Compliance update for WordPress.org review: removes plugin-specific locked feature code from the free plugin, tightens shared route permissions, and documents optional external services.<\/p>","1.2.4":"
WordPress.org review compliance update for plugin naming, asset placement, enqueue usage, and stable tag metadata.<\/p>","1.0.8":"
Maintenance release with refreshed version metadata and a clean installable distribution package.<\/p>","1.0.4":"
Maintenance release that refreshes Site Manager packaging and current Turnkey\/shared GPT onboarding metadata.<\/p>","1.0.2":"
Turnkey OAuth now uses server-provided shared GPT and MCP details more consistently across settings and onboarding.<\/p>","1.0.1":"
Adds top VideoWhisper admin-bar access for Site Manager and updates the shared contact links.<\/p>","0.4.0":"
Adds MCP GET\/SSE endpoint required for Claude.ai, Claude Desktop, and Claude CLI connections. Also fixes onboarding notice detection on some server configurations.<\/p>","0.3.1":"
Security and compliance fixes: enqueued scripts and tightened REST permission checks per WordPress.org review.<\/p>","0.2.0":"
Improved onboarding, logging, settings controls, and WordPress.org compliance updates.<\/p>"},"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3518547,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3518547,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3518547,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3518547,"resolution":"772x250","location":"assets","locale":"","width":1544,"height":500}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["0.2.1","1.2.4","1.2.5"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3580671,"resolution":"1","location":"assets","locale":"","width":1678,"height":1550},"screenshot-2.jpg":{"filename":"screenshot-2.jpg","revision":3580671,"resolution":"2","location":"assets","locale":"","width":679,"height":379},"screenshot-3.jpg":{"filename":"screenshot-3.jpg","revision":3580671,"resolution":"3","location":"assets","locale":"","width":989,"height":510},"screenshot-4.jpg":{"filename":"screenshot-4.jpg","revision":3580671,"resolution":"4","location":"assets","locale":"","width":1004,"height":807},"screenshot-5.jpg":{"filename":"screenshot-5.jpg","revision":3580671,"resolution":"5","location":"assets","locale":"","width":718,"height":367}},"screenshots":{"1":"Claude updating WP site pages.","2":"ChatGPT listing sites available to operate.","3":"Onboarding screen with authentication method, Claude \/ GPT.","4":"Frontend user connection instructions to chatbots.","5":"Shared GPT for muti site support."}},"plugin_section":[],"plugin_tags":[2353,216196,229563,242115,13204],"plugin_category":[],"plugin_contributors":[81698],"plugin_business_model":[],"class_list":["post-287617","plugin","type-plugin","status-publish","hentry","plugin_tags-ai","plugin_tags-chatgpt","plugin_tags-claude","plugin_tags-mcp","plugin_tags-wordpress-automation","plugin_contributors-videowhisper","plugin_committers-videowhisper"],"banners":{"banner":"https:\/\/ps.w.org\/videowhisper-site-manager\/assets\/banner-772x250.png?rev=3518547","banner_2x":"https:\/\/ps.w.org\/videowhisper-site-manager\/assets\/banner-1544x500.png?rev=3518547","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/videowhisper-site-manager\/assets\/icon-128x128.png?rev=3518547","icon_2x":"https:\/\/ps.w.org\/videowhisper-site-manager\/assets\/icon-256x256.png?rev=3518547","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/videowhisper-site-manager\/assets\/screenshot-1.png?rev=3580671","caption":"Claude updating WP site pages."},{"src":"https:\/\/ps.w.org\/videowhisper-site-manager\/assets\/screenshot-2.jpg?rev=3580671","caption":"ChatGPT listing sites available to operate."},{"src":"https:\/\/ps.w.org\/videowhisper-site-manager\/assets\/screenshot-3.jpg?rev=3580671","caption":"Onboarding screen with authentication method, Claude \/ GPT."},{"src":"https:\/\/ps.w.org\/videowhisper-site-manager\/assets\/screenshot-4.jpg?rev=3580671","caption":"Frontend user connection instructions to chatbots."},{"src":"https:\/\/ps.w.org\/videowhisper-site-manager\/assets\/screenshot-5.jpg?rev=3580671","caption":"Shared GPT for muti site support."}],"raw_content":"\n
VideoWhisper Site Manager lets you manage WordPress posts and pages through external AI assistants such as ChatGPT (Custom GPT + Actions), Claude (MCP: web, desktop, mobile, CLI), and Codex (MCP) using own account, not API keys.\nIt exposes authenticated WordPress endpoints and setup guidance while you keep using your own AI account and subscription.<\/p>\n\n
It provides:<\/p>\n\n
The plugin does not call OpenAI, Anthropic, or any AI provider directly. Your WordPress site exposes authenticated endpoints and setup guidance. You connect it to ChatGPT, Claude, or Codex yourself with your own account and subscription.<\/p>\n\n
The onboarding flow recommends using one authentication option for clarity, but development and migration setups can enable more than one.<\/p>\n\n
The free plugin includes an MCP endpoint at Claude.ai (web):<\/strong><\/p>\n\n Claude CLI:<\/strong><\/p>\n\n claude mcp add --transport http \"YourSiteName\" \"https:\/\/yoursite.com\/wp-json\/videowhisper-site-manager\/v1\/mcp\"<\/p>\n\n Automatic OAuth authorization requires a compatible Relay & OAuth Server. Without that connection, use WordPress Application Passwords over HTTPS.<\/p>\n\n The onboarding flow includes Codex setup values for both direct and Turnkey MCP architectures. Codex can connect to the same Streamable HTTP MCP endpoint at The shared registry exposes the same capabilities to ChatGPT Actions, Claude MCP, and Codex MCP when settings and user permissions allow them. OpenAPI may group extra actions by module; MCP lists the individual tool names.<\/p>\n\n Core tools: Conditional core tools: Plugin integration tools: Agent documentation: Developers can extend this plugin without editing core files. Common hooks include:<\/p>\n\n This plugin provides infrastructure for operating a WordPress site with external AI chatbots and agents. The site owner is solely responsible for the actions enabled through this functionality, including content created or changed by AI tools, credentials and access tokens, backups, privacy compliance, and any publishing or policy consequences.<\/p>\n\n AI-generated content can be inaccurate, defamatory, plagiarized, non-compliant, or otherwise unsuitable for publication. Review AI output and tool activity before publishing. Keep publishing disabled unless you fully understand and accept the risk.<\/p>\n\n Use HTTPS, protect Application Passwords and OAuth credentials, restrict access where possible, monitor logs, and maintain independent backups. Use at your own risk.<\/p>\n\n This plugin stores the following data on your WordPress site:<\/p>\n\n Audit logs may include:<\/p>\n\n This plugin does not send data to third-party AI services by itself.\nThis plugin does not include telemetry\/analytics tracking by default.<\/p>\n\n Site owners are responsible for:<\/p>\n\n This plugin can connect to external services only when an administrator chooses a workflow that uses them. The default external services listed below are provided for free registration-based onboarding and relay functionality. They do not require payment to use with the free plugin. Site administrators can also configure another compatible third-party Relay & OAuth Server URL or add custom services through the documented WordPress hooks.<\/p>\n\n Default service URL: This service is used for optional Turnkey OAuth, shared GPT\/shared MCP onboarding, multi-site relay routing, and bearer-token validation. It makes setup simpler by allowing users to connect through one OAuth login and, when enabled by the service, use pre-existing shared GPT or MCP connector configuration instead of creating their own.<\/p>\n\n Data sent to this service:<\/p>\n\n Terms of Use: https:\/\/server.promptaur.com\/terms-of-use\/\nPrivacy Policy: https:\/\/server.promptaur.com\/privacy-policy\/<\/p>\n\n Default service URL: This optional onboarding service is used by the VideoWhisper Remote Connect wizard to register or log in a contact, import connection settings, and simplify account\/site setup. It is a free registration-based service used to improve onboarding; it is not required for direct Application Password setup.<\/p>\n\n Data sent to this service from the onboarding page:<\/p>\n\n Terms of Use: https:\/\/consult.videowhisper.com\/terms-of-use\/\nPrivacy Policy: https:\/\/consult.videowhisper.com\/privacy-policy\/<\/p>\n\n\n No. This plugin does not store or use any AI provider API keys.<\/p><\/dd>\n The plugin supports Turnkey OAuth and WordPress Application Passwords. Turnkey OAuth uses a compatible Relay & OAuth Server for shared GPT\/MCP workflows. Application Passwords use WordPress core HTTP Basic Authentication over HTTPS. Developers can add more authentication flows with the documented hooks.<\/p><\/dd>\n Not by default. Publishing is blocked unless an administrator enables Allow publish<\/strong> in the plugin settings. The onboarding instructions and GPT\/Claude guidance also reflect whether publishing is enabled.<\/p><\/dd>\n The Yes, by default plugin REST endpoints (including the OpenAPI and MCP endpoints) require HTTPS. A development-only setting can allow HTTP if needed on a local\/dev environment.<\/p><\/dd>\n External bearer-token validation uses a short cache to reduce remote validation traffic. The cache TTL is configurable in settings ( Yes. You can create the dedicated user and create the Application Password directly from the onboarding page. A profile link is still provided for later review\/revocation.<\/p><\/dd>\n No CRM ticket-management code is bundled in this free plugin. The free plugin provides generic hooks that let other plugins register their own AI tools. Live Support Tickets is a separate free WordPress.org plugin; if it or another installed plugin registers tools through the documented hooks, those tools are available according to that plugin's own settings and permissions.<\/p><\/dd>\n Posts and pages by default (both enabled). Admins can enable or disable each in the Content settings tab. Developers can extend supported content types and tool behavior with hooks such as No. You need to use ChatGPT, Claude, Codex, or another compatible external AI application. This plugin only provides REST endpoints, an MCP endpoint, and onboarding for those external AI applications.<\/p><\/dd>\n Yes. Once you set up and authorize the connector in Claude.ai on desktop, it is automatically available in the Claude iOS and Android mobile apps \u2014 no additional setup is needed.<\/p><\/dd>\n\n<\/dl>\n\n\n\/wp-json\/videowhisper-site-manager\/v1\/mcp<\/code>.<\/p>\n\n\n
claude.ai\/customize\/connectors<\/code>.<\/li>\nConnecting Codex (MCP)<\/h4>\n\n
\/wp-json\/videowhisper-site-manager\/v1\/mcp<\/code>.<\/p>\n\n\n
config.toml<\/code> block or OAuth login command from the Codex onboarding tab.<\/li>\n\/mcp<\/code> in Codex to confirm the WordPress MCP server is active.<\/li>\n<\/ol>\n\nFeatures<\/h3>\n\n
\n
\/wp-json\/videowhisper-site-manager\/v1\/openapi<\/code>)<\/li>\n\/wp-json\/videowhisper-site-manager\/v1\/agent-guide<\/code> with Markdown by default and JSON via ?format=json<\/code>; MCP also exposes guide resources for MCP-aware clients<\/li>\naction<\/code> subaction field to stay under GPT operation limits<\/li>\n\n
curl<\/code> examples and credential samples<\/li>\n<\/ul><\/li>\n\n
Turnkey OAuth<\/code> for shared GPT \/ shared MCP workflows through a compatible Relay & OAuth Server<\/li>\nApplication Passwords<\/code> for direct site-owned admin integrations<\/li>\ndry_run<\/code> support for safer create\/update previews before writing<\/li>\nAllow publish<\/code>)<\/li>\n[vwsm_user_connect]<\/code>) for account-based connection flows<\/li>\nCurrent AI Actions and Tools<\/h3>\n\n
get_site_context<\/code>, list_content<\/code>, get_content<\/code>, get_logs<\/code>, create_content<\/code>, update_content<\/code>.<\/p>\n\nrevert_action<\/code>, reset_action<\/code> when log state tools are enabled.<\/p>\n\nget_site_context<\/code> includes brief permission-aware available_integrations<\/code> metadata, while plugins_list<\/code> lists compatible plugins, agent instructions, whitelisted option documentation, and plugin-specific tools visible to the authenticated user. Other plugins can register free or paid add-on tools with vwsm_ai_plugin_integrations<\/code>; Site Manager exposes registered tools automatically through MCP, the dynamic agent guide, and grouped OpenAPI \/actions\/{module}<\/code> paths.<\/p>\n\n\/wp-json\/videowhisper-site-manager\/v1\/agent-guide<\/code>, \/wp-json\/videowhisper-site-manager\/v1\/agent-guide?surface=mcp<\/code>, \/wp-json\/videowhisper-site-manager\/v1\/agent-guide?surface=actions<\/code>, and \/wp-json\/videowhisper-site-manager\/v1\/agent-guide?format=json<\/code>.<\/p>\n\nExtension Hooks<\/h3>\n\n
\n
vwsm_settings_defaults<\/code>, vwsm_settings_normalized<\/code>, vwsm_admin_settings_save<\/code>, vwsm_rest_settings_payload<\/code>, vwsm_settings_tab_label<\/code>, vwsm_settings_form_publishing_rows<\/code>, vwsm_settings_form_security_rows<\/code>, vwsm_settings_form_rate_limits_rows<\/code>, vwsm_settings_form_logs_revisions_rows<\/code>, vwsm_settings_form_turnkey_oauth_rows<\/code>, vwsm_settings_form_authentication_rows<\/code>, vwsm_settings_form_application_passwords_rows<\/code>, vwsm_settings_form_content_rows<\/code>, vwsm_settings_form_admin_rows<\/code>, vwsm_settings_form_attachments_rows<\/code>, vwsm_settings_form_fomantic_rows<\/code>, vwsm_settings_form_after_core_rows<\/code>, vwsm_auth_methods_section<\/code>.<\/li>\nvwsm_oauth_server_url<\/code>, vwsm_authorization_server_url<\/code>, vwsm_rest_401_headers<\/code>, vwsm_external_oauth_onboarding_urls<\/code>, vwsm_onboarding_oauth_tab_content<\/code>, vwsm_handle_external_register_gpt<\/code>.<\/li>\nvwsm_ai_actions<\/code>, vwsm_ai_plugin_integrations<\/code>, vwsm_ai_plugin_option_integrations<\/code>, vwsm_ai_plugin_action_dispatch<\/code>, vwsm_ai_action_native_openapi_tools<\/code>, vwsm_mcp_server_name<\/code>, vwsm_mcp_extra_tools<\/code>, vwsm_mcp_dispatch_tool<\/code>, vwsm_mcp_site_context<\/code>, vwsm_openapi_components<\/code>, vwsm_openapi_document<\/code>, vwsm_write_rate_limit_mcp_tools<\/code>.<\/li>\nvwsm_allowed_content_types<\/code>, vwsm_revision_limit<\/code>, vwsm_revision_gradient<\/code>, vwsm_supported_extra_allowed_html_tags<\/code>, vwsm_allow_extra_allowed_html_tags<\/code>.<\/li>\nvwsm_user_connect_handle_post<\/code>, vwsm_user_connect_after_sections<\/code>, vwsm_user_connect_tools_data<\/code>, vwsm_user_connect_gpt_url<\/code>.<\/li>\nvwsm_default_operator_username<\/code>, vwsm_use_current_user_mode<\/code>.<\/li>\n<\/ol>\n\nDisclaimer<\/h3>\n\n
Privacy<\/h3>\n\n
\n
*_vwsm_audit_logs<\/code>)<\/li>\n\n
\n
External services<\/h3>\n\n
Promptaur Relay & OAuth Server<\/h4>\n\n
https:\/\/server.promptaur.com<\/code><\/p>\n\n\n
VideoWhisper Remote Connect<\/h4>\n\n
https:\/\/consult.videowhisper.com<\/code><\/p>\n\n\n
\n
videowhisper-site-manager<\/code> plugin folder to \/wp-content\/plugins\/<\/code>, or install it via the WordPress Plugins screen.<\/li>\n\/mcp<\/code>.<\/li>\n<\/ol>\n\n\n\n
Does this plugin store an OpenAI or Anthropic API key?<\/h3><\/dt>\n
How does authentication work?<\/h3><\/dt>\n
Can the API publish posts immediately?<\/h3><\/dt>\n
Why does ChatGPT, Claude, or Codex get a 403 on logs?<\/h3><\/dt>\n
\/logs<\/code> endpoint is restricted by the log access settings. This is intentional. A dedicated Editor account can still create\/edit content, but cannot access operational audit data unless that access is enabled.<\/p><\/dd>\nDoes the plugin require HTTPS?<\/h3><\/dt>\n
How quickly are revoked external OAuth bearer tokens rejected?<\/h3><\/dt>\n
External token cache (seconds)<\/code>), so revoked tokens are typically rejected after that cache window expires.<\/p><\/dd>\nCan I set up everything from the plugin without visiting Users > Profile?<\/h3><\/dt>\n
Does the free plugin manage CRM support tickets?<\/h3><\/dt>\n
What content types are supported?<\/h3><\/dt>\n
vwsm_allowed_content_types<\/code>, vwsm_mcp_extra_tools<\/code>, vwsm_mcp_dispatch_tool<\/code>, vwsm_openapi_components<\/code>, and vwsm_openapi_document<\/code>.<\/p><\/dd>\nDoes it include an AI chat interface inside WordPress?<\/h3><\/dt>\n
Does the Claude connector work on mobile?<\/h3><\/dt>\n
1.2.5<\/h4>\n\n
\n
action<\/code> attempts to override the route tool.<\/li>\n1.2.4<\/h4>\n\n
\n
1.0.8<\/h4>\n\n
\n
available_tools<\/code> and available_action_modules<\/code> for the current site settings and authenticated user<\/li>\n1.0.4<\/h4>\n\n
\n
1.0.2<\/h4>\n\n
\n
1.0.1<\/h4>\n\n
\n
0.4.0<\/h4>\n\n
\n
get_current_screen()<\/code> instead of filter_input()<\/code> which could return null on some server configurations<\/li>\n<\/ul>\n\n0.3.1<\/h4>\n\n
\n
0.2.0<\/h4>\n\n