Allow app developer to use advanced server-side feature

I actually want a way to affect user’s POD, one way is use personal access token to affect POD out side of solid-server, another way is use server plugin to affect POD directly on solid-server.