Helpers and perimeter limits

mcl_table($n)

Resolves a short table name to its full database table name using the active WordPress prefix. Used by every plugin query.

mcl_opt($k,$d)

Reads one key from the mcl_settings option array and returns the default when the key is absent. Settings stay in a single record.

Enumeration limits

REST user listing is blocked and ?author=N requests are refused, so account names stay out of public responses.

Compliance note

Clients hold only the mcl_client role's read capability. Pending, rejected, and disabled accounts carry no capabilities and see a generic authentication error. Usage must stay within these registered roles.