *
  • reset: options
  • scaffold: *
  • upload-ssh-creds: *
• language:
  • core: install, uninstall, update
  • plugin: install, uninstall, update
  • theme: install, uninstall, update

Disallowed VIP MU plugin and WP-CLI commands

Some built-in and VIP MU plugin WP-CLI commands (and/or subcommands) are blocked from use on the VIP Platform to ensure the safety of a site.

• media: import, regenerate
• package: *
• plugin: delete, install, update
• post: edit, generate
• profile: *
• scaffold: *
• server: *
• shell: *
• site: empty
• term: generate
• theme: delete, install, update
• user: generate, import-csv
• vaultpress: *
• vipsupport: *
• vip:
  • cache: purge
  • cmd-scheduler: *
  • files: *
  • fixers: *
  • migration: *
  • plugin: *
  • two-factor: *
  • utf8mb4: *

Disallowed global parameters

• --exec
• --http
• --path
• --require
• --ssh