# Copyright (C) 2026 3task
# This file is distributed under the GPL-2.0+.
msgid ""
msgstr ""
"Project-Id-Version: 3task Doorman 1.0.0\n"
"Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/3task-doorman\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
"POT-Creation-Date: 2026-10-19T13:27:22+00:00\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"X-Generator: WP-CLI 2.12.0\n"
"X-Domain: 3task-doorman\n"

#. Plugin Name of the plugin
#: 3task-doorman.php
#: admin/class-admin.php:42
#: admin/class-admin.php:131
#: admin/class-admin.php:136
msgid "3task Doorman"
msgstr ""

#. Plugin URI of the plugin
#: 3task-doorman.php
msgid "https://www.3task.de/3task-doorman/"
msgstr ""

#. Description of the plugin
#: 3task-doorman.php
msgid "Control who may use your REST API: guests, roles, application passwords and AI access (MCP, Abilities). Shows every open door with the plugin that opened it, learns what visitors need, imports Disable REST API settings. No external services."
msgstr ""

#. Author of the plugin
#: 3task-doorman.php
msgid "3task"
msgstr ""

#. Author URI of the plugin
#: 3task-doorman.php
msgid "https://www.3task.de"
msgstr ""

#: admin/class-admin.php:43
msgid "Doorman"
msgstr ""

#: admin/class-admin.php:73
msgid "Settings"
msgstr ""

#: admin/class-admin.php:95
msgid "User list for guests"
msgstr ""

#: admin/class-admin.php:95
msgid "/wp/v2/users lists the login names of all authors. Attackers use them to guess passwords. The block editor keeps working, it is used by logged-in users only."
msgstr ""

#: admin/class-admin.php:96
msgid "Route directory for guests"
msgstr ""

#: admin/class-admin.php:96
msgid "/wp-json/ and the root of every namespace list all routes, and with them most of your plugins."
msgstr ""

#: admin/class-admin.php:97
msgid "Batch endpoint for guests"
msgstr ""

#: admin/class-admin.php:97
msgid "/batch/v1 runs several requests in one. In July 2026 it was the entry point of the core vulnerability wp2shell. Guests do not need it. Updates protect you, this switch is a second lock."
msgstr ""

#: admin/class-admin.php:98
msgid "Hide AI access from guests"
msgstr ""

#: admin/class-admin.php:98
msgid "MCP servers and the Abilities API let AI agents work on your site. Guests never need them, logged-in agents keep their access."
msgstr ""

#: admin/class-admin.php:99
msgid "Switch off all AI access"
msgstr ""

#: admin/class-admin.php:99
msgid "Blocks MCP and Abilities for every machine access (application passwords and other logins). You in the browser keep access."
msgstr ""

#: admin/class-admin.php:100
msgid "Application passwords: read only"
msgstr ""

#: admin/class-admin.php:100
msgid "Requests with an application password may read but not write, delete or publish. This also stops MCP tools, because they always send POST."
msgstr ""

#: admin/class-admin.php:101
msgid "Switch off application passwords"
msgstr ""

#: admin/class-admin.php:101
msgid "Nobody can log in with an application password any more. Apps, backups or AI agents that use one stop working."
msgstr ""

#: admin/class-admin.php:102
msgid "Switch off XML-RPC"
msgstr ""

#: admin/class-admin.php:102
msgid "xmlrpc.php is an old interface, still used by some mobile apps and by Jetpack. Without them you do not need it."
msgstr ""

#: admin/class-admin.php:103
msgid "Remove REST hints from the page head"
msgstr ""

#: admin/class-admin.php:103
msgid "Removes the link to /wp-json/ from the HTML head and the Link header. The REST API itself stays available."
msgstr ""

#: admin/class-admin.php:119
msgid "Overview"
msgstr ""

#: admin/class-admin.php:120
msgid "Namespaces"
msgstr ""

#: admin/class-admin.php:121
msgid "Rules"
msgstr ""

#: admin/class-admin.php:122
#: admin/class-admin.php:467
msgid "Learning mode"
msgstr ""

#: admin/class-admin.php:123
msgid "AI access"
msgstr ""

#: admin/class-admin.php:137
msgid "Who may use your REST API, and which doors are open."
msgstr ""

#: admin/class-admin.php:141
msgid "Learning mode off"
msgstr ""

#: admin/class-admin.php:141
msgid "Learning mode on"
msgstr ""

#: admin/class-admin.php:142
msgid "Support"
msgstr ""

#: admin/class-admin.php:145
msgid "Sections"
msgstr ""

#. translators: %s: PHP constant
#: admin/class-admin.php:173
#, php-format
msgid "Locked yourself out? Add %s to wp-config.php, every rule of this plugin is then off."
msgstr ""

#: admin/class-admin.php:191
msgid "Saved. The REST cache was emptied, the rules apply now."
msgstr ""

#: admin/class-admin.php:191
msgid "Saved. The rules apply now."
msgstr ""

#: admin/class-admin.php:192
msgid "Rules of Disable REST API taken over. You can deactivate Disable REST API now."
msgstr ""

#: admin/class-admin.php:193
msgid "Suggestion applied: guests now only reach the routes from the list."
msgstr ""

#: admin/class-admin.php:194
msgid "Learning data deleted."
msgstr ""

#: admin/class-admin.php:195
msgid "Please confirm first that you have read the cache warning."
msgstr ""

#: admin/class-admin.php:265
msgid "risky doors open"
msgstr ""

#: admin/class-admin.php:266
msgid "guest requests, 30 days"
msgstr ""

#: admin/class-admin.php:267
msgid "refused, 30 days"
msgstr ""

#: admin/class-admin.php:268
msgid "AI access points"
msgstr ""

#: admin/class-admin.php:273
msgid "REST answers come partly from a cache"
msgstr ""

#. translators: %s: names of cache plugins
#: admin/class-admin.php:284
#, php-format
msgid "%s keeps REST responses for guests. A cached answer is delivered before WordPress runs, so rules apply only to requests that miss the cache. This plugin empties the cache after every change and keeps refusals out of it."
msgstr ""

#: admin/class-admin.php:294
msgid "Settings of Disable REST API found"
msgstr ""

#: admin/class-admin.php:295
msgid "Take over its rules for guests and roles in one step. Your doors stay as they are."
msgstr ""

#: admin/class-admin.php:298
msgid "Take over rules"
msgstr ""

#: admin/class-admin.php:304
msgid "Doors"
msgstr ""

#: admin/class-admin.php:305
msgid "A tick closes the door. The first four are closed from the start because guests never need them."
msgstr ""

#: admin/class-admin.php:321
#: admin/class-admin.php:375
#: admin/class-admin.php:575
msgid "closed"
msgstr ""

#: admin/class-admin.php:321
#: admin/class-admin.php:375
#: admin/class-admin.php:575
msgid "open"
msgstr ""

#: admin/class-admin.php:326
msgid "Save doors"
msgstr ""

#: admin/class-admin.php:347
msgid "WordPress"
msgstr ""

#: admin/class-admin.php:348
msgid "Plugin"
msgstr ""

#: admin/class-admin.php:349
msgid "Must-use plugin"
msgstr ""

#: admin/class-admin.php:350
msgid "Theme"
msgstr ""

#: admin/class-admin.php:351
msgid "unknown"
msgstr ""

#: admin/class-admin.php:355
msgid "Who opened which door"
msgstr ""

#: admin/class-admin.php:356
msgid "Every namespace of your REST API with the plugin, theme or core part that registered it. \"Guests\" shows what the current rules do with a guest request into the namespace."
msgstr ""

#: admin/class-admin.php:359
msgid "Namespace"
msgstr ""

#: admin/class-admin.php:359
msgid "Registered by"
msgstr ""

#: admin/class-admin.php:359
msgid "Routes"
msgstr ""

#: admin/class-admin.php:359
#: admin/class-admin.php:398
msgid "Guests"
msgstr ""

#: admin/class-admin.php:359
msgid "Guest requests, 30 days"
msgstr ""

#: admin/class-admin.php:372
msgid "AI"
msgstr ""

#: admin/class-admin.php:402
#: admin/class-admin.php:433
msgid "Open, with a block list"
msgstr ""

#: admin/class-admin.php:402
msgid "Guests reach everything except the routes in the block list."
msgstr ""

#: admin/class-admin.php:403
#: admin/class-admin.php:434
msgid "Closed, with an allow list"
msgstr ""

#: admin/class-admin.php:403
msgid "Guests reach only the routes in the allow list. Use the learning mode first, so contact forms and shops keep working."
msgstr ""

#: admin/class-admin.php:406
#: admin/class-admin.php:437
msgid "Allow list"
msgstr ""

#: admin/class-admin.php:409
#: admin/class-admin.php:438
msgid "Block list"
msgstr ""

#: admin/class-admin.php:413
msgid "One route per line. A route without * also covers everything below it: contact-form-7/v1 covers /contact-form-7/v1/contact-forms/5/feedback. * stands for any characters. Lines starting with # are notes. The allow list wins over the block list. Closed doors stay closed."
msgstr ""

#: admin/class-admin.php:414
msgid "Save guest rules"
msgstr ""

#: admin/class-admin.php:419
msgid "Roles"
msgstr ""

#: admin/class-admin.php:420
msgid "Logged-in users may use the REST API as WordPress allows, unless their role has a rule here. If a user has several roles, one allowing role is enough. Administrators cannot be locked out by these lists."
msgstr ""

#: admin/class-admin.php:427
msgid "own rule"
msgstr ""

#: admin/class-admin.php:427
msgid "no rule"
msgstr ""

#: admin/class-admin.php:432
msgid "No rule"
msgstr ""

#: admin/class-admin.php:440
msgid "Save role rule"
msgstr ""

#: admin/class-admin.php:460
msgid "Guest"
msgstr ""

#: admin/class-admin.php:461
msgid "Logged in (browser)"
msgstr ""

#: admin/class-admin.php:462
msgid "Application password"
msgstr ""

#: admin/class-admin.php:463
msgid "Other login"
msgstr ""

#: admin/class-admin.php:468
msgid "Counts which routes are really used: per day, route, method, kind of caller and outcome. No IP address, no user agent, no content. Counters older than 30 days are deleted."
msgstr ""

#. translators: %d: number of days
#: admin/class-admin.php:474
#, php-format
msgid "Learning for %d day. Two weeks are a good basis for a suggestion."
msgid_plural "Learning for %d days. Two weeks are a good basis for a suggestion."
msgstr[0] ""
msgstr[1] ""

#: admin/class-admin.php:482
msgid "Count REST requests"
msgstr ""

#: admin/class-admin.php:483
msgid "Save"
msgstr ""

#: admin/class-admin.php:488
msgid "Suggestion for guests"
msgstr ""

#: admin/class-admin.php:490
msgid "No guest requests counted yet."
msgstr ""

#: admin/class-admin.php:492
msgid "Guests used these routes successfully. Applying the suggestion closes the REST API for guests except for this list:"
msgstr ""

#: admin/class-admin.php:495
msgid "A cache serves REST answers on this site. Requests answered from the cache are not counted, so a route missing here may still be in use. Check the list before applying it."
msgstr ""

#: admin/class-admin.php:500
msgid "I have checked the list despite the cache warning."
msgstr ""

#: admin/class-admin.php:502
msgid "Apply as guest rule"
msgstr ""

#: admin/class-admin.php:508
msgid "Counted requests, 30 days"
msgstr ""

#: admin/class-admin.php:510
msgid "Nothing counted yet."
msgstr ""

#: admin/class-admin.php:514
#: admin/class-admin.php:622
msgid "Route"
msgstr ""

#: admin/class-admin.php:514
#: admin/class-admin.php:622
msgid "Method"
msgstr ""

#: admin/class-admin.php:514
msgid "Caller"
msgstr ""

#: admin/class-admin.php:514
#: admin/class-admin.php:622
msgid "Requests"
msgstr ""

#: admin/class-admin.php:514
#: admin/class-admin.php:622
msgid "Outcome"
msgstr ""

#: admin/class-admin.php:514
msgid "Last day"
msgstr ""

#: admin/class-admin.php:522
#: admin/class-admin.php:625
msgid "refused"
msgstr ""

#: admin/class-admin.php:531
msgid "Delete learning data"
msgstr ""

#: admin/class-admin.php:559
msgid "AI access points on this site"
msgstr ""

#: admin/class-admin.php:561
msgid "No MCP server and no Abilities API found."
msgstr ""

#: admin/class-admin.php:563
msgid "Some plugins bring an MCP server along without asking, for example as part of an SEO plugin. Here you see who opened it."
msgstr ""

#: admin/class-admin.php:566
msgid "from"
msgstr ""

#. translators: %d: number of routes
#: admin/class-admin.php:566
#, php-format
msgid "%d route"
msgid_plural "%d routes"
msgstr[0] ""
msgstr[1] ""

#: admin/class-admin.php:577
msgid "Change on the overview"
msgstr ""

#: admin/class-admin.php:582
msgid "Application passwords"
msgstr ""

#: admin/class-admin.php:583
msgid "Every application password is a key for apps, backups or AI agents. Keys nobody uses any more are best deleted in the user profile."
msgstr ""

#: admin/class-admin.php:595
msgid "No application passwords."
msgstr ""

#: admin/class-admin.php:599
msgid "User"
msgstr ""

#: admin/class-admin.php:599
msgid "Name"
msgstr ""

#: admin/class-admin.php:599
msgid "Created"
msgstr ""

#: admin/class-admin.php:599
msgid "Last used"
msgstr ""

#: admin/class-admin.php:606
msgid "never"
msgstr ""

#: admin/class-admin.php:616
msgid "Machine access, 30 days"
msgstr ""

#: admin/class-admin.php:618
msgid "No requests with an application password or another login counted."
msgstr ""

#: admin/class-admin.php:643
msgid "You are not allowed to do this."
msgstr ""

#: includes/class-guard.php:93
msgid "This REST API route is not available."
msgstr ""